last executing test programs:

7.06046685s ago: executing program 0 (id=1356):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4)
listen(r3, 0xfffefffa)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
close(0xffffffffffffffff)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)

3.22396199s ago: executing program 2 (id=1381):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000002300))

2.359803497s ago: executing program 2 (id=1397):
socket$pppl2tp(0x18, 0x1, 0x1)
io_uring_setup(0x6206, &(0x7f0000000400)={0x0, 0x1006478, 0x0, 0x0, 0x32a})
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000007e5841140000000f0002006e657464657673696d3000170800b8"], 0x3c}}, 0xc084)
socket$kcm(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$tipc(0x1e, 0x5, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_emit_ethernet(0x7e, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.302507989s ago: executing program 1 (id=1398):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0)
syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200))
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
lseek(r1, 0x1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote})
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="0000010000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r4, {0x3646}}, './file0\x00'})
ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f00000007c0)=""/4096)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})

1.978263779s ago: executing program 0 (id=1400):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x400140)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000008d8a34d6558aa911000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40018022, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x4000009)
r4 = socket$netlink(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x3000005, 0x80010, 0xffffffffffffffff, 0xc1fe2000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)
pwritev(r5, &(0x7f0000000200)=[{&(0x7f0000000040)="5e14e65809e563a84e3df805165adf70c3488f1e2142df828b940062f7b89ceeaa1dcf86fcf9d7088c44691b4f5a516e4fb35b9f86f8577e2e53af9a01637f1291b08c114a614684b3fa38000f4268a9b478d1ebe4d93d232752f65161c4d18866", 0x61}, {&(0x7f0000000140)="29d1e4354eaf40c16ba73aacd938f4cd1dcc0d0bdad528831bb2d348865b6a41d98711628771955e66fef2536a5fb0a19f464a5ab5101c8072490b6b5e8ab65e5d113d929b332ccc1098d3a91aee3194201ce015fcd3d1b2ee", 0x59}], 0x2, 0x2, 0x3)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000))

1.912565881s ago: executing program 1 (id=1402):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24040000)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x44)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.810564754s ago: executing program 0 (id=1403):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x60000600)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080)

1.173140413s ago: executing program 3 (id=1404):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000240)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r1=>0x0, 0x8000, 0x10, 0xffff, 0x6, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0xc, 0x3, [{0x6, 0x6, 'HhTJ'}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @ssrr={0x89, 0xf, 0x79, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @remote]}]}}}}})
close(0xffffffffffffffff)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0xf5, r1, 0x8}, 0xc)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8)
r2 = memfd_create(0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x24002de8)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r3, 0x52b242d)
keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3})
epoll_create1(0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000840)=0xffff)
ioctl$EVIOCGRAB(r4, 0x40044590, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)

1.100093066s ago: executing program 2 (id=1405):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x10004, @empty, 0xfffffeff}, {0xa, 0x4e22, 0x2, @loopback, 0x9}, r1, 0x80000001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 3)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
link(0x0, 0x0)

1.065320307s ago: executing program 1 (id=1406):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async)
r1 = socket$inet6(0xa, 0x1, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x6}}, 0x10) (async, rerun: 64)
r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r4, 0xa1, &(0x7f0000000200)}, 0x14)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x0, 0x3}, 0x10) (async)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20044095)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x0, @in, 0x0, 0x0, 0x2}}, 0x132)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0})

1.064445367s ago: executing program 2 (id=1407):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @loopback, 0x0, 0x6, 0x0, 0x100, 0x8, 0x180107})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x5000000000, 0x22, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x2000000010005}, 0xd, 0x0, 0x7, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400a7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fcffffff000000000d0000008500fff24100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.004264949s ago: executing program 4 (id=1408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)

779.930456ms ago: executing program 1 (id=1409):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0xd7ff, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

779.461566ms ago: executing program 4 (id=1410):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4)
listen(r1, 0xfffefffa)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
close(0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)

752.408637ms ago: executing program 2 (id=1411):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={<r1=>0x0, 0x1c, "06956cbe365599f2d42ae24888b137d6e7fbc52554f18592114d01db"}, &(0x7f0000000040)=0x24)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={<r2=>r1, 0x7a7, 0x20}, &(0x7f00000000c0)=0xc)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000100)={0x80})
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x80, 0x7}, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xce, 0xce, 0x6, [@func={0xe, 0x0, 0x0, 0xc, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @datasec={0xf, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x6}, {0x5, 0xfffffff9, 0x13}, {0x5, 0x0, 0x9}, {0x2, 0xfffffffb, 0x6}, {0x1, 0x9a2, 0xfffffffb}, {0x1, 0x8, 0x3}], "0a92"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x1}}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0x6, [{0x0, 0x4, 0x4}, {0xe, 0x3, 0x7}, {0x8, 0x0, 0x8}, {0x2, 0x3, 0x3}]}]}, {0x0, [0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f00000003c0)=""/65, 0xee, 0x41, 0x1, 0x8001, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xf}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r5, r6], &(0x7f0000000640)=[{0x2, 0x4, 0x7, 0x6}, {0x0, 0x5, 0x6, 0xf}, {0x4, 0x2, 0x1, 0x2}, {0x3, 0x1, 0x9, 0x6}, {0x2, 0x3, 0xc, 0x1}, {0x0, 0x3, 0x8, 0x5}], 0x10, 0x6}, 0x94)
r7 = syz_io_uring_complete(0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x1412, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x80000)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000008c0)={<r9=>r2, 0x38, &(0x7f0000000880)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x100}, @in6={0xa, 0x4e24, 0x200, @private2, 0x8}]}, &(0x7f0000000900)=0x10)
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000940)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000980)={0x0, 0x2}, &(0x7f00000009c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000a00)={r9, 0x81, 0x2}, 0x8)
timer_create(0x4, &(0x7f0000000b40)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000a40)="bc148dcddd0947cac989a3fa319a5d4bdfa465f0ea2c34ed983eb2a945b45f0444ca5dcd45535d0144d3e3170dac5162ab44a807cb8b869c3afe86d1f9ae20726e3c91cd5c045897dbc0be32f6cea66c1869ba84ae72fe0aa64e15193f24542f947a8183e9534a27046f722fd313c8b66d61417fa3395204c97eb6826ed182db75ef361c2df6dbd9a678f2116f697fc29f2726ce", &(0x7f0000000b00)="962f77f6e2b7eda2dd9d02ccfe99305e702d533507095246b2898b7aa706b8fd75bd5de448c958aa3cdbffbb74e061d52f231b315b47e025184ad3e4c3ad"}}, &(0x7f0000000b80))
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000cc0)={<r10=>r8, &(0x7f0000000bc0)='\xd9\x00', 0x10000, &(0x7f0000000c00)={@align=0x9, {0x7, 0xbb86, 0x9, 0x2368000000}}, 0x100, &(0x7f0000000c40), &(0x7f0000000c80)=0x8a})
ioctl$XFS_IOC_SET_RESBLKS(r10, 0xc0105872, &(0x7f0000000d00)={0xa84, 0x7f})
ioctl$IOC_PR_RELEASE(r10, 0x401070ca, &(0x7f0000000d40)={0x7fffffffffffffff, 0x7})
ioctl$OCFS2_IOC_RESVSP64(r7, 0x4030582a, &(0x7f0000000d80)={0x0, 0x2, 0x6, 0x4, 0xff800, 0xf9a})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6tnl0\x00', <r13=>r3, 0x0, 0x9, 0x6, 0x6, 0x10, @loopback, @local, 0x10, 0x0, 0x6, 0x9}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, r12, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1800000}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r14 = syz_usb_connect(0x1, 0x3e3, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0xdb, 0xf1, 0xde, 0x10, 0x148f, 0x2570, 0x9b03, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d1, 0x1, 0x3, 0x4, 0x0, 0x5, "", [{{0x9, 0x4, 0x21, 0x1, 0xb, 0x2c, 0x66, 0x5c, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x30}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x1, "48f429"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x4, 0x2}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x3, 's'}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0xff, "2df653d5c6"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x0, 0x7}]}], [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x6, 0x2, [@generic={0x60, 0xb, "ed06d06586d53b63edc8976dce3596af09f4cf570af39fdff6966477dad126fed2079971a67d23fe478d432c13ce16bb1692ba8a566a1e167881ee2413202fcb9ffd74d52a851d247a2f55d7e280247d55495fc412f49652851282cd8d3a"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xf, 0xc, 0x43, [@generic={0xc4, 0x8, "9f73fdfff433a54d0b050d3398bf09f316d46621491f94c30b1c9d336f723dde7f43f397a918bca9f963ed4b5ac2ce229ee0be3cf7dc69b05331420d22f9c77adea575c05412ea40cac45bd46d209e7f3b047bf5341fad927a1e89fdaef956d37ac9f0542b2908cc9dc5b7580459aab6ab73aebd6789beed1b66d75ba16c97bb99ce5fa6238bba7a7bcac102be8d0bd4d0b2e49165d3f24fba098761edd3a3c0550bdd50569d79d31eee3bec79199422388e61df72e6a9a6f258beccc5c9b857abbf"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x7f, 0x69, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x5, 0xc, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb4, 0xe68a}, @generic={0x3, 0x1, "b3"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x80, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x83}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x9, 0x10, 0x4, [@generic={0x102, 0x7, "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"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x4, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x1, 0x9, [@generic={0xcb, 0x8, "34c81f0fcb994da2f8ce4f7becbeac73dcb26c8e8dcc46d2160680d02cb27905aa97709aad5681bf3b0a57127cb4e24de9e0851c12eb32ec26807068ae5a6945bda5c8bb2848795de9bc1040f9d4b105b12e887ba0c3bccf943a49250dc2c4274bdf7832aab07b1da577e05b8fe09aeb5492c1868b8517c5f75440dff7489fd0af69c9e3fa1c5c39bded189b346cbf38600c5c9cfd6aba1dec0f79b667b514201049275c8dd0c7b913a874037f4da48b3a6c112c848b563285d7a4722d98c3d0d4075f9a6ad7b63066"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x7}]}}, {{0x9, 0x5, 0x6, 0x6, 0x20, 0x1, 0x9, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0xd6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x24, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x110, 0x4, 0x5f, 0xf7, 0x20, 0x8}, 0x1ac, &(0x7f0000001440)={0x5, 0xf, 0x1ac, 0x5, [@generic={0x101, 0x10, 0x1, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0xfa, 0x417}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x5, 0x8001}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x9, 0x3efb}, @generic={0x8e, 0x10, 0x1, "dcfcca873991f88f176358e458dd6388c0f38b1d7ec501ced4400509f48215547845bda6a33e901e10482f3dc47a19c9435f9e81874fc81a0140356823be4a00e3b756d3fb1cc95154e2d95b0eb4ff7ec9a6cceabf9caca1ea1619548de5c90eac365d29f7a16049ef9e6d85852764419094248403146fb8dc0c478220e9e966de92b982ff72789ea3b9b5"}]}, 0x7, [{0x4, &(0x7f0000001600)=@lang_id={0x4}}, {0xe3, &(0x7f0000001640)=@string={0xe3, 0x3, "143f52ffb81f2a38bec3152d6bef435cbe5c99ffa9919a7d757217b31d3a16c93598ccdf35563c23752cb3132afc3782d18aacf1604b398c0b9a3be14d97ee27124d574a697f80d06a5a749c06f646f5486f47a87ab4b57272e9595f212461f135a704dfeadc5507a4389494ad410009a13bf00420535a4c7d1b8d036001526ddc0fc66db2fd3b9811da4bd46c1da00f6dc565602884583fe12ef65311962d150ce7316ff2055d071c30b5ccead84dd27f1ef0aa2b55ff7b07188973fcebf2bd3d1b0f16873259df27defb899e77259e066576abf452b22ba420428d5e6289f7a0"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x1007}}, {0xb8, &(0x7f0000001780)=@string={0xb8, 0x3, "903264d3b57f76e263f7c4ddcb799e180cab8f748a31497b890d47cf8bc4eb38b237bce53b5941358a0a8fface45f0ef0ff090c0b9a09347ef5837b1bf10cebcfe5eabe26fcc268980394f3c91847c34229a4ae9685abcd9a01bc50e2bbb9c2e6861cf2dbfffa8967c0796ba445f3e9179c5756e44d2b6cb5158ddad0dc00e3d80c095f7a6cd394e6bcaeb43816c3d92d2d5b77093161f92b13a5af6870c71b1a0322df87038789cedd508a877b7e0468420175e9405"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x3c11}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x3009}}]})
syz_usb_control_io$uac3(r14, &(0x7f0000001a00)={0x14, &(0x7f0000001980)={0x0, 0x31, 0x12, {0x12, 0x7, "03431ccb6745803558bc2026369606a3"}}, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000001cc0)={0x44, &(0x7f0000001a40)={0x20, 0x14, 0x89, "f90512349c5c630d8e47ca5d2c6544db6129a8e6d39f38310163b12518dde22cf5a61323d3d5b81e9dc71ee29834a73947d61e4596f6213fee3f06f3d03af938165c8314a5651d8979dca3ea5a2f523ebf7fc4b293967eedc49657d43ffb953426c1f3022353bee4b4b9ca022f4fcbfbea782a833226f09efaacc0db66062ea1202766f698f1a6fcd2"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001b80)={0x20, 0x81, 0x2, "eec9"}, &(0x7f0000001bc0)={0x20, 0x82, 0x2, "cfe7"}, &(0x7f0000001c00)={0x20, 0x83, 0x3, "e11155"}, &(0x7f0000001c40)={0x20, 0x84, 0x3, "54dc74"}, &(0x7f0000001c80)={0x20, 0x85, 0x3, "9de82d"}})
ioctl$EVIOCGPHYS(r10, 0x80404507, &(0x7f0000001d40)=""/151)
faccessat(r7, &(0x7f0000001e00)='./file0\x00', 0x4)

751.875817ms ago: executing program 3 (id=1412):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0xfffffff4, 0x0, 0x2}])

710.797308ms ago: executing program 0 (id=1413):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x400140)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000008d8a34d6558aa911000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40018022, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x4000009)
r4 = socket$netlink(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x3000005, 0x80010, 0xffffffffffffffff, 0xc1fe2000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)
pwritev(r5, &(0x7f0000000200)=[{&(0x7f0000000040)="5e14e65809e563a84e3df805165adf70c3488f1e2142df828b940062f7b89ceeaa1dcf86fcf9d7088c44691b4f5a516e4fb35b9f86f8577e2e53af9a01637f1291b08c114a614684b3fa38000f4268a9b478d1ebe4d93d232752f65161c4d18866", 0x61}, {&(0x7f0000000140)="29d1e4354eaf40c16ba73aacd938f4cd1dcc0d0bdad528831bb2d348865b6a41d98711628771955e66fef2536a5fb0a19f464a5ab5101c8072490b6b5e8ab65e5d113d929b332ccc1098d3a91aee3194201ce015fcd3d1b2ee57", 0x5a}], 0x2, 0x2, 0x3)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000))

599.977762ms ago: executing program 1 (id=1414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000080)=0x2e)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c304050000bfd240af00128008000100677470f70b00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES32=r5, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={0x0}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRESHEX=0x0], 0xfe, 0x293, &(0x7f0000000840)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

595.902322ms ago: executing program 0 (id=1415):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000001040), 0xf71, 0x80)
socket$packet(0x11, 0x3, 0x300)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r0, &(0x7f0000000440)="64e9", 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)
syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000fc0008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)

478.109425ms ago: executing program 4 (id=1416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3000, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)

283.153072ms ago: executing program 0 (id=1417):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r2, 0x9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

282.976621ms ago: executing program 3 (id=1418):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000006140)=[{&(0x7f00000002c0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)='_', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="200000000000000084000000027ffffffe000a00ffff000000000040c82217037e2b88e041ab8dbb3f6aa439", @ANYRES32=0x0], 0x20, 0x800}], 0x1, 0x0)

282.752932ms ago: executing program 4 (id=1419):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x4000000, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

282.468552ms ago: executing program 3 (id=1420):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0xffffffff, 0x0, 0x200b}, 0x0, 0xf, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
r2 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x401, 0x0, 0x0, 0x800004, 0x0, 0xb}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee83}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0)
ptrace(0x8, r2)
r8 = syz_pidfd_open(r2, 0x0)
process_mrelease(r8, 0x700000000000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

179.711565ms ago: executing program 4 (id=1421):
write$selinux_user(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x25)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000200000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)

159.174505ms ago: executing program 4 (id=1422):
prlimit64(0x0, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000180))
ftruncate(r1, 0x7000000)
r3 = dup(r1)
preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e2b, 0xc, @mcast2, 0x40008f}, 0x1c)
writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)
ftruncate(r4, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$kcm(0x23, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6)

143.779016ms ago: executing program 1 (id=1423):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
r1 = openat(0xffffffffffffffff, 0x0, 0xc4142, 0x86)
r2 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x11, 0x26c, &(0x7f0000000340)="$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")
getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x18, '\x00', r3, 0x30}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f00000002c0), 0x13}, 0x10c0e8, 0x0, 0xc, 0x8, 0x6, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r5)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4005}, 0x4c004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpeername$packet(r1, 0x0, &(0x7f00000000c0))
sendto$packet(r1, 0x0, 0x0, 0x8850, &(0x7f0000000240)={0x11, 0x18, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000440))
fsopen(&(0x7f0000000000)='sysv\x00', 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r6, 0x6200}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x5020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
r7 = socket(0xa, 0x801, 0x0)
getsockopt(r7, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0)
socket(0x840000000002, 0x801, 0x100)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r8], 0x20}}, 0x0)

11.99081ms ago: executing program 2 (id=1424):
socket$pppl2tp(0x18, 0x1, 0x1)
io_uring_setup(0x6206, &(0x7f0000000400)={0x0, 0x1006478, 0x0, 0x0, 0x32a})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {}, {@data_err_ignore}, {@journal_ioprio}, {@nojournal_checksum}, {@orlov}, {@delalloc}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file3\x00', 0x404, &(0x7f0000000ec0)={[{@errors_remount}, {@lazytime}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfshat={'smackfshat', 0x3d, '%,'}}, {@dont_appraise}, {@appraise}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000f80)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030492c757365667265652c646f74733b94b12053509b006f74732c636865636b3d7374726963742c6e66732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f644f74732c6e6f646f74732c666c7573682c6e6f646f74732c6e6f646f74732c646f74732c666c7573862c646f74732c64656275672c6e6f646f74732c646f74732c73686f77657865632c646f74732c6e6f646f58732c646f74732c00a9d3a397bb9c0d83cf249db621d7ba00e9ccfacf2e1fb6a26255e49e930bd7b988697b1a1c2cba"], 0x1, 0x1f5, &(0x7f0000000600)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00040094699346e57ab606113c1b260a0000b204d0c3a97052dcd0fcef51d4a37fa8d7ad88add5dcc8c42c2e1ee62ec788292a9d1be944813cf2c3f5295d57025d63610b8d56bf00db08ec75483d763f69aa5165dacfa6e8c7032d179cd1fbf9d3157473872e514650e147"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
close(0x4)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.23586ms ago: executing program 3 (id=1425):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x5, 0x400140)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000008d8a34d6558aa911000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40018022, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x4000009)
r4 = socket$netlink(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x3000005, 0x80010, 0xffffffffffffffff, 0xc1fe2000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)
pwritev(r5, &(0x7f0000000200)=[{&(0x7f0000000040)="5e14e65809e563a84e3df805165adf70c3488f1e2142df828b940062f7b89ceeaa1dcf86fcf9d7088c44691b4f5a516e4fb35b9f86f8577e2e53af9a01637f1291b08c114a614684b3fa38000f4268a9b478d1ebe4d93d232752f65161c4d18866", 0x61}, {&(0x7f0000000140)="29d1e4354eaf40c16ba73aacd938f4cd1dcc0d0bdad528831bb2d348865b6a41d98711628771955e66fef2536a5fb0a19f464a5ab5101c8072490b6b5e8ab65e5d113d929b332ccc1098d3a91aee3194201ce015fcd3d1b2ee57", 0x5a}], 0x2, 0x2, 0x3)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000))

0s ago: executing program 3 (id=1426):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4)
listen(r1, 0xfffefffa)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
close(0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)

kernel console output (not intermixed with test programs):

12
[  117.813906][ T6178] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.882: bad orphan inode 15
[  117.839251][ T6178] loop1: lost filesystem error report for type 5 error -117
[  117.839434][ T6178] ext4_test_bit(bit=14, block=18) = 1
[  117.846846][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  117.846869][    C0] EXT4-fs (loop1): initial error at time 1779866681: ext4_orphan_get:1423
[  117.846890][    C0] EXT4-fs (loop1): last error at time 1779866681: ext4_orphan_get:1423
[  117.882663][ T6178] is_bad_inode(inode)=0
[  117.900819][ T6178] NEXT_ORPHAN(inode)=1023
[  117.915437][ T6178] max_ino=32
[  117.925101][ T6178] i_nlink=0
[  117.934595][ T6178] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.882: corrupted xattr block 19: invalid header
[  117.960864][ T6183] loop3: detected capacity change from 0 to 1024
[  117.981677][ T6178] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  117.981928][ T6178] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117)
[  118.015841][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  118.070588][ T6178] ext4 filesystem being mounted at /214/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  118.130342][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.140558][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  118.216612][ T6193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.887'.
[  118.263264][ T6195] loop1: detected capacity change from 0 to 512
[  118.277238][ T6195] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.294176][ T6195] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.890: invalid indirect mapped block 4294967295 (level 0)
[  118.308495][ T6195] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  118.308786][ T6195] EXT4-fs (loop1): Remounting filesystem read-only
[  118.317930][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  118.317953][    C1] EXT4-fs (loop1): initial error at time 1779866682: ext4_free_branches:1023: inode 16
[  118.317987][    C1] EXT4-fs (loop1): last error at time 1779866682: ext4_free_branches:1023: inode 16
[  118.350815][ T6195] EXT4-fs (loop1): 1 orphan inode deleted
[  118.356802][ T6195] EXT4-fs (loop1): 1 truncate cleaned up
[  118.365609][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.386579][ T6204] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  118.484651][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.532996][ T6215] netlink: 100 bytes leftover after parsing attributes in process `syz.1.898'.
[  118.557817][ T6217] loop2: detected capacity change from 0 to 164
[  118.612261][ T6217] rock: directory entry would overflow storage
[  118.654042][ T6217] rock: sig=0x5252, size=5, remaining=3
[  118.670069][ T6217] isofs_fill_super: root inode is not a directory. Corrupted media?
[  118.691125][ T6226] loop3: detected capacity change from 0 to 128
[  118.697875][ T6226] msdos: Bad value for 'gid'
[  118.702540][ T6226] msdos: Bad value for 'gid'
[  118.946927][   T28] audit: type=1400 audit(1779866682.650:2068): avc:  denied  { read } for  pid=6228 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  118.988322][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'.
[  119.025923][ T6234] loop4: detected capacity change from 0 to 512
[  119.043114][ T6234] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.897: inode has both inline data and extents flags
[  119.064473][ T6234] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  119.068280][ T6234] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.897: couldn't read orphan inode 15 (err -117)
[  119.089216][ T6234] loop4: lost filesystem error report for type 5 error -117
[  119.111866][ T6234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.173288][ T6238] team0: Device gtp0 is of different type
[  119.180485][   T28] audit: type=1400 audit(1779866682.820:2069): avc:  denied  { write } for  pid=6210 comm="syz.4.897" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  119.274271][ T6239] loop2: detected capacity change from 0 to 512
[  119.289656][ T6239] EXT4-fs: test_dummy_encryption option not supported
[  119.324804][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.509901][   T28] audit: type=1400 audit(1779866683.210:2070): avc:  denied  { watch_reads } for  pid=6237 comm="syz.2.909" path="/155/file0" dev="tmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  119.584738][ T6251] netlink: 320 bytes leftover after parsing attributes in process `syz.3.913'.
[  119.688004][ T6255] EXT4-fs: Ignoring removed i_version option
[  119.716030][ T6255] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.723889][ T6257] xt_hashlimit: size too large, truncated to 1048576
[  119.745328][ T6255] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.041492][ T6271] EXT4-fs: Ignoring removed nobh option
[  120.071999][ T6271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.084806][ T6271] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.102782][   T28] audit: type=1400 audit(1779866683.810:2071): avc:  denied  { write } for  pid=6270 comm="syz.3.920" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.125037][   T28] audit: type=1400 audit(1779866683.810:2072): avc:  denied  { unlink } for  pid=6270 comm="syz.3.920" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  120.170331][   T28] audit: type=1400 audit(1779866683.870:2073): avc:  denied  { create } for  pid=6270 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  120.201561][ T6279] msdos: Bad value for 'gid'
[  120.206217][ T6279] msdos: Bad value for 'gid'
[  120.257508][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.923'.
[  120.432308][ T6289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.460261][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.513533][ T6293] EXT4-fs: Ignoring removed i_version option
[  120.523941][ T6293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.535767][ T3293] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.539525][ T6293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.926: invalid indirect mapped block 4294967295 (level 1)
[  120.577438][ T6296] FAULT_INJECTION: forcing a failure.
[  120.577438][ T6296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.593033][ T6293] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  120.593412][ T6293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.926: invalid indirect mapped block 4294967295 (level 1)
[  120.602848][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  120.602899][    C0] EXT4-fs (loop0): initial error at time 1779866684: ext4_free_branches:1023: inode 11
[  120.602958][    C0] EXT4-fs (loop0): last error at time 1779866684: ext4_free_branches:1023: inode 11
[  120.620705][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.1.927 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  120.620818][ T6296] Tainted: [W]=WARN
[  120.620826][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  120.620844][ T6296] Call Trace:
[  120.620899][ T6296]  <TASK>
[  120.620908][ T6296]  __dump_stack+0x1d/0x30
[  120.620933][ T6296]  dump_stack_lvl+0x95/0xd0
[  120.620955][ T6296]  dump_stack+0x15/0x1b
[  120.620974][ T6296]  should_fail_ex+0x263/0x280
[  120.621105][ T6296]  should_fail+0xb/0x20
[  120.621130][ T6296]  should_fail_usercopy+0x1a/0x20
[  120.621159][ T6296]  _copy_to_user+0x20/0xa0
[  120.621212][ T6296]  simple_read_from_buffer+0xb5/0x130
[  120.621252][ T6296]  proc_fail_nth_read+0x10e/0x150
[  120.621282][ T6296]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  120.621310][ T6296]  vfs_read+0x1ab/0x7f0
[  120.621338][ T6296]  ? __rcu_read_unlock+0x4e/0x70
[  120.621395][ T6296]  ? __fget_files+0x184/0x1c0
[  120.621416][ T6296]  ? mutex_lock+0x57/0x90
[  120.621442][ T6296]  ksys_read+0xdc/0x1a0
[  120.621519][ T6296]  __x64_sys_read+0x40/0x50
[  120.621626][ T6296]  x64_sys_call+0x2886/0x3020
[  120.621728][ T6296]  do_syscall_64+0x12c/0x3b0
[  120.621759][ T6296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.621842][ T6296] RIP: 0033:0x7f3421b3d68e
[  120.621859][ T6296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  120.621877][ T6296] RSP: 002b:00007f34205cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  120.621898][ T6296] RAX: ffffffffffffffda RBX: 00007f34205cf6c0 RCX: 00007f3421b3d68e
[  120.621987][ T6296] RDX: 000000000000000f RSI: 00007f34205cf0a0 RDI: 0000000000000003
[  120.622001][ T6296] RBP: 00007f34205cf090 R08: 0000000000000000 R09: 0000000000000000
[  120.622014][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.622036][ T6296] R13: 00007f3421df6038 R14: 00007f3421df5fa0 R15: 00007ffed1c4eff8
[  120.622056][ T6296]  </TASK>
[  120.843549][ T6293] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  120.844462][ T6293] EXT4-fs (loop0): 2 truncates cleaned up
[  120.861406][ T6293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.879800][ T6271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.938508][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.007537][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  121.007551][   T28] audit: type=1400 audit(1779866684.710:2076): avc:  denied  { setopt } for  pid=6301 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  121.291309][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.543654][   T28] audit: type=1326 audit(1779866685.250:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.575331][   T28] audit: type=1326 audit(1779866685.250:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.611448][   T28] audit: type=1326 audit(1779866685.250:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.638855][ T6343] msdos: Bad value for 'gid'
[  121.643576][ T6343] msdos: Bad value for 'gid'
[  121.671640][   T28] audit: type=1326 audit(1779866685.270:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.697198][   T28] audit: type=1326 audit(1779866685.270:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.727801][   T28] audit: type=1326 audit(1779866685.270:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.782735][   T28] audit: type=1326 audit(1779866685.270:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.808317][   T28] audit: type=1326 audit(1779866685.270:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.872488][ T6357] set_capacity_and_notify: 6 callbacks suppressed
[  121.872510][ T6357] loop2: detected capacity change from 0 to 512
[  121.887118][   T28] audit: type=1326 audit(1779866685.270:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.4.942" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  121.908560][ T6357] EXT4-fs: Ignoring removed bh option
[  121.955447][ T6357] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  121.987027][ T6357] EXT4-fs (loop2): 1 truncate cleaned up
[  122.102449][ T6357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.174004][ T6357] netlink: 'syz.2.949': attribute type 39 has an invalid length.
[  122.333419][ T6367] loop1: detected capacity change from 0 to 512
[  122.359362][ T6367] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.948: inode has both inline data and extents flags
[  122.421881][ T6367] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  122.426817][ T6367] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.948: couldn't read orphan inode 15 (err -117)
[  122.527191][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  122.533669][    C1] EXT4-fs (loop1): initial error at time 1779866686: ext4_orphan_get:1397: inode 15
[  122.543179][    C1] EXT4-fs (loop1): last error at time 1779866686: ext4_orphan_get:1397: inode 15
[  122.554127][ T6367] loop1: lost filesystem error report for type 5 error -117
[  122.560592][ T6367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.676216][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.772818][ T6379] loop0: detected capacity change from 0 to 256
[  122.832194][ T6379] FAT-fs (loop0): Directory bread(block 64) failed
[  122.846816][ T6379] FAT-fs (loop0): Directory bread(block 65) failed
[  122.870433][ T6379] FAT-fs (loop0): Directory bread(block 66) failed
[  122.885365][ T6379] FAT-fs (loop0): Directory bread(block 67) failed
[  122.914345][ T6379] FAT-fs (loop0): Directory bread(block 68) failed
[  122.933776][ T6379] FAT-fs (loop0): Directory bread(block 69) failed
[  122.952331][ T6379] FAT-fs (loop0): Directory bread(block 70) failed
[  122.969126][ T6379] FAT-fs (loop0): Directory bread(block 71) failed
[  122.985984][ T6379] FAT-fs (loop0): Directory bread(block 72) failed
[  123.001327][ T6379] FAT-fs (loop0): Directory bread(block 73) failed
[  123.066084][ T6390] __nla_validate_parse: 3 callbacks suppressed
[  123.066104][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'.
[  123.133530][ T6390] macvlan2: entered allmulticast mode
[  123.138932][ T6390] gretap0: entered allmulticast mode
[  123.402744][ T6402] loop4: detected capacity change from 0 to 128
[  123.409289][ T6402] msdos: Bad value for 'gid'
[  123.413989][ T6402] msdos: Bad value for 'gid'
[  123.678263][ T6408] loop0: detected capacity change from 0 to 256
[  123.783802][ T6408] FAT-fs (loop0): Directory bread(block 64) failed
[  123.790543][ T6408] FAT-fs (loop0): Directory bread(block 65) failed
[  123.797217][ T6408] FAT-fs (loop0): Directory bread(block 66) failed
[  123.803936][ T6408] FAT-fs (loop0): Directory bread(block 67) failed
[  123.810833][ T6408] FAT-fs (loop0): Directory bread(block 68) failed
[  123.817426][ T6408] FAT-fs (loop0): Directory bread(block 69) failed
[  123.824056][ T6408] FAT-fs (loop0): Directory bread(block 70) failed
[  123.830852][ T6408] FAT-fs (loop0): Directory bread(block 71) failed
[  123.837731][ T6408] FAT-fs (loop0): Directory bread(block 72) failed
[  123.844282][ T6408] FAT-fs (loop0): Directory bread(block 73) failed
[  123.890264][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.899395][ T6408] netlink: 2 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.908545][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.917824][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.926965][ T6408] netlink: 2 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.936119][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.945165][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.954131][ T6408] netlink: 2 bytes leftover after parsing attributes in process `syz.0.964'.
[  123.963314][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  124.686076][ T6420] cgroup: name respecified
[  124.786143][ T6424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.793414][ T6424] IPv6: NLM_F_CREATE should be set when creating new route
[  124.800688][ T6424] IPv6: NLM_F_CREATE should be set when creating new route
[  124.807877][ T6424] IPv6: NLM_F_CREATE should be set when creating new route
[  124.859866][ T6428] loop4: detected capacity change from 0 to 512
[  124.916445][ T6428] EXT4-fs: test_dummy_encryption option not supported
[  124.958435][ T6428] loop4: detected capacity change from 0 to 512
[  125.019012][ T6428] Invalid logical block size (-4)
[  125.033704][ T6428] netlink: 'syz.4.972': attribute type 2 has an invalid length.
[  125.757281][ T6444] FAULT_INJECTION: forcing a failure.
[  125.757281][ T6444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.802301][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.0.978 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  125.802333][ T6444] Tainted: [W]=WARN
[  125.802339][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  125.802353][ T6444] Call Trace:
[  125.802359][ T6444]  <TASK>
[  125.802367][ T6444]  __dump_stack+0x1d/0x30
[  125.802389][ T6444]  dump_stack_lvl+0x95/0xd0
[  125.802412][ T6444]  dump_stack+0x15/0x1b
[  125.802495][ T6444]  should_fail_ex+0x263/0x280
[  125.802520][ T6444]  should_fail+0xb/0x20
[  125.802623][ T6444]  should_fail_usercopy+0x1a/0x20
[  125.802648][ T6444]  _copy_from_user+0x1c/0xb0
[  125.802679][ T6444]  ucma_write+0xd8/0x260
[  125.802792][ T6444]  vfs_writev+0x42b/0x900
[  125.802810][ T6444]  ? __pfx_ucma_write+0x10/0x10
[  125.802841][ T6444]  do_writev+0xe9/0x210
[  125.802876][ T6444]  __x64_sys_writev+0x45/0x50
[  125.802902][ T6444]  x64_sys_call+0x1c0c/0x3020
[  125.802924][ T6444]  do_syscall_64+0x12c/0x3b0
[  125.802953][ T6444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.803030][ T6444] RIP: 0033:0x7fa719cece59
[  125.803126][ T6444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.803144][ T6444] RSP: 002b:00007fa718747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  125.803167][ T6444] RAX: ffffffffffffffda RBX: 00007fa719f65fa0 RCX: 00007fa719cece59
[  125.803234][ T6444] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[  125.803249][ T6444] RBP: 00007fa718747090 R08: 0000000000000000 R09: 0000000000000000
[  125.803263][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.803350][ T6444] R13: 00007fa719f66038 R14: 00007fa719f65fa0 R15: 00007ffd84e15148
[  125.803370][ T6444]  </TASK>
[  126.358700][   T28] kauditd_printk_skb: 54 callbacks suppressed
[  126.358716][   T28] audit: type=1400 audit(1779866690.060:2140): avc:  denied  { name_bind } for  pid=6454 comm="syz.3.982" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  126.526746][   T28] audit: type=1400 audit(1779866690.120:2141): avc:  denied  { ioctl } for  pid=6452 comm="syz.2.983" path="socket:[17136]" dev="sockfs" ino=17136 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  126.870849][ T6469] loop2: detected capacity change from 0 to 512
[  127.517431][ T6476] loop4: detected capacity change from 0 to 128
[  127.570978][ T6476] EXT4-fs: Ignoring removed oldalloc option
[  127.595318][ T6476] EXT4-fs: Ignoring removed bh option
[  127.619882][ T6476] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  127.743552][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.576161][ T6493] loop0: detected capacity change from 0 to 2048
[  128.742871][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.764762][ T6493] netlink: 'syz.0.995': attribute type 1 has an invalid length.
[  128.793548][ T6493] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.952615][ T6493] bond4: (slave veth3): Enslaving as an active interface with a down link
[  129.013754][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.025130][ T6505] bond4: (slave batadv1): making interface the new active one
[  129.035194][ T6505] batadv1: entered promiscuous mode
[  129.040931][ T6505] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  129.495588][ T6516] loop3: detected capacity change from 0 to 128
[  129.578225][ T6514] loop4: detected capacity change from 0 to 1024
[  129.586446][ T6514] EXT4-fs: Ignoring removed bh option
[  130.170847][ T6503] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  130.291460][ T6514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.418911][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.686041][ T6514] tipc: Started in network mode
[  130.697459][ T6514] tipc: Node identity , cluster identity 4711
[  130.749476][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.812299][ T6547] __nla_validate_parse: 25 callbacks suppressed
[  130.812322][ T6547] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1008'.
[  130.918434][ T6555] loop3: detected capacity change from 0 to 512
[  130.924732][ T6551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6551 comm=syz.2.1011
[  130.937611][ T6557] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1013'.
[  130.942675][ T6551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6551 comm=syz.2.1011
[  131.012357][ T6555] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  131.030744][ T6555] EXT4-fs (loop3): orphan cleanup on readonly fs
[  131.043430][ T6555] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  131.061199][ T6563] FAULT_INJECTION: forcing a failure.
[  131.061199][ T6563] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  131.072271][ T6555] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  131.074411][ T6563] CPU: 1 UID: 0 PID: 6563 Comm: syz.2.1015 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  131.074471][ T6563] Tainted: [W]=WARN
[  131.074504][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  131.074557][ T6563] Call Trace:
[  131.074564][ T6563]  <TASK>
[  131.074572][ T6563]  __dump_stack+0x1d/0x30
[  131.074675][ T6563]  dump_stack_lvl+0x95/0xd0
[  131.074696][ T6563]  dump_stack+0x15/0x1b
[  131.074715][ T6563]  should_fail_ex+0x263/0x280
[  131.074764][ T6563]  should_fail_alloc_page+0xf2/0x100
[  131.074815][ T6563]  __alloc_frozen_pages_noprof+0x108/0x350
[  131.074842][ T6563]  alloc_pages_mpol+0xb3/0x260
[  131.074881][ T6563]  ? __css_rstat_updated+0xbb/0x280
[  131.074906][ T6563]  vma_alloc_folio_noprof+0x1a9/0x2f0
[  131.074932][ T6563]  handle_mm_fault+0x1040/0x2e70
[  131.074966][ T6563]  do_user_addr_fault+0x3fd/0x1050
[  131.075032][ T6563]  ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40
[  131.075059][ T6563]  exc_page_fault+0x62/0xa0
[  131.075196][ T6563]  asm_exc_page_fault+0x26/0x30
[  131.075217][ T6563] RIP: 0010:rep_stos_alternative+0x40/0x80
[  131.075238][ T6563] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  131.075257][ T6563] RSP: 0018:ffffc9001065bb98 EFLAGS: 00050202
[  131.075274][ T6563] RAX: 0000000000000000 RBX: 00002000001fe0c0 RCX: 00000000001f50c0
[  131.075343][ T6563] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000009000
[  131.075362][ T6563] RBP: 00000000001fe001 R08: 000188811a5dc007 R09: 0000000000000000
[  131.075376][ T6563] R10: 0000000000000005 R11: 0000000000000000 R12: 00000000001fe000
[  131.075389][ T6563] R13: 00002000000000c0 R14: 0000000000000000 R15: ffffc9001065bd80
[  131.075460][ T6563]  iov_iter_zero+0x26f/0xd70
[  131.075489][ T6563]  ? __filemap_get_folio_mpol+0x4a1/0x680
[  131.075523][ T6563]  hugetlbfs_read_iter+0x1f4/0x370
[  131.075633][ T6563]  ? __file_has_perm+0x3d9/0x430
[  131.075691][ T6563]  do_iter_readv_writev+0x4fd/0x5a0
[  131.075752][ T6563]  vfs_readv+0x1f4/0x6e0
[  131.075789][ T6563]  __se_sys_preadv2+0xfc/0x1c0
[  131.075815][ T6563]  __x64_sys_preadv2+0x67/0x80
[  131.075841][ T6563]  x64_sys_call+0x2b3b/0x3020
[  131.075873][ T6563]  do_syscall_64+0x12c/0x3b0
[  131.075904][ T6563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.075927][ T6563] RIP: 0033:0x7f4fb3d6ce59
[  131.075943][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.075971][ T6563] RSP: 002b:00007f4fb27c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  131.075991][ T6563] RAX: ffffffffffffffda RBX: 00007f4fb3fe5fa0 RCX: 00007f4fb3d6ce59
[  131.076005][ T6563] RDX: 1000000000000146 RSI: 0000200000000000 RDI: 0000000000000008
[  131.076030][ T6563] RBP: 00007f4fb27c7090 R08: 0000000000000000 R09: 0000000000000000
[  131.076041][ T6563] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002
[  131.076053][ T6563] R13: 00007f4fb3fe6038 R14: 00007f4fb3fe5fa0 R15: 00007ffe229058a8
[  131.076139][ T6563]  </TASK>
[  131.392648][ T6555] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  131.403597][ T6555] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1012: bg 0: block 64: padding at end of block bitmap is not set
[  131.425714][ T6555] loop3: lost filesystem error report for type 5 error -117
[  131.426798][ T6555] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  131.428772][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'.
[  131.434198][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  131.434215][    C0] EXT4-fs (loop3): initial error at time 1779866695: ext4_validate_block_bitmap:441
[  131.434280][    C0] EXT4-fs (loop3): last error at time 1779866695: ext4_validate_block_bitmap:441
[  131.471476][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'.
[  131.489402][ T6555] loop3: lost filesystem error report for type 5 error -117
[  131.490905][ T6555] EXT4-fs (loop3): 1 truncate cleaned up
[  131.508469][ T6564] loop0: detected capacity change from 0 to 512
[  131.515480][ T6555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.573950][ T6564] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1003: inode has both inline data and extents flags
[  131.587078][ T6564] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.606332][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  131.622005][    C0] EXT4-fs (loop0): initial error at time 1779866695: ext4_orphan_get:1397: inode 15
[  131.631442][    C0] EXT4-fs (loop0): last error at time 1779866695: ext4_orphan_get:1397: inode 15
[  131.666703][ T6564] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1003: couldn't read orphan inode 15 (err -117)
[  131.686002][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.696880][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1019'.
[  131.734250][ T6573] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1019'.
[  131.782231][ T6573] netlink: 'syz.2.1019': attribute type 5 has an invalid length.
[  131.791703][ T6564] loop0: lost filesystem error report for type 5 error -117
[  131.796980][ T6573] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1019'.
[  131.825999][ T6564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.861618][   T28] audit: type=1400 audit(1779866695.570:2142): avc:  denied  { write } for  pid=6532 comm="syz.0.1003" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.899740][ T6588] loop1: detected capacity change from 0 to 764
[  132.027154][ T6591] netlink: 'syz.3.1026': attribute type 1 has an invalid length.
[  132.267241][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1035'.
[  133.020170][ T6663] macsec0: entered promiscuous mode
[  133.061513][ T6654] macsec0: left promiscuous mode
[  133.172626][ T6671] loop2: detected capacity change from 0 to 1024
[  133.192121][ T6671] ext3: Unknown parameter 'noacl'
[  133.220748][ T6671] sctp: [Deprecated]: syz.2.1056 (pid 6671) Use of int in maxseg socket option.
[  133.220748][ T6671] Use struct sctp_assoc_value instead
[  133.262644][ T6671] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  133.377490][ T6674] loop2: detected capacity change from 0 to 128
[  133.384232][ T6674] msdos: Bad value for 'gid'
[  133.388863][ T6674] msdos: Bad value for 'gid'
[  133.489055][   T28] audit: type=1400 audit(1779866697.160:2143): avc:  denied  { accept } for  pid=6675 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  133.792475][ T6683] netlink: 'syz.3.1059': attribute type 12 has an invalid length.
[  133.800527][ T6683] netlink: 'syz.3.1059': attribute type 29 has an invalid length.
[  133.808453][ T6683] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1059'.
[  133.940958][   T28] audit: type=1400 audit(1779866697.490:2144): avc:  denied  { open } for  pid=6679 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  133.978600][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.102436][   T28] audit: type=1400 audit(1779866697.490:2145): avc:  denied  { kernel } for  pid=6679 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  134.332444][   T28] audit: type=1400 audit(1779866698.040:2146): avc:  denied  { name_bind } for  pid=6686 comm="syz.0.1061" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  135.150681][ T6706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6706 comm=syz.1.1068
[  135.375481][   T28] audit: type=1400 audit(1779866699.080:2147): avc:  denied  { getopt } for  pid=6713 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  135.806714][ T6718] loop1: detected capacity change from 0 to 2048
[  135.953286][ T6718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.992670][ T6718] netlink: 'syz.1.1069': attribute type 1 has an invalid length.
[  136.023250][ T6718] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.103393][ T6723] loop4: detected capacity change from 0 to 512
[  136.210022][ T6723] FAT-fs (loop4): Directory bread(block 199916) failed
[  136.273282][ T6723] FAT-fs (loop4): Directory bread(block 199917) failed
[  136.431317][ T6726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  136.459185][ T6723] FAT-fs (loop4): Directory bread(block 199918) failed
[  136.471309][ T6718] bond2: (slave veth3): Enslaving as an active interface with a down link
[  136.552466][ T6730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.561329][ T6730] bond2: (slave batadv0): making interface the new active one
[  136.570230][ T6730] batadv0: entered promiscuous mode
[  136.575638][ T6730] bond2: (slave batadv0): Enslaving as an active interface with an up link
[  136.591775][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1072'.
[  136.607496][ T6723] FAT-fs (loop4): Directory bread(block 199919) failed
[  136.637007][   T28] audit: type=1400 audit(1779866700.330:2148): avc:  denied  { tracepoint } for  pid=6733 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  136.663032][ T6723] FAT-fs (loop4): Directory bread(block 199920) failed
[  136.689340][ T6723] FAT-fs (loop4): Directory bread(block 199921) failed
[  136.710003][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'.
[  136.729111][ T6723] FAT-fs (loop4): Directory bread(block 199922) failed
[  136.742009][ T6723] FAT-fs (loop4): Directory bread(block 199923) failed
[  136.754241][ T6734] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  136.780067][ T6729] loop0: detected capacity change from 0 to 8192
[  137.008269][   T28] audit: type=1400 audit(1779866700.710:2149): avc:  denied  { write } for  pid=6717 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  137.100792][ T6747] loop2: detected capacity change from 0 to 1024
[  137.118303][ T6747] EXT4-fs: Ignoring removed bh option
[  137.143703][ T6747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.210455][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.308841][ T6763] loop4: detected capacity change from 0 to 2048
[  137.322962][ T6742] loop3: detected capacity change from 0 to 512
[  137.331890][ T6765] openvswitch: netlink: Key type 3846 is out of range max 32
[  137.342103][ T6742] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1071: inode has both inline data and extents flags
[  137.355333][ T6742] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  137.360755][ T6742] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1071: couldn't read orphan inode 15 (err -117)
[  137.388714][ T6742] loop3: lost filesystem error report for type 5 error -117
[  137.389421][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.412065][ T3339] IPVS: starting estimator thread 0...
[  137.423972][   T28] audit: type=1400 audit(1779866701.130:2150): avc:  denied  { write } for  pid=6717 comm="syz.3.1071" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  137.458271][   T28] audit: type=1400 audit(1779866701.130:2151): avc:  denied  { create } for  pid=6717 comm="syz.3.1071" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  137.513334][ T6763] Alternate GPT is invalid, using primary GPT.
[  137.520697][ T6763]  loop4: p2 p3 p7
[  137.530506][ T6769] IPVS: using max 2208 ests per chain, 110400 per kthread
[  137.632166][ T6774] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  137.645499][ T3263] udevd[3263]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  137.679658][ T6774] bond1 (unregistering): Released all slaves
[  137.694305][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  137.704570][ T3263] udevd[3263]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  137.900846][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.123232][ T6788] loop1: detected capacity change from 0 to 512
[  138.149736][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  138.237162][ T6788] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1089: Unimplemented hash flags: 0x0001
[  138.277526][ T6788] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1089: Corrupt directory, running e2fsck is recommended
[  138.315381][ T6788] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.1089: path /257/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0
[  138.416017][   T28] audit: type=1400 audit(1779866702.120:2152): avc:  denied  { read } for  pid=6786 comm="syz.1.1089" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  138.639011][ T6802] loop2: detected capacity change from 0 to 2048
[  139.018167][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.051505][ T6802] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  139.067558][ T6808] loop4: detected capacity change from 0 to 128
[  139.074787][ T6808] msdos: Bad value for 'gid'
[  139.079438][ T6808] msdos: Bad value for 'gid'
[  139.170903][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.345128][ T6802] bond0: (slave veth3): Enslaving as an active interface with a down link
[  139.494011][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.625186][ T6812] loop0: detected capacity change from 0 to 128
[  139.631990][ T6812] msdos: Bad value for 'gid'
[  139.636609][ T6812] msdos: Bad value for 'gid'
[  139.881741][ T6816] loop4: detected capacity change from 0 to 1024
[  139.915302][ T6816] EXT4-fs: test_dummy_encryption option not supported
[  139.937651][ T6814] FAULT_INJECTION: forcing a failure.
[  139.937651][ T6814] name failslab, interval 1, probability 0, space 0, times 0
[  140.087152][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.1.1095 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  140.087214][ T6814] Tainted: [W]=WARN
[  140.087222][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  140.087234][ T6814] Call Trace:
[  140.087241][ T6814]  <TASK>
[  140.087249][ T6814]  __dump_stack+0x1d/0x30
[  140.087305][ T6814]  dump_stack_lvl+0x95/0xd0
[  140.087327][ T6814]  dump_stack+0x15/0x1b
[  140.087343][ T6814]  should_fail_ex+0x263/0x280
[  140.087373][ T6814]  should_failslab+0x8c/0xb0
[  140.087423][ T6814]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  140.087515][ T6814]  ? preload_this_cpu_lock+0x5b/0xd0
[  140.087544][ T6814]  preload_this_cpu_lock+0x5b/0xd0
[  140.087605][ T6814]  alloc_vmap_area+0x2b9/0xe10
[  140.087678][ T6814]  ? should_fail_ex+0xa1/0x280
[  140.087703][ T6814]  ? should_failslab+0x8c/0xb0
[  140.087811][ T6814]  ? __kmalloc_cache_node_noprof+0x211/0x470
[  140.087835][ T6814]  __get_vm_area_node+0x173/0x1d0
[  140.087871][ T6814]  __vmalloc_node_range_noprof+0x25a/0x11c0
[  140.087936][ T6814]  ? copy_process+0x58e/0x2370
[  140.087976][ T6814]  ? __rcu_read_unlock+0x4e/0x70
[  140.088038][ T6814]  ? __rcu_read_unlock+0x4e/0x70
[  140.088059][ T6814]  ? __memcg_slab_post_alloc_hook+0x34f/0x7d0
[  140.088086][ T6814]  ? strlen+0x19/0x40
[  140.088191][ T6814]  ? perf_trace_kmem_cache_alloc+0x68/0x1c0
[  140.088224][ T6814]  __vmalloc_node_noprof+0x89/0xc0
[  140.088246][ T6814]  ? copy_process+0x58e/0x2370
[  140.088268][ T6814]  ? copy_process+0x58e/0x2370
[  140.088310][ T6814]  dup_task_struct+0x22a/0x660
[  140.088329][ T6814]  ? copy_process+0x57d/0x2370
[  140.088348][ T6814]  copy_process+0x58e/0x2370
[  140.088425][ T6814]  ? __schedule+0x951/0xd40
[  140.088447][ T6814]  ? __pfx_io_wq_worker+0x10/0x10
[  140.088467][ T6814]  create_io_thread+0x8f/0xc0
[  140.088537][ T6814]  ? __pfx_io_wq_worker+0x10/0x10
[  140.088556][ T6814]  create_io_worker+0xde/0x360
[  140.088578][ T6814]  io_wq_enqueue+0x461/0x540
[  140.088636][ T6814]  ? __pfx_io_wq_work_match_item+0x10/0x10
[  140.088660][ T6814]  io_queue_iowq+0x24e/0x320
[  140.088729][ T6814]  ? io_queue_sqe_fallback+0xdd/0x140
[  140.088785][ T6814]  io_queue_sqe_fallback+0xe5/0x140
[  140.088810][ T6814]  io_submit_sqes+0xd29/0x1170
[  140.088845][ T6814]  __se_sys_io_uring_enter+0x25c/0xfc0
[  140.088876][ T6814]  ? mutex_unlock+0x4e/0x90
[  140.088971][ T6814]  ? fput+0x8f/0xc0
[  140.089051][ T6814]  __x64_sys_io_uring_enter+0x78/0x90
[  140.089079][ T6814]  x64_sys_call+0x1e16/0x3020
[  140.089101][ T6814]  do_syscall_64+0x12c/0x3b0
[  140.089192][ T6814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.089211][ T6814] RIP: 0033:0x7f3421b7ce59
[  140.089225][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.089241][ T6814] RSP: 002b:00007f34205cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  140.089295][ T6814] RAX: ffffffffffffffda RBX: 00007f3421df5fa0 RCX: 00007f3421b7ce59
[  140.089311][ T6814] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  140.089324][ T6814] RBP: 00007f34205cf090 R08: 0000000000000000 R09: 0000000000000000
[  140.089336][ T6814] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  140.089348][ T6814] R13: 00007f3421df6038 R14: 00007f3421df5fa0 R15: 00007ffed1c4eff8
[  140.089375][ T6814]  </TASK>
[  140.483153][ T6819] loop4: detected capacity change from 0 to 512
[  140.649300][ T6751] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  140.814956][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.076714][ T6819] EXT4-fs (loop4): 1 orphan inode deleted
[  141.084205][ T6819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.097119][ T6819] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.473762][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'.
[  141.632934][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  141.777005][   T68] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  141.788852][   T68] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1
[  141.890174][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  141.979145][ T6857] loop0: detected capacity change from 0 to 128
[  141.986066][ T6857] msdos: Bad value for 'gid'
[  141.990687][ T6857] msdos: Bad value for 'gid'
[  142.137307][ T6862] loop2: detected capacity change from 0 to 512
[  142.144067][ T6862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  142.156592][ T6864] loop1: detected capacity change from 0 to 128
[  142.163595][ T6864] msdos: Bad value for 'gid'
[  142.168178][ T6864] msdos: Bad value for 'gid'
[  142.181918][ T6862] EXT4-fs (loop2): 1 truncate cleaned up
[  142.188793][ T6862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.231158][   T28] audit: type=1400 audit(1779866705.940:2153): avc:  denied  { write } for  pid=6861 comm="syz.2.1110" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.277450][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.306818][   T28] audit: type=1400 audit(1779866705.940:2154): avc:  denied  { read write } for  pid=6861 comm="syz.2.1110" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  142.341705][   T28] audit: type=1400 audit(1779866705.940:2155): avc:  denied  { open } for  pid=6861 comm="syz.2.1110" path="/206/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  142.366492][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.382434][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.435463][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'.
[  142.479709][ T6870] loop3: detected capacity change from 0 to 512
[  142.486836][ T6876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1115'.
[  142.505963][ T6870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.517116][ T6878] netlink: 'syz.4.1116': attribute type 1 has an invalid length.
[  142.531630][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.550109][ T6878] bond1: (slave veth3): Enslaving as an active interface with a down link
[  142.582805][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  142.595759][ T6870] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.625813][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'.
[  142.640538][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'.
[  142.641470][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  142.662770][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1121'.
[  142.667510][   T28] audit: type=1400 audit(1779866706.290:2156): avc:  denied  { write } for  pid=6888 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  142.717331][ T6889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6889 comm=syz.4.1121
[  142.756118][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1121'.
[  142.770043][ T6889] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  142.803950][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'.
[  142.816554][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'.
[  142.888438][ T6911] netlink: 'syz.3.1130': attribute type 1 has an invalid length.
[  142.910706][ T6911] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.926760][ T6910] loop2: detected capacity change from 0 to 512
[  142.938681][ T6911] bond1: (slave veth3): Enslaving as an active interface with a down link
[  142.978802][ T6910] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1123: inode has both inline data and extents flags
[  142.994007][ T6910] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  143.030883][ T6910] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1123: couldn't read orphan inode 15 (err -117)
[  143.052050][ T6910] loop2: lost filesystem error report for type 5 error -117
[  143.052984][ T6910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.060313][ T6919] netlink: 'syz.3.1133': attribute type 1 has an invalid length.
[  143.061857][   T28] audit: type=1400 audit(1779866706.740:2157): avc:  denied  { write } for  pid=6892 comm="syz.2.1123" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.684761][ T6931] 8021q: adding VLAN 0 to HW filter on device macsec1
[  143.764644][   T35] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  143.898034][ T6934] vlan3: entered promiscuous mode
[  144.052443][ T6944] set_capacity_and_notify: 1 callbacks suppressed
[  144.052534][ T6944] loop4: detected capacity change from 0 to 512
[  144.087374][ T6944] ext4: Bad value for 'commit'
[  144.120030][ T6947] xt_hashlimit: size too large, truncated to 1048576
[  144.262767][   T68] batadv1: left promiscuous mode
[  144.273433][ T6962] loop3: detected capacity change from 0 to 128
[  144.280073][ T6962] msdos: Bad value for 'gid'
[  144.284977][ T6962] msdos: Bad value for 'gid'
[  144.297147][   T28] audit: type=1326 audit(1779866707.980:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.0.1147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  144.322572][   T28] audit: type=1326 audit(1779866707.980:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.0.1147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  144.347949][   T28] audit: type=1326 audit(1779866707.980:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.0.1147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  144.373406][   T28] audit: type=1326 audit(1779866707.980:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.0.1147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  144.409960][ T6969] netlink: 'syz.4.1148': attribute type 46 has an invalid length.
[  144.448106][   T28] audit: type=1326 audit(1779866707.980:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.0.1147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  144.588141][ T6979] SELinux: syz.0.1151 (6979) wrote to checkreqprot. This is no longer supported.
[  144.628955][ T6985] netlink: 'syz.4.1154': attribute type 1 has an invalid length.
[  144.693785][ T6985] bond2: (slave veth7): Enslaving as an active interface with a down link
[  144.727976][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.757308][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.783453][ T6999] loop1: detected capacity change from 0 to 1024
[  144.796240][ T6985] bond2: (slave dummy0): making interface the new active one
[  144.808419][ T7001] loop0: detected capacity change from 0 to 1024
[  144.816185][ T6985] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  144.825427][ T7001] EXT4-fs: test_dummy_encryption option not supported
[  144.841863][ T6999] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  144.850004][ T6999] System zones: 0-1, 3-8
[  144.855314][ T6999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  144.896820][ T6999] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.965617][ T6999] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.1161: path /270/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  146.068482][ T6866] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  146.750783][ T7024] loop4: detected capacity change from 0 to 512
[  146.758073][ T7024] ext3: Unknown parameter 'obj_user'
[  146.935552][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  147.038353][ T7035] loop3: detected capacity change from 0 to 512
[  147.088584][ T7035] EXT4-fs: Ignoring removed bh option
[  147.135939][ T7035] EXT4-fs: Ignoring removed i_version option
[  147.176480][ T7035] EXT4-fs: quotafile must be on filesystem root
[  147.240717][   T28] kauditd_printk_skb: 138 callbacks suppressed
[  147.240786][   T28] audit: type=1326 audit(1779866710.950:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  147.371938][ T7039] loop1: detected capacity change from 0 to 512
[  147.471668][   T28] audit: type=1326 audit(1779866710.980:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  147.525376][   T28] audit: type=1326 audit(1779866710.980:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  147.637568][   T28] audit: type=1326 audit(1779866710.980:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  147.707853][   T28] audit: type=1326 audit(1779866710.980:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  147.818166][   T28] audit: type=1326 audit(1779866710.980:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  147.993797][   T28] audit: type=1326 audit(1779866710.980:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  148.059161][ T7071] loop4: detected capacity change from 0 to 512
[  148.083786][   T28] audit: type=1326 audit(1779866710.980:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  148.090489][ T7071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  148.137419][   T28] audit: type=1326 audit(1779866710.980:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  148.203443][ T7071] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1174: iget: bad i_size value: 38620345925642
[  148.206935][   T28] audit: type=1326 audit(1779866710.980:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.0.1170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa719cece59 code=0x7ffc0000
[  148.240466][ T7071] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  148.243193][ T7071] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1174: couldn't read orphan inode 15 (err -117)
[  148.250413][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  148.269907][ T7071] loop4: lost filesystem error report for type 5 error -117
[  148.270608][    C0] EXT4-fs (loop4): initial error at time 1779866711: ext4_orphan_get:1397: inode 15
[  148.270638][    C0] EXT4-fs (loop4): last error at time 1779866711: ext4_orphan_get:1397: inode 15
[  148.317876][ T7071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.407127][ T7095] loop0: detected capacity change from 0 to 1024
[  148.431680][ T7095] EXT4-fs: test_dummy_encryption option not supported
[  148.579992][ T7071] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.1174: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=1024, size=1024 fake=1
[  148.680011][ T7112] __nla_validate_parse: 8 callbacks suppressed
[  148.680052][ T7112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1176'.
[  148.918325][ T7111] FAULT_INJECTION: forcing a failure.
[  148.918325][ T7111] name failslab, interval 1, probability 0, space 0, times 0
[  148.933869][ T7111] CPU: 0 UID: 0 PID: 7111 Comm: syz.3.1179 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  148.933905][ T7111] Tainted: [W]=WARN
[  148.933912][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  148.933930][ T7111] Call Trace:
[  148.934032][ T7111]  <TASK>
[  148.934041][ T7111]  __dump_stack+0x1d/0x30
[  148.934065][ T7111]  dump_stack_lvl+0x95/0xd0
[  148.934123][ T7111]  dump_stack+0x15/0x1b
[  148.934144][ T7111]  should_fail_ex+0x263/0x280
[  148.934171][ T7111]  should_failslab+0x8c/0xb0
[  148.934202][ T7111]  __kmalloc_noprof+0xb8/0x4d0
[  148.934277][ T7111]  ? security_prepare_creds+0x52/0x120
[  148.934303][ T7111]  security_prepare_creds+0x52/0x120
[  148.934327][ T7111]  prepare_creds+0x381/0x540
[  148.934347][ T7111]  join_session_keyring+0x19/0x2a0
[  148.934418][ T7111]  __se_sys_keyctl+0xa06/0xb70
[  148.934546][ T7111]  ? ktime_get+0x212/0x240
[  148.934575][ T7111]  ? lapic_next_event+0x11/0x20
[  148.934597][ T7111]  ? clockevents_program_event+0x2fd/0x340
[  148.934615][ T7111]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  148.934685][ T7111]  ? tick_program_event+0x79/0xc0
[  148.934712][ T7111]  ? _raw_spin_unlock+0x9/0x30
[  148.934731][ T7111]  ? __hrtimer_rearm_deferred+0x58d/0x670
[  148.934760][ T7111]  __x64_sys_keyctl+0x67/0x80
[  148.934809][ T7111]  x64_sys_call+0x1d12/0x3020
[  148.934865][ T7111]  do_syscall_64+0x12c/0x3b0
[  148.934892][ T7111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.934915][ T7111] RIP: 0033:0x7fbd3d10ce59
[  148.934933][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.935032][ T7111] RSP: 002b:00007fbd3bb5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  148.935100][ T7111] RAX: ffffffffffffffda RBX: 00007fbd3d385fa0 RCX: 00007fbd3d10ce59
[  148.935116][ T7111] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000001
[  148.935130][ T7111] RBP: 00007fbd3bb5f090 R08: 0000000000000000 R09: 0000000000000000
[  148.935144][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.935159][ T7111] R13: 00007fbd3d386038 R14: 00007fbd3d385fa0 R15: 00007ffd536b4d28
[  148.935180][ T7111]  </TASK>
[  148.942184][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.381722][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.451812][ T7120] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1184'.
[  149.513834][ T7123] loop1: detected capacity change from 0 to 512
[  149.539334][ T7123] EXT4-fs: Ignoring removed nobh option
[  149.567570][ T7123] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  149.591337][ T7123] EXT4-fs (loop1): group descriptors corrupted!
[  149.642413][ T7125] vlan2: entered allmulticast mode
[  149.757574][ T7129] xt_cgroup: invalid path, errno=-2
[  149.793327][ T7131] loop3: detected capacity change from 0 to 512
[  149.812207][ T7131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  149.837076][ T7131] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.428475][ T7152] loop4: detected capacity change from 0 to 1024
[  150.824354][ T7153] loop2: detected capacity change from 0 to 2048
[  150.891049][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.017695][ T7152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  151.335551][ T7152] System zones: 0-1, 3-8
[  151.353150][ T7152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  151.398778][ T7152] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.511236][ T7152] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.1194: path /211/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  151.574298][ T7161] loop0: detected capacity change from 0 to 512
[  151.624837][ T7161] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1193: inode has both inline data and extents flags
[  151.637988][ T7161] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  151.639844][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  151.662739][ T7161] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1193: couldn't read orphan inode 15 (err -117)
[  151.675251][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  151.675348][    C0] EXT4-fs (loop0): initial error at time 1779866715: ext4_orphan_get:1397: inode 15
[  151.675506][    C0] EXT4-fs (loop0): last error at time 1779866715: ext4_orphan_get:1397: inode 15
[  151.737677][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.787804][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.902112][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  151.973908][ T7161] loop0: lost filesystem error report for type 5 error -117
[  151.997502][ T7172] ipip0: entered promiscuous mode
[  152.015888][ T7161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.117330][   T40] batadv0: left promiscuous mode
[  152.138651][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.253130][ T7179] bridge0: port 3(gretap0) entered blocking state
[  152.253226][ T7183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.266860][ T7183] IPv6: NLM_F_CREATE should be set when creating new route
[  152.270862][ T7179] bridge0: port 3(gretap0) entered disabled state
[  152.274076][ T7183] IPv6: NLM_F_CREATE should be set when creating new route
[  152.288832][ T7183] loop2: detected capacity change from 0 to 512
[  152.309695][ T7183] EXT4-fs: Ignoring removed nobh option
[  152.355124][ T7183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.373820][ T7188] loop1: detected capacity change from 0 to 1024
[  152.380657][ T7183] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.391734][ T7188] EXT4-fs: test_dummy_encryption option not supported
[  152.543070][ T7191] Cannot find add_set index 2 as target
[  152.802057][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.827205][ T7199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1202'.
[  152.965373][   T28] kauditd_printk_skb: 96 callbacks suppressed
[  152.965417][   T28] audit: type=1400 audit(1779866716.670:2407): avc:  denied  { bind } for  pid=7200 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  152.994943][ T7201] Unsupported ieee802154 address type: 0
[  153.284434][ T7208] loop3: detected capacity change from 0 to 1024
[  153.441484][ T7208] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  153.458383][ T7208] System zones: 0-1, 3-8
[  153.468176][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  153.662424][ T7208] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.283218][ T7214] loop4: detected capacity change from 0 to 512
[  154.497698][ T7220] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.1210: path /258/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  154.535269][ T7214] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  154.547488][ T7214] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  154.558035][ T7214] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1211: Corrupt directory, running e2fsck is recommended
[  154.754664][ T7219] loop2: detected capacity change from 0 to 512
[  155.480442][ T7085] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  155.844347][ T7214] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  155.856491][ T7214] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1211: corrupted in-inode xattr: e_name out of bounds
[  155.870405][ T7214] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  155.956547][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  155.972172][    C0] EXT4-fs (loop4): initial error at time 1779866719: ext4_iget_extra_inode:5128: inode 15
[  155.982167][    C0] EXT4-fs (loop4): last error at time 1779866719: ext4_iget_extra_inode:5128: inode 15
[  156.019692][ T7222] loop1: detected capacity change from 0 to 2048
[  156.523490][ T7219] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1207: bad orphan inode 15
[  156.533730][ T7219] loop2: lost filesystem error report for type 5 error -117
[  156.540382][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  156.554122][    C1] EXT4-fs (loop2): initial error at time 1779866720: ext4_orphan_get:1423
[  156.562659][    C1] EXT4-fs (loop2): last error at time 1779866720: ext4_orphan_get:1423
[  156.691214][ T7214] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1211: couldn't read orphan inode 15 (err -117)
[  156.703875][ T7214] loop4: lost filesystem error report for type 5 error -117
[  156.837843][ T7214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.858862][ T7219] ext4_test_bit(bit=14, block=18) = 1
[  156.858882][ T7219] is_bad_inode(inode)=0
[  156.858891][ T7219] NEXT_ORPHAN(inode)=1023
[  156.858900][ T7219] max_ino=32
[  156.858908][ T7219] i_nlink=0
[  157.241906][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.359605][ T7219] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.1207: corrupted xattr block 19: invalid header
[  157.373133][ T7219] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  157.376192][ T7219] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117)
[  157.394877][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  157.407454][ T7219] ext4 filesystem being mounted at /217/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  158.175722][ T7085] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set
[  158.214649][ T7085] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  158.561852][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  159.197724][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.395978][   T28] audit: type=1400 audit(1779866723.000:2408): avc:  denied  { write } for  pid=7218 comm="syz.2.1207" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.613414][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.753656][ T7239] FAULT_INJECTION: forcing a failure.
[  159.753656][ T7239] name failslab, interval 1, probability 0, space 0, times 0
[  159.880826][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.1.1215 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  159.880857][ T7239] Tainted: [W]=WARN
[  159.880942][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  159.880956][ T7239] Call Trace:
[  159.880963][ T7239]  <TASK>
[  159.880971][ T7239]  __dump_stack+0x1d/0x30
[  159.881014][ T7239]  dump_stack_lvl+0x95/0xd0
[  159.881042][ T7239]  dump_stack+0x15/0x1b
[  159.881062][ T7239]  should_fail_ex+0x263/0x280
[  159.881087][ T7239]  should_failslab+0x8c/0xb0
[  159.881164][ T7239]  __kmalloc_noprof+0xb8/0x4d0
[  159.881304][ T7239]  ? iovec_from_user+0x84/0x200
[  159.881457][ T7239]  iovec_from_user+0x84/0x200
[  159.881484][ T7239]  __import_iovec+0xf3/0x530
[  159.881589][ T7239]  import_iovec+0x60/0x80
[  159.881619][ T7239]  vfs_readv+0xf1/0x6e0
[  159.881637][ T7239]  ? __hrtimer_run_queues+0x4cb/0x4f0
[  159.881678][ T7239]  __se_sys_preadv2+0xfc/0x1c0
[  159.881711][ T7239]  __x64_sys_preadv2+0x67/0x80
[  159.881739][ T7239]  x64_sys_call+0x2b3b/0x3020
[  159.881788][ T7239]  do_syscall_64+0x12c/0x3b0
[  159.881817][ T7239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.881840][ T7239] RIP: 0033:0x7f3421b7ce59
[  159.881858][ T7239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.881956][ T7239] RSP: 002b:00007f34205cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  159.881979][ T7239] RAX: ffffffffffffffda RBX: 00007f3421df5fa0 RCX: 00007f3421b7ce59
[  159.881996][ T7239] RDX: 1000000000000146 RSI: 0000200000000000 RDI: 0000000000000006
[  159.882062][ T7239] RBP: 00007f34205cf090 R08: 0000000000000000 R09: 0000000000000000
[  159.882074][ T7239] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  159.882089][ T7239] R13: 00007f3421df6038 R14: 00007f3421df5fa0 R15: 00007ffed1c4eff8
[  159.882111][ T7239]  </TASK>
[  160.595471][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  160.674567][   T28] audit: type=1326 audit(1779866724.380:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  160.740485][   T28] audit: type=1326 audit(1779866724.390:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  160.790502][   T28] audit: type=1326 audit(1779866724.390:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  160.855673][   T28] audit: type=1326 audit(1779866724.390:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  160.944407][   T28] audit: type=1326 audit(1779866724.390:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  160.970996][ T7260] loop4: detected capacity change from 0 to 1024
[  160.997455][ T7260] EXT4-fs: test_dummy_encryption option not supported
[  161.088615][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.110606][   T28] audit: type=1326 audit(1779866724.390:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  161.139115][ T7257] loop1: detected capacity change from 0 to 512
[  161.188145][   T28] audit: type=1326 audit(1779866724.390:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  161.213632][   T28] audit: type=1326 audit(1779866724.390:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  161.257993][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'.
[  161.358697][   T28] audit: type=1326 audit(1779866724.390:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="syz.2.1220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb3d6ce59 code=0x7ffc0000
[  161.440472][ T7257] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1217: inode has both inline data and extents flags
[  161.453674][ T7257] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  161.454289][ T7257] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1217: couldn't read orphan inode 15 (err -117)
[  161.529791][ T7257] loop1: lost filesystem error report for type 5 error -117
[  161.668505][ T7257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.034466][ T7278] loop3: detected capacity change from 0 to 128
[  162.223267][ T7278] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  162.260283][ T7278] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  162.858107][ T7283] loop2: detected capacity change from 0 to 2048
[  164.263621][ T7288] loop4: detected capacity change from 0 to 4096
[  164.270879][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.321002][ T7288] EXT4-fs: Ignoring removed bh option
[  164.335189][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.387282][ T7288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.010515][   T28] kauditd_printk_skb: 69 callbacks suppressed
[  165.010545][   T28] audit: type=1400 audit(1779866728.640:2487): avc:  denied  { write } for  pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.113826][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.232182][ T7309] loop0: detected capacity change from 0 to 2048
[  165.249698][ T7313] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1228'.
[  165.251921][   T28] audit: type=1400 audit(1779866728.950:2488): avc:  denied  { write } for  pid=7311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.295007][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.327617][ T7309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.362500][ T7309] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.475431][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.025409][ T7337] loop0: detected capacity change from 0 to 1024
[  166.033804][   T28] audit: type=1400 audit(1779866729.740:2489): avc:  denied  { write } for  pid=7317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.096664][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.112287][   T28] audit: type=1400 audit(1779866729.740:2490): avc:  denied  { write } for  pid=7341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.218297][ T7325] loop3: detected capacity change from 0 to 2048
[  166.264232][ T7348] FAULT_INJECTION: forcing a failure.
[  166.264232][ T7348] name failslab, interval 1, probability 0, space 0, times 0
[  166.310594][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.4.1235 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  166.310699][ T7348] Tainted: [W]=WARN
[  166.310707][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  166.310721][ T7348] Call Trace:
[  166.310727][ T7348]  <TASK>
[  166.310735][ T7348]  __dump_stack+0x1d/0x30
[  166.310756][ T7348]  dump_stack_lvl+0x95/0xd0
[  166.310774][ T7348]  dump_stack+0x15/0x1b
[  166.310814][ T7348]  should_fail_ex+0x263/0x280
[  166.310859][ T7348]  should_failslab+0x8c/0xb0
[  166.310905][ T7348]  kmem_cache_alloc_noprof+0x66/0x3f0
[  166.310936][ T7348]  ? security_inode_alloc+0x37/0x100
[  166.311011][ T7348]  security_inode_alloc+0x37/0x100
[  166.311037][ T7348]  inode_init_always_gfp+0x4a0/0x4e0
[  166.311066][ T7348]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  166.311133][ T7348]  alloc_inode+0x58/0x170
[  166.311152][ T7348]  new_inode+0x1d/0xe0
[  166.311187][ T7348]  shmem_get_inode+0x25a/0x790
[  166.311215][ T7348]  __shmem_file_setup+0x14f/0x260
[  166.311261][ T7348]  shmem_file_setup+0x3b/0x50
[  166.311279][ T7348]  memfd_alloc_file+0x4e/0x300
[  166.311361][ T7348]  __se_sys_memfd_create+0x2e1/0x3b0
[  166.311456][ T7348]  __x64_sys_memfd_create+0x31/0x40
[  166.311482][ T7348]  x64_sys_call+0x1f22/0x3020
[  166.311507][ T7348]  do_syscall_64+0x12c/0x3b0
[  166.311590][ T7348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.311610][ T7348] RIP: 0033:0x7fcb6ae9ce59
[  166.311625][ T7348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.311644][ T7348] RSP: 002b:00007fcb698eee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  166.311730][ T7348] RAX: ffffffffffffffda RBX: 00000000000002c9 RCX: 00007fcb6ae9ce59
[  166.311743][ T7348] RDX: 00007fcb698eeee0 RSI: 0000000000000000 RDI: 00007fcb6af32f4f
[  166.311758][ T7348] RBP: 0000200000000980 R08: 00000000ffffffff R09: 0000000000000000
[  166.311770][ T7348] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040
[  166.311781][ T7348] R13: 00007fcb698eeee0 R14: 00007fcb698eeea0 R15: 0000200000000d40
[  166.311852][ T7348]  </TASK>
[  166.575275][ T7337] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1234: missing EA_INODE flag
[  166.618430][   T28] audit: type=1400 audit(1779866730.250:2491): avc:  denied  { write } for  pid=7336 comm="syz.0.1234" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  166.660863][ T7337] EXT4-fs (loop0): Remounting filesystem read-only
[  166.680100][   T28] audit: type=1400 audit(1779866730.380:2492): avc:  denied  { write } for  pid=7336 comm="syz.0.1234" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  166.706594][ T7354] loop4: detected capacity change from 0 to 1024
[  166.713881][ T7353] loop2: detected capacity change from 0 to 1024
[  166.724211][ T7354] ext4: Unknown parameter 'hash'
[  166.840027][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.932383][ T7353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  166.943353][ T7353] System zones: 0-1, 3-8
[  166.964500][ T7353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  166.988333][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1239'.
[  167.012741][ T7353] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.024808][ T7363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1239'.
[  167.043622][ T7325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.076974][ T7363] bond5: option updelay: invalid value (18446744071721734831)
[  167.093788][ T7363] bond5: option updelay: allowed values 0 - 2147483647
[  167.109662][ T7353] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz.2.1237: path /221/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  167.134312][ T7363] bond5 (unregistering): Released all slaves
[  167.184705][ T7325] netlink: 'syz.3.1233': attribute type 1 has an invalid length.
[  167.302976][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  167.613153][ T7371] loop0: detected capacity change from 0 to 2048
[  167.699341][ T7300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  167.751729][ T7371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.777352][ T7371] netlink: 'syz.0.1240': attribute type 1 has an invalid length.
[  168.450442][ T7300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  168.551125][ T7380] vlan0: entered promiscuous mode
[  168.560813][ T7380] vlan0: entered allmulticast mode
[  168.587635][ T7380] veth0_vlan: entered allmulticast mode
[  168.625304][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1243'.
[  168.760193][ T7384] loop4: detected capacity change from 0 to 1024
[  169.197375][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.198266][ T7390] macvlan3: entered promiscuous mode
[  169.212677][ T7390] batman_adv: batadv0: Adding interface: macvlan3
[  169.232292][ T7390] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.594849][ T7396] loop4: detected capacity change from 0 to 2048
[  169.640065][ T7390] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active
[  170.671768][ T7398] loop0: detected capacity change from 0 to 4096
[  170.679066][ T7398] EXT4-fs: Ignoring removed bh option
[  170.728437][ T7398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.748914][ T7396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.299756][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.747098][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.917987][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.996564][ T7415] loop1: detected capacity change from 0 to 128
[  172.003242][ T7415] msdos: Bad value for 'gid'
[  172.007934][ T7415] msdos: Bad value for 'gid'
[  172.029226][ T7417] loop0: detected capacity change from 0 to 1024
[  172.047468][ T7417] ext4: Unknown parameter 'hash'
[  172.238057][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'.
[  172.286320][ T7425] loop4: detected capacity change from 0 to 1024
[  172.352973][ T7425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  172.363224][ T7425] System zones: 0-1, 3-8
[  172.368426][ T7425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  172.382659][ T7425] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.410782][ T7425] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.1256: path /231/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  172.524019][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.189718][ T7433] loop4: detected capacity change from 0 to 2048
[  173.259349][ T7433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.299641][ T7433] netlink: 'syz.4.1258': attribute type 1 has an invalid length.
[  173.405871][ T7433] 8021q: adding VLAN 0 to HW filter on device bond3
[  173.787344][ T7443] loop0: detected capacity change from 0 to 512
[  173.808193][ T7441] loop1: detected capacity change from 0 to 1024
[  173.842848][ T7443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.862305][ T7441] EXT4-fs: test_dummy_encryption option not supported
[  174.056591][ T7443] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.557947][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.592155][ T7450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1259'.
[  174.656686][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'.
[  174.989134][   T28] audit: type=1400 audit(1779866738.690:2493): avc:  denied  { write } for  pid=7442 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  175.998501][ T7454] loop4: detected capacity change from 0 to 764
[  176.005012][ T7454] iso9660: Unknown parameter ''
[  176.305298][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.354725][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.413465][ T7459] loop2: detected capacity change from 0 to 512
[  176.530785][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'.
[  176.540296][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'.
[  176.612148][ T7459] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1261: inode has both inline data and extents flags
[  176.625341][ T7459] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  176.648295][ T7466] loop0: detected capacity change from 0 to 8192
[  176.669827][ T7459] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1261: couldn't read orphan inode 15 (err -117)
[  176.681658][ T7459] loop2: lost filesystem error report for type 5 error -117
[  176.682846][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.768266][   T28] audit: type=1400 audit(1779866740.470:2494): avc:  denied  { write } for  pid=7444 comm="syz.2.1261" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  176.795144][ T7466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'.
[  177.278482][ T7479] loop1: detected capacity change from 0 to 128
[  177.285735][ T7479] msdos: Bad value for 'gid'
[  177.290336][ T7479] msdos: Bad value for 'gid'
[  177.557053][ T7480] loop0: detected capacity change from 0 to 2048
[  177.719704][ T7480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.776267][ T7487] loop4: detected capacity change from 0 to 256
[  178.394412][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'.
[  178.434953][   T28] audit: type=1400 audit(1779866742.120:2495): avc:  denied  { execute } for  pid=7501 comm="syz.1.1275" path=2F6D656D66643A9D23202864656C6574656429 dev="hugetlbfs" ino=21623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  179.473746][ T7512] netlink: 'syz.1.1278': attribute type 9 has an invalid length.
[  179.755718][ T7508] loop4: detected capacity change from 0 to 2048
[  179.925758][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.946301][ T7508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.969039][ T7507] netlink: 'syz.4.1277': attribute type 1 has an invalid length.
[  180.606275][ T7522] loop1: detected capacity change from 0 to 512
[  180.685729][ T7527] loop3: detected capacity change from 0 to 128
[  180.692378][ T7527] msdos: Bad value for 'gid'
[  180.696981][ T7527] msdos: Bad value for 'gid'
[  180.753842][ T7520] loop0: detected capacity change from 0 to 8192
[  180.836248][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1279'.
[  180.893980][ T7531] loop1: detected capacity change from 0 to 512
[  180.938365][ T7531] EXT4-fs (loop1): orphan cleanup on readonly fs
[  180.966213][ T7531] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1284: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  181.042810][ T7531] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  181.043221][ T7531] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.1284: Bad quota inode: 4, type: 1
[  181.052419][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  181.052435][    C0] EXT4-fs (loop1): last error at time 1779866744: ext4_ext_check_inode:521: inode 4
[  181.083052][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.141904][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'.
[  181.151432][ T7531] loop1: lost filesystem error report for type 5 error -117
[  181.152133][ T7531] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  181.180614][ T7531] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  181.195601][ T7531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  181.226464][ T7538] netlink: 1000 bytes leftover after parsing attributes in process `syz.0.1287'.
[  181.251633][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1287'.
[  181.263583][ T7531] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  181.280410][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1287'.
[  181.310390][ T7538] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1287'.
[  181.375171][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'.
[  181.888807][ T7553] loop3: detected capacity change from 0 to 2048
[  181.904102][ T7552] loop0: detected capacity change from 0 to 512
[  181.972431][ T7531] EXT4-fs warning (device loop1): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount
[  181.972431][ T7531] 
[  181.994422][ T7552] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1289: inode has both inline data and extents flags
[  182.007717][ T7552] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  182.008031][ T7552] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1289: couldn't read orphan inode 15 (err -117)
[  182.029084][ T7552] loop0: lost filesystem error report for type 5 error -117
[  182.031637][ T7552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.088141][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.189118][ T7405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  182.211808][   T28] audit: type=1400 audit(1779866745.760:2496): avc:  denied  { write } for  pid=7546 comm="syz.0.1289" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  182.561485][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.640445][   T28] audit: type=1400 audit(1779866746.340:2497): avc:  denied  { getopt } for  pid=7558 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  182.742710][   T28] audit: type=1326 audit(1779866746.370:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  183.281842][   T28] audit: type=1326 audit(1779866746.370:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  183.308770][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.789293][   T28] audit: type=1326 audit(1779866746.370:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  183.845026][   T28] audit: type=1326 audit(1779866746.370:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  183.962623][ T7573] loop3: detected capacity change from 0 to 1024
[  184.031655][ T7573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  184.063792][ T7573] System zones: 0-1, 3-8
[  184.081290][ T7573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.121901][ T7573] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.285564][ T7577] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.1295: path /275/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  184.761872][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.764724][   T28] audit: type=1326 audit(1779866746.380:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  184.796705][   T28] audit: type=1326 audit(1779866746.380:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  184.822424][   T28] audit: type=1326 audit(1779866746.380:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  184.848149][   T28] audit: type=1326 audit(1779866746.380:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fcb6ae9ce59 code=0x7ffc0000
[  184.932776][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1296'.
[  184.973378][ T7586] loop4: detected capacity change from 0 to 512
[  184.981873][ T7586] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  184.989911][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  184.999950][ T7586] EXT4-fs (loop4): group descriptors corrupted!
[  185.383831][ T7601] loop3: detected capacity change from 0 to 512
[  185.411686][ T7611] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1307'.
[  185.423830][ T7604] SET target dimension over the limit!
[  185.423848][ T7601] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1300: inode has both inline data and extents flags
[  185.423878][ T7601] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  185.444147][ T7604] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  185.487831][ T7601] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1300: couldn't read orphan inode 15 (err -117)
[  185.500844][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  185.500934][    C1] EXT4-fs (loop3): initial error at time 1779866749: ext4_orphan_get:1397: inode 15
[  185.501352][    C1] EXT4-fs (loop3): last error at time 1779866749: ext4_orphan_get:1397: inode 15
[  185.525264][ T7604] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1306'.
[  185.559727][ T7601] loop3: lost filesystem error report for type 5 error -117
[  185.652990][ T7611] loop4: detected capacity change from 0 to 128
[  185.721365][ T7611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52)
[  185.729995][ T7611] FAT-fs (loop4): Filesystem has been set read-only
[  185.749454][ T7611] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52)
[  185.776953][ T7601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.791230][ T7631] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  185.801459][ T7611] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52)
[  185.859412][ T7634] netlink: 'syz.2.1306': attribute type 5 has an invalid length.
[  185.962223][ T7604] loop2: detected capacity change from 0 to 8192
[  186.065026][ T7643] loop4: detected capacity change from 0 to 1024
[  186.095803][ T7643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  186.110904][ T7643] System zones: 0-1, 3-8
[  186.116296][ T7643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  186.128531][ T7643] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.158020][ T7643] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.1311: path /246/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  186.228373][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  186.428053][ T7659] loop4: detected capacity change from 0 to 128
[  186.768979][ T7689] xt_hashlimit: size too large, truncated to 1048576
[  187.115414][ T7662] cgroup: fork rejected by pids controller in /syz1
[  187.330829][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.374399][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  187.374446][   T28] audit: type=1400 audit(1779866751.080:2531): avc:  denied  { listen } for  pid=7716 comm="syz.4.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  187.442559][ T7718] loop2: detected capacity change from 0 to 256
[  187.584705][ T7718] FAT-fs (loop2): Directory bread(block 64) failed
[  187.591560][ T7718] FAT-fs (loop2): Directory bread(block 65) failed
[  187.598209][ T7718] FAT-fs (loop2): Directory bread(block 66) failed
[  187.604836][ T7718] FAT-fs (loop2): Directory bread(block 67) failed
[  187.611503][ T7718] FAT-fs (loop2): Directory bread(block 68) failed
[  187.618212][ T7718] FAT-fs (loop2): Directory bread(block 69) failed
[  187.625048][ T7718] FAT-fs (loop2): Directory bread(block 70) failed
[  187.631649][ T7718] FAT-fs (loop2): Directory bread(block 71) failed
[  187.638186][ T7718] FAT-fs (loop2): Directory bread(block 72) failed
[  187.644793][ T7718] FAT-fs (loop2): Directory bread(block 73) failed
[  187.668592][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  187.677805][ T7718] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1321'.
[  187.687023][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  187.696344][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  187.705386][ T7718] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1321'.
[  187.714920][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  187.728322][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  188.204490][ T7727] SET target dimension over the limit!
[  188.249359][ T7727] siw: device registration error -23
[  188.518671][ T7734] loop4: detected capacity change from 0 to 8192
[  188.527529][ T7738] loop0: detected capacity change from 0 to 128
[  188.550108][ T7738] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  188.570497][ T7727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.618458][ T7738] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.628647][ T7741] netlink: 'syz.4.1327': attribute type 5 has an invalid length.
[  188.657872][ T7727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.691075][ T7727] bond0 (unregistering): Released all slaves
[  188.909463][ T6506] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  189.303170][ T7756] loop1: detected capacity change from 0 to 512
[  189.323209][ T7756] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1333: inode has both inline data and extents flags
[  189.336387][ T7756] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  189.336804][ T7756] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1333: couldn't read orphan inode 15 (err -117)
[  189.357711][ T7756] loop1: lost filesystem error report for type 5 error -117
[  189.358521][ T7756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.380810][   T28] audit: type=1400 audit(1779866753.090:2532): avc:  denied  { write } for  pid=7742 comm="syz.1.1333" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  189.406581][ T7760] loop2: detected capacity change from 0 to 256
[  189.418168][ T7760] usb usb7: usbfs: process 7760 (syz.2.1338) did not claim interface 0 before use
[  189.445531][ T7762] loop0: detected capacity change from 0 to 1024
[  189.498569][ T7762] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  189.526917][ T7762] System zones: 0-1, 3-8
[  189.532081][ T7762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  189.544380][ T7762] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.574256][ T7768] loop2: detected capacity change from 0 to 512
[  189.592760][ T7762] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz.0.1339: path /260/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  189.622440][ T7768] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  189.672871][ T7768] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  189.683396][ T7768] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1341: Corrupt directory, running e2fsck is recommended
[  189.700128][ T7768] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  189.720633][ T7768] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1341: corrupted in-inode xattr: e_name out of bounds
[  189.747574][ T7768] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  189.748419][ T7768] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1341: couldn't read orphan inode 15 (err -117)
[  189.757615][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  189.757638][    C0] EXT4-fs (loop2): initial error at time 1779866753: ext4_iget_extra_inode:5128: inode 15
[  189.757665][    C0] EXT4-fs (loop2): last error at time 1779866753: ext4_iget_extra_inode:5128: inode 15
[  189.805203][ T7768] loop2: lost filesystem error report for type 5 error -117
[  189.805932][ T7768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.831853][ T7768] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  189.832083][   T28] audit: type=1400 audit(1779866753.540:2533): avc:  denied  { write } for  pid=7767 comm="syz.2.1341" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  189.860380][ T7768] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  189.886116][ T7768] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1341: Corrupt directory, running e2fsck is recommended
[  189.900099][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  189.912554][ T7773] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  189.954026][ T7773] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  189.992763][ T7773] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1341: Corrupt directory, running e2fsck is recommended
[  189.996574][ T7778] loop4: detected capacity change from 0 to 512
[  190.020915][ T7778] EXT4-fs: Ignoring removed bh option
[  190.039120][ T7768] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  190.063125][ T7778] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  190.065670][ T7768] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  190.076046][ T7778] EXT4-fs (loop4): 1 truncate cleaned up
[  190.093982][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.104885][ T7768] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1341: Corrupt directory, running e2fsck is recommended
[  190.110304][ T7778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.118725][ T7773] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  190.198886][ T7787] loop0: detected capacity change from 0 to 8192
[  190.212399][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.431420][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.442986][ T7787] __nla_validate_parse: 26 callbacks suppressed
[  190.443070][ T7787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1347'.
[  190.505374][ T7798] vlan2: entered promiscuous mode
[  190.556242][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'.
[  190.596829][ T7801] macvlan3: entered allmulticast mode
[  191.014974][ T7813] FAULT_INJECTION: forcing a failure.
[  191.014974][ T7813] name failslab, interval 1, probability 0, space 0, times 0
[  191.040570][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.4.1355 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  191.040599][ T7813] Tainted: [W]=WARN
[  191.040606][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  191.040618][ T7813] Call Trace:
[  191.040626][ T7813]  <TASK>
[  191.040633][ T7813]  __dump_stack+0x1d/0x30
[  191.040720][ T7813]  dump_stack_lvl+0x95/0xd0
[  191.040741][ T7813]  dump_stack+0x15/0x1b
[  191.040783][ T7813]  should_fail_ex+0x263/0x280
[  191.040886][ T7813]  should_failslab+0x8c/0xb0
[  191.040917][ T7813]  __kvmalloc_node_noprof+0x155/0x640
[  191.040989][ T7813]  ? ip_set_alloc+0x24/0x30
[  191.041020][ T7813]  ip_set_alloc+0x24/0x30
[  191.041043][ T7813]  hash_netport_create+0x2c1/0x740
[  191.041066][ T7813]  ? __pfx_hash_netport_create+0x10/0x10
[  191.041158][ T7813]  ip_set_create+0x3cf/0x970
[  191.041215][ T7813]  ? __nla_parse+0x40/0x60
[  191.041246][ T7813]  nfnetlink_rcv_msg+0x4fe/0x5d0
[  191.041286][ T7813]  netlink_rcv_skb+0x123/0x220
[  191.041392][ T7813]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  191.041426][ T7813]  nfnetlink_rcv+0x167/0x1720
[  191.041458][ T7813]  ? __kfree_skb+0x109/0x150
[  191.041482][ T7813]  ? nlmon_xmit+0x4f/0x60
[  191.041585][ T7813]  ? consume_skb+0x4b/0x130
[  191.041607][ T7813]  ? nlmon_xmit+0x4f/0x60
[  191.041653][ T7813]  ? dev_hard_start_xmit+0x36c/0x3a0
[  191.041685][ T7813]  ? __dev_queue_xmit+0x1396/0x1ec0
[  191.041707][ T7813]  ? __dev_queue_xmit+0x165/0x1ec0
[  191.041732][ T7813]  ? perf_trace_kmem_cache_alloc+0x68/0x1c0
[  191.041951][ T7813]  ? ref_tracker_free+0x37d/0x3e0
[  191.041985][ T7813]  ? __netlink_deliver_tap+0x4dc/0x500
[  191.042020][ T7813]  netlink_unicast+0x5a8/0x680
[  191.042049][ T7813]  netlink_sendmsg+0x5c8/0x6f0
[  191.042156][ T7813]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.042219][ T7813]  ____sys_sendmsg+0x563/0x5b0
[  191.042249][ T7813]  ___sys_sendmsg+0x195/0x1e0
[  191.042286][ T7813]  __x64_sys_sendmsg+0xd4/0x160
[  191.042387][ T7813]  x64_sys_call+0x194c/0x3020
[  191.042476][ T7813]  do_syscall_64+0x12c/0x3b0
[  191.042559][ T7813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.042641][ T7813] RIP: 0033:0x7fcb6ae9ce59
[  191.042668][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.042687][ T7813] RSP: 002b:00007fcb698ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.042709][ T7813] RAX: ffffffffffffffda RBX: 00007fcb6b115fa0 RCX: 00007fcb6ae9ce59
[  191.042724][ T7813] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000003
[  191.042787][ T7813] RBP: 00007fcb698ef090 R08: 0000000000000000 R09: 0000000000000000
[  191.042802][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.042816][ T7813] R13: 00007fcb6b116038 R14: 00007fcb6b115fa0 R15: 00007ffd38d8ee68
[  191.042843][ T7813]  </TASK>
[  191.342360][ T7816] loop2: detected capacity change from 0 to 1024
[  191.483993][ T7816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  191.492245][ T7825] C: renamed from veth1_to_team
[  191.493452][ T7827] netlink: 'syz.3.1358': attribute type 22 has an invalid length.
[  191.497425][ T7816] System zones: 
[  191.506784][ T7825] netlink: 'syz.3.1358': attribute type 4 has an invalid length.
[  191.518599][ T7816] 0-1, 3-8
[  191.522614][ T7816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  191.535492][ T7825] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1358'.
[  191.545164][ T7825] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  191.560962][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'.
[  191.630686][ T7816] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.775498][ T7830] loop4: detected capacity change from 0 to 512
[  191.782839][ T7830] ext3: Unknown parameter 'obj_user'
[  192.193603][ T7835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25614 sclass=netlink_route_socket pid=7835 comm=syz.3.1359
[  192.214343][ T7815] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz.2.1354: path /242/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  192.266567][ T7836] loop0: detected capacity change from 0 to 512
[  192.402332][   T28] audit: type=1400 audit(1779866756.110:2534): avc:  denied  { write } for  pid=7834 comm="syz.3.1359" path="socket:[22100]" dev="sockfs" ino=22100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  192.439535][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  192.509118][   T28] audit: type=1400 audit(1779866756.110:2535): avc:  denied  { map } for  pid=7834 comm="syz.3.1359" path="socket:[22100]" dev="sockfs" ino=22100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  192.579744][ T7842] syzkaller0: entered promiscuous mode
[  192.600843][ T7842] syzkaller0: entered allmulticast mode
[  192.625027][ T7842] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  192.635681][   T28] audit: type=1400 audit(1779866756.110:2536): avc:  denied  { read } for  pid=7834 comm="syz.3.1359" path="socket:[22100]" dev="sockfs" ino=22100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  192.740490][ T7843] netlink: 'syz.3.1361': attribute type 3 has an invalid length.
[  192.752365][   T28] audit: type=1400 audit(1779866756.280:2537): avc:  denied  { ioctl } for  pid=7841 comm="syz.3.1361" path="socket:[22108]" dev="sockfs" ino=22108 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  192.836080][ T7843] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1361'.
[  193.246347][ T7848] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1362'.
[  193.273528][ T7836] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1356: inode has both inline data and extents flags
[  193.402844][ T7836] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  193.403088][ T7836] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1356: couldn't read orphan inode 15 (err -117)
[  193.455979][ T7859] loop2: detected capacity change from 0 to 128
[  193.462790][ T7859] msdos: Bad value for 'gid'
[  193.467482][ T7859] msdos: Bad value for 'gid'
[  193.502765][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  193.509228][    C1] EXT4-fs (loop0): initial error at time 1779866757: ext4_orphan_get:1397: inode 15
[  193.518621][    C1] EXT4-fs (loop0): last error at time 1779866757: ext4_orphan_get:1397: inode 15
[  193.544476][ T7856] xt_cgroup: invalid path, errno=-2
[  193.664545][ T7836] loop0: lost filesystem error report for type 5 error -117
[  193.667912][ T7836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.729268][ T7865] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.777651][ T7865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.800420][   T28] audit: type=1400 audit(1779866757.500:2538): avc:  denied  { write } for  pid=7819 comm="syz.0.1356" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  193.953783][ T7869] EXT4-fs (loop3): Invalid default hash set in the superblock
[  194.509722][   T28] audit: type=1400 audit(1779866758.210:2539): avc:  denied  { bind } for  pid=7880 comm="syz.2.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  194.531772][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1374'.
[  194.563939][   T28] audit: type=1400 audit(1779866758.210:2540): avc:  denied  { setopt } for  pid=7880 comm="syz.2.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  194.571117][ T7879] syzkaller0: entered promiscuous mode
[  194.608035][ T7879] syzkaller0: entered allmulticast mode
[  194.827427][ T7890] set_capacity_and_notify: 2 callbacks suppressed
[  194.827445][ T7890] loop3: detected capacity change from 0 to 128
[  194.855935][ T7890] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.917412][ T7890] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.017328][   T28] audit: type=1400 audit(1779866758.720:2541): avc:  denied  { append } for  pid=7895 comm="syz.4.1379" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  195.122927][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.222600][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.232118][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.672115][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.711787][ T7925] loop4: detected capacity change from 0 to 512
[  195.733610][ T7925] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  195.742600][ T7925] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1388: invalid block
[  195.754152][ T7925] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  195.754455][ T7925] EXT4-fs (loop4): 1 truncate cleaned up
[  195.763639][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  195.763661][    C0] EXT4-fs (loop4): initial error at time 1779866759: ext4_get_branch:178: inode 13: block 1024
[  195.763712][    C0] EXT4-fs (loop4): last error at time 1779866759: ext4_get_branch:178: inode 13: block 1024
[  195.797121][ T7925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.856037][   T28] audit: type=1400 audit(1779866759.560:2542): avc:  denied  { read } for  pid=7929 comm="syz.1.1391" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  195.907140][   T28] audit: type=1400 audit(1779866759.580:2543): avc:  denied  { open } for  pid=7929 comm="syz.1.1391" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  196.045082][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'.
[  196.365773][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.446488][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.992171][ T8008] loop4: detected capacity change from 0 to 128
[  197.319581][ T8047] FAULT_INJECTION: forcing a failure.
[  197.319581][ T8047] name failslab, interval 1, probability 0, space 0, times 0
[  197.336953][ T8047] CPU: 1 UID: 0 PID: 8047 Comm: syz.2.1405 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  197.337008][ T8047] Tainted: [W]=WARN
[  197.337016][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  197.337027][ T8047] Call Trace:
[  197.337033][ T8047]  <TASK>
[  197.337115][ T8047]  __dump_stack+0x1d/0x30
[  197.337141][ T8047]  dump_stack_lvl+0x95/0xd0
[  197.337163][ T8047]  dump_stack+0x15/0x1b
[  197.337262][ T8047]  should_fail_ex+0x263/0x280
[  197.337291][ T8047]  ? ucma_alloc_ctx+0x30/0x1d0
[  197.337323][ T8047]  should_failslab+0x8c/0xb0
[  197.337370][ T8047]  __kmalloc_cache_noprof+0x5f/0x400
[  197.337391][ T8047]  ? should_fail_ex+0xd9/0x280
[  197.337418][ T8047]  ? __pfx_ucma_create_id+0x10/0x10
[  197.337446][ T8047]  ucma_alloc_ctx+0x30/0x1d0
[  197.337552][ T8047]  ucma_create_id+0x15a/0x280
[  197.337582][ T8047]  ? __pfx_ucma_create_id+0x10/0x10
[  197.337655][ T8047]  ucma_write+0x1c9/0x260
[  197.337680][ T8047]  vfs_writev+0x42b/0x900
[  197.337699][ T8047]  ? __pfx_ucma_write+0x10/0x10
[  197.337766][ T8047]  do_writev+0xe9/0x210
[  197.337789][ T8047]  __x64_sys_writev+0x45/0x50
[  197.337817][ T8047]  x64_sys_call+0x1c0c/0x3020
[  197.337916][ T8047]  do_syscall_64+0x12c/0x3b0
[  197.337949][ T8047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.338020][ T8047] RIP: 0033:0x7f4fb3d6ce59
[  197.338037][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.338057][ T8047] RSP: 002b:00007f4fb27c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  197.338142][ T8047] RAX: ffffffffffffffda RBX: 00007f4fb3fe5fa0 RCX: 00007f4fb3d6ce59
[  197.338158][ T8047] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[  197.338172][ T8047] RBP: 00007f4fb27c7090 R08: 0000000000000000 R09: 0000000000000000
[  197.338187][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.338206][ T8047] R13: 00007f4fb3fe6038 R14: 00007f4fb3fe5fa0 R15: 00007ffe229058a8
[  197.338293][ T8047]  </TASK>
[  197.571568][ T8050] vhci_hcd vhci_hcd.4: invalid port number 236
[  197.574532][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1408'.
[  197.734394][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.756580][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.780957][ T8066] loop4: detected capacity change from 0 to 512
[  197.793291][ T8075] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1414'.
[  197.803190][ T8066] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1410: inode has both inline data and extents flags
[  197.816326][ T8066] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  197.816485][ T8066] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1410: couldn't read orphan inode 15 (err -117)
[  197.837502][ T8066] loop4: lost filesystem error report for type 5 error -117
[  197.838172][ T8066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.859154][   T28] kauditd_printk_skb: 116 callbacks suppressed
[  197.859168][   T28] audit: type=1400 audit(1779866761.490:2660): avc:  denied  { write } for  pid=8064 comm="syz.4.1410" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  197.897934][ T8075] loop1: detected capacity change from 0 to 128
[  197.946599][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.988173][ T8075] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52)
[  198.014358][ T8088] ip6tnl1: entered allmulticast mode
[  198.021164][ T8075] FAT-fs (loop1): Filesystem has been set read-only
[  198.038195][ T8075] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52)
[  198.056836][   T28] audit: type=1400 audit(1779866761.760:2661): avc:  denied  { write } for  pid=8081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.061307][ T8075] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52)
[  198.131914][ T8101] Failed to initialize the IGMP autojoin socket (err -2)
[  198.163638][   T28] audit: type=1400 audit(1779866761.870:2662): avc:  denied  { write } for  pid=8097 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.193876][ T8103] netlink: 'syz.3.1420': attribute type 1 has an invalid length.
[  198.201982][ T8103] netlink: 'syz.3.1420': attribute type 2 has an invalid length.
[  198.295128][   T28] audit: type=1400 audit(1779866762.000:2663): avc:  denied  { bind } for  pid=8094 comm="syz.0.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  198.316604][ T8115] loop1: detected capacity change from 0 to 256
[  198.323212][ T8115] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  198.537748][ T8123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8123 comm=syz.4.1422
[  198.574313][ T8117] loop2: detected capacity change from 0 to 1024
[  198.580911][ T8122] loop3: detected capacity change from 0 to 512
[  198.583735][ T8117] EXT4-fs: Ignoring removed orlov option
[  198.600842][ T8036] ==================================================================
[  198.608949][ T8036] BUG: KCSAN: data-race in touch_atime / touch_atime
[  198.615630][ T8036] 
[  198.618005][ T8036] write to 0xffff88811b5b5668 of 4 bytes by task 7439 on cpu 0:
[  198.622619][ T8117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.625631][ T8036]  touch_atime+0x1d7/0x330
[  198.625657][ T8036]  shmem_file_read_iter+0x3f4/0x4b0
[  198.647279][ T8036]  lo_rw_aio+0x67d/0x730
[  198.651526][ T8036]  loop_process_work+0x56c/0xac0
[  198.656473][ T8036]  loop_rootcg_workfn+0x22/0x30
[  198.661421][ T8036]  process_scheduled_works+0x4f0/0x9c0
[  198.666889][ T8036]  worker_thread+0x58a/0x780
[  198.671951][ T8036]  kthread+0x22a/0x280
[  198.676014][ T8036]  ret_from_fork+0x146/0x330
[  198.680617][ T8036]  ret_from_fork_asm+0x1a/0x30
[  198.685377][ T8036] 
[  198.687697][ T8036] read to 0xffff88811b5b5668 of 4 bytes by task 8036 on cpu 1:
[  198.695230][ T8036]  touch_atime+0x16c/0x330
[  198.699653][ T8036]  shmem_file_read_iter+0x3f4/0x4b0
[  198.704845][ T8036]  lo_rw_aio+0x67d/0x730
[  198.709074][ T8036]  loop_process_work+0x56c/0xac0
[  198.714015][ T8036]  loop_workfn+0x31/0x40
[  198.718252][ T8036]  process_scheduled_works+0x4f0/0x9c0
[  198.723707][ T8036]  worker_thread+0x58a/0x780
[  198.728304][ T8036]  kthread+0x22a/0x280
[  198.732393][ T8036]  ret_from_fork+0x146/0x330
[  198.736983][ T8036]  ret_from_fork_asm+0x1a/0x30
[  198.741746][ T8036] 
[  198.744055][ T8036] value changed: 0x11e96e19 -> 0x12c0743f
[  198.749758][ T8036] 
[  198.752070][ T8036] Reported by Kernel Concurrency Sanitizer on:
[  198.758385][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: kworker/u8:16 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  198.769485][ T8036] Tainted: [W]=WARN
[  198.773272][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  198.783319][ T8036] Workqueue: loop3 loop_workfn
[  198.788075][ T8036] ==================================================================
[  198.797758][ T8122] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1426: inode has both inline data and extents flags
[  198.810879][ T8122] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  198.811440][ T8122] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1426: couldn't read orphan inode 15 (err -117)
[  198.829257][   T28] audit: type=1400 audit(1779866762.530:2664): avc:  denied  { write } for  pid=8116 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.832436][ T8122] loop3: lost filesystem error report for type 5 error -117
[  198.834211][ T8122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.854517][   T28] audit: type=1400 audit(1779866762.540:2665): avc:  denied  { write } for  pid=8116 comm="syz.2.1424" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.931300][   T28] audit: type=1400 audit(1779866762.610:2666): avc:  denied  { write } for  pid=8121 comm="syz.3.1426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.982942][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.238790][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.