last executing test programs:

4m8.277859123s ago: executing program 2 (id=1044):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m8.033909668s ago: executing program 2 (id=1048):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a1c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x10)

4m5.899934564s ago: executing program 2 (id=1072):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)=""/4112, 0x1010}], 0x1}, 0x9}], 0x1, 0x10022, 0x0)

4m5.728770727s ago: executing program 2 (id=1073):
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, 0x0, 0x0, 0x2390024, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)

4m5.002683123s ago: executing program 2 (id=1078):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100)=r2, 0x12)
r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12)

4m4.501610123s ago: executing program 2 (id=1087):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a2200000000000400000000000000002d0000000000000104800000200002000a"], 0x6c}}, 0x0)

4m4.481645494s ago: executing program 32 (id=1087):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a2200000000000400000000000000002d0000000000000104800000200002000a"], 0x6c}}, 0x0)

2.590751445s ago: executing program 0 (id=3161):
kexec_load(0x0, 0x0, 0x0, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getpeername(r0, &(0x7f0000000180)=@ll, &(0x7f0000000200)=0x80)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115)
kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x6000)
unshare(0x22020400)
syz_open_dev$evdev(0x0, 0xa0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x79d4246e, @mcast2, 0x40}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0xfdef}], 0x1)

2.286426391s ago: executing program 3 (id=3153):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="23d4f0db956c", 0x6}], 0x1, 0x0, 0x0, 0x8008011}, 0x20048851)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
io_pgetevents(0x0, 0xa, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000055c0))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

2.103233545s ago: executing program 3 (id=3154):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
preadv(r0, 0x0, 0x0, 0x1, 0x401)
r1 = gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r0, 0x0, 0x0, 0x80800)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.87241853s ago: executing program 1 (id=3155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.796377572s ago: executing program 5 (id=3156):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x58, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4)

1.711370764s ago: executing program 1 (id=3157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

1.641316655s ago: executing program 1 (id=3159):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb402b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800)
unshare(0x22020400)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000140), 0x8, 0x0)

1.535176857s ago: executing program 4 (id=3160):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x7)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20010063)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x3f9)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc0089364, 0x0)

1.534505467s ago: executing program 0 (id=3171):
unshare(0x9000000)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x32, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004)
recvmmsg(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/202, 0xca}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000800)=""/164, 0xa4}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/68, 0x44}, {&(0x7f0000001a00)=""/220, 0xdc}], 0x6}, 0x2}], 0x1, 0x40002000, 0x0)

1.532853447s ago: executing program 5 (id=3172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0)
close(r6)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xe, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c060}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.496655578s ago: executing program 0 (id=3162):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x9902)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
close(0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xfffffffffffffff0}, 0x107d54, 0x1, 0xbd6, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff)
bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb})
io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.377658991s ago: executing program 4 (id=3163):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r3 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

1.260288533s ago: executing program 5 (id=3164):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1)
r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = dup3(r3, r4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6a3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x1}})

1.227747944s ago: executing program 0 (id=3176):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000000340))
listen(r0, 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x7fb, &(0x7f0000001700)="$eJzs3U9oHPe9APDvKJItK+AX8h55xjjO2M7j2dRVdqVEqcgh2axG8iTSrthdFZtSkhDbYCwnISak8aGJL0lbWkpPPaa5hlwKPRR6KO2hLRQKzaGXHgqBnEoKLZSUElCZ2V3rj7WSnMhWmn4+wvrN/uY7M9+ZHc13Z707EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJPWZSqWaHIyIpbPpYPWZVnNhi/H9+f18XbPFciOS4l+Mjsahbteh/1kdfV/x63gc6T46EqNFMxrX7r7vnsf+e3ioP/0WCX1ax3YYl0S8USR1+bmhiNuRyB30nZ/d8iT/WCl+z2WNvN3MF2pzWZq3m+n01FTloTOz7XQ2n8/a59qdbCGtt7Jap9lKT9ZPpdXp6ck0Gz/XXGrMzdTms37no1+eqFSm0qfGF7Naq91sPPTUeLt+Jp+fzxtzZcxE5dUoYh4tdsSn807ayWoLaXrx0vKFye1SLYKq63r2r3u+jjx4z4evfPC3SxeKHXLQTJLejjlRrU5MVKcemX7k0UpleKIysb6jskHciIihiCLituy0fN4dWD1I7N7BGz6joW79j5iPPBqxFGcjjTSGyt+rPyMxGjPRimYsFI//MLJh/E31//8e+svvtlpuWb/fKor66I0qf2h19OEo6//R7qOjA+p/cVDemMfOfg7c6hRXfhvxXjebtf1X47W4FpfjuViO5bgQL98Y8+lzu60/QzuMG+0/E1vHzUUWjcijHc3IYyFqZU/a60ljOqZiKirxTJyJ2WhHGrORx3xk0Y5z0Y5OZOUeVY9WZFGLTjSjFWmcjHqcijSqMR3TMRlpZDEe56IZS9GIuZiJWjmXi3Gp3O6TG/K675vPJm/8/sO3i+EbQdUtViQpXswVQX9d171+P+kV8wdiR/X/QG8LrkYcLHf8dHiPaxG7qv+nstP4XThqw+5YKev/8F6nAQAAANxGSfnuexIRI3F/OTSbz2df2+u0AAAAgF1Ufq75SNGMFEP3R1Kc/1c2iXz/jucGAAAA7I6k/I5dEhFj8UB3qP91qc3eBAAAAAD+DZX//3+0aMYiXi87nP8DAADAF8y3Bl1j/4N9vWvstxf3J3f1ohfPPphcqRVDtSu9vl7z1Rtz7MweTg72ZlI2U8PX7k4iYrieHUn6V7/8ZH+3/aicw+HVCxAOutZ/0mqNJNcHJxBbJ1A+iu/GsW7MsfPd9nx/THcpY7P5fDZeb84/Vk16b450Xnnh0jciiqV/u7FwMImLl5YvjD//4vL5MpfrxVyuX+ldHj65hVxWelsg7t98jUfKL2L0ljvWXW5l7foPdScf2nqZydplvhnHuzHHx7rt2Pr1Hy2WWR1/rBq12sGhTna288rKmrXvZVH9jGv+Zpzoxpw4eaLbbJLFxLosXrg5i4m1WexsW2yZRaGfxdvHXj/79181k2xyuywmP2MWAHvlYnnVn9UqdKCsQv9c6Srq/4a627+q+aZHuf//Se8YuuEod3H1VUZ/+jW1bjh2p7q/GSfLkF+c7L6eGD68rq48UdaVyiZH9JcuvfTr3hH94Xd/+KOvH/3Nj1er24Zj9BPdVwWDs3g3TnUje03c+8ubqlsxi2q5Zb+3oaq+U0zxzsCq2p6fSEaKLf9fN0aXz1NETExOVR6uVB6ZiJHypUKvGZzp/p3vJQB80Wx7j50d3IXn4c3PqqNf8e698ZGC8Xg+XozlOB+ny28bRMQDm891bM3HEE5vc9Y6tuYOL6e3ObdcjZ3YGLv/RBIDYifXbLH//UHZfHz7nhMAuN2Ob1OHd1L/T/fOu2Pz8+4NtfxU98a5/bPjGFzLN/OV271BAOA/QNb6KBnrvJW0WvniM9Xp6WqtcyZLW83602krn5nL0rzRyVr1M7XGXJYutpqdZr3/hvhM1k7bS4uLzU866WyzlS422/nZ8s7vae/W7+1sodZ4Nertxfms1s7SerPRqdU76UzerqeLS0/O5+0zWSud/fhcxGJWz2fzeq2TNxtpu7nUqmfjadrOsjWB+UzW6OSzeTHYSBdb+UKtdT0i5pcWsnQma9db+WKn2Sqz6S8rb8w2Wwu1Aav/5zu4qQHgc+Pqa9cuP7e8fOHl9QMrycaezQf+uIOYqxEre72aAMAaa6s0AAAAAAAAAAAAAADw+XTz1/WK3m2/0rd2YCRuIXjDwP74NFN9cQe+9F73admNGW4yn31bTnXXas+Bdc/pvt7Osvfb55YHnn388cuDYp58/dCZP2UR289n87+Uq3fftPfGWwcj9v30+92eJ+7Umr4f3bWI4VuafCXZImbPDkkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNC/AgAA//8kR008")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
sigaltstack(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'dummy0\x00', 0x0})
r2 = syz_io_uring_complete(0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x810, r2, 0x100000000)

1.223301584s ago: executing program 3 (id=3165):
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640), 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x4000840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0)

1.067959147s ago: executing program 5 (id=3166):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x481)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r1 = io_uring_setup(0x896, &(0x7f0000000040)={0x0, 0xfa53, 0x1c080, 0xa, 0x20002f7})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

867.610422ms ago: executing program 3 (id=3167):
r0 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0x4})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x20, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000580)=[{0x0, 0x1, 0x0}, {0x0, 0x0, 0x0}], 0x2)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x24040080)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8800, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

613.975387ms ago: executing program 3 (id=3168):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)=""/4, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001614"], 0x18}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x208000, 0x0)
close(0xffffffffffffffff)
r2 = timerfd_create(0x0, 0x80000)
timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000740)=[{0x0}], 0x1)

434.083861ms ago: executing program 5 (id=3169):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001280)="$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")
r0 = socket$inet(0x2, 0x801, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014)
sendto$inet(r0, 0x0, 0x0, 0x20004010, 0x0, 0x0)
ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000000c0))
msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

433.896971ms ago: executing program 4 (id=3170):
r0 = socket(0xa, 0x3, 0x87)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'})
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000480)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}, 0x3, 0x2}, &(0x7f00000003c0)=0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x9, 0x6}, 0x90)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r3, &(0x7f0000000f40)=""/243, 0xf3)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='fd\x00', 0x3)

423.672931ms ago: executing program 1 (id=3173):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r0, &(0x7f0000000200)="89", 0xffe3)

233.338015ms ago: executing program 3 (id=3174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
shutdown(r0, 0x1)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_clone3(&(0x7f0000000900)={0x22805100, &(0x7f0000000040), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58)

233.101355ms ago: executing program 4 (id=3175):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x45)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2082)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_bp={0x0}, 0x424, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xaa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x201, 0xd92cc367, 0x8001, <r2=>0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000140)=0x8)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

195.504646ms ago: executing program 1 (id=3177):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x9a)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x91000a7a)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
read(r1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x20, r4, 0x801, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x2400c000)

194.910746ms ago: executing program 4 (id=3178):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000006d0067382bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040004b90400180034801400350076657468315f746f5f626f6e640000001400030076657468315f746f5f626f6e64"], 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fallocate(r2, 0x10, 0x100, 0x5)
pipe2(&(0x7f0000000100), 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

127.060077ms ago: executing program 0 (id=3179):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4)

105.402798ms ago: executing program 4 (id=3180):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0xffff6efe, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x5}, {0x10000002, 0x4000, 0x9, 0x8}]}, 0x94)
syz_clone(0x0, &(0x7f0000000600)="7667c12335de2ee2968bc0840ae1c946ae07688ab5a711bafb970dfdbc5002998786687db9dfe4a724307209e0203566e4a8f0dbdc510c4b2af4288498d875b7da017307e9918f", 0x47, &(0x7f0000000700), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
close(r0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)

58.263488ms ago: executing program 5 (id=3181):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x4)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
socket$kcm(0x2, 0x5, 0x84)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
r3 = accept4$unix(r1, 0x0, 0x0, 0x800)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
recvfrom$unix(r3, &(0x7f0000000240)=""/229, 0xe5, 0x40010010, 0x0, 0x0)

881.86µs ago: executing program 1 (id=3182):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x22020600)
getpid()
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000), 0x0)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x2)
fchdir(r3)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9)
symlinkat(&(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00')

0s ago: executing program 0 (id=3183):
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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")
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
write(r2, &(0x7f0000000200)="c7", 0x1)
sendfile(r2, r1, 0x0, 0x7fff)

kernel console output (not intermixed with test programs):

57.117207][T10243] vlan4: entered allmulticast mode
[  257.125372][T10243] bond3: entered allmulticast mode
[  257.166125][T10240] bond3: (slave bridge3): making interface the new active one
[  257.195909][T10240] bridge3: entered promiscuous mode
[  257.197351][T10221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.224822][T10240] bridge3: entered allmulticast mode
[  257.232717][T10240] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  257.273351][T10221] netlink: 'syz.5.2193': attribute type 3 has an invalid length.
[  257.281880][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'.
[  257.315913][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.415925][T10256] netlink: 'syz.3.2203': attribute type 10 has an invalid length.
[  257.436133][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'.
[  257.448558][T10256] team0: Port device wg2 added
[  257.510976][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'.
[  257.574772][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'.
[  257.737527][T10276] loop0: detected capacity change from 0 to 1024
[  257.770471][T10276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.795059][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  257.795079][   T28] audit: type=1400 audit(1782927534.588:2327): avc:  denied  { write } for  pid=10275 comm="syz.0.2209" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  257.801596][T10276] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  257.881819][   T28] audit: type=1400 audit(1782927534.668:2328): avc:  denied  { connect } for  pid=10283 comm="syz.3.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  257.932836][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'.
[  257.996016][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.040840][T10296] loop5: detected capacity change from 0 to 512
[  258.128453][T10296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.194406][T10296] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.266213][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2215'.
[  258.304543][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.313855][   T28] audit: type=1400 audit(1782927535.098:2329): avc:  denied  { audit_write } for  pid=10303 comm="syz.4.2217" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  258.369654][   T28] audit: type=1107 audit(1782927535.098:2330): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='���n�2.Q����w�kA���;����[������9�����)R��X�
Vls
�KnTO#�|����ϓ�M'
[  258.428689][   T28] audit: type=1400 audit(1782927535.108:2331): avc:  denied  { accept } for  pid=10303 comm="syz.4.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  258.892767][T10329] loop5: detected capacity change from 0 to 512
[  259.098621][T10332] loop3: detected capacity change from 0 to 256
[  259.231122][T10329] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2225: bg 0: block 169: padding at end of block bitmap is not set
[  259.263577][T10329] loop5: lost filesystem error report for type 5 error -117
[  259.272360][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  259.286856][    C1] EXT4-fs (loop5): initial error at time 1782927536: ext4_validate_block_bitmap:441
[  259.296846][    C1] EXT4-fs (loop5): last error at time 1782927536: ext4_validate_block_bitmap:441
[  259.353590][T10329] Quota error (device loop5): write_blk: dquota write failed
[  259.371520][T10329] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  259.387960][T10329] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2225: Failed to acquire dquot type 0
[  259.402779][T10329] loop5: lost filesystem error report for type 5 error -117
[  259.407427][T10329] EXT4-fs (loop5): 1 truncate cleaned up
[  259.431646][T10329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.446765][T10329] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.578137][T10329] syz.5.2225 (10329) used greatest stack depth: 8320 bytes left
[  259.650589][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.743628][T10348] netlink: 8772 bytes leftover after parsing attributes in process `syz.1.2233'.
[  259.780128][T10350] loop3: detected capacity change from 0 to 512
[  259.861688][T10350] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2234: invalid indirect mapped block 256 (level 2)
[  259.890547][T10350] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  259.902349][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  259.918869][    C1] EXT4-fs (loop3): initial error at time 1782927536: ext4_free_branches:1023: inode 11
[  259.928577][    C1] EXT4-fs (loop3): last error at time 1782927536: ext4_free_branches:1023: inode 11
[  260.043483][T10350] EXT4-fs (loop3): Remounting filesystem read-only
[  260.054826][T10350] EXT4-fs (loop3): 2 truncates cleaned up
[  260.297278][T10350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.537712][   T28] audit: type=1400 audit(1782927537.318:2332): avc:  denied  { write } for  pid=10349 comm="syz.3.2234" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  261.302793][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  262.164821][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.370994][T10380] syzkaller0: entered promiscuous mode
[  262.377520][T10380] syzkaller0: entered allmulticast mode
[  262.533526][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'.
[  262.564107][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'.
[  262.573297][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'.
[  262.601617][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'.
[  262.627950][T10393] loop5: detected capacity change from 0 to 512
[  262.668830][T10393] ext4: Unknown parameter 'smackfstransmute'
[  262.890090][T10398] netlink: 'syz.4.2249': attribute type 1 has an invalid length.
[  262.909197][T10384] loop3: detected capacity change from 0 to 512
[  262.931532][T10398] 8021q: adding VLAN 0 to HW filter on device bond10
[  262.968785][T10384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.982746][T10384] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.063066][T10403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  263.085819][T10398] bond10: (slave ip6gretap0): making interface the new active one
[  263.125229][T10398] bond10: (slave ip6gretap0): Enslaving as an active interface with an up link
[  263.222199][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.249273][T10409] netlink: 'syz.4.2251': attribute type 15 has an invalid length.
[  263.272153][T10409] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.2251'.
[  263.298874][T10409] netlink: 'syz.4.2251': attribute type 15 has an invalid length.
[  263.316459][T10409] netlink: 'syz.4.2251': attribute type 16 has an invalid length.
[  263.353876][T10409] netlink: 'syz.4.2251': attribute type 21 has an invalid length.
[  263.382695][T10409] netlink: 'syz.4.2251': attribute type 25 has an invalid length.
[  263.395858][T10409] netlink: 'syz.4.2251': attribute type 27 has an invalid length.
[  263.413820][T10409] netlink: 'syz.4.2251': attribute type 28 has an invalid length.
[  263.433310][   T28] audit: type=1400 audit(1782927540.218:2333): avc:  denied  { ioctl } for  pid=10410 comm="syz.3.2252" path="socket:[30146]" dev="sockfs" ino=30146 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  263.433997][T10409] netlink: 'syz.4.2251': attribute type 29 has an invalid length.
[  263.497053][T10409] netlink: 'syz.4.2251': attribute type 30 has an invalid length.
[  263.673126][T10427] loop5: detected capacity change from 0 to 2048
[  263.693563][T10427] ext4: Bad value for 'init_itable'
[  263.870321][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'.
[  263.909130][T10434] loop5: detected capacity change from 0 to 512
[  264.147932][T10434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.241452][T10434] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.354208][   T28] audit: type=1400 audit(1782927541.148:2334): avc:  denied  { write } for  pid=10433 comm="syz.5.2261" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.385753][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2257'.
[  264.807796][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.095090][T10443] loop3: detected capacity change from 0 to 1024
[  265.243081][T10443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.443380][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.769241][T10462] loop3: detected capacity change from 0 to 512
[  265.784891][T10462] ext4: Unknown parameter 'obj_type'
[  265.804814][   T28] audit: type=1400 audit(1782927542.598:2335): avc:  denied  { bind } for  pid=10463 comm="syz.4.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  268.270309][T10499] tipc: Resetting bearer <eth:team0>
[  268.348785][T10499] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  268.420705][T10506] loop0: detected capacity change from 0 to 512
[  268.443910][T10506] EXT4-fs: Ignoring removed oldalloc option
[  268.453406][T10506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  268.675924][T10506] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.2285: invalid indirect mapped block 83886080 (level 1)
[  268.706621][T10506] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  268.707038][T10506] EXT4-fs (loop0): Remounting filesystem read-only
[  268.716342][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  268.716366][    C1] EXT4-fs (loop0): initial error at time 1782927545: ext4_free_branches:1023: inode 16
[  268.716394][    C1] EXT4-fs (loop0): last error at time 1782927545: ext4_free_branches:1023: inode 16
[  268.756737][T10506] EXT4-fs (loop0): 1 orphan inode deleted
[  268.763393][T10506] EXT4-fs (loop0): 1 truncate cleaned up
[  268.770449][T10506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.271170][   T28] audit: type=1400 audit(1782927546.038:2336): avc:  denied  { shutdown } for  pid=10513 comm="syz.4.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  269.589850][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.967168][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  269.987574][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  270.020494][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  270.061778][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  270.165570][T10538] loop0: detected capacity change from 0 to 512
[  270.233634][T10538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2289'.
[  270.262527][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.269291][T10540] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2297'.
[  270.403240][ T3398] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.429017][T10551] validate_nla: 1 callbacks suppressed
[  270.429052][T10551] netlink: 'syz.3.2301': attribute type 1 has an invalid length.
[  270.963185][ T3398] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  271.042462][T10559] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  271.262283][T10561] tipc: Resetting bearer <eth:team0>
[  271.832399][T10561] bridge0: port 2(veth0_to_bond) entered disabled state
[  271.997790][T10585] netlink: 'syz.5.2311': attribute type 1 has an invalid length.
[  272.152837][T10561] bridge0: port 1(veth9) entered disabled state
[  272.208688][T10585] 8021q: adding VLAN 0 to HW filter on device bond3
[  272.264258][T10592] vlan2: entered promiscuous mode
[  272.269488][T10592] bond3: entered promiscuous mode
[  272.281341][T10604] SELinux:  Context system_u:object_r:depmod_exec_t:s0 is not valid (left unmapped).
[  272.283615][T10592] vlan2: entered allmulticast mode
[  272.303882][T10592] bond3: entered allmulticast mode
[  272.314677][ T7216] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.328964][ T7216] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.354805][   T28] audit: type=1400 audit(1782927549.148:2337): avc:  denied  { create } for  pid=10601 comm="syz.0.2314" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:depmod_exec_t:s0"
[  272.387304][T10594] bond3: (slave bridge1): making interface the new active one
[  272.395121][   T28] audit: type=1400 audit(1782927549.148:2338): avc:  denied  { associate } for  pid=10601 comm="syz.0.2314" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:depmod_exec_t:s0"
[  272.421627][T10594] bridge1: entered promiscuous mode
[  272.429621][T10594] bridge1: entered allmulticast mode
[  272.446463][T10594] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  272.463467][   T28] audit: type=1400 audit(1782927549.238:2339): avc:  denied  { write } for  pid=10596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  272.493697][ T7216] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.504849][ T7216] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.522214][   T28] audit: type=1400 audit(1782927549.308:2340): avc:  denied  { write } for  pid=10615 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  272.759364][   T28] audit: type=1400 audit(1782927549.538:2341): avc:  denied  { write } for  pid=10624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  272.935310][   T28] audit: type=1400 audit(1782927549.598:2342): avc:  denied  { write } for  pid=10641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  272.990052][   T28] audit: type=1400 audit(1782927549.778:2343): avc:  denied  { lock } for  pid=10650 comm="syz.0.2324" path="socket:[31608]" dev="sockfs" ino=31608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  273.536859][T10660] syzkaller0: entered promiscuous mode
[  273.553311][   T28] audit: type=1400 audit(1782927550.348:2344): avc:  denied  { write } for  pid=10648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.576802][T10660] syzkaller0: entered allmulticast mode
[  273.604952][T10669] bridge0: entered allmulticast mode
[  273.624713][T10669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.635588][T10669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.652855][T10672] loop0: detected capacity change from 0 to 512
[  273.668678][T10672] EXT4-fs: Ignoring removed orlov option
[  273.689464][   T28] audit: type=1400 audit(1782927550.428:2345): avc:  denied  { write } for  pid=10670 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.769507][T10672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.802443][T10682] loop5: detected capacity change from 0 to 512
[  273.805676][T10672] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.826574][T10669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.850485][T10683] loop3: detected capacity change from 0 to 512
[  273.859756][T10682] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  273.887784][T10669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.934104][T10683] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  274.005568][T10669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.020505][T10686] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2331'.
[  274.023884][T10677] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  274.045051][T10669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.125953][T10669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.140736][T10669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.161678][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'.
[  274.217460][   T40] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.231085][   T40] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.253887][   T40] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.265776][   T40] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.285524][   T40] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.294570][   T40] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.305072][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.330411][ T7210] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.347403][ T7210] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.598852][ T7202] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  274.619668][T10704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.687409][T10718] loop5: detected capacity change from 0 to 512
[  274.719914][T10718] EXT4-fs: Ignoring removed nobh option
[  274.875657][T10718] EXT4-fs (loop5): 1 orphan inode deleted
[  274.884707][T10718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.028024][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  275.028042][   T28] audit: type=1400 audit(1782927551.818:2349): avc:  denied  { write } for  pid=10716 comm="syz.5.2342" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  275.029679][T10718] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.2342: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  275.143804][T10727] netlink: 'syz.1.2345': attribute type 10 has an invalid length.
[  275.157224][T10727] team0: Port device wg2 added
[  275.182122][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.327146][T10733] netlink: 'syz.1.2347': attribute type 2 has an invalid length.
[  275.336995][T10733] netlink: 'syz.1.2347': attribute type 3 has an invalid length.
[  275.373150][T10733] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.2347'.
[  275.479918][T10744] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2353'.
[  275.813422][T10763] loop3: detected capacity change from 0 to 512
[  275.828203][T10765] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2360'.
[  275.924789][T10763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.950280][T10763] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.979360][   T28] audit: type=1400 audit(1782927552.768:2350): avc:  denied  { write } for  pid=10759 comm="syz.3.2361" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  276.764518][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.985034][   T28] audit: type=1400 audit(1782927553.778:2351): avc:  denied  { write } for  pid=10806 comm="syz.0.2374" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1
[  277.509822][   T28] audit: type=1326 audit(1782927554.288:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  278.317209][   T28] audit: type=1326 audit(1782927554.288:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  278.469576][   T28] audit: type=1326 audit(1782927554.288:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  279.302404][T10833] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2383'.
[  279.515165][   T28] audit: type=1326 audit(1782927554.288:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  279.542719][   T28] audit: type=1326 audit(1782927554.898:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f7175e68e code=0x7ffc0000
[  279.586230][   T28] audit: type=1326 audit(1782927554.898:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f7175e68e code=0x7ffc0000
[  279.626615][T10837] netlink: 463 bytes leftover after parsing attributes in process `syz.5.2384'.
[  279.690753][   T28] audit: type=1326 audit(1782927554.898:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.1.2381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f7175e68e code=0x7ffc0000
[  279.971170][T10846] loop5: detected capacity change from 0 to 1024
[  280.091023][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'.
[  280.201653][T10846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.223228][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  280.223249][   T28] audit: type=1400 audit(1782927556.998:2372): avc:  denied  { ioctl } for  pid=10869 comm="syz.4.2399" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  280.325675][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.429035][   T28] audit: type=1400 audit(1782927557.208:2373): avc:  denied  { setopt } for  pid=10882 comm="syz.4.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  280.479990][T10893] loop3: detected capacity change from 0 to 512
[  280.501901][T10893] ext4: Unknown parameter 'smackfstransmute'
[  281.081494][T10919] loop3: detected capacity change from 0 to 512
[  281.095839][T10919] EXT4-fs: Ignoring removed oldalloc option
[  281.103817][T10918] netlink: 'syz.0.2425': attribute type 29 has an invalid length.
[  281.117184][T10918] netlink: 'syz.0.2425': attribute type 29 has an invalid length.
[  281.133161][T10919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  281.145179][T10918] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2425'.
[  281.156011][T10918] netlink: zone id is out of range
[  281.176520][T10918] netlink: zone id is out of range
[  281.183817][T10919] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2414: invalid indirect mapped block 83886080 (level 1)
[  281.204671][T10918] netlink: zone id is out of range
[  281.218634][   T28] audit: type=1326 audit(1782927558.008:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.221264][T10919] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  281.244642][T10918] netlink: zone id is out of range
[  281.259624][T10918] netlink: zone id is out of range
[  281.265337][T10918] netlink: zone id is out of range
[  281.270637][T10918] netlink: zone id is out of range
[  281.276721][T10918] netlink: zone id is out of range
[  281.282553][T10918] netlink: zone id is out of range
[  281.287895][T10918] netlink: zone id is out of range
[  281.296854][   T28] audit: type=1326 audit(1782927558.038:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.322606][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  281.322628][    C0] EXT4-fs (loop3): initial error at time 1782927558: ext4_free_branches:1023: inode 16
[  281.322654][    C0] EXT4-fs (loop3): last error at time 1782927558: ext4_free_branches:1023: inode 16
[  281.368065][T10919] EXT4-fs (loop3): Remounting filesystem read-only
[  281.386566][T10919] EXT4-fs (loop3): 1 orphan inode deleted
[  281.412136][   T28] audit: type=1326 audit(1782927558.038:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.421463][T10919] EXT4-fs (loop3): 1 truncate cleaned up
[  281.438197][   T28] audit: type=1326 audit(1782927558.038:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.468720][T10919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.471464][   T28] audit: type=1326 audit(1782927558.038:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.520070][T10935] loop0: detected capacity change from 0 to 512
[  281.528982][   T28] audit: type=1326 audit(1782927558.038:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.555705][   T28] audit: type=1326 audit(1782927558.038:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.567337][T10935] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  281.625696][   T28] audit: type=1326 audit(1782927558.038:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  281.653800][T10935] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2420: bad orphan inode 131083
[  281.667964][T10935] loop0: lost filesystem error report for type 5 error -117
[  281.670260][T10935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.811465][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.178227][T10948] xfrm1: entered allmulticast mode
[  282.392225][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.756729][T10956] loop0: detected capacity change from 0 to 512
[  282.779246][T10956] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  282.899862][T10969] loop3: detected capacity change from 0 to 4096
[  282.907146][T10969] EXT4-fs: Ignoring removed nobh option
[  282.912806][T10969] EXT4-fs: test_dummy_encryption option not supported
[  283.877524][T10978] ip6gretap0: left promiscuous mode
[  283.910706][T10978] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.944697][T10978] tipc: Resetting bearer <eth:team0>
[  283.965124][T10978] 8021q: adding VLAN 0 to HW filter on device team0
[  284.013726][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.101781][T10978] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  284.750667][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'.
[  284.770887][T10999] SELinux:  Context system_u:object_r: is not valid (left unmapped).
[  285.084874][T11004] loop3: detected capacity change from 0 to 512
[  285.114633][T11004] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2445: attempt to clear invalid blocks 2 len 1
[  285.140913][T11004] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  285.142371][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  285.145472][T11004] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, 
[  285.151757][    C1] EXT4-fs (loop3): initial error at time 1782927561: ext4_clear_blocks:876: inode 13
[  285.151803][    C1] EXT4-fs (loop3): last error at time 1782927561: ext4_clear_blocks:876: inode 13
[  285.186859][T11004] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  285.232070][T11004] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2445: invalid indirect mapped block 1819239214 (level 0)
[  285.283362][T11004] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  285.283778][T11004] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2445: invalid indirect mapped block 1819239214 (level 1)
[  285.312556][T11004] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  285.315083][T11004] EXT4-fs (loop3): 1 truncate cleaned up
[  285.331541][T11004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.389567][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.968475][   T28] kauditd_printk_skb: 190 callbacks suppressed
[  285.968502][   T28] audit: type=1400 audit(1782927562.758:2572): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="497" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  286.221416][   T28] audit: type=1400 audit(1782927562.798:2573): avc:  denied  { remove_name } for  pid=3296 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  286.310641][   T28] audit: type=1400 audit(1782927562.798:2574): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="497" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  286.335693][   T28] audit: type=1400 audit(1782927562.798:2575): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="497" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  286.361371][   T28] audit: type=1400 audit(1782927562.798:2576): avc:  denied  { write } for  pid=3296 comm="syz-executor" name="497" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  286.386701][   T28] audit: type=1400 audit(1782927562.798:2577): avc:  denied  { rmdir } for  pid=3296 comm="syz-executor" name="497" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  286.550496][T11024] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2453'.
[  287.086284][   T28] audit: type=1326 audit(1782927563.878:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.5.2461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  287.128877][T11044] netlink: 'syz.0.2460': attribute type 15 has an invalid length.
[  287.151367][T11044] netlink: 'syz.0.2460': attribute type 15 has an invalid length.
[  287.162218][   T28] audit: type=1326 audit(1782927563.878:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.5.2461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  287.189859][   T28] audit: type=1326 audit(1782927563.878:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.5.2461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  287.216592][   T28] audit: type=1326 audit(1782927563.878:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.5.2461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  287.828881][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2466'.
[  287.854974][T11062] loop5: detected capacity change from 0 to 256
[  288.732215][T11077] syzkaller0: entered promiscuous mode
[  288.747876][T11077] syzkaller0: entered allmulticast mode
[  289.183136][T11102] syzkaller0: entered promiscuous mode
[  289.197132][T11102] syzkaller0: entered allmulticast mode
[  289.205595][T11102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.215469][T11102] tipc: Resetting bearer <eth:syzkaller0>
[  289.223846][T11101] tipc: Resetting bearer <eth:syzkaller0>
[  289.231278][T11101] tipc: Disabling bearer <eth:syzkaller0>
[  289.317588][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'.
[  290.140644][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'.
[  291.087032][T11166] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2499'.
[  291.391888][T11166] loop5: detected capacity change from 0 to 512
[  291.903204][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2502'.
[  291.954093][T11166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.976954][T11166] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.166882][T11182] loop0: detected capacity change from 0 to 1756
[  292.173857][T11182] iso9660: Unknown parameter '�r��82�
P��h��Qq<���aK��ȣ/���������E'
[  292.191300][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.300886][T11188] xt_l2tp: invalid flags combination: 8
[  292.357496][T11193] tc_dump_action: action bad kind
[  292.653939][   T28] kauditd_printk_skb: 3127 callbacks suppressed
[  292.653959][   T28] audit: type=1400 audit(1782927569.448:5709): avc:  denied  { write } for  pid=11201 comm="syz.1.2512" name="file0" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  292.710173][   T28] audit: type=1400 audit(1782927569.448:5710): avc:  denied  { open } for  pid=11201 comm="syz.1.2512" path="/512/file0" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  292.913586][T11211] loop3: detected capacity change from 0 to 512
[  292.958036][   T28] audit: type=1326 audit(1782927569.748:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  292.999728][T11211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.023575][T11211] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.035660][   T28] audit: type=1326 audit(1782927569.748:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  293.062373][   T28] audit: type=1326 audit(1782927569.748:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  293.088835][   T28] audit: type=1326 audit(1782927569.748:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  293.088872][   T28] audit: type=1326 audit(1782927569.748:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  293.088925][   T28] audit: type=1326 audit(1782927569.808:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f592392e68e code=0x7ffc0000
[  293.089023][   T28] audit: type=1326 audit(1782927569.808:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f592392e68e code=0x7ffc0000
[  293.089051][   T28] audit: type=1326 audit(1782927569.808:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.5.2515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f592392e68e code=0x7ffc0000
[  293.395553][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.433038][T11221] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2517'.
[  293.556870][T11224] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication
[  293.752859][T11221] loop3: detected capacity change from 0 to 512
[  293.969119][T11221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.986135][T11221] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.068976][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.582765][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  295.779681][T11283] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2537'.
[  295.806164][T11270] netlink: 'syz.1.2529': attribute type 46 has an invalid length.
[  295.818877][T11288] tc_dump_action: action bad kind
[  295.838314][T11270] netlink: 'syz.1.2529': attribute type 28 has an invalid length.
[  295.858108][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'.
[  295.900338][T11292] loop5: detected capacity change from 0 to 1024
[  295.918458][T11292] EXT4-fs: Ignoring removed orlov option
[  295.932638][T11292] EXT4-fs: dax option not supported
[  297.154107][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'.
[  297.325572][T11338] random: crng reseeded on system resumption
[  297.804165][T11352] tc_dump_action: action bad kind
[  297.846011][T11356] loop5: detected capacity change from 0 to 128
[  297.865503][T11356] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  297.908463][T11356] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  297.919571][T11360] netlink: 'syz.1.2561': attribute type 1 has an invalid length.
[  297.946467][   T28] kauditd_printk_skb: 50 callbacks suppressed
[  297.946484][   T28] audit: type=1400 audit(1782927574.738:5769): avc:  denied  { connect } for  pid=11357 comm="syz.1.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  298.136216][T11361] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2563'.
[  298.150425][T11361] tc_dump_action: action bad kind
[  299.752250][T11408] loop3: detected capacity change from 0 to 256
[  300.141755][T11416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.206048][T11412] loop0: detected capacity change from 0 to 1024
[  300.259222][T11412] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  300.311433][T11412] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  300.341359][T11412] EXT4-fs (loop0): orphan cleanup on readonly fs
[  300.368746][T11412] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  300.377682][T11412] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  300.415231][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2580'.
[  300.434326][T11412] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  300.441771][T11412] EXT4-fs (loop0): 1 truncate cleaned up
[  300.448793][T11412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  300.517675][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.642415][T11426] loop0: detected capacity change from 0 to 4096
[  300.666452][T11426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.723094][T11405] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.2576'.
[  300.739633][T11405] net_ratelimit: 1 callbacks suppressed
[  300.739938][T11405] openvswitch: netlink: Flow actions attr not present in new flow.
[  300.756050][T11426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.836556][T11426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.051155][T11445] tipc: Failed to remove unknown binding: 66,0,0/3246505948:2961581548/2961581550
[  301.073986][T11440] tipc: Failed to remove unknown binding: 66,0,0/3246505948:385446846/385446847
[  301.092488][T11440] tipc: Failed to remove unknown binding: 66,0,0/3246505948:385446846/385446847
[  301.223397][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'.
[  301.444556][T11452] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  301.492830][T11452] bond4 (unregistering): Released all slaves
[  301.781041][T11460] netlink: 'syz.3.2601': attribute type 27 has an invalid length.
[  301.850110][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.690849][T11467] netlink: 'syz.3.2594': attribute type 1 has an invalid length.
[  302.763734][T11467] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.809437][T11470] veth0_to_bond: left allmulticast mode
[  302.880600][T11470] veth0_to_bond: left promiscuous mode
[  302.913465][T11470] bridge0: port 2(veth0_to_bond) entered disabled state
[  303.018456][T11470] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  303.057927][T11467] bond4: entered promiscuous mode
[  303.110100][T11467] bond4: entered allmulticast mode
[  303.181390][T11478] macvlan2: entered promiscuous mode
[  303.188446][T11478] macvlan2: entered allmulticast mode
[  303.218150][T11478] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  303.302048][T11488] tc_dump_action: action bad kind
[  303.657563][T11495] xt_l2tp: invalid flags combination: 8
[  303.673096][T11472] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  304.054190][T11512] loop0: detected capacity change from 0 to 256
[  304.764480][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2609'.
[  305.158134][T11524] loop5: detected capacity change from 0 to 1024
[  305.218402][T11524] EXT4-fs: Ignoring removed bh option
[  305.266617][T11524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.339913][   T28] audit: type=1400 audit(1782927582.128:5770): avc:  denied  { write } for  pid=11523 comm="syz.5.2612" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.363910][   T28] audit: type=1400 audit(1782927582.128:5771): avc:  denied  { create } for  pid=11523 comm="syz.5.2612" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  305.405921][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.524444][T11545] xt_l2tp: invalid flags combination: 8
[  305.535417][T11541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  305.621204][T11543] netlink: 'syz.4.2617': attribute type 46 has an invalid length.
[  305.637836][T11543] netlink: 'syz.4.2617': attribute type 28 has an invalid length.
[  305.647594][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2617'.
[  305.678620][T11553] loop3: detected capacity change from 0 to 512
[  306.531874][   T28] audit: type=1400 audit(1782927583.318:5772): avc:  denied  { setopt } for  pid=11573 comm="syz.0.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  306.577699][T11576] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2630'.
[  309.197253][T11611] tc_dump_action: action bad kind
[  309.434797][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2644'.
[  309.943147][   T28] audit: type=1400 audit(1782927586.738:5773): avc:  denied  { write } for  pid=11622 comm="syz.5.2646" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  310.045660][   T28] audit: type=1326 audit(1782927586.838:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.5.2646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x0
[  310.159164][T11625] loop3: detected capacity change from 0 to 512
[  310.201673][T11625] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  310.233156][   T28] audit: type=1400 audit(1782927587.028:5775): avc:  denied  { create } for  pid=11639 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  310.261680][T11625] EXT4-fs: error: could not find journal device path
[  310.273168][   T28] audit: type=1400 audit(1782927587.048:5776): avc:  denied  { connect } for  pid=11639 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  310.340839][T11635] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  310.369471][T11635] bond6 (unregistering): Released all slaves
[  310.370270][   T28] audit: type=1326 audit(1782927587.158:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  310.445565][   T28] audit: type=1326 audit(1782927587.168:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  310.483486][   T28] audit: type=1326 audit(1782927587.168:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  310.516915][   T28] audit: type=1326 audit(1782927587.168:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  310.548246][   T28] audit: type=1326 audit(1782927587.168:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  310.575121][   T28] audit: type=1326 audit(1782927587.168:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  310.603339][   T28] audit: type=1326 audit(1782927587.268:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  310.630831][   T28] audit: type=1326 audit(1782927587.268:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  310.661203][   T28] audit: type=1326 audit(1782927587.268:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  310.697558][   T28] audit: type=1326 audit(1782927587.278:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.4.2652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  310.746034][T11656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2658'.
[  311.215854][T11671] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  312.580676][T11686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  313.032129][T11683] loop5: detected capacity change from 0 to 512
[  313.196840][T11683] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  313.290186][T11683] EXT4-fs: error: could not find journal device path
[  313.619924][T11702] loop5: detected capacity change from 0 to 764
[  314.484419][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.498155][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.799982][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'.
[  315.777826][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.798964][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.823471][T11742] syzkaller0: entered promiscuous mode
[  315.840816][T11742] syzkaller0: entered allmulticast mode
[  315.906619][   T28] kauditd_printk_skb: 63 callbacks suppressed
[  315.906638][   T28] audit: type=1326 audit(1782927592.698:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  315.939862][   T28] audit: type=1326 audit(1782927592.698:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  315.966089][   T28] audit: type=1326 audit(1782927592.698:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  316.003660][   T28] audit: type=1326 audit(1782927592.698:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  316.042143][   T28] audit: type=1326 audit(1782927592.738:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  316.068781][   T28] audit: type=1326 audit(1782927592.738:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  316.128827][   T28] audit: type=1326 audit(1782927592.758:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  316.155226][   T28] audit: type=1326 audit(1782927592.758:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  316.174147][T11750] syzkaller0: entered promiscuous mode
[  316.214714][   T28] audit: type=1326 audit(1782927592.758:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  316.216609][T11750] syzkaller0: entered allmulticast mode
[  316.257853][   T28] audit: type=1326 audit(1782927592.758:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11729 comm="syz.4.2684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  316.286431][T11754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.327479][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'.
[  316.340176][T11749] tipc: Resetting bearer <eth:syzkaller0>
[  316.364814][T11749] tipc: Disabling bearer <eth:syzkaller0>
[  316.836054][T11790] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  317.257815][T11798] program syz.0.2706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.656809][T11814] veth1_to_bond: entered promiscuous mode
[  319.663493][T11814] veth1_to_bond: entered allmulticast mode
[  319.670027][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2722'.
[  319.679375][T11779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.689592][T11814] veth1_to_bond (unregistering): left promiscuous mode
[  319.712015][T11814] veth1_to_bond (unregistering): left allmulticast mode
[  319.750887][T11817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2722'.
[  319.769357][T11821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.941606][ T7208] Bluetooth: hci0: Frame reassembly failed (-84)
[  320.223157][T11836] loop0: detected capacity change from 0 to 512
[  320.267472][T11836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  320.283942][T11836] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  320.312491][T11836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  320.323272][T11836] System zones: 1-12
[  320.330036][T11836] EXT4-fs (loop0): orphan cleanup on readonly fs
[  320.346655][T11836] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2723: Block bitmap for bg 0 marked uninitialized
[  320.361832][T11836] loop0: lost filesystem error report for type 5 error -117
[  320.362680][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  320.378711][    C1] EXT4-fs (loop0): initial error at time 1782927597: ext4_read_block_bitmap_nowait:517
[  320.389992][    C1] EXT4-fs (loop0): last error at time 1782927597: ext4_read_block_bitmap_nowait:517
[  320.404614][T11836] EXT4-fs (loop0): Remounting filesystem read-only
[  320.416338][T11836] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  320.432217][T11836] EXT4-fs (loop0): 1 truncate cleaned up
[  320.456877][T11836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.536206][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.679375][T11863] loop0: detected capacity change from 0 to 764
[  321.761772][T11891] loop3: detected capacity change from 0 to 128
[  321.772660][T11891] vfat: Unknown parameter ''
[  321.943005][ T3796] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  322.123361][T11906] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2746'.
[  322.184370][T11906] unsupported nlmsg_type 40
[  322.316040][T11911] netlink: 'syz.4.2748': attribute type 1 has an invalid length.
[  322.340162][T11911] 8021q: adding VLAN 0 to HW filter on device bond11
[  322.380481][T11911] bond11: (slave gretap1): making interface the new active one
[  322.401425][T11911] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  322.447347][T11913] bond11: (slave veth19): Enslaving as an active interface with a down link
[  322.466497][T11913] veth0_virt_wifi: entered promiscuous mode
[  322.479840][T11913] bond11: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  323.113199][T11939] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2757'.
[  323.376765][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'.
[  323.670777][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  323.670869][   T28] audit: type=1400 audit(1782927600.458:5877): avc:  denied  { write } for  pid=11954 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  323.909300][T11965] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2769'.
[  324.186229][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'.
[  324.229986][T11980] bond3: entered promiscuous mode
[  324.243743][T11980] 8021q: adding VLAN 0 to HW filter on device bond3
[  324.289943][T11980] 8021q: adding VLAN 0 to HW filter on device bond3
[  324.306509][T11980] bond3: (slave sit3): The slave device specified does not support setting the MAC address
[  324.319694][T11980] bond3: (slave sit3): Error -95 calling set_mac_address
[  325.080170][T12000] loop0: detected capacity change from 0 to 2048
[  325.205543][T12000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.384203][T12014] loop5: detected capacity change from 0 to 512
[  325.418904][T12014] EXT4-fs (loop5): 1 orphan inode deleted
[  325.439092][T12014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.560158][T12009] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.2784: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  325.584159][T12009] EXT4-fs (loop5): Remounting filesystem read-only
[  325.591527][   T28] audit: type=1400 audit(1782927602.338:5878): avc:  denied  { write } for  pid=12008 comm="syz.5.2784" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  325.620945][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.666075][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.708756][T12026] syzkaller0: Caught tx_queue_len zero misconfig
[  325.819432][T12036] loop5: detected capacity change from 0 to 1024
[  325.846010][T12036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.849442][   T28] audit: type=1400 audit(1782927602.638:5879): avc:  denied  { listen } for  pid=12037 comm="syz.3.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  325.885027][   T28] audit: type=1400 audit(1782927602.678:5880): avc:  denied  { create } for  pid=12033 comm="syz.0.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  325.963704][   T28] audit: type=1400 audit(1782927602.748:5881): avc:  denied  { write } for  pid=12035 comm="syz.5.2795" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  326.472841][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.879056][   T28] audit: type=1326 audit(1782927603.658:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  326.956626][   T28] audit: type=1326 audit(1782927603.668:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  327.002392][   T28] audit: type=1326 audit(1782927859.683:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  327.074531][   T28] audit: type=1326 audit(1782927859.683:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  327.125847][   T28] audit: type=1326 audit(1782927859.683:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.1.2800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  327.162702][T12063] loop5: detected capacity change from 0 to 256
[  327.198695][T12063] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  327.247395][T12063] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  327.375193][T12073] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  327.449908][T12076] netlink: 'syz.1.2808': attribute type 1 has an invalid length.
[  327.521988][T12078] bond6: (slave geneve2): making interface the new active one
[  327.553408][T12078] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  327.575310][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2808'.
[  327.632963][T12076] 8021q: adding VLAN 0 to HW filter on device bond6
[  327.671065][ T7206] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  327.690792][ T7206] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  327.724905][ T7206] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  327.764601][ T7206] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  328.341361][T12106] loop5: detected capacity change from 0 to 512
[  328.408022][T12106] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  328.451616][T12106] EXT4-fs (loop5): 1 truncate cleaned up
[  328.511342][T12106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.583618][T12111] loop3: detected capacity change from 0 to 512
[  328.669042][T12111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  328.696425][T12111] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  328.715053][T12111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  328.724664][T12111] System zones: 1-12
[  328.730854][T12111] EXT4-fs (loop3): orphan cleanup on readonly fs
[  328.758531][T12111] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2822: Block bitmap for bg 0 marked uninitialized
[  328.772664][T12111] loop3: lost filesystem error report for type 5 error -117
[  328.773858][T12111] EXT4-fs (loop3): Remounting filesystem read-only
[  328.788847][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  328.788878][    C1] EXT4-fs (loop3): initial error at time 1782927861: ext4_read_block_bitmap_nowait:517
[  328.789047][    C1] EXT4-fs (loop3): last error at time 1782927861: ext4_read_block_bitmap_nowait:517
[  328.841510][T12111] EXT4-fs (loop3): 1 truncate cleaned up
[  328.844902][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.930284][T12111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  329.155186][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.519561][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2829'.
[  329.619345][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2830'.
[  329.707899][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  329.707915][   T28] audit: type=1400 audit(1782928118.495:5911): avc:  denied  { ioctl } for  pid=12145 comm="syz.3.2834" path="socket:[37476]" dev="sockfs" ino=37476 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  329.721782][T12147] tap0: tun_chr_ioctl cmd 1074025675
[  329.767259][   T28] audit: type=1400 audit(1782928118.555:5912): avc:  denied  { recv } for  pid=12143 comm="syz.1.2835" saddr=10.128.0.163 src=34964 daddr=10.128.0.192 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  329.771081][T12147] tap0: persist enabled
[  329.825671][T12151] tap0: tun_chr_ioctl cmd 1074025675
[  329.842206][T12151] tap0: persist disabled
[  330.109595][T12162] loop5: detected capacity change from 0 to 512
[  330.163019][T12162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  330.181624][T12162] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  330.216232][T12162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  330.241457][T12162] System zones: 1-12
[  330.256257][T12162] EXT4-fs (loop5): orphan cleanup on readonly fs
[  330.280000][T12162] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.2839: Block bitmap for bg 0 marked uninitialized
[  330.334139][T12162] loop5: lost filesystem error report for type 5 error -117
[  330.335512][T12162] EXT4-fs (loop5): Remounting filesystem read-only
[  330.344002][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  330.344123][    C1] EXT4-fs (loop5): initial error at time 1782928119: ext4_read_block_bitmap_nowait:517
[  330.344522][    C1] EXT4-fs (loop5): last error at time 1782928119: ext4_read_block_bitmap_nowait:517
[  330.402558][T12162] EXT4-fs (loop5): 1 truncate cleaned up
[  330.457527][T12162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  330.539598][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.858572][T12181] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2848'.
[  330.884753][T12181] netlink: 'syz.4.2848': attribute type 1 has an invalid length.
[  331.153009][ T7206] Bluetooth: hci0: Frame reassembly failed (-84)
[  331.160081][ T7206] Bluetooth: hci0: Frame reassembly failed (-84)
[  331.679299][T12187] loop3: detected capacity change from 0 to 512
[  331.712517][T12187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  331.847635][T12187] EXT4-fs (loop3): 1 truncate cleaned up
[  331.889751][T12187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.895108][T12199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2851'.
[  332.055658][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.190131][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'.
[  332.766581][T12230] netlink: 'syz.5.2860': attribute type 1 has an invalid length.
[  332.795486][T12230] netlink: 'syz.5.2860': attribute type 1 has an invalid length.
[  332.827888][T12230] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.2860'.
[  332.913483][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'.
[  333.142413][ T6471] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  333.275863][T12250] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2866'.
[  333.371988][T12249] loop0: detected capacity change from 0 to 512
[  333.565776][   T11] IPVS: starting estimator thread 0...
[  333.600234][T12249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  333.722673][T12265] IPVS: using max 2352 ests per chain, 117600 per kthread
[  333.788621][T12249] EXT4-fs (loop0): 1 truncate cleaned up
[  333.870204][T12249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.016796][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'.
[  334.029977][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2873'.
[  334.039593][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'.
[  334.049074][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2873'.
[  334.141708][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.161165][T12277] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.2878'.
[  334.192474][T12277] netlink: zone id is out of range
[  334.203031][T12277] netlink: get zone limit has 8 unknown bytes
[  334.295206][T12284] netlink: 'syz.5.2880': attribute type 1 has an invalid length.
[  334.329236][T12284] 8021q: adding VLAN 0 to HW filter on device bond4
[  334.345303][ T7219] Bluetooth: hci0: Frame reassembly failed (-84)
[  334.366426][T12284] bond4: (slave geneve2): making interface the new active one
[  334.385474][T12284] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  334.396005][ T7219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.419640][ T7219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.457039][ T7219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.477178][ T7219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.876975][T12304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2886'.
[  334.907448][   T28] audit: type=1400 audit(1782928379.703:5913): avc:  denied  { listen } for  pid=12307 comm="syz.5.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  335.020047][T12315] syzkaller0: left promiscuous mode
[  335.031452][T12315] syzkaller0: left allmulticast mode
[  335.599970][T12322] loop0: detected capacity change from 0 to 512
[  335.628406][T12322] journal_path: not usable as path
[  335.639349][T12322] EXT4-fs: error: could not find journal device path
[  335.967175][T12341] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2897'.
[  336.221209][T12344] loop5: detected capacity change from 0 to 128
[  336.424266][ T6471] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  336.601751][T12346] xt_hashlimit: size too large, truncated to 1048576
[  336.707557][T12350] loop0: detected capacity change from 0 to 512
[  336.785771][T12350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  336.815693][T12350] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 2: comm syz.0.2902: invalid block
[  336.866296][T12350] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  336.882319][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  336.899693][    C1] EXT4-fs (loop0): initial error at time 1782928381: __ext4_iget:5533: inode 11: block 2
[  336.909922][    C1] EXT4-fs (loop0): last error at time 1782928381: __ext4_iget:5533: inode 11: block 2
[  336.963215][T12350] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2902: couldn't read orphan inode 11 (err -117)
[  337.058441][T12350] loop0: lost filesystem error report for type 5 error -117
[  337.190085][T12350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.546981][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.759784][T12415] loop7: detected capacity change from 0 to 7
[  338.768480][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.777920][    C0] buffer_io_error: 18 callbacks suppressed
[  338.777961][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  338.793899][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.803148][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  338.811505][T12415]  loop7: unable to read partition table
[  338.817839][T12415] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  338.833159][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.842441][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  338.851537][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.860775][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  338.869469][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.878671][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  338.887743][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.897123][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  338.912519][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.921754][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  339.091834][T12424] loop3: detected capacity change from 0 to 1024
[  339.142168][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'.
[  339.177261][T12424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.231531][T12431] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2929'.
[  339.258004][   T28] audit: type=1400 audit(1782928384.033:5914): avc:  denied  { write } for  pid=12423 comm="syz.3.2925" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  339.283398][T12431] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2929'.
[  339.387990][   T28] audit: type=1400 audit(1782928384.183:5915): avc:  denied  { watch } for  pid=12437 comm="syz.5.2930" path="/355/file0" dev="tmpfs" ino=1908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  339.447172][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.476196][T12440] syzkaller0: entered promiscuous mode
[  339.509236][T12440] syzkaller0: entered allmulticast mode
[  339.544724][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2932'.
[  340.559952][T12455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12455 comm=syz.5.2945
[  340.623444][T12461] loop7: detected capacity change from 0 to 7
[  340.651204][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  340.660726][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  340.676439][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  340.686213][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  340.695004][T12461]  loop7: unable to read partition table
[  340.719035][T12461] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  340.734290][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  340.743529][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  340.773955][T12463] TC_ACT_REPEAT abuse ?
[  340.860310][T12474] loop3: detected capacity change from 0 to 128
[  341.089138][T12479] loop3: detected capacity change from 0 to 256
[  341.108029][T12479] msdos: Unknown parameter 'i'
[  341.746961][T12504] syzkaller0: entered promiscuous mode
[  341.766925][T12504] syzkaller0: entered allmulticast mode
[  341.819146][   T28] audit: type=1326 audit(1782928386.613:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  341.885308][   T28] audit: type=1326 audit(1782928386.623:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  341.929613][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'.
[  341.937115][   T28] audit: type=1326 audit(1782928386.623:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  341.964416][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2959'.
[  341.969468][   T28] audit: type=1326 audit(1782928386.623:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe6cfcdde59 code=0x7ffc0000
[  341.984984][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'.
[  342.013759][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2959'.
[  342.037447][   T28] audit: type=1326 audit(1782928386.673:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  342.063775][   T28] audit: type=1326 audit(1782928386.683:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  342.097089][   T28] audit: type=1326 audit(1782928386.703:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  342.127537][   T28] audit: type=1326 audit(1782928386.713:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  342.224088][T12516] loop0: detected capacity change from 0 to 1024
[  342.244644][   T28] audit: type=1326 audit(1782928386.713:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  342.278182][T12516] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  342.310809][T12516] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.2963: lblock 2 mapped to illegal pblock 2 (length 1)
[  342.334656][   T28] audit: type=1326 audit(1782928386.713:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.4.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6cfc9e68e code=0x7ffc0000
[  342.338836][T12516] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  342.372343][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  342.387994][    C0] EXT4-fs (loop0): initial error at time 1782928387: ext4_map_blocks:791: inode 3: block 2
[  342.398253][    C0] EXT4-fs (loop0): last error at time 1782928387: ext4_map_blocks:791: inode 3: block 2
[  342.429806][T12526] loop3: detected capacity change from 0 to 256
[  342.450061][T12516] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.2963: lblock 0 mapped to illegal pblock 48 (length 1)
[  342.494322][T12516] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  342.495120][T12516] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2963: Failed to acquire dquot type 0
[  342.501991][T12528] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2966'.
[  342.541681][T12526] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  342.549965][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'.
[  342.557956][T12516] loop0: lost filesystem error report for type 5 error -117
[  342.570298][T12516] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  342.573250][T12528] netlink: 'syz.4.2966': attribute type 3 has an invalid length.
[  342.582083][T12516] loop0: lost filesystem error report for type 5 error -117
[  342.601792][T12516] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.2963: mark_inode_dirty error
[  342.621359][T12516] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  342.632606][T12516] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  342.656956][T12516] EXT4-fs (loop0): 1 orphan inode deleted
[  342.664644][T12516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.677722][   T77] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  342.699058][   T77] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  342.705307][   T77] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0
[  342.746076][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.755569][ T3298] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  342.773093][T12540] loop3: detected capacity change from 0 to 512
[  342.775350][ T3298] loop0: lost filesystem error report for type 5 error -117
[  342.781096][ T3298] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  342.790623][T12540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  342.818702][ T3298] loop0: lost filesystem error report for type 5 error -117
[  342.820489][ T3298] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  342.823978][T12540] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2969: Invalid block bitmap block 0 in block_group 0
[  342.855995][ T3298] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  342.857657][T12540] loop3: lost filesystem error report for type 5 error -117
[  342.871649][T12540] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  342.880349][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  342.880510][    C0] EXT4-fs (loop3): initial error at time 1782928387: ext4_read_block_bitmap_nowait:483
[  342.880620][    C0] EXT4-fs (loop3): last error at time 1782928387: ext4_read_block_bitmap_nowait:483
[  342.924249][T12540] loop3: lost filesystem error report for type 5 error -117
[  342.928007][T12540] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2969: attempt to clear invalid blocks 983261 len 1
[  342.955156][T12540] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  342.960007][T12540] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.2969: Invalid inode table block 0 in block_group 0
[  343.000049][T12540] loop3: lost filesystem error report for type 5 error -117
[  343.003329][T12540] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  343.039465][T12544] loop0: detected capacity change from 0 to 512
[  343.046794][T12540] loop3: lost filesystem error report for type 5 error -117
[  343.050284][T12540] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  343.064342][T12544] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  343.085807][T12544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  343.099819][T12544] block device autoloading is deprecated and will be removed.
[  343.108564][T12544] EXT4-fs (loop0): couldn't read superblock of external journal
[  343.110993][T12540] loop3: lost filesystem error report for type 5 error -117
[  343.122622][T12540] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.2969: Invalid inode table block 0 in block_group 0
[  343.155496][T12540] loop3: lost filesystem error report for type 5 error -117
[  343.158486][T12540] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  343.196978][T12540] EXT4-fs error (device loop3): ext4_truncate:4691: inode #11: comm syz.3.2969: mark_inode_dirty error
[  343.209750][T12540] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  343.212630][T12540] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  343.247976][T12540] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.2969: Invalid inode table block 0 in block_group 0
[  343.265186][T12540] EXT4-fs (loop3): 1 truncate cleaned up
[  343.370038][T12540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.503411][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.535003][T12555] loop0: detected capacity change from 0 to 1024
[  343.565819][T12555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  343.605163][T12555] System zones: 0-1, 3-36
[  343.624677][T12555] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2974: bad orphan inode 134217728
[  343.654465][T12555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.322060][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.369657][T12570] loop0: detected capacity change from 0 to 256
[  344.390588][T12570] msdos: Unknown parameter 'i'
[  344.412105][T12568] __nla_validate_parse: 4 callbacks suppressed
[  344.412163][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'.
[  344.462678][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'.
[  344.623588][T12566] loop3: detected capacity change from 0 to 764
[  344.697144][T12566] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  344.943439][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2988'.
[  345.111437][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2993'.
[  345.384746][T12596] loop0: detected capacity change from 0 to 2048
[  345.410600][T12596] EXT4-fs: Ignoring removed mblk_io_submit option
[  345.420660][T12596] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  345.557554][T12596] loop0: detected capacity change from 0 to 1764
[  345.794463][T12617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12617 comm=syz.1.3000
[  345.815881][T12623] loop0: detected capacity change from 0 to 512
[  345.848033][T12623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  345.857884][T12623] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3002: bg 0: block 393: padding at end of block bitmap is not set
[  345.858143][T12623] EXT4-fs (loop0): Remounting filesystem read-only
[  345.858285][T12623] EXT4-fs (loop0): 2 truncates cleaned up
[  345.858918][T12623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.996970][T12630] ucma_write: process 1646 (syz.0.3002) changed security contexts after opening file descriptor, this is not allowed.
[  346.073435][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.086636][T12628] EXT4-fs (loop5): 1 orphan inode deleted
[  346.116508][ T7219] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:18: Failed to release dquot type 1
[  346.156001][T12628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.215928][T12628] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.301216][T12636] EXT4-fs: Ignoring removed i_version option
[  346.307133][T12636] EXT4-fs: Ignoring removed bh option
[  346.414809][T12636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.439285][T12636] ext4 filesystem being mounted at /611/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  346.545502][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.708226][T12645] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3006'.
[  346.708904][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.487620][T12657] set_capacity_and_notify: 2 callbacks suppressed
[  347.487641][T12657] loop5: detected capacity change from 0 to 4096
[  347.586392][   T28] kauditd_printk_skb: 29 callbacks suppressed
[  347.586412][   T28] audit: type=1326 audit(1782928392.383:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  347.626251][T12663] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3010'.
[  347.646289][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3010'.
[  347.724870][   T28] audit: type=1326 audit(1782928392.413:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  347.775175][T12668] loop7: detected capacity change from 0 to 7
[  347.819923][    C1] blk_print_req_error: 4 callbacks suppressed
[  347.819938][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.835003][   T28] audit: type=1326 audit(1782928392.413:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  347.835971][    C1] buffer_io_error: 4 callbacks suppressed
[  347.836002][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  347.862234][   T28] audit: type=1326 audit(1782928392.423:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  347.907894][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.917498][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  347.925449][T12668]  loop7: unable to read partition table
[  347.943603][T12668] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  347.984309][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  347.998744][T12678] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3017'.
[  348.012613][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  348.021968][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  348.030821][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  348.040116][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  348.049718][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  348.059003][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  348.067175][   T28] audit: type=1326 audit(1782928392.423:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  348.097273][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  348.106991][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  348.117797][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  348.127933][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  348.149565][T12680] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3017'.
[  348.161631][T12657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.180058][   T28] audit: type=1326 audit(1782928392.423:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1f7175e68e code=0x7ffc0000
[  348.224941][   T28] audit: type=1326 audit(1782928392.423:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1f7175e68e code=0x7ffc0000
[  348.274532][T12684] netlink: 'syz.1.3019': attribute type 21 has an invalid length.
[  348.293562][T12684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3019'.
[  348.305131][T12657] bond0: left promiscuous mode
[  348.310000][T12657] bond_slave_0: left promiscuous mode
[  348.318575][   T28] audit: type=1326 audit(1782928392.423:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1f7175e68e code=0x7ffc0000
[  348.348130][T12657] bond_slave_1: left promiscuous mode
[  348.369338][   T28] audit: type=1326 audit(1782928392.423:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  348.370408][T12684] netlink: 'syz.1.3019': attribute type 5 has an invalid length.
[  348.395323][   T28] audit: type=1326 audit(1782928392.423:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12662 comm="syz.1.3010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1f7179de59 code=0x7ffc0000
[  348.493586][ T6583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.521281][T12692] netlink: 'syz.0.3023': attribute type 1 has an invalid length.
[  348.637153][T12692] macvtap0: entered allmulticast mode
[  348.712558][T12692] bond4: (slave bridge2): making interface the new active one
[  348.753675][T12692] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  349.597918][T12706] loop0: detected capacity change from 0 to 512
[  349.656113][T12690] loop3: detected capacity change from 0 to 512
[  349.689193][T12706] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3026: bg 0: block 393: padding at end of block bitmap is not set
[  349.804201][T12706] fserror_report: 6 callbacks suppressed
[  349.804224][T12706] loop0: lost filesystem error report for type 5 error -117
[  349.842335][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  349.857055][    C0] EXT4-fs (loop0): initial error at time 1782928394: ext4_validate_block_bitmap:441
[  349.867008][    C0] EXT4-fs (loop0): last error at time 1782928394: ext4_validate_block_bitmap:441
[  349.973291][T12706] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  350.006032][T12706] loop0: lost filesystem error report for type 5 error -117
[  350.008251][T12706] EXT4-fs (loop0): 2 truncates cleaned up
[  350.136561][T12706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.266861][T12690] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  350.331728][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.332321][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  350.347240][    C0] EXT4-fs (loop3): initial error at time 1782928395: ext4_mb_generate_buddy:1317
[  350.356454][    C0] EXT4-fs (loop3): last error at time 1782928395: ext4_mb_generate_buddy:1317
[  350.367407][T12690] EXT4-fs (loop3): Remounting filesystem read-only
[  350.419054][T12690] EXT4-fs (loop3): 1 truncate cleaned up
[  350.537060][T12690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.764375][T12729] loop0: detected capacity change from 0 to 1024
[  350.847169][T12729] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  350.908067][T12729] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.3033: lblock 2 mapped to illegal pblock 2 (length 1)
[  350.975433][T12729] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  350.982356][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  350.998333][    C1] EXT4-fs (loop0): initial error at time 1782928395: ext4_map_blocks:791: inode 3: block 2
[  351.008440][    C1] EXT4-fs (loop0): last error at time 1782928395: ext4_map_blocks:791: inode 3: block 2
[  351.021262][T12729] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.3033: lblock 0 mapped to illegal pblock 48 (length 1)
[  351.060857][T12729] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  351.065275][T12729] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.3033: Failed to acquire dquot type 0
[  351.127078][T12729] loop0: lost filesystem error report for type 5 error -117
[  351.129593][T12729] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  351.169610][T12729] loop0: lost filesystem error report for type 5 error -117
[  351.174111][T12729] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.3033: mark_inode_dirty error
[  351.235872][T12729] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  351.238044][T12729] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  351.287629][T12729] EXT4-fs (loop0): 1 orphan inode deleted
[  351.302999][ T7200] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  351.306566][T12729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.342523][ T7200] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  351.342661][ T7200] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0
[  351.444034][T12729] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  351.497631][T12740] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  351.537307][T12740] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.3033: lblock 0 mapped to illegal pblock 48 (length 1)
[  351.598929][T12740] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  351.669532][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.099957][T12744] loop0: detected capacity change from 0 to 512
[  352.168733][T12744] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  352.203083][T12744] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  352.248593][T12744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  352.275194][T12744] System zones: 1-12
[  352.283532][T12744] EXT4-fs (loop0): orphan cleanup on readonly fs
[  352.301612][T12744] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.3036: Block bitmap for bg 0 marked uninitialized
[  352.361739][T12744] loop0: lost filesystem error report for type 5 error -117
[  352.368680][T12744] EXT4-fs (loop0): Remounting filesystem read-only
[  352.376690][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  352.376788][    C1] EXT4-fs (loop0): initial error at time 1782928397: ext4_read_block_bitmap_nowait:517
[  352.376868][    C1] EXT4-fs (loop0): last error at time 1782928397: ext4_read_block_bitmap_nowait:517
[  352.477701][T12744] EXT4-fs (loop0): 1 truncate cleaned up
[  352.512007][T12744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  352.661755][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.826522][T12757] loop0: detected capacity change from 0 to 512
[  352.868584][   T28] kauditd_printk_skb: 144 callbacks suppressed
[  352.868603][   T28] audit: type=1326 audit(1782928397.663:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  352.877290][   T28] audit: type=1326 audit(1782928397.663:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  352.879197][   T28] audit: type=1326 audit(1782928397.673:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  352.879236][   T28] audit: type=1326 audit(1782928397.673:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  352.879289][   T28] audit: type=1326 audit(1782928397.673:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  352.938364][   T28] audit: type=1326 audit(1782928397.713:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592396de59 code=0x7ffc0000
[  353.086905][   T28] audit: type=1326 audit(1782928397.873:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f592396dbc2 code=0x7ffc0000
[  353.087030][   T28] audit: type=1326 audit(1782928397.873:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f592396dc57 code=0x7ffc0000
[  353.087066][   T28] audit: type=1326 audit(1782928397.873:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f592392ab51 code=0x7ffc0000
[  353.087153][   T28] audit: type=1326 audit(1782928397.873:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.5.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f592396ec49 code=0x7ffc0000
[  353.092050][T12757] EXT4-fs (loop0): 1 orphan inode deleted
[  353.092710][T12757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.096555][T12757] ext4 filesystem being mounted at /620/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.132424][ T7200] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1
[  353.764676][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.929231][T12779] __nla_validate_parse: 2 callbacks suppressed
[  353.931630][T12777] loop0: detected capacity change from 0 to 8192
[  353.945239][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3044'.
[  353.956208][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'.
[  354.022034][T12785] loop5: detected capacity change from 0 to 512
[  354.101377][T12785] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  354.236027][T12779] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  354.400388][T12789] loop0: detected capacity change from 0 to 512
[  354.490333][T12789] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  354.534080][T12789] EXT4-fs (loop0): group descriptors corrupted!
[  354.584707][T12794] loop5: detected capacity change from 0 to 128
[  354.826950][T12794] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  354.976668][T12794] ext4 filesystem being mounted at /380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  355.231137][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.286704][T12812] syzkaller0: Caught tx_queue_len zero misconfig
[  355.314131][ T6583] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.619472][T12824] loop0: detected capacity change from 0 to 512
[  355.664674][T12830] netlink: 'syz.1.3060': attribute type 17 has an invalid length.
[  355.738802][T12824] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  355.874383][T12824] EXT4-fs (loop0): 1 truncate cleaned up
[  355.963057][T12832] loop3: detected capacity change from 0 to 512
[  355.969712][T12824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.043748][T12832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.188342][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.207490][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.250849][T12847] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.279911][T12851] netlink: 'syz.3.3067': attribute type 1 has an invalid length.
[  356.310342][T12851] 8021q: adding VLAN 0 to HW filter on device bond5
[  356.325480][T12851] macvlan2: entered promiscuous mode
[  356.331058][T12851] macvlan2: entered allmulticast mode
[  356.336717][T12851] bond5: entered allmulticast mode
[  356.341939][T12851] bond5: entered promiscuous mode
[  356.347572][T12851] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  356.355510][T12851] team0: Device macvlan2 is of different type
[  356.367889][T12851] bond5: left allmulticast mode
[  356.374951][T12851] bond5: left promiscuous mode
[  356.453187][T12856] loop0: detected capacity change from 0 to 512
[  356.532664][T12856] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.3069: corrupted inode contents
[  356.581447][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.581700][T12856] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.3069: mark_inode_dirty error
[  356.591247][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  356.591274][    C1] EXT4-fs (loop0): initial error at time 1782928401: ext4_do_update_inode:5742: inode 16
[  356.591312][    C1] EXT4-fs (loop0): last error at time 1782928401: ext4_do_update_inode:5742: inode 16
[  356.649921][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.650244][T12856] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.3069: corrupted inode contents
[  356.676140][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.676365][T12856] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.3069: mark_inode_dirty error
[  356.696964][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.697219][T12856] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.3069: corrupted inode contents
[  356.719102][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.719327][T12856] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  356.748383][T12856] loop0: lost filesystem error report for type 5 error -117
[  356.748615][T12856] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.3069: corrupted inode contents
[  356.768297][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.768477][T12856] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.3069: mark_inode_dirty error
[  356.789943][T12856] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  356.790125][T12856] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  356.808546][T12856] loop0: lost filesystem error report for type 5 error -117
[  356.809029][T12856] EXT4-fs (loop0): 1 truncate cleaned up
[  356.822784][   T77] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1
[  356.834475][   T77] loop0: lost filesystem error report for type 5 error -117
[  356.835252][T12856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.855713][T12856] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.222746][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.376027][T12860] loop5: detected capacity change from 0 to 128
[  357.473284][T12860] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  357.486083][T12860] ext4 filesystem being mounted at /384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  357.673624][T12878] loop3: detected capacity change from 0 to 512
[  357.712585][ T6583] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.726877][T12878] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  357.746663][T12878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.762838][T12878] ext4 filesystem being mounted at /607/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.783527][T12878] sctp: [Deprecated]: syz.3.3077 (pid 12878) Use of int in max_burst socket option deprecated.
[  357.783527][T12878] Use struct sctp_assoc_value instead
[  358.572463][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  358.572579][   T28] audit: type=1400 audit(1782928403.193:6151): avc:  denied  { unmount } for  pid=6583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  358.639521][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.436635][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3083'.
[  359.624033][   T28] audit: type=1400 audit(1782928404.403:6152): avc:  denied  { execute } for  pid=12908 comm="syz.0.3084" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  359.959016][   T28] audit: type=1400 audit(1782928404.753:6153): avc:  denied  { read } for  pid=12900 comm="syz.5.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  362.422671][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  363.807929][T12949] netlink: 'syz.0.3094': attribute type 17 has an invalid length.
[  365.203899][   T28] audit: type=1400 audit(1782928409.993:6154): avc:  denied  { mounton } for  pid=12961 comm="syz.0.3100" path=2F3633352FE91F7189591E9233614B dev="tmpfs" ino=3373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  365.627448][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3102'.
[  366.259541][   T28] audit: type=1400 audit(1782928411.043:6155): avc:  denied  { firmware_load } for  pid=12973 comm="syz.1.3105" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  367.094845][T12987] loop3: detected capacity change from 0 to 8192
[  367.135155][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'.
[  367.149945][T12991] netlink: 11870 bytes leftover after parsing attributes in process `syz.5.3110'.
[  367.725708][T13020] Cannot find add_set index 0 as target
[  367.792606][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'.
[  367.925854][   T28] audit: type=1400 audit(1782928412.723:6156): avc:  denied  { create } for  pid=13026 comm="syz.4.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  367.998205][   T28] audit: type=1400 audit(1782928412.773:6157): avc:  denied  { connect } for  pid=13026 comm="syz.4.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  368.056342][   T28] audit: type=1400 audit(1782928412.783:6158): avc:  denied  { write } for  pid=13026 comm="syz.4.3123" path="socket:[40967]" dev="sockfs" ino=40967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  368.095570][T13037] loop3: detected capacity change from 0 to 512
[  368.156045][T13037] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  368.263166][T13037] EXT4-fs: error: could not find journal device path
[  369.103286][T13050] syzkaller0: left promiscuous mode
[  369.111730][T13050] syzkaller0: left allmulticast mode
[  369.337158][T13064] loop5: detected capacity change from 0 to 512
[  369.358318][T13064] EXT4-fs (loop5): unable to read superblock
[  369.421060][T13064] loop5: detected capacity change from 0 to 128
[  369.503343][T13068] bridge_slave_0: left allmulticast mode
[  369.518542][T13068] bridge_slave_0: left promiscuous mode
[  369.529302][T13068] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.547726][T13068] bridge_slave_1: left allmulticast mode
[  369.557054][T13068] bridge_slave_1: left promiscuous mode
[  369.569804][T13068] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.584157][T13068] bond0: (slave bond_slave_0): Releasing backup interface
[  369.600292][T13073] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3137'.
[  369.614117][T13068] bond0: (slave bond_slave_1): Releasing backup interface
[  369.624289][T13075] netlink: 'syz.5.3138': attribute type 10 has an invalid length.
[  369.644300][T13068] team0: Port device team_slave_0 removed
[  369.651322][T13068] team0: Port device team_slave_1 removed
[  369.657651][T13068] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.667402][T13068] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.677057][T13068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  369.705605][T13073] 1��{X��: renamed from 
30��{X�� (while UP)
[  369.713576][T13073] 1��{X��: entered allmulticast mode
[  369.727469][T13073] A link change request failed with some changes committed already. Interface 
31��{X�� may have been left with an inconsistent configuration, please check.
[  369.752312][T13075] syz_tun: entered promiscuous mode
[  369.759757][T13075] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  370.168786][T13082] loop0: detected capacity change from 0 to 8192
[  370.194232][T13082] vfat: Unknown parameter 'GPL'
[  370.214172][   T28] audit: type=1326 audit(1782928415.003:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.276053][   T28] audit: type=1326 audit(1782928415.003:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.342378][   T28] audit: type=1326 audit(1782928415.013:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.389100][   T28] audit: type=1326 audit(1782928415.013:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.415931][   T28] audit: type=1326 audit(1782928415.013:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.442605][   T28] audit: type=1326 audit(1782928415.013:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.496115][   T28] audit: type=1326 audit(1782928415.013:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.565475][   T28] audit: type=1326 audit(1782928415.013:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.613353][T13101] loop3: detected capacity change from 0 to 256
[  370.622875][   T28] audit: type=1326 audit(1782928415.013:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  370.691864][   T28] audit: type=1326 audit(1782928415.023:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13081 comm="syz.0.3142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608ef0de59 code=0x7ffc0000
[  371.373081][T13162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.435751][T13162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3155'.
[  371.694685][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'.
[  371.752166][T13209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.787023][T13209] syzkaller0: entered promiscuous mode
[  371.799233][T13209] syzkaller0: entered allmulticast mode
[  371.821824][T13209] tipc: Resetting bearer <eth:syzkaller0>
[  371.841833][T13208] tipc: Resetting bearer <eth:syzkaller0>
[  371.851347][T13208] tipc: Disabling bearer <eth:syzkaller0>
[  372.763285][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3168'.
[  372.787502][T13223] loop0: detected capacity change from 0 to 764
[  372.892562][T13223] Symlink component flag not implemented
[  372.916132][T13223] Symlink component flag not implemented (15)
[  372.970111][T13242] loop5: detected capacity change from 0 to 8192
[  373.142848][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'.
[  373.181645][T13257] syzkaller0: entered promiscuous mode
[  373.187330][T13257] syzkaller0: entered allmulticast mode
[  373.273452][T13261] loop0: detected capacity change from 0 to 512
[  373.284027][T13261] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  373.678774][T13261] ==================================================================
[  373.686961][T13261] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  373.694222][T13261] 
[  373.696667][T13261] write to 0xffff88811b331f34 of 4 bytes by task 13268 on cpu 0:
[  373.704401][T13261]  xas_set_mark+0x12b/0x140
[  373.708938][T13261]  tag_pages_for_writeback+0xe3/0x2e0
[  373.714325][T13261]  writeback_iter+0x332/0x7c0
[  373.719043][T13261]  __mpage_writepages+0x8a/0x1370
[  373.724103][T13261]  fat_writepages+0x26/0x30
[  373.728629][T13261]  do_writepages+0x1b9/0x300
[  373.733236][T13261]  file_write_and_wait_range+0x178/0x2f0
[  373.739012][T13261]  mmb_fsync_noflush+0x48/0x140
[  373.744002][T13261]  fat_file_fsync+0x98/0x110
[  373.748666][T13261]  vfs_fsync_range+0xc5/0xe0
[  373.753297][T13261]  generic_file_write_iter+0x1a3/0x1f0
[  373.758799][T13261]  iter_file_splice_write+0x6a0/0xa60
[  373.764199][T13261]  direct_splice_actor+0x156/0x280
[  373.769353][T13261]  splice_direct_to_actor+0x2f9/0x680
[  373.774834][T13261]  do_splice_direct+0x119/0x1a0
[  373.779726][T13261]  do_sendfile+0x37d/0x640
[  373.784354][T13261]  __x64_sys_sendfile64+0x105/0x150
[  373.789606][T13261]  x64_sys_call+0x2dc4/0x3020
[  373.794623][T13261]  do_syscall_64+0x136/0x3c0
[  373.799256][T13261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.805186][T13261] 
[  373.807632][T13261] read to 0xffff88811b331f34 of 4 bytes by task 13261 on cpu 1:
[  373.815462][T13261]  xas_find_marked+0x602/0x650
[  373.820839][T13261]  filemap_get_folios_tag+0xf7/0x400
[  373.826461][T13261]  filemap_fdatawait_range+0x88/0x1e0
[  373.831911][T13261]  __writeback_single_inode+0xd6/0x660
[  373.837538][T13261]  writeback_single_inode+0x16d/0x400
[  373.842989][T13261]  sync_inode_metadata+0x6e/0xa0
[  373.847987][T13261]  mmb_fsync_noflush+0xfa/0x140
[  373.853148][T13261]  fat_file_fsync+0x98/0x110
[  373.857771][T13261]  vfs_fsync_range+0xc5/0xe0
[  373.862394][T13261]  generic_file_write_iter+0x1a3/0x1f0
[  373.867912][T13261]  iter_file_splice_write+0x6a0/0xa60
[  373.873346][T13261]  direct_splice_actor+0x156/0x280
[  373.878513][T13261]  splice_direct_to_actor+0x2f9/0x680
[  373.884036][T13261]  do_splice_direct+0x119/0x1a0
[  373.889020][T13261]  do_sendfile+0x37d/0x640
[  373.893502][T13261]  __x64_sys_sendfile64+0x105/0x150
[  373.898915][T13261]  x64_sys_call+0x2dc4/0x3020
[  373.903616][T13261]  do_syscall_64+0x136/0x3c0
[  373.908255][T13261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.914279][T13261] 
[  373.916643][T13261] value changed: 0x02000021 -> 0x04000021
[  373.922379][T13261] 
[  373.924720][T13261] Reported by Kernel Concurrency Sanitizer on:
[  373.930982][T13261] CPU: 1 UID: 0 PID: 13261 Comm: syz.0.3183 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  373.942555][T13261] Tainted: [W]=WARN
[  373.946457][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  373.956818][T13261] ==================================================================