last executing test programs:

3m21.090727591s ago: executing program 2 (id=3828):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8)

3m21.000419993s ago: executing program 2 (id=3830):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0', 0x1) (async)
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) (async)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2, 0xffff}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

3m20.748742199s ago: executing program 2 (id=3834):
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x46, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32], 0x20}}, 0x0)
syz_emit_ethernet(0x1c2, &(0x7f00000004c0)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x188, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x6c, 0x1a, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x1, 0xac, "8826f32eaa5474f15dc1dae52cdcdd35bdb4c5cab20b95d695e2f103a2c78a14dfe0e7c676ae5ce75bafdd1b0fb48005b17115fbb85ef9b7b92bafafac2746b0703c6997f84889e83893fc3dde91112eadef1a05e2a0a6491cbf93a3f68ef7af09d7d35e9a7d2a50ffd5b1e0f9f5ff5e96de700514090500f194807afbf8de33777ac7bbc045bf2e94180ffce74bac0c8aaa3b1b9ed46e2c41859022f25e59b742189acf5241ce6cca7bf8ce"}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x3}]}, @fragment={0x2b, 0x0, 0x4, 0x1, 0x0, 0x1, 0x65}, @routing={0xff, 0xc, 0x2, 0x10, 0x0, [@local, @rand_addr=' \x01\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @remote}, @private0]}], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2f, 0x0, @private1, @private1, [@routing={0x84}]}}}}}}}, 0x0)

3m20.68711235s ago: executing program 2 (id=3837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x733, &(0x7f00000002c0)="$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")
r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sco\x00')
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0)
r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

3m20.371199388s ago: executing program 2 (id=3839):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000633a77fbac141416e000000194029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

3m20.052525975s ago: executing program 2 (id=3842):
r0 = eventfd(0x2)
lseek(r0, 0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45300, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140), 0xf}, 0x4582, 0x0, 0x800000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4801, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94)
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c)
write$binfmt_script(r6, &(0x7f00000000c0), 0x28)
recvmmsg(r6, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB=';\x00\b\x00\x00\x00\x00\x00'], 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB="e197beb148c2acef676956f583e532aa5ebabf0fd74b4fdccecafd9f03ac8c34954b8a48fa8c19845081edca9cad80a97c98c471e9bb20b77b", @ANYBLOB="08000a0083d6d2dab5847fef3ed3ff2c5de3d1ce1461f8d3baa2bdb06f2e30a4436f4de723e1dc0feba434233cdbef77a2169eb9e5c4bc075b6ab8c1c9d800adf00ac5e16890ec39dc258040cf3d1b794eca781583800097039ae2bd6d2458c340cdab47eca4d237106ad877c10bb03abc9203c114d8dd1b945d3e88a39fecbfca24d96fa4965ae630f3ca19ddbfa4314de16aae06d8fa4d761684bcd8ecb2b1455ab382ab4962d24a7a21525006579b", @ANYRES32=r8, @ANYBLOB="0e9fabb808e89deb7b740c719be8bf5a7743f6bcee0ca63e12123b1d379550cbcd4c3e09e1f131fe55ec0452d7cbe8a35c2f6805f1bac707eb392543c221be76a3883b4eb56aba951bc19a77d38fa870c7166e7ca54d2b1582392bcf07bd1a3b9e4a5bebd67724514a49d4df3a19ce41aca8677627c899726bee81e278c0d9e416770cf6a62c60f0881404dee9cf50901429b9dfbc46c4249525503b9344c37cf6808b48977a"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

3m20.052054706s ago: executing program 32 (id=3842):
r0 = eventfd(0x2)
lseek(r0, 0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45300, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140), 0xf}, 0x4582, 0x0, 0x800000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4801, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94)
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c)
write$binfmt_script(r6, &(0x7f00000000c0), 0x28)
recvmmsg(r6, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB=';\x00\b\x00\x00\x00\x00\x00'], 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB="e197beb148c2acef676956f583e532aa5ebabf0fd74b4fdccecafd9f03ac8c34954b8a48fa8c19845081edca9cad80a97c98c471e9bb20b77b", @ANYBLOB="08000a0083d6d2dab5847fef3ed3ff2c5de3d1ce1461f8d3baa2bdb06f2e30a4436f4de723e1dc0feba434233cdbef77a2169eb9e5c4bc075b6ab8c1c9d800adf00ac5e16890ec39dc258040cf3d1b794eca781583800097039ae2bd6d2458c340cdab47eca4d237106ad877c10bb03abc9203c114d8dd1b945d3e88a39fecbfca24d96fa4965ae630f3ca19ddbfa4314de16aae06d8fa4d761684bcd8ecb2b1455ab382ab4962d24a7a21525006579b", @ANYRES32=r8, @ANYBLOB="0e9fabb808e89deb7b740c719be8bf5a7743f6bcee0ca63e12123b1d379550cbcd4c3e09e1f131fe55ec0452d7cbe8a35c2f6805f1bac707eb392543c221be76a3883b4eb56aba951bc19a77d38fa870c7166e7ca54d2b1582392bcf07bd1a3b9e4a5bebd67724514a49d4df3a19ce41aca8677627c899726bee81e278c0d9e416770cf6a62c60f0881404dee9cf50901429b9dfbc46c4249525503b9344c37cf6808b48977a"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

33.658442752s ago: executing program 1 (id=5293):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

33.549397944s ago: executing program 1 (id=5295):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000001f40)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20)
sendmmsg$inet(r1, &(0x7f0000002380)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000440)="d2", 0x1}], 0x1}}], 0x2, 0x4040040)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

33.470324586s ago: executing program 1 (id=5297):
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x3, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000009c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2238e, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket(0x40000000015, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x2000021, 0x800000000004, @thr={&(0x7f0000000240)="5e004e9f7bb11d7b2adc4e98d95826a3f56b648a4ffbb06c8c4d1405a4d45879cc5ef12a92b5d4c720b6f3b5d03d38b0403cf113a1f3dad1a72f4337a07bc1b44ff103007cdb3dabf0cb2fa9c42899cc3d265d9dc76a294b329fbc8517d1593cc36b6c9049ec9679a1f6f7c632e161ac635d08924139ac4b0ac47293ea8bc506356bd6889f052d4b0d847e3641d5d5d3e16419d7ed91bdb0", &(0x7f0000000300)="de7aafc0ff561a72eb3d9b47cddfefddf609ed91d6b96ad97d228e06416f896670caae5eaaf7a59ed0263a212ec218b424cd34cde657dae6c74e4c5a1fe96a0facb6bcec6159310b5e6df31aaced2cea0f369357cc1a37ea03c36351976d4b206ecaaee3a50f1a407bbd7f872f98de1ab351e3e3aca569edeb991b"}}, &(0x7f0000bbdffc))
recvmmsg(r3, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0)
r4 = io_uring_setup(0x9a7, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150})
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)

32.609458436s ago: executing program 1 (id=5306):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYRES16, @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$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")
creat(&(0x7f0000000300)='./file0\x00', 0x180)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x2) (async)
cachestat(r1, &(0x7f0000000140)={0x5, 0xffb}, &(0x7f00000000c0), 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000801) (async)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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")
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
r7 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}], 0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

32.433347981s ago: executing program 1 (id=5309):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
clock_gettime(0x8, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0)="b366278d2493f79b819a4497a413afeebbfff3970a9f67cf8b13d356931a5d4f6af25377a80ac6da7cc88556a70c05bc74be36f8625b408a0d9dcb884ccb018f2ed2fa233e2bd69e9374672de56bcabc7f07303dd1e84bf7b02c3e0c73534a7d22b4e5ce810c6d6a65c97667ba9b85829f9e5350b9d4b8b25e8f51ae", 0x7c, r3}, 0x68)
io_uring_enter(r3, 0x124, 0x14, 0x17, 0x0, 0x0)

30.982395225s ago: executing program 1 (id=5323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x101, 0xfffffff9, 0x0, 0x4, 0x2}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000010000000000000675b000085000000270000b95d00000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5}, 0x94)
socket(0x6, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x9d7, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x7f}, 0x800, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000520001ff00000000000000000a"], 0x18}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000003480)={&(0x7f0000003440)=[{&(0x7f0000000280)="a2ebe5552aaad4af6ddf2776ce90baf54a08cc47870cc8f2ade8a9ae72712c31a5dd1187e288d7d3173e3eb29d83b2503d6486f0face6bcde8bcfb9f72cc80a025a0571335ea23f60b0dec218efe", 0x4e}, {0x0}, {&(0x7f0000002440)}], 0x3, 0x9, 0x0, 0x40, 0x5, 0x10000, 0x2, 0x4})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8004, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x4)

30.864542908s ago: executing program 33 (id=5323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x101, 0xfffffff9, 0x0, 0x4, 0x2}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000010000000000000675b000085000000270000b95d00000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5}, 0x94)
socket(0x6, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x9d7, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x7f}, 0x800, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000520001ff00000000000000000a"], 0x18}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000003480)={&(0x7f0000003440)=[{&(0x7f0000000280)="a2ebe5552aaad4af6ddf2776ce90baf54a08cc47870cc8f2ade8a9ae72712c31a5dd1187e288d7d3173e3eb29d83b2503d6486f0face6bcde8bcfb9f72cc80a025a0571335ea23f60b0dec218efe", 0x4e}, {0x0}, {&(0x7f0000002440)}], 0x3, 0x9, 0x0, 0x40, 0x5, 0x10000, 0x2, 0x4})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8004, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x4)

4.672371269s ago: executing program 6 (id=5650):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@bh}, {@noload}, {@errors_remount}, {@bh}]}, 0xff, 0x454, &(0x7f0000000d80)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81})
fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ftruncate(0xffffffffffffffff, 0x20000e)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='errors=remount-ro')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
munlockall()

4.280893219s ago: executing program 5 (id=5657):
openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)

4.280772569s ago: executing program 5 (id=5658):
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="29c726bd7000fedbc82519000000080003"], 0x1c}}, 0x0)

4.243091149s ago: executing program 4 (id=5659):
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0xf0a0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
poll(0x0, 0x0, 0xb)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r5, 0x400, 0x1)
getpeername$unix(r1, &(0x7f0000000140), 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{0x0}], 0x1, 0x33, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
unshare(0x2a020480)
setns(0xffffffffffffffff, 0x0)

4.22655908s ago: executing program 5 (id=5660):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x9, 0xbe, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x81, 0x4}}}}}]}}]}}, 0x0)
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4000c00)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)

3.086167047s ago: executing program 6 (id=5664):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x0, 0x0, 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x10059, '\x00', 0x0, @fallback=0x9}, 0x94)

3.002595119s ago: executing program 6 (id=5665):
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x0, 0x84)
r1 = dup(r0)
r2 = socket(0x2b, 0x80801, 0x1)
set_mempolicy(0x3, &(0x7f0000000100)=0xd, 0x5)
shutdown(r2, 0x7ffffffe)
r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = semget$private(0x0, 0x6, 0x0)
semtimedop(r5, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r5, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semop(r5, &(0x7f00000001c0)=[{0x0, 0xe1b, 0x800}, {0x4, 0x0, 0x1800}], 0x2)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000894)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r8=>0x0})
sendmsg$can_bcm(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="03000000089700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0100002001000000030000602501000037cf9c960229157961aef09892f000c2d495b298e0a8f382ad8ec4efa01e39c065274286c127f56674a913ea5a051de3fcdf45e497d6057190375e7044712afb"], 0x80}, 0x1, 0x0, 0x0, 0x4008085}, 0x48004)
write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x1)
listen(r2, 0x23)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x9, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

2.616704508s ago: executing program 3 (id=5669):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x1fb)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
socket$inet6(0xa, 0x3, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174000000295a00000000000000000000000067045b8c000000000000000004000000000000000000000000000000000000000000000700000000000000000000000000000000000000287ee7aa74cd0bdecc8b3ff3dbc70000000000000000000000000000000000000000000000000000000000d18d569a5555f00175bad247dc7945a6e09e131bec241add7e9fd1bb39363ecfe0b8047b05dc3322ec110b944c731a48ccd7f357eb95e3df57479353fe412139326192"], 0x68)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x240481)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5423, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0))
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32], 0x50)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)

2.500205311s ago: executing program 5 (id=5670):
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x3, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000009c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2238e, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket(0x40000000015, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x2000021, 0x800000000004, @thr={&(0x7f0000000240)="5e004e9f7bb11d7b2adc4e98d95826a3f56b648a4ffbb06c8c4d1405a4d45879cc5ef12a92b5d4c720b6f3b5d03d38b0403cf113a1f3dad1a72f4337a07bc1b44ff103007cdb3dabf0cb2fa9c42899cc3d265d9dc76a294b329fbc8517d1593cc36b6c9049ec9679a1f6f7c632e161ac635d08924139ac4b0ac47293ea8bc506356bd6889f052d4b0d847e3641d5d5d3e16419d7ed91bdb0", &(0x7f0000000300)="de7aafc0ff561a72eb3d9b47cddfefddf609ed91d6b96ad97d228e06416f896670caae5eaaf7a59ed0263a212ec218b424cd34cde657dae6c74e4c5a1fe96a0facb6bcec6159310b5e6df31aaced2cea0f369357cc1a37ea03c36351976d4b206ecaaee3a50f1a407bbd7f872f98de1ab351e3e3aca569edeb991b"}}, &(0x7f0000bbdffc))
recvmmsg(r3, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0)
r4 = io_uring_setup(0x9a7, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150})
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)

2.217576077s ago: executing program 4 (id=5672):
r0 = socket$inet(0xa, 0x1, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
r2 = signalfd4(r1, &(0x7f0000000040)={[0xff]}, 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x800, r2, 0x0}])
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r4 = gettid()
tkill(r4, 0x12)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x170, 0x30, 0x400, 0x0, 0xfffffffd, {}, [{0x15c, 0x1, [@m_ctinfo={0x43, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000001}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1c0}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xe0, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xb5, 0x6, "80dacd4a00de0071c49b429db8b56b97b997b8c41ac00d3e25024076f6ad5b5db2c85b2bb49a292ff4185d9bf9817a16b5aefd7481e26f307115ad84e8d54eff9cda05b4d058f05ce7101462757c49704c64dc9455c5368ea06520571001f67f01b1471aec0b5029a19dfd2ccb1638c34afbfcd7adca26d86275ac1035fe6e9fd0384c81887301f84859acd256e6671b5b14a064cb0829744c93a088a2017197e3c8dcb2b60f7a5dffb484c144527c6ff9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @tid=r4}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0x107}], 0x1}}], 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0xc, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)

2.10788655s ago: executing program 3 (id=5673):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xc, "d92984ad1ca44c226af5160e961711a000f2170e65e3f50327e4221c0000000000195f0000000000005700", 0x100000100000003c}, 0x60)
listen(r0, 0xf5f)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x6, 0x100, 0x4, 0x540000, r5})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x2, 0x100, 0x0, 0x86020086})
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="29c726bd7000fedbc82519000000080003"], 0x1c}}, 0x0)

2.036745462s ago: executing program 3 (id=5674):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@bh}, {@noload}, {@errors_remount}, {@bh}]}, 0xff, 0x454, &(0x7f0000000d80)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r6, 0x20000e)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='errors=remount-ro')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea440000000000000000000000000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000010000000200000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0)
munlockall()

1.901065185s ago: executing program 6 (id=5675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309114d8871ef2885634a82"], 0xee8a)

1.859598286s ago: executing program 0 (id=5677):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50)
close(0x3)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)

1.741513538s ago: executing program 0 (id=5678):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* mr'], 0xa)

1.741271929s ago: executing program 0 (id=5679):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x27, 0x2, @tid=r0}, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

1.648627651s ago: executing program 0 (id=5680):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x9, 0xbe, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x81, 0x4}}}}}]}}]}}, 0x0)
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4000c00)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)

1.570611393s ago: executing program 5 (id=5681):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x5, 0xdc, 0x0, 0x1}, {0x8, 0x52, 0x1, 0xf828}, {0xe, 0xa, 0x4, 0x7}, {0x0, 0xe8, 0xf, 0x200}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r2, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x7)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.484504895s ago: executing program 6 (id=5682):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x5, 0xdc, 0x0, 0x1}, {0x8, 0x52, 0x1, 0xf828}, {0xe, 0xa, 0x4, 0x7}, {0x0, 0xe8, 0xf, 0x200}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r3, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x7)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0}, 0x10c8e8, 0x5, 0x0, 0x3, 0x7, 0x7ffd, 0x1, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100))
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r6 = open(0x0, 0x4827e, 0x20)
fallocate(r6, 0x42, 0x0, 0x8800000)
ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x39)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x84}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010224bd7000f8dbdf4203000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4040890)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)

1.326390478s ago: executing program 3 (id=5683):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x1fb)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
socket$inet6(0xa, 0x3, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174000000295a00000000000000000000000067045b8c000000000000000004000000000000000000000000000000000000000000000700000000000000000000000000000000000000287ee7aa74cd0bdecc8b3ff3dbc70000000000000000000000000000000000000000000000000000000000d18d569a5555f00175bad247dc7945a6e09e131bec241add7e9fd1bb39363ecfe0b8047b05dc3322ec110b944c731a48ccd7f357eb95e3df57479353fe412139326192"], 0x68)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x240481)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5423, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0))
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32], 0x50)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)

1.285809639s ago: executing program 4 (id=5684):
socket$netlink(0x10, 0x3, 0x0)
syz_open_pts(0xffffffffffffffff, 0x141601)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x2b9, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000b40)={0x1, 0x0, 0x15, 0x1d, 0x156, 0x0})
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1)
write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_aout(r2, 0x0, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x24}, 0x1015ad, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r1, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x8000000000000000, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4ae, &(0x7f0000000580)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
msync(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0)

1.154398112s ago: executing program 4 (id=5685):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1fe)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x8914, 0xfffffffb, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@private1, 0x4, 0x1, 0x0, 0x0, 0x5, 0xffdb}, &(0x7f0000000340)=0x20)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, 0x0, 0x1)
sendmsg$nl_route_sched(r2, 0x0, 0x24040084)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
syz_io_uring_setup(0x1060, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x9, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)

1.024489406s ago: executing program 0 (id=5686):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r2)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7100fcdbdf25020000000b0001005c5b3a57"], 0x20}}, 0x4c880)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00')
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRESOCT, @ANYRES32=r0, @ANYRES16=r7, @ANYRESOCT=r8, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRES8], 0x50)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r9, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40)

757.857452ms ago: executing program 3 (id=5687):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$eJzs3NFL61YcB/DToVDcy0A2tb5kCsPJVpOIleJTqWmNS9vRVpiPAx2M+bQ9zX9+I2314tVr5aLWK58PtOc0+TY9hZAfOeU0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACh0j6O46QSirx/9lv0ae3j4aD3yP6b431/p3nkc0OolI9QrYb16ab11Q+7vy2ftsLa9NVaqJZNNVx//d03R6tLX928/5EBvYp//r3+6/erq8u/Fz2QBelm/Xw0yHutbhblo0HUbDTivZPOKOrkRTY6H42zXtQeZq3xYBjttH+MkmZzP8rq54Ozfve4VWQ3Gw9/TuO4EZ3Wf81aw9Ggv3daH7VP8qLI+91JptxdZg7LE/GXfByNs1Yviv748+pyf94gy1DylFA6L5TGaZokaZo0DpoHh3G8dG9D/JFwL7H4k5bFeuYrOHy+/2b1HwAAAHi/KpM59vL+f3kyD18JnbzI4kUPCwAAAHhGk1/+18pmueyth4r7fwAAAHhv5q+xm5uo/BQ2pomNi2l7MUvM1vmtdPIiq7cHxVESfrhd7ffw0ZYn0w+7oTZN1Vam7crdI1bLVFI/SsJu2JwmNne2y2Z754Fk+uTkfpkEgPdua049fkr93w2zNa1RrSymYan2QGWNVVYAeCtu/8HmBTuL/o4AwF2qNAAAAAAAAAAAAAAAvH2vsf5PR0fnS+ss+soEvLT/AwAA//9ytdHj") (fail_nth: 8)

116.711297ms ago: executing program 3 (id=5688):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ccc8, 0x1227, 0x0, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000380)={[], [{@euid_lt}, {@dont_measure}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, '%^,'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/)'}}]}, 0x1, 0x51e, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c2440, 0x65)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'})
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@i_version}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e)
socket$unix(0x1, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket(0x27, 0x800, 0x7e1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9})

116.409867ms ago: executing program 4 (id=5689):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14005c4607838998edb7f42627440000000000001c00"/35], 0x14}}, 0x0)

37.113999ms ago: executing program 5 (id=5690):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x27, 0x2, @tid=r0}, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

1.5698ms ago: executing program 4 (id=5691):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x27, 0x2, @tid=r0}, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

1.19546ms ago: executing program 0 (id=5692):
r0 = syz_open_dev$loop(0x0, 0xffffffff, 0x300)
ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000340)=0x8)

0s ago: executing program 6 (id=5693):
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = syz_pidfd_open(0x0, 0x0)
setns(r2, 0x24020000)
getcwd(&(0x7f0000000000)=""/21, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
kexec_load(0x10000000, 0x5, &(0x7f00000002c0)=[{0x0, 0x0, 0x10400000000, 0x10404010000}], 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
fspick(r5, &(0x7f0000000000)='./file0\x00', 0x1)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24260 comm=syz.5.5130
[  626.964043][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.964837][T24255] CPU: 0 UID: 0 PID: 24255 Comm: syz.3.5128 Not tainted syzkaller #0 PREEMPT(lazy) 
[  626.964934][T24255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  626.965054][T24255] Call Trace:
[  626.965077][T24255]  <TASK>
[  626.965108][T24255]  __dump_stack+0x1d/0x30
[  626.965270][T24255]  dump_stack_lvl+0x95/0xd0
[  626.965341][T24255]  dump_stack+0x15/0x1b
[  626.965540][T24255]  should_fail_ex+0x25e/0x270
[  626.965669][T24255]  should_fail+0xb/0x20
[  626.965796][T24255]  should_fail_usercopy+0x1a/0x20
[  626.965917][T24255]  _copy_to_user+0x20/0xa0
[  626.965998][T24255]  simple_read_from_buffer+0xb5/0x130
[  626.966094][T24255]  proc_fail_nth_read+0x10e/0x150
[  626.966161][T24255]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  626.966186][T24255]  vfs_read+0x18e/0x7c0
[  626.966268][T24255]  ? __rcu_read_unlock+0x4e/0x70
[  626.966363][T24255]  ? __fget_files+0x184/0x1c0
[  626.966473][T24255]  ? mutex_lock+0x57/0x90
[  626.966597][T24255]  ksys_read+0xdc/0x1a0
[  626.966677][T24255]  __x64_sys_read+0x40/0x50
[  626.966817][T24255]  x64_sys_call+0x2886/0x3020
[  626.966906][T24255]  do_syscall_64+0x136/0x3c0
[  626.967016][T24255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.967119][T24255] RIP: 0033:0x7fc66030e6ce
[  626.967217][T24255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  626.967289][T24255] RSP: 002b:00007fc65eda6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  626.967383][T24255] RAX: ffffffffffffffda RBX: 00007fc65eda76c0 RCX: 00007fc66030e6ce
[  626.967437][T24255] RDX: 000000000000000f RSI: 00007fc65eda70a0 RDI: 0000000000000004
[  626.967483][T24255] RBP: 00007fc65eda7090 R08: 0000000000000000 R09: 0000000000000000
[  626.967535][T24255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.967573][T24255] R13: 00007fc6605d6038 R14: 00007fc6605d5fa0 R15: 00007ffdef301158
[  626.967736][T24255]  </TASK>
[  627.168580][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.184682][T24268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5133'.
[  627.196387][T24268] program syz.5.5133 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  627.230118][T24274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5136'.
[  627.250044][T24270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.262978][T24270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.276407][T24274] program syz.1.5136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  627.290557][T24276] lo speed is unknown, defaulting to 1000
[  627.317454][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5135'.
[  627.362038][T24287] loop5: detected capacity change from 0 to 136
[  627.368940][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  627.368959][   T28] audit: type=1400 audit(1784965458.400:1449): avc:  denied  { map } for  pid=24284 comm="syz.1.5139" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  627.410854][T24287] iso9660: Bad value for 'gid'
[  627.436477][T24287] iso9660: Bad value for 'gid'
[  627.463734][T24289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5141'.
[  627.604253][T24297] loop5: detected capacity change from 0 to 256
[  627.613050][T24297] FAULT_INJECTION: forcing a failure.
[  627.613050][T24297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.636108][   T28] audit: type=1326 audit(1784965458.670:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.1.5145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f4567de99 code=0x0
[  627.661858][T24297] CPU: 1 UID: 0 PID: 24297 Comm: syz.5.5144 Not tainted syzkaller #0 PREEMPT(lazy) 
[  627.661910][T24297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  627.661927][T24297] Call Trace:
[  627.661936][T24297]  <TASK>
[  627.661947][T24297]  __dump_stack+0x1d/0x30
[  627.661977][T24297]  dump_stack_lvl+0x95/0xd0
[  627.662000][T24297]  dump_stack+0x15/0x1b
[  627.662019][T24297]  should_fail_ex+0x25e/0x270
[  627.662129][T24297]  should_fail+0xb/0x20
[  627.662164][T24297]  should_fail_usercopy+0x1a/0x20
[  627.662245][T24297]  strncpy_from_user+0x27/0x250
[  627.662274][T24297]  do_getname+0x59/0x1c0
[  627.662363][T24297]  getname_flags+0x1d/0x30
[  627.662391][T24297]  vfs_fstatat+0x45/0x170
[  627.662425][T24297]  __se_sys_newfstatat+0x55/0x3e0
[  627.662479][T24297]  ? __fget_files+0x184/0x1c0
[  627.662508][T24297]  ? mutex_lock+0x57/0x90
[  627.662618][T24297]  ? mutex_unlock+0x4e/0x90
[  627.662673][T24297]  ? fput+0x8f/0xc0
[  627.662708][T24297]  ? ksys_write+0x194/0x1a0
[  627.662736][T24297]  __x64_sys_newfstatat+0x55/0x70
[  627.662831][T24297]  x64_sys_call+0x2c64/0x3020
[  627.662879][T24297]  do_syscall_64+0x136/0x3c0
[  627.662912][T24297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.662941][T24297] RIP: 0033:0x7f60771ade99
[  627.662963][T24297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.662985][T24297] RSP: 002b:00007f6075c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  627.663052][T24297] RAX: ffffffffffffffda RBX: 00007f6077435fa0 RCX: 00007f60771ade99
[  627.663072][T24297] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  627.663091][T24297] RBP: 00007f6075c07090 R08: 0000000000000000 R09: 0000000000000000
[  627.663104][T24297] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  627.663117][T24297] R13: 00007f6077436038 R14: 00007f6077435fa0 R15: 00007ffcc1054588
[  627.663202][T24297]  </TASK>
[  627.885844][T24304] atomic_op ffff88814b831128 conn xmit_atomic 0000000000000000
[  627.886198][   T28] audit: type=1400 audit(1784965458.920:1451): avc:  denied  { audit_read } for  pid=24302 comm="syz.0.5147" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  627.898822][T24304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5147'.
[  627.969141][T24313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5150'.
[  627.978826][T24310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.979192][   T28] audit: type=1400 audit(1784965459.000:1452): avc:  denied  { read } for  pid=24309 comm="syz.0.5150" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  627.987329][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.019706][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.028497][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.060447][   T28] audit: type=1326 audit(1784965459.090:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.4.5152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  628.086781][   T28] audit: type=1326 audit(1784965459.090:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.4.5152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  628.118431][   T28] audit: type=1326 audit(1784965459.090:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.4.5152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  628.145639][   T28] audit: type=1326 audit(1784965459.090:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.4.5152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e0a67e6ce code=0x7ffc0000
[  628.171595][   T28] audit: type=1326 audit(1784965459.090:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.4.5152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7e0a6bf197 code=0x7ffc0000
[  628.197641][   T28] audit: type=1326 audit(1784965459.090:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24316 comm="syz.4.5152" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  628.247626][T24326] lo speed is unknown, defaulting to 1000
[  628.486598][T24337] 9p: Bad value for 'wfdno'
[  628.660025][T17308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.983829][T24366] loop5: detected capacity change from 0 to 512
[  629.022034][T24366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.022137][T24366] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.059654][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.081067][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.432635][T24385] FAULT_INJECTION: forcing a failure.
[  629.432635][T24385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.459202][T24385] CPU: 1 UID: 0 PID: 24385 Comm: syz.0.5174 Not tainted syzkaller #0 PREEMPT(lazy) 
[  629.459251][T24385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  629.459267][T24385] Call Trace:
[  629.459276][T24385]  <TASK>
[  629.459286][T24385]  __dump_stack+0x1d/0x30
[  629.459315][T24385]  dump_stack_lvl+0x95/0xd0
[  629.459355][T24385]  dump_stack+0x15/0x1b
[  629.459453][T24385]  should_fail_ex+0x25e/0x270
[  629.459489][T24385]  should_fail+0xb/0x20
[  629.459577][T24385]  should_fail_usercopy+0x1a/0x20
[  629.459676][T24385]  strncpy_from_user+0x27/0x250
[  629.459712][T24385]  do_getname+0x59/0x1c0
[  629.459742][T24385]  getname_flags+0x1d/0x30
[  629.459770][T24385]  vfs_fstatat+0x45/0x170
[  629.459835][T24385]  __se_sys_newfstatat+0x55/0x3e0
[  629.459875][T24385]  ? __fget_files+0x184/0x1c0
[  629.459939][T24385]  ? mutex_lock+0x57/0x90
[  629.460084][T24385]  ? mutex_unlock+0x4e/0x90
[  629.460118][T24385]  ? fput+0x8f/0xc0
[  629.460148][T24385]  ? ksys_write+0x194/0x1a0
[  629.460201][T24385]  __x64_sys_newfstatat+0x55/0x70
[  629.460233][T24385]  x64_sys_call+0x2c64/0x3020
[  629.460263][T24385]  do_syscall_64+0x136/0x3c0
[  629.460292][T24385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.460376][T24385] RIP: 0033:0x7f0c3f0bde99
[  629.460396][T24385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.460529][T24385] RSP: 002b:00007f0c3db17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  629.460606][T24385] RAX: ffffffffffffffda RBX: 00007f0c3f345fa0 RCX: 00007f0c3f0bde99
[  629.460626][T24385] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  629.460645][T24385] RBP: 00007f0c3db17090 R08: 0000000000000000 R09: 0000000000000000
[  629.460661][T24385] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  629.460679][T24385] R13: 00007f0c3f346038 R14: 00007f0c3f345fa0 R15: 00007ffd3e4e39e8
[  629.460726][T24385]  </TASK>
[  629.660317][T24387] loop4: detected capacity change from 0 to 128
[  629.674053][T24387] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  629.714254][T24387] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  629.831696][T24393] net_ratelimit: 1 callbacks suppressed
[  629.831739][T24393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.932111][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5175'.
[  629.935363][T24401] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  629.954054][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5175'.
[  630.101143][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.655065][T24417] loop1: detected capacity change from 0 to 512
[  630.681535][T24417] EXT4-fs: Ignoring removed bh option
[  630.703542][T24417] EXT4-fs: Ignoring removed bh option
[  630.735589][T24417] EXT4-fs (loop1): 1 truncate cleaned up
[  630.741918][T24417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  630.953247][T24427] loop3: detected capacity change from 0 to 512
[  630.986281][T24427] EXT4-fs: Ignoring removed oldalloc option
[  631.001290][T24427] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  631.009492][T24427] EXT4-fs (loop3): orphan cleanup on readonly fs
[  631.016456][T24427] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  631.036733][T24427] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  631.043575][T24427] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.5186: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  631.061519][T24427] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  631.061800][T24427] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5186: couldn't read orphan inode 13 (err -117)
[  631.082800][T24427] loop3: lost filesystem error report for type 5 error -117
[  631.093325][T24427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  631.121492][T24429] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  631.139745][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.172437][T24423] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  631.182202][T24423] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  631.204386][T24423] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  631.233034][T15348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.305218][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.321450][T24442] loop5: detected capacity change from 0 to 1024
[  631.329097][T24442] EXT4-fs: Ignoring removed nomblk_io_submit option
[  631.361245][T24442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.401077][T24442] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  631.549314][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  631.994818][T17308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.180459][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.257204][T24467] loop1: detected capacity change from 0 to 512
[  632.266109][T24467] EXT4-fs: Ignoring removed bh option
[  632.278109][T24467] EXT4-fs: Ignoring removed bh option
[  632.285241][T24467] EXT4-fs (loop1): 1 truncate cleaned up
[  632.291569][T24467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.318926][T24470] loop3: detected capacity change from 0 to 512
[  632.320890][T24467] __nla_validate_parse: 4 callbacks suppressed
[  632.320976][T24467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5201'.
[  632.473107][T24472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5201'.
[  632.527565][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  632.527585][   T28] audit: type=1400 audit(1784965463.560:1478): avc:  denied  { write } for  pid=24466 comm="syz.1.5201" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  632.953083][T24476] FAULT_INJECTION: forcing a failure.
[  632.953083][T24476] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.966325][T24476] CPU: 0 UID: 0 PID: 24476 Comm: syz.4.5204 Not tainted syzkaller #0 PREEMPT(lazy) 
[  632.966418][T24476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  632.966435][T24476] Call Trace:
[  632.966443][T24476]  <TASK>
[  632.966454][T24476]  __dump_stack+0x1d/0x30
[  632.966487][T24476]  dump_stack_lvl+0x95/0xd0
[  632.966516][T24476]  dump_stack+0x15/0x1b
[  632.966539][T24476]  should_fail_ex+0x25e/0x270
[  632.966659][T24476]  should_fail+0xb/0x20
[  632.966732][T24476]  should_fail_usercopy+0x1a/0x20
[  632.966773][T24476]  _copy_to_user+0x20/0xa0
[  632.966796][T24476]  simple_read_from_buffer+0xb5/0x130
[  632.966831][T24476]  proc_fail_nth_read+0x10e/0x150
[  632.966919][T24476]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  632.967014][T24476]  vfs_read+0x18e/0x7c0
[  632.967033][T24476]  ? __rcu_read_unlock+0x4e/0x70
[  632.967067][T24476]  ? __fget_files+0x184/0x1c0
[  632.967095][T24476]  ? mutex_lock+0x57/0x90
[  632.967128][T24476]  ksys_read+0xdc/0x1a0
[  632.967211][T24476]  __x64_sys_read+0x40/0x50
[  632.967230][T24476]  x64_sys_call+0x2886/0x3020
[  632.967298][T24476]  do_syscall_64+0x136/0x3c0
[  632.967335][T24476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.967367][T24476] RIP: 0033:0x7f7e0a67e6ce
[  632.967389][T24476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  632.967483][T24476] RSP: 002b:00007f7e090f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  632.967512][T24476] RAX: ffffffffffffffda RBX: 00007f7e090f66c0 RCX: 00007f7e0a67e6ce
[  632.967533][T24476] RDX: 000000000000000f RSI: 00007f7e090f60a0 RDI: 0000000000000004
[  632.967550][T24476] RBP: 00007f7e090f6090 R08: 0000000000000000 R09: 0000000000000000
[  632.967565][T24476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.967647][T24476] R13: 00007f7e0a946128 R14: 00007f7e0a946090 R15: 00007ffe15bbda08
[  632.967678][T24476]  </TASK>
[  633.221591][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.230113][T24478] loop4: detected capacity change from 0 to 512
[  633.339932][T24478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.352594][T24478] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  633.363535][T24478] FAULT_INJECTION: forcing a failure.
[  633.363535][T24478] name failslab, interval 1, probability 0, space 0, times 0
[  633.376157][T24478] CPU: 0 UID: 0 PID: 24478 Comm: syz.4.5205 Not tainted syzkaller #0 PREEMPT(lazy) 
[  633.376324][T24478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  633.376396][T24478] Call Trace:
[  633.376402][T24478]  <TASK>
[  633.376469][T24478]  __dump_stack+0x1d/0x30
[  633.376494][T24478]  dump_stack_lvl+0x95/0xd0
[  633.376521][T24478]  dump_stack+0x15/0x1b
[  633.376547][T24478]  should_fail_ex+0x25e/0x270
[  633.376584][T24478]  should_failslab+0x8c/0xb0
[  633.376608][T24478]  __kmalloc_noprof+0xd4/0x4a0
[  633.376643][T24478]  ? find_next_id+0x3d/0x550
[  633.376680][T24478]  ? find_next_id+0x3d/0x550
[  633.376721][T24478]  find_next_id+0x3d/0x550
[  633.376786][T24478]  ? __brelse+0x32/0x60
[  633.376819][T24478]  ? ext4_quota_read+0x22b/0x260
[  633.376856][T24478]  find_next_id+0x424/0x550
[  633.376956][T24478]  qtree_get_next_id+0x55/0x120
[  633.376992][T24478]  v2_get_next_id+0x7c/0xb0
[  633.377036][T24478]  ? __pfx_v2_get_next_id+0x10/0x10
[  633.377063][T24478]  dquot_get_next_id+0xb2/0xe0
[  633.377088][T24478]  dquot_get_next_dqblk+0x44/0x200
[  633.377223][T24478]  quota_getnextquota+0x16d/0x370
[  633.377336][T24478]  do_quotactl+0x382/0x660
[  633.377379][T24478]  __se_sys_quotactl+0x1f5/0x630
[  633.377424][T24478]  __x64_sys_quotactl+0x55/0x70
[  633.377463][T24478]  x64_sys_call+0x1a2a/0x3020
[  633.377496][T24478]  do_syscall_64+0x136/0x3c0
[  633.377560][T24478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.377590][T24478] RIP: 0033:0x7f7e0a6bde99
[  633.377612][T24478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.377639][T24478] RSP: 002b:00007f7e09117028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  633.377667][T24478] RAX: ffffffffffffffda RBX: 00007f7e0a945fa0 RCX: 00007f7e0a6bde99
[  633.377750][T24478] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000901
[  633.377776][T24478] RBP: 00007f7e09117090 R08: 0000000000000000 R09: 0000000000000000
[  633.377795][T24478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.377813][T24478] R13: 00007f7e0a946038 R14: 00007f7e0a945fa0 R15: 00007ffe15bbda08
[  633.377917][T24478]  </TASK>
[  634.261151][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.579364][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.698924][T24490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5206'.
[  634.793375][T24482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5199'.
[  634.820758][   T28] audit: type=1400 audit(1784965465.860:1479): avc:  denied  { write } for  pid=24489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  634.886754][   T28] audit: type=1400 audit(1784965465.920:1480): avc:  denied  { write } for  pid=24502 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  634.908813][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.942048][T24506] netlink: 'syz.4.5209': attribute type 1 has an invalid length.
[  634.956012][T15348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.036474][   T28] audit: type=1400 audit(1784965466.070:1481): avc:  denied  { mount } for  pid=24515 comm="syz.1.5213" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  635.061340][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5213'.
[  635.163259][T20791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.173636][   T28] audit: type=1326 audit(1784965466.210:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.4.5217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  635.202130][   T28] audit: type=1326 audit(1784965466.210:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.4.5217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  635.228100][   T28] audit: type=1326 audit(1784965466.210:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.4.5217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  635.277967][   T28] audit: type=1326 audit(1784965466.210:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.4.5217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  635.304363][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.311557][   T28] audit: type=1326 audit(1784965466.210:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.4.5217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  635.347611][T24531] loop1: detected capacity change from 0 to 512
[  635.354454][T24531] EXT4-fs: Ignoring removed bh option
[  635.360153][T24531] EXT4-fs: Ignoring removed bh option
[  635.376875][T24531] EXT4-fs (loop1): 1 truncate cleaned up
[  635.383362][T24531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.395908][   T28] audit: type=1326 audit(1784965466.210:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.4.5217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  635.458809][T24527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5218'.
[  635.510965][T24551] netlink: 'syz.0.5223': attribute type 32 has an invalid length.
[  635.526110][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'.
[  635.561859][T24551] bond0: Setting coupled_control to off (0)
[  635.573635][T24545] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.590820][T24545] bridge_slave_0 (unregistering): left allmulticast mode
[  635.598133][T24545] bridge_slave_0 (unregistering): left promiscuous mode
[  635.623685][T24545] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.624708][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'.
[  635.697724][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5227'.
[  635.949642][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.989166][T24584] loop4: detected capacity change from 0 to 8192
[  636.042370][T15348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.059173][T24589] loop3: detected capacity change from 0 to 1024
[  636.078442][T24589] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  636.119761][T24589] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5235: lblock 2 mapped to illegal pblock 2 (length 1)
[  636.134280][T24589] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  636.139627][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  636.153549][T24589] EXT4-fs (loop3): Remounting filesystem read-only
[  636.155207][    C0] EXT4-fs (loop3): initial error at time 1784965467: ext4_map_blocks:791: inode 3: block 2
[  636.168509][T24589] EXT4-fs (loop3): 1 orphan inode deleted
[  636.171763][    C0] EXT4-fs (loop3): last error at time 1784965467: ext4_map_blocks:791: inode 3: block 2
[  636.179991][T24589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.207813][T24589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.389494][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.580057][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.589463][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.979642][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.988543][T20791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.049780][T24629] loop1: detected capacity change from 0 to 512
[  637.057507][T24629] EXT4-fs: Ignoring removed bh option
[  637.070844][T24629] EXT4-fs: Ignoring removed bh option
[  637.086756][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5247'.
[  637.114986][T24624] lo speed is unknown, defaulting to 1000
[  637.197206][T24629] EXT4-fs (loop1): 1 truncate cleaned up
[  637.217460][T24629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.277466][T24642] loop4: detected capacity change from 0 to 1024
[  637.292874][T24642] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  637.305043][T24642] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.5250: lblock 2 mapped to illegal pblock 2 (length 1)
[  637.318997][T24642] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  637.319181][T24642] EXT4-fs (loop4): Remounting filesystem read-only
[  637.334827][T24642] EXT4-fs (loop4): 1 orphan inode deleted
[  637.341087][T24642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.353843][T24642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.441493][T15348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.459732][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.496051][T24651] cgroup: release_agent respecified
[  637.505956][T24645] loop3: detected capacity change from 0 to 8192
[  637.528949][T24651] xt_CONNSECMARK: invalid mode: 66
[  637.534229][   T28] kauditd_printk_skb: 72 callbacks suppressed
[  637.534242][   T28] audit: type=1326 audit(1784965468.570:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc66030e6ce code=0x7ffc0000
[  637.622627][   T28] audit: type=1326 audit(1784965468.570:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc66034db2b code=0x7ffc0000
[  637.672557][   T28] audit: type=1326 audit(1784965468.570:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc66034db2b code=0x7ffc0000
[  637.701682][   T28] audit: type=1326 audit(1784965468.630:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  637.739908][   T28] audit: type=1326 audit(1784965468.630:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  637.767141][   T28] audit: type=1326 audit(1784965468.630:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  637.793476][   T28] audit: type=1326 audit(1784965468.630:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  637.846196][   T28] audit: type=1326 audit(1784965468.630:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  637.906425][   T28] audit: type=1326 audit(1784965468.630:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  637.932332][   T28] audit: type=1326 audit(1784965468.630:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz.3.5249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc66034c4da code=0x7ffc0000
[  638.449218][T24674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.470556][T24674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.539788][T24683] loop1: detected capacity change from 0 to 512
[  638.551139][T24683] EXT4-fs: Ignoring removed bh option
[  638.556885][T24683] EXT4-fs: Ignoring removed bh option
[  638.569948][T24683] EXT4-fs (loop1): 1 truncate cleaned up
[  638.576380][T24683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  638.744485][T24683] __nla_validate_parse: 2 callbacks suppressed
[  638.744689][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5263'.
[  638.775434][T24690] only policy match revision 0 supported
[  638.775451][T24690] unable to load match
[  639.159831][T24699] loop3: detected capacity change from 0 to 512
[  639.188724][T24699] EXT4-fs: Ignoring removed bh option
[  639.216090][T24699] EXT4-fs: Ignoring removed bh option
[  639.419462][T24699] EXT4-fs (loop3): 1 truncate cleaned up
[  639.425767][T24699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.723622][T24712] loop5: detected capacity change from 0 to 512
[  639.771237][T24712] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5269: invalid indirect mapped block 11 (level 0)
[  639.785214][T24712] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  639.788373][T24712] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.5269: attempt to clear invalid blocks 1024 len 1
[  639.798032][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  639.798063][    C1] EXT4-fs (loop5): initial error at time 1784965470: ext4_free_branches:1023: inode 13
[  639.798633][    C1] EXT4-fs (loop5): last error at time 1784965470: ext4_free_branches:1023: inode 13
[  639.840093][T24712] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  639.902255][T24712] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  639.928467][T24712] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5269: invalid indirect mapped block 1819239214 (level 0)
[  639.943555][T24712] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  639.945219][T24712] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5269: invalid indirect mapped block 33554432 (level 2)
[  639.969331][T24712] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  639.972727][T24712] EXT4-fs (loop5): 1 truncate cleaned up
[  639.999185][T24712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.157418][T24699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5268'.
[  640.243924][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5268'.
[  640.291755][T15348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.580709][ T6049] net_ratelimit: 4 callbacks suppressed
[  640.580729][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.872601][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.042012][T24743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.058573][T24743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.134846][T24739] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  641.195660][T24750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.222527][T20791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.620032][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.629406][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.025187][T24771] netlink: 'syz.1.5285': attribute type 29 has an invalid length.
[  642.259868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.757570][T20783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.794176][T24789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.830060][T24789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.944650][T24800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5292'.
[  642.979855][T20783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.182024][   T28] kauditd_printk_skb: 330 callbacks suppressed
[  643.182044][   T28] audit: type=1400 audit(1784965474.210:1896): avc:  denied  { ioctl } for  pid=24803 comm="syz.0.5298" path="socket:[65820]" dev="sockfs" ino=65820 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  643.299636][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.782105][T24823] loop1: detected capacity change from 0 to 764
[  643.799372][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5305'.
[  643.811688][T24823] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  643.884280][T24827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.893369][T24827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.971252][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5307'.
[  644.018964][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.142063][T24847] syzkaller0: entered promiscuous mode
[  644.147719][T24847] syzkaller0: entered allmulticast mode
[  644.203861][   T28] audit: type=1326 audit(1784965475.240:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.261139][   T28] audit: type=1326 audit(1784965475.240:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.298927][   T28] audit: type=1326 audit(1784965475.240:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.326039][   T28] audit: type=1326 audit(1784965475.240:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.360837][   T28] audit: type=1326 audit(1784965475.240:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.387195][   T28] audit: type=1326 audit(1784965475.240:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.415338][   T28] audit: type=1326 audit(1784965475.240:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.471888][   T28] audit: type=1326 audit(1784965475.240:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.513270][   T28] audit: type=1326 audit(1784965475.240:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.5.5314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  644.544683][T24860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18)
[  644.551391][T24860] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  644.560072][T24860] vhci_hcd vhci_hcd.0: Device attached
[  644.760728][T24860] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(20)
[  644.767731][T24860] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  645.221889][T24860] vhci_hcd vhci_hcd.0: Device attached
[  645.257453][T24880] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(23)
[  645.264191][T24880] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  645.287775][T24880] vhci_hcd vhci_hcd.0: Device attached
[  645.310468][T24860] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(22)
[  645.317130][T24860] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  645.325692][T24860] vhci_hcd vhci_hcd.0: Device attached
[  645.371175][T24860] loop3: detected capacity change from 0 to 512
[  645.442157][T24860] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.5319: corrupted xattr block 95: invalid header
[  645.522887][T24860] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  645.523233][T24860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5319: bg 0: block 7: invalid block bitmap
[  645.532445][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  645.532465][    C0] EXT4-fs (loop3): initial error at time 1784965476: ext4_expand_extra_isize_ea:2810: inode 11
[  645.532527][    C0] EXT4-fs (loop3): last error at time 1784965476: ext4_expand_extra_isize_ea:2810: inode 11
[  645.649734][T24860] loop3: lost filesystem error report for type 5 error -117
[  645.649964][T24860] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  645.666076][T24860] loop3: lost filesystem error report for type 5 error -117
[  645.688858][T24860] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.5319: corrupted xattr block 95: invalid header
[  645.700098][ T6049] usb 7-1: new high-speed USB device number 2 using vhci_hcd
[  645.709744][T24860] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  645.730760][T24860] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117)
[  645.749161][T24860] EXT4-fs (loop3): 1 orphan inode deleted
[  645.755513][T24860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.799707][T24901] loop4: detected capacity change from 0 to 512
[  645.806688][T24901] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  645.821162][T24901] loop4: detected capacity change from 0 to 512
[  645.828431][T24901] EXT4-fs: Ignoring removed i_version option
[  645.838555][T24860] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(28)
[  645.845284][T24860] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  645.856380][ T4518] bridge_slave_1: left allmulticast mode
[  645.861342][T24901] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.5326: Directory hole found for htree index block 0
[  645.875403][T24901] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  645.875622][T24901] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  645.884806][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  645.884831][    C0] EXT4-fs (loop4): initial error at time 1784965476: dx_probe:791: inode 2
[  645.884865][    C0] EXT4-fs (loop4): last error at time 1784965476: dx_probe:791: inode 2
[  645.897679][ T4518] bridge_slave_1: left promiscuous mode
[  645.901079][T24901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.934875][T24863] vhci_hcd: connection reset by peer
[  645.935250][T24860] vhci_hcd vhci_hcd.0: Device attached
[  645.940276][T24883] vhci_hcd: connection closed
[  645.940372][T24873] vhci_hcd: connection closed
[  645.946321][ T6463] vhci_hcd vhci_hcd.3: stop threads
[  645.951313][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.955261][T24881] vhci_hcd: connection closed
[  645.969510][T24898] vhci_hcd: connection closed
[  645.974903][ T6463] vhci_hcd vhci_hcd.3: release socket
[  645.985492][ T6463] vhci_hcd vhci_hcd.3: disconnect device
[  645.991416][ T4518] bridge_slave_0: left allmulticast mode
[  645.997195][ T4518] bridge_slave_0: left promiscuous mode
[  646.002949][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.010423][ T6463] vhci_hcd vhci_hcd.3: stop threads
[  646.015849][ T6463] vhci_hcd vhci_hcd.3: release socket
[  646.021932][ T6463] vhci_hcd vhci_hcd.3: disconnect device
[  646.028938][ T6463] vhci_hcd vhci_hcd.3: stop threads
[  646.034677][ T6463] vhci_hcd vhci_hcd.3: release socket
[  646.040969][ T6463] vhci_hcd vhci_hcd.3: disconnect device
[  646.052073][ T6463] vhci_hcd vhci_hcd.3: stop threads
[  646.057730][ T6463] vhci_hcd vhci_hcd.3: release socket
[  646.071091][ T6463] vhci_hcd vhci_hcd.3: disconnect device
[  646.077097][ T6463] vhci_hcd vhci_hcd.3: stop threads
[  646.087134][ T6463] vhci_hcd vhci_hcd.3: release socket
[  646.098558][ T6463] vhci_hcd vhci_hcd.3: disconnect device
[  646.107273][ T4518] bond0 (unregistering): Released all slaves
[  646.125513][T24907] syz_tun: entered allmulticast mode
[  646.144769][T24890] lo speed is unknown, defaulting to 1000
[  646.163258][ T4518] .d: left promiscuous mode
[  646.223454][ T4518] tipc: Left network mode
[  646.266091][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.339610][   T35] net_ratelimit: 5 callbacks suppressed
[  646.339642][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.429637][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.667588][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.806492][ T4518] veth0_vlan: left promiscuous mode
[  646.822969][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.886847][T24943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  646.928488][T24943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.976359][ T4518] team0 (unregistering): Port device team_slave_1 removed
[  647.008519][T13674] smc: removing ib device s
z1
[  647.015436][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5332'.
[  647.033583][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7
[  647.140090][T24948] team0: Port device team_slave_0 removed
[  647.215746][T24890] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.223861][T24890] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.231271][T24890] bridge_slave_0: entered allmulticast mode
[  647.238061][T24890] bridge_slave_0: entered promiscuous mode
[  647.252229][T24890] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.260583][T24890] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.275022][T24890] bridge_slave_1: entered allmulticast mode
[  647.284517][T24890] bridge_slave_1: entered promiscuous mode
[  647.303156][T20791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.428580][T20783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.459785][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.776908][T24951] xt_l2tp: invalid flags combination: 0
[  648.020285][T24982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.033445][T24982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.056702][T24960] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  648.075853][T24890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.086464][T24890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.157240][T24890] team0: Port device team_slave_0 added
[  648.167958][T24890] team0: Port device team_slave_1 added
[  648.198990][T24890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.209669][T24890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.252824][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  648.252843][   T28] audit: type=1400 audit(1784965479.290:1909): avc:  denied  { write } for  pid=24996 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  648.256931][T24890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.312293][T24890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.328616][T24890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.358649][T24890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.370516][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5
[  648.405144][T24890] hsr_slave_0: entered promiscuous mode
[  648.414202][T24890] hsr_slave_1: entered promiscuous mode
[  648.499634][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.507854][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.553963][T24890] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  648.567728][T24890] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  648.576025][T24890] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  648.586206][T24890] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  648.594543][T24890] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  648.613986][   T28] audit: type=1400 audit(1784965479.650:1910): avc:  denied  { write } for  pid=25005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  648.621242][T24890] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  648.645176][T24890] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  648.657487][T24890] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  648.683488][   T28] audit: type=1400 audit(1784965479.720:1911): avc:  denied  { write } for  pid=25017 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  648.745855][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8
[  648.755437][T24890] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.768001][T24890] 8021q: adding VLAN 0 to HW filter on device team0
[  648.787650][T13674] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.794866][T13674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.804071][T13674] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.811281][T13674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.042819][T24890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.103711][   T28] audit: type=1400 audit(1784965480.140:1912): avc:  denied  { write } for  pid=25030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  649.539642][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.644512][   T28] audit: type=1400 audit(1784965480.460:1913): avc:  denied  { write } for  pid=25058 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  649.677253][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6
[  649.929878][   T28] audit: type=1400 audit(1784965480.960:1914): avc:  denied  { write } for  pid=25067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  649.985298][T25100] loop5: detected capacity change from 0 to 512
[  649.998334][T25100] EXT4-fs: Ignoring removed bh option
[  650.025029][T25100] EXT4-fs: Ignoring removed bh option
[  650.142625][T25100] EXT4-fs (loop5): 1 truncate cleaned up
[  650.242208][T25100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  650.338310][T24890] veth0_vlan: entered promiscuous mode
[  650.430234][   T28] audit: type=1400 audit(1784965481.450:1915): avc:  denied  { write } for  pid=25110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  650.467998][T24890] veth1_vlan: entered promiscuous mode
[  650.540322][T24890] veth0_macvtap: entered promiscuous mode
[  650.561849][T24890] veth1_macvtap: entered promiscuous mode
[  650.574899][T24890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.596707][T24890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.620437][T25100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5353'.
[  650.647975][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.656745][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.665521][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.679374][T25100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5353'.
[  650.691128][   T28] audit: type=1400 audit(1784965481.730:1916): avc:  denied  { write } for  pid=25099 comm="syz.5.5353" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  650.772586][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.889639][ T6049] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  650.904276][   T28] audit: type=1400 audit(1784965481.940:1917): avc:  denied  { write } for  pid=25112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  651.068218][   T28] audit: type=1400 audit(1784965482.010:1918): avc:  denied  { write } for  pid=25134 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  651.107691][T25138] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5358'.
[  651.256022][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.385343][T25170] FAULT_INJECTION: forcing a failure.
[  651.385343][T25170] name failslab, interval 1, probability 0, space 0, times 0
[  651.415146][T25170] CPU: 0 UID: 0 PID: 25170 Comm: syz.4.5365 Not tainted syzkaller #0 PREEMPT(lazy) 
[  651.415259][T25170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  651.415278][T25170] Call Trace:
[  651.415288][T25170]  <TASK>
[  651.415299][T25170]  __dump_stack+0x1d/0x30
[  651.415333][T25170]  dump_stack_lvl+0x95/0xd0
[  651.415435][T25170]  dump_stack+0x15/0x1b
[  651.415468][T25170]  should_fail_ex+0x25e/0x270
[  651.415546][T25170]  should_failslab+0x8c/0xb0
[  651.415571][T25170]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[  651.415598][T25170]  ? __alloc_skb+0x2db/0x6f0
[  651.415689][T25170]  ? __alloc_skb+0x2db/0x6f0
[  651.415728][T25170]  __alloc_skb+0x2db/0x6f0
[  651.415762][T25170]  ? __alloc_skb+0x205/0x6f0
[  651.415836][T25170]  __ip6_append_data+0x1a6e/0x24c0
[  651.415930][T25170]  ? __pfx_raw6_getfrag+0x10/0x10
[  651.415970][T25170]  ? ip6_mtu+0xf5/0x120
[  651.415998][T25170]  ip6_append_data+0xd3/0x1d0
[  651.416030][T25170]  ? __pfx_raw6_getfrag+0x10/0x10
[  651.416139][T25170]  rawv6_sendmsg+0xf70/0x1150
[  651.416264][T25170]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  651.416317][T25170]  ? __pfx_inet_sendmsg+0x10/0x10
[  651.416354][T25170]  inet_sendmsg+0xc5/0xd0
[  651.416471][T25170]  __sys_sendto+0x3be/0x470
[  651.416524][T25170]  __x64_sys_sendto+0x76/0x90
[  651.416603][T25170]  x64_sys_call+0x2d35/0x3020
[  651.416638][T25170]  do_syscall_64+0x136/0x3c0
[  651.416673][T25170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.416704][T25170] RIP: 0033:0x7f7e0a6bde99
[  651.416728][T25170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.416818][T25170] RSP: 002b:00007f7e09117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  651.416846][T25170] RAX: ffffffffffffffda RBX: 00007f7e0a945fa0 RCX: 00007f7e0a6bde99
[  651.416865][T25170] RDX: 0000000000000016 RSI: 0000200000000300 RDI: 0000000000000003
[  651.416884][T25170] RBP: 00007f7e09117090 R08: 0000000000000000 R09: fffffffffffffdfd
[  651.416951][T25170] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001
[  651.416970][T25170] R13: 00007f7e0a946038 R14: 00007f7e0a945fa0 R15: 00007ffe15bbda08
[  651.417000][T25170]  </TASK>
[  651.634809][    C0] net_ratelimit: 5 callbacks suppressed
[  651.634826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.700260][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.774317][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5367'.
[  651.882279][T25196] loop4: detected capacity change from 0 to 512
[  651.921240][T25196] EXT4-fs (loop4): 1 truncate cleaned up
[  651.960200][T25196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.486308][T25259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.501146][T25267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25267 comm=syz.6.5379
[  652.526369][T25259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.580181][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.659703][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.676402][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'.
[  652.687721][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5383'.
[  652.766395][ T6049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.791882][T25291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.810582][T25291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.837288][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.976487][T25314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5387'.
[  653.341486][T25330] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  653.458744][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5398'.
[  653.551004][T18896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.565258][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  653.565276][   T28] audit: type=1400 audit(1784965484.600:1941): avc:  denied  { associate } for  pid=25354 comm="syz.6.5399" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  653.770729][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.268829][T20783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.328305][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5406'.
[  654.626909][T25402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5412'.
[  654.628389][T25372] ALSA: seq fatal error: cannot create timer (-22)
[  654.669397][T25402] loop6: detected capacity change from 0 to 512
[  654.690972][T25402] EXT4-fs: Ignoring removed oldalloc option
[  654.697277][T25405] No such timeout policy "syz1"
[  654.761090][T25404] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  654.786393][T25402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  654.809451][T25402] EXT4-fs (loop6): orphan cleanup on readonly fs
[  654.831412][T25402] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  654.885066][T25402] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  654.896354][T25402] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.5412: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  654.920115][T25402] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  654.921729][T25402] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5412: couldn't read orphan inode 13 (err -117)
[  654.930955][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  654.930980][    C1] EXT4-fs (loop6): last error at time 1784965485: ext4_ext_check_inode:521: inode 13
[  654.988881][T25402] loop6: lost filesystem error report for type 5 error -117
[  655.042935][T25402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  655.144740][T25394] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  655.322720][T25394] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  655.332409][T25394] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  655.655041][   T28] audit: type=1400 audit(1784965486.270:1942): avc:  denied  { read } for  pid=25429 comm="syz.0.5423" lport=36518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  655.693296][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.906257][T25451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.930070][T25451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.976009][T25461] loop6: detected capacity change from 0 to 1024
[  655.993535][T25451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'.
[  656.002436][T25461] EXT4-fs: inline encryption not supported
[  656.028394][T25461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  656.109948][   T28] audit: type=1400 audit(1784965487.110:1943): avc:  denied  { write } for  pid=25460 comm="syz.6.5434" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  656.192597][   T28] audit: type=1400 audit(1784965487.230:1944): avc:  denied  { write } for  pid=25473 comm="syz.3.5439" name="usb_gadget" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  656.217435][T25474] syz.3.5439(25474): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  656.219874][   T28] audit: type=1400 audit(1784965487.230:1945): avc:  denied  { write } for  pid=25473 comm="syz.3.5439" name="idVendor" dev="configfs" ino=67198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  656.255953][   T28] audit: type=1400 audit(1784965487.230:1946): avc:  denied  { open } for  pid=25473 comm="syz.3.5439" path="/461/config/usb_gadget/g_uac2/idVendor" dev="configfs" ino=67198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  656.265982][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.282564][   T28] audit: type=1400 audit(1784965487.230:1947): avc:  denied  { write } for  pid=25473 comm="syz.3.5439" name="functions" dev="configfs" ino=67193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  656.321059][   T28] audit: type=1326 audit(1784965487.260:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.5439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66034de99 code=0x7ffc0000
[  656.346745][   T28] audit: type=1326 audit(1784965487.260:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.5439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc66034de99 code=0x7ffc0000
[  656.372248][   T28] audit: type=1326 audit(1784965487.270:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.3.5439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66034de99 code=0x7ffc0000
[  656.537659][T25491] FAULT_INJECTION: forcing a failure.
[  656.537659][T25491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.551053][T25491] CPU: 1 UID: 0 PID: 25491 Comm: syz.3.5445 Not tainted syzkaller #0 PREEMPT(lazy) 
[  656.551088][T25491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  656.551105][T25491] Call Trace:
[  656.551113][T25491]  <TASK>
[  656.551123][T25491]  __dump_stack+0x1d/0x30
[  656.551183][T25491]  dump_stack_lvl+0x95/0xd0
[  656.551210][T25491]  dump_stack+0x15/0x1b
[  656.551271][T25491]  should_fail_ex+0x25e/0x270
[  656.551332][T25491]  should_fail+0xb/0x20
[  656.551429][T25491]  should_fail_usercopy+0x1a/0x20
[  656.551505][T25491]  _copy_to_user+0x20/0xa0
[  656.551534][T25491]  simple_read_from_buffer+0xb5/0x130
[  656.551569][T25491]  proc_fail_nth_read+0x10e/0x150
[  656.551599][T25491]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  656.551629][T25491]  vfs_read+0x18e/0x7c0
[  656.551682][T25491]  ? __rcu_read_unlock+0x4e/0x70
[  656.551717][T25491]  ? __fget_files+0x184/0x1c0
[  656.551753][T25491]  ? mutex_lock+0x57/0x90
[  656.551797][T25491]  ksys_read+0xdc/0x1a0
[  656.551887][T25491]  __x64_sys_read+0x40/0x50
[  656.551910][T25491]  x64_sys_call+0x2886/0x3020
[  656.552014][T25491]  do_syscall_64+0x136/0x3c0
[  656.552047][T25491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.552134][T25491] RIP: 0033:0x7fc66030e6ce
[  656.552154][T25491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  656.552178][T25491] RSP: 002b:00007fc65eda6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  656.552212][T25491] RAX: ffffffffffffffda RBX: 00007fc65eda76c0 RCX: 00007fc66030e6ce
[  656.552232][T25491] RDX: 000000000000000f RSI: 00007fc65eda70a0 RDI: 0000000000000004
[  656.552250][T25491] RBP: 00007fc65eda7090 R08: 0000000000000000 R09: 0000000000000000
[  656.552268][T25491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.552281][T25491] R13: 00007fc6605d6038 R14: 00007fc6605d5fa0 R15: 00007ffdef301158
[  656.552302][T25491]  </TASK>
[  656.754574][T25497] loop6: detected capacity change from 0 to 128
[  656.780155][T25497] syz.6.5444: attempt to access beyond end of device
[  656.780155][T25497] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128
[  656.811604][T25497] syz.6.5444: attempt to access beyond end of device
[  656.811604][T25497] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  656.843528][T25497] Buffer I/O error on dev loop6, logical block 79, lost async page write
[  656.865715][T25497] syz.6.5444: attempt to access beyond end of device
[  656.865715][T25497] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128
[  656.909748][    C0] net_ratelimit: 4 callbacks suppressed
[  656.909764][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.923290][T25497] Buffer I/O error on dev loop6, logical block 80, lost async page write
[  656.991631][T25497] syz.6.5444: attempt to access beyond end of device
[  656.991631][T25497] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128
[  657.007255][T25497] syz.6.5444: attempt to access beyond end of device
[  657.007255][T25497] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128
[  657.060263][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.240397][T25504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5448'.
[  657.240613][T25501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5450'.
[  657.258191][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.345351][T25511] loop4: detected capacity change from 0 to 512
[  657.360637][T25502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5448'.
[  657.370880][T25511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.383627][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.392471][T25511] ext4 filesystem being mounted at /469/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  657.404948][T25511] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  657.416634][T25511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25511 comm=syz.4.5452
[  657.453250][T25507] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.463179][T25507] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.502123][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.623680][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.722790][T25528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.749299][T25528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.919843][T25547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.939693][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.960384][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5458'.
[  658.016086][T25532] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  658.039946][T25539] ALSA: seq fatal error: cannot create timer (-22)
[  658.419866][T20783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.459395][T25553] loop6: detected capacity change from 0 to 1024
[  658.488630][T25553] EXT4-fs: Ignoring removed bh option
[  658.513110][T25553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.544775][T25553] nfs4: Unknown parameter 'x���1h3e��.���� UAPAD�P�&��E� ��*TD\�V�-n�����*�\��Y�KqQ���"hq�8��\+�FSs�����%�{���{�d9.@kM'�O�I2����8��z�>�ܞ�_N��'
[  658.587158][T25557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5464'.
[  658.636021][T25557] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.644530][T25557] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.684942][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  658.684958][   T28] audit: type=1400 audit(1784965489.700:1957): avc:  denied  { setopt } for  pid=25556 comm="syz.5.5464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  658.905090][T25574] loop4: detected capacity change from 0 to 1024
[  658.920043][T25574] EXT4-fs: Ignoring removed bh option
[  658.931870][T25574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  658.945509][   T28] audit: type=1400 audit(1784965489.990:1958): avc:  denied  { write } for  pid=25573 comm="syz.4.5469" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  659.005684][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.036377][   T28] audit: type=1326 audit(1784965490.050:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.4.5469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x0
[  659.098305][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.148932][T25586] loop6: detected capacity change from 0 to 512
[  659.168643][T25586] EXT4-fs: Ignoring removed bh option
[  659.174197][T25586] EXT4-fs: Ignoring removed bh option
[  659.189518][T25586] EXT4-fs (loop6): 1 truncate cleaned up
[  659.195866][T25586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.262661][T25586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5471'.
[  659.287319][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5471'.
[  659.342333][   T28] audit: type=1400 audit(1784965490.370:1960): avc:  denied  { write } for  pid=25585 comm="syz.6.5471" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  659.502334][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.535713][T25607] SELinux:  Context system_u:object_r:tmp_t:s0 is not valid (left unmapped).
[  659.593523][   T28] audit: type=1400 audit(1784965490.590:1961): avc:  denied  { relabelto } for  pid=25593 comm="syz.3.5474" name="bus" dev="tmpfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0"
[  659.628893][T25609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5474'.
[  659.870650][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.884905][T25605] syz_tun: entered allmulticast mode
[  659.899308][   T28] audit: type=1400 audit(1784965490.590:1962): avc:  denied  { associate } for  pid=25593 comm="syz.3.5474" name="bus" dev="tmpfs" ino=2479 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0"
[  660.008244][   T28] audit: type=1326 audit(1784965491.040:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.6.5480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd1c10de99 code=0x0
[  660.050218][T25621] loop5: detected capacity change from 0 to 512
[  660.063345][T25621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  660.075952][T25621] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  660.087097][   T28] audit: type=1400 audit(1784965491.120:1964): avc:  denied  { write } for  pid=25620 comm="syz.5.5483" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  660.110980][T25624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.126436][T25624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.166603][T25617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5482'.
[  660.229277][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.714571][T25659] loop5: detected capacity change from 0 to 512
[  660.721915][T25659] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  660.742746][T25661] FAULT_INJECTION: forcing a failure.
[  660.742746][T25661] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.773921][T25659] syz_tun: entered allmulticast mode
[  660.783404][T25661] CPU: 1 UID: 0 PID: 25661 Comm: syz.0.5494 Not tainted syzkaller #0 PREEMPT(lazy) 
[  660.783486][T25661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  660.783503][T25661] Call Trace:
[  660.783510][T25661]  <TASK>
[  660.783518][T25661]  __dump_stack+0x1d/0x30
[  660.783612][T25661]  dump_stack_lvl+0x95/0xd0
[  660.783641][T25661]  dump_stack+0x15/0x1b
[  660.783666][T25661]  should_fail_ex+0x25e/0x270
[  660.783705][T25661]  should_fail+0xb/0x20
[  660.783765][T25661]  should_fail_usercopy+0x1a/0x20
[  660.783806][T25661]  _copy_to_user+0x20/0xa0
[  660.783864][T25661]  bpf_test_finish+0x149/0x4c0
[  660.783903][T25661]  bpf_prog_test_run_skb+0x1117/0x11b0
[  660.783937][T25661]  ? _parse_integer_limit+0x177/0x1a0
[  660.784022][T25661]  ? __rcu_read_unlock+0x4e/0x70
[  660.784055][T25661]  ? __fget_files+0x184/0x1c0
[  660.784091][T25661]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  660.784136][T25661]  bpf_prog_test_run+0x208/0x340
[  660.784287][T25661]  __sys_bpf+0x8da/0xc30
[  660.784410][T25661]  ? vfs_write+0x760/0x990
[  660.784517][T25661]  __x64_sys_bpf+0x69/0x80
[  660.784557][T25661]  x64_sys_call+0x10cb/0x3020
[  660.784630][T25661]  do_syscall_64+0x136/0x3c0
[  660.784664][T25661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.784690][T25661] RIP: 0033:0x7f0c3f0bde99
[  660.784710][T25661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.784734][T25661] RSP: 002b:00007f0c3db17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  660.784839][T25661] RAX: ffffffffffffffda RBX: 00007f0c3f345fa0 RCX: 00007f0c3f0bde99
[  660.784859][T25661] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  660.784878][T25661] RBP: 00007f0c3db17090 R08: 0000000000000000 R09: 0000000000000000
[  660.784895][T25661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.784913][T25661] R13: 00007f0c3f346038 R14: 00007f0c3f345fa0 R15: 00007ffd3e4e39e8
[  660.784939][T25661]  </TASK>
[  661.108890][   T28] audit: type=1326 audit(1784965492.140:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.4.5495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  661.149491][   T28] audit: type=1326 audit(1784965492.170:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.4.5495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e0a6bde99 code=0x7ffc0000
[  661.430907][T25692] netlink: 'syz.5.5497': attribute type 64 has an invalid length.
[  661.438791][T25692] __nla_validate_parse: 2 callbacks suppressed
[  661.438804][T25692] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5497'.
[  661.862562][T25699] loop4: detected capacity change from 0 to 512
[  661.873371][T25699] EXT4-fs: Ignoring removed bh option
[  661.880402][T25699] EXT4-fs: Ignoring removed bh option
[  661.934348][T25699] EXT4-fs (loop4): 1 truncate cleaned up
[  661.940907][T25699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  661.961341][T25699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5504'.
[  661.993679][T25707] FAULT_INJECTION: forcing a failure.
[  661.993679][T25707] name failslab, interval 1, probability 0, space 0, times 0
[  661.993728][T25707] CPU: 0 UID: 0 PID: 25707 Comm: syz.5.5506 Not tainted syzkaller #0 PREEMPT(lazy) 
[  661.993770][T25707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  661.993789][T25707] Call Trace:
[  661.993799][T25707]  <TASK>
[  661.993811][T25707]  __dump_stack+0x1d/0x30
[  661.993899][T25707]  dump_stack_lvl+0x95/0xd0
[  661.993931][T25707]  dump_stack+0x15/0x1b
[  661.993956][T25707]  should_fail_ex+0x25e/0x270
[  661.994006][T25707]  should_failslab+0x8c/0xb0
[  661.994041][T25707]  __kmalloc_noprof+0xd4/0x4a0
[  661.994078][T25707]  ? security_sk_alloc+0x52/0x120
[  661.994166][T25707]  ? security_sk_alloc+0x52/0x120
[  661.994284][T25707]  ? kmem_cache_alloc_noprof+0x1f1/0x3c0
[  661.994365][T25707]  security_sk_alloc+0x52/0x120
[  661.994484][T25707]  sk_prot_alloc+0xc2/0x180
[  661.994535][T25707]  sk_alloc+0x34/0x3e0
[  661.994582][T25707]  inet_create+0x3cb/0x790
[  661.994689][T25707]  __sock_create+0x2e5/0x580
[  661.994733][T25707]  sock_create_kern+0x38/0x50
[  661.994769][T25707]  udp_sock_create4+0x68/0x2e0
[  661.994804][T25707]  rxrpc_lookup_local+0x844/0xca0
[  661.994899][T25707]  rxrpc_sendmsg+0x2e2/0x580
[  661.994994][T25707]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  661.995031][T25707]  ____sys_sendmsg+0x532/0x580
[  661.995087][T25707]  ___sys_sendmsg+0x195/0x1e0
[  661.995208][T25707]  __x64_sys_sendmsg+0xd4/0x160
[  661.995343][T25707]  x64_sys_call+0x194c/0x3020
[  661.995377][T25707]  do_syscall_64+0x136/0x3c0
[  661.995454][T25707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.995483][T25707] RIP: 0033:0x7f60771ade99
[  661.995506][T25707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.995535][T25707] RSP: 002b:00007f6075c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  661.995658][T25707] RAX: ffffffffffffffda RBX: 00007f6077435fa0 RCX: 00007f60771ade99
[  661.995680][T25707] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[  661.995699][T25707] RBP: 00007f6075c07090 R08: 0000000000000000 R09: 0000000000000000
[  661.995719][T25707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.995783][T25707] R13: 00007f6077436038 R14: 00007f6077435fa0 R15: 00007ffcc1054588
[  661.995816][T25707]  </TASK>
[  662.015919][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5504'.
[  662.183900][T25717] loop5: detected capacity change from 0 to 512
[  662.187060][T25717] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  662.202239][T25717] loop5: detected capacity change from 0 to 512
[  662.203175][T25717] EXT4-fs: Ignoring removed i_version option
[  662.205356][T25717] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.5509: Directory hole found for htree index block 0
[  662.205431][T25717] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  662.205582][T25717] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  662.206170][T25717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  662.387673][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5508'.
[  662.482982][T25713] loop6: detected capacity change from 0 to 512
[  662.489786][T25713] EXT4-fs: Ignoring removed oldalloc option
[  662.504704][T25713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  662.512921][T25713] EXT4-fs (loop6): orphan cleanup on readonly fs
[  662.521071][T25713] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  662.535829][T25713] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  662.542713][T25713] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.5508: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  662.560590][T25713] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  662.560803][T25713] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5508: couldn't read orphan inode 13 (err -117)
[  662.581893][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  662.581917][    C0] EXT4-fs (loop6): last error at time 1784965493: ext4_ext_check_inode:521: inode 13
[  662.598127][T25713] loop6: lost filesystem error report for type 5 error -117
[  662.598588][T25713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  662.618554][ T3078] net_ratelimit: 6 callbacks suppressed
[  662.618573][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.649363][T25713] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  662.658989][T25713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  662.667860][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.683051][T25713] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  662.722456][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.790126][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.819728][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.844557][T25742] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5515'.
[  663.025184][T25731] ALSA: seq fatal error: cannot create timer (-22)
[  663.108220][T25756] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5522'.
[  663.131491][T25755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.186014][T25758] loop4: detected capacity change from 0 to 512
[  663.218972][T25758] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  663.237917][T25762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.254740][T25762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.263527][T25758] loop4: detected capacity change from 0 to 512
[  663.270018][T25766] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5526'.
[  663.280246][T25764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5525'.
[  663.283316][T25758] EXT4-fs: Ignoring removed i_version option
[  663.308167][T25758] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.5521: Directory hole found for htree index block 0
[  663.324126][T25758] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  663.325796][T25758] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  663.335091][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  663.335119][    C1] EXT4-fs (loop4): initial error at time 1784965494: dx_probe:791: inode 2
[  663.335155][    C1] EXT4-fs (loop4): last error at time 1784965494: dx_probe:791: inode 2
[  663.365003][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5524'.
[  663.368596][T25758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  663.390656][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.410597][T25770] team0: Port device team_slave_0 removed
[  663.447367][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5525'.
[  663.479014][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.489573][  T311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.516635][T25774] loop4: detected capacity change from 0 to 1024
[  663.527832][T25774] EXT4-fs: Ignoring removed bh option
[  663.555478][T25774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.620430][T20783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.647161][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.770406][T25791] loop5: detected capacity change from 0 to 1024
[  663.837148][   T28] kauditd_printk_skb: 169 callbacks suppressed
[  663.837165][   T28] audit: type=1400 audit(1784965494.870:2136): avc:  denied  { write } for  pid=25795 comm="syz.0.5536" path="socket:[69657]" dev="sockfs" ino=69657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  663.867564][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.876778][T25791] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  663.886902][T25791] System zones: 0-1, 3-36
[  663.893411][T25791] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.5534: bad orphan inode 134217728
[  663.904288][T25791] loop5: lost filesystem error report for type 5 error -117
[  663.906066][T25791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  663.930822][   T28] audit: type=1400 audit(1784965494.970:2137): avc:  denied  { attach_queue } for  pid=25795 comm="syz.0.5536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  664.546212][   T28] audit: type=1400 audit(1784965495.580:2138): avc:  denied  { write } for  pid=25803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.615278][   T28] audit: type=1400 audit(1784965495.650:2139): avc:  denied  { write } for  pid=25821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.659758][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.673366][T25791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.688105][T25828] loop3: detected capacity change from 0 to 1024
[  664.716006][T25828] EXT4-fs: Ignoring removed bh option
[  664.771116][T25828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  664.808312][   T28] audit: type=1400 audit(1784965495.840:2140): avc:  denied  { write } for  pid=25825 comm="syz.3.5542" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  664.892488][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.901553][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.921612][   T28] audit: type=1400 audit(1784965495.960:2141): avc:  denied  { write } for  pid=25830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.969697][T25852] xt_hashlimit: size too large, truncated to 1048576
[  665.008869][   T28] audit: type=1400 audit(1784965496.040:2142): avc:  denied  { write } for  pid=25861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.013754][T25862] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20001
[  665.056448][T25863] loop3: detected capacity change from 0 to 512
[  665.079283][T25866] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  665.101613][T25863] EXT4-fs: Ignoring removed oldalloc option
[  665.116749][T25866] EXT4-fs: Ignoring removed i_version option
[  665.138151][T25863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  665.170819][T25866] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.5552: Directory hole found for htree index block 0
[  665.192247][T25863] EXT4-fs (loop3): orphan cleanup on readonly fs
[  665.198817][T25866] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  665.199618][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  665.215280][    C1] EXT4-fs (loop4): initial error at time 1784965496: dx_probe:791: inode 2
[  665.223971][    C1] EXT4-fs (loop4): last error at time 1784965496: dx_probe:791: inode 2
[  665.232847][T25866] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  665.241939][T25863] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  665.258531][T25866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  665.272083][T25863] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  665.290330][T25863] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.5549: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  665.308574][T25863] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  665.309888][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  665.326518][    C1] EXT4-fs (loop3): last error at time 1784965496: ext4_ext_check_inode:521: inode 13
[  665.354121][T25863] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5549: couldn't read orphan inode 13 (err -117)
[  665.367548][T25862] xt_hashlimit: size too large, truncated to 1048576
[  665.374433][T25863] loop3: lost filesystem error report for type 5 error -117
[  665.376617][T25863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  665.421608][T25860] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  665.447946][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.461483][T25860] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  665.487862][   T28] audit: type=1400 audit(1784965496.520:2143): avc:  denied  { write } for  pid=25868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.533815][   T28] audit: type=1400 audit(1784965496.570:2144): avc:  denied  { write } for  pid=25894 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.573612][T25860] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  665.594167][   T28] audit: type=1400 audit(1784965496.600:2145): avc:  denied  { read write } for  pid=25881 comm="syz.6.5554" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  665.671610][T25893] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  665.745020][T25908] syz.5.5558: attempt to access beyond end of device
[  665.745020][T25908] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128
[  665.761822][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.773042][T25908] syz.5.5558: attempt to access beyond end of device
[  665.773042][T25908] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  665.786779][T25908] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  665.795355][T25908] syz.5.5558: attempt to access beyond end of device
[  665.795355][T25908] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128
[  665.809094][T25908] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  665.833838][T25908] syz.5.5558: attempt to access beyond end of device
[  665.833838][T25908] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128
[  665.850577][T25915] EXT4-fs: Ignoring removed bh option
[  665.865729][T25916] syz.5.5558: attempt to access beyond end of device
[  665.865729][T25916] loop5: rw=8912896, sector=154, nr_sectors = 8 limit=128
[  665.885960][T25916] syz.5.5558: attempt to access beyond end of device
[  665.885960][T25916] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128
[  665.917718][T25915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  665.935541][T25916] syz.5.5558: attempt to access beyond end of device
[  665.935541][T25916] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128
[  665.950241][T25916] syz.5.5558: attempt to access beyond end of device
[  665.950241][T25916] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128
[  665.969753][T25916] syz.5.5558: attempt to access beyond end of device
[  665.969753][T25916] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128
[  665.989729][T25916] syz.5.5558: attempt to access beyond end of device
[  665.989729][T25916] loop5: rw=8388608, sector=154, nr_sectors = 8 limit=128
[  666.061098][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.083542][T25938] FAULT_INJECTION: forcing a failure.
[  666.083542][T25938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  666.096671][T25938] CPU: 0 UID: 0 PID: 25938 Comm: syz.3.5565 Not tainted syzkaller #0 PREEMPT(lazy) 
[  666.096699][T25938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  666.096713][T25938] Call Trace:
[  666.096721][T25938]  <TASK>
[  666.096776][T25938]  __dump_stack+0x1d/0x30
[  666.096808][T25938]  dump_stack_lvl+0x95/0xd0
[  666.096837][T25938]  dump_stack+0x15/0x1b
[  666.096889][T25938]  should_fail_ex+0x25e/0x270
[  666.096928][T25938]  should_fail+0xb/0x20
[  666.096963][T25938]  should_fail_usercopy+0x1a/0x20
[  666.097114][T25938]  _copy_from_iter+0xcc/0xe70
[  666.097157][T25938]  ? __alloc_skb+0x511/0x6f0
[  666.097194][T25938]  ? __alloc_skb+0x205/0x6f0
[  666.097224][T25938]  netlink_sendmsg+0x4a4/0x6f0
[  666.097257][T25938]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.097290][T25938]  ____sys_sendmsg+0x532/0x580
[  666.097400][T25938]  ___sys_sendmsg+0x195/0x1e0
[  666.097533][T25938]  __x64_sys_sendmsg+0xd4/0x160
[  666.097590][T25938]  x64_sys_call+0x194c/0x3020
[  666.097675][T25938]  do_syscall_64+0x136/0x3c0
[  666.097759][T25938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.097783][T25938] RIP: 0033:0x7fc66034de99
[  666.097801][T25938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.097821][T25938] RSP: 002b:00007fc65eda7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  666.097881][T25938] RAX: ffffffffffffffda RBX: 00007fc6605d5fa0 RCX: 00007fc66034de99
[  666.097896][T25938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  666.097911][T25938] RBP: 00007fc65eda7090 R08: 0000000000000000 R09: 0000000000000000
[  666.097925][T25938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.097939][T25938] R13: 00007fc6605d6038 R14: 00007fc6605d5fa0 R15: 00007ffdef301158
[  666.097962][T25938]  </TASK>
[  666.297678][T25942] FAULT_INJECTION: forcing a failure.
[  666.297678][T25942] name fail_futex, interval 1, probability 0, space 0, times 0
[  666.320946][T25942] CPU: 1 UID: 0 PID: 25942 Comm: syz.3.5568 Not tainted syzkaller #0 PREEMPT(lazy) 
[  666.320977][T25942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  666.320992][T25942] Call Trace:
[  666.320999][T25942]  <TASK>
[  666.321007][T25942]  __dump_stack+0x1d/0x30
[  666.321143][T25942]  dump_stack_lvl+0x95/0xd0
[  666.321170][T25942]  dump_stack+0x15/0x1b
[  666.321196][T25942]  should_fail_ex+0x25e/0x270
[  666.321236][T25942]  should_fail+0xb/0x20
[  666.321301][T25942]  should_fail_futex+0x49/0x50
[  666.321346][T25942]  __se_sys_futex+0x10c/0x370
[  666.321377][T25942]  __x64_sys_futex+0x78/0x90
[  666.321439][T25942]  x64_sys_call+0x24ab/0x3020
[  666.321503][T25942]  do_syscall_64+0x136/0x3c0
[  666.321578][T25942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.321619][T25942] RIP: 0033:0x7fc66034de99
[  666.321637][T25942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.321718][T25942] RSP: 002b:00007fc65eda7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  666.321745][T25942] RAX: ffffffffffffffda RBX: 00007fc6605d5fa0 RCX: 00007fc66034de99
[  666.321765][T25942] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000020000000cffc
[  666.321817][T25942] RBP: 00007fc65eda7090 R08: 0000200000048000 R09: 0000000000000000
[  666.321833][T25942] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  666.321851][T25942] R13: 00007fc6605d6038 R14: 00007fc6605d5fa0 R15: 00007ffdef301158
[  666.321880][T25942]  </TASK>
[  666.660928][T25964] EXT4-fs: Ignoring removed bh option
[  666.682837][T25964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  666.750599][T25972] __nla_validate_parse: 6 callbacks suppressed
[  666.750619][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5577'.
[  666.785601][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5577'.
[  666.797202][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.967365][T26003] set_capacity_and_notify: 5 callbacks suppressed
[  666.967386][T26003] loop3: detected capacity change from 0 to 512
[  666.983054][T26003] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  667.011668][T26003] loop3: detected capacity change from 0 to 512
[  667.029167][T26003] EXT4-fs: Ignoring removed i_version option
[  667.049008][T26003] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.5584: Directory hole found for htree index block 0
[  667.063475][T26003] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  667.063643][T26003] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  667.072756][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  667.072778][    C0] EXT4-fs (loop3): initial error at time 1784965498: dx_probe:791: inode 2
[  667.072827][    C0] EXT4-fs (loop3): last error at time 1784965498: dx_probe:791: inode 2
[  667.133036][T26003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  667.155138][T26003] syz_tun: entered allmulticast mode
[  667.179423][T26012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.188463][T26012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.208021][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.221089][T26012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5586'.
[  667.240405][T26018] loop3: detected capacity change from 0 to 1024
[  667.247275][T26018] EXT4-fs: Ignoring removed bh option
[  667.261070][T26018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  667.285352][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.322455][T26024] loop6: detected capacity change from 0 to 512
[  667.331580][T26024] EXT4-fs: Ignoring removed bh option
[  667.337271][T26024] EXT4-fs: Ignoring removed bh option
[  667.347735][T26024] EXT4-fs (loop6): 1 truncate cleaned up
[  667.357050][T26024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  667.378039][T26027] loop4: detected capacity change from 0 to 512
[  667.384770][T26027] EXT4-fs: Ignoring removed bh option
[  667.390218][T26027] EXT4-fs: Ignoring removed bh option
[  667.397197][T26027] EXT4-fs (loop4): 1 truncate cleaned up
[  667.403312][T26027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  667.435792][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5590'.
[  667.481888][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5591'.
[  667.487328][T26024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5590'.
[  667.596616][T15835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.649874][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.781966][ T4497] net_ratelimit: 7 callbacks suppressed
[  667.782052][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.905137][T26053] loop3: detected capacity change from 0 to 1024
[  667.912323][T26053] EXT4-fs: Ignoring removed bh option
[  667.948696][T26053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  668.005300][T26060] loop5: detected capacity change from 0 to 128
[  668.014196][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.019920][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.024243][T26060] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  668.051136][T26061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.224211][ T4511] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  668.270146][T26073] loop5: detected capacity change from 0 to 512
[  668.276652][ T4511] Bluetooth: hci0: Frame reassembly failed (-84)
[  668.289192][T26073] EXT4-fs: Ignoring removed bh option
[  668.321959][T26073] EXT4-fs: Ignoring removed bh option
[  668.347830][T26073] EXT4-fs (loop5): 1 truncate cleaned up
[  668.353979][T26073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  668.379016][T26073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5606'.
[  668.484870][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5606'.
[  668.642055][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.665813][T26099] loop5: detected capacity change from 0 to 512
[  668.672754][T26099] EXT4-fs: Ignoring removed bh option
[  668.678254][T26099] EXT4-fs: Ignoring removed bh option
[  668.685392][T26099] EXT4-fs (loop5): 1 truncate cleaned up
[  668.691855][T26099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  668.734830][T26099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5614'.
[  668.791137][T26108] FAULT_INJECTION: forcing a failure.
[  668.791137][T26108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.817221][T26108] CPU: 0 UID: 0 PID: 26108 Comm: syz.0.5617 Not tainted syzkaller #0 PREEMPT(lazy) 
[  668.817255][T26108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  668.817274][T26108] Call Trace:
[  668.817283][T26108]  <TASK>
[  668.817295][T26108]  __dump_stack+0x1d/0x30
[  668.817330][T26108]  dump_stack_lvl+0x95/0xd0
[  668.817359][T26108]  dump_stack+0x15/0x1b
[  668.817385][T26108]  should_fail_ex+0x25e/0x270
[  668.817504][T26108]  should_fail+0xb/0x20
[  668.817568][T26108]  should_fail_usercopy+0x1a/0x20
[  668.817608][T26108]  _copy_to_user+0x20/0xa0
[  668.817635][T26108]  simple_read_from_buffer+0xb5/0x130
[  668.817663][T26108]  proc_fail_nth_read+0x10e/0x150
[  668.817738][T26108]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  668.817769][T26108]  vfs_read+0x18e/0x7c0
[  668.817793][T26108]  ? __rcu_read_unlock+0x4e/0x70
[  668.817829][T26108]  ? __fget_files+0x184/0x1c0
[  668.817887][T26108]  ? mutex_lock+0x57/0x90
[  668.817988][T26108]  ksys_read+0xdc/0x1a0
[  668.818015][T26108]  __x64_sys_read+0x40/0x50
[  668.818035][T26108]  x64_sys_call+0x2886/0x3020
[  668.818069][T26108]  do_syscall_64+0x136/0x3c0
[  668.818104][T26108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.818140][T26108] RIP: 0033:0x7f0c3f07e6ce
[  668.818196][T26108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  668.818223][T26108] RSP: 002b:00007f0c3db16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  668.818255][T26108] RAX: ffffffffffffffda RBX: 00007f0c3db176c0 RCX: 00007f0c3f07e6ce
[  668.818273][T26108] RDX: 000000000000000f RSI: 00007f0c3db170a0 RDI: 0000000000000004
[  668.818292][T26108] RBP: 00007f0c3db17090 R08: 0000000000000000 R09: 0000000000000000
[  668.818340][T26108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.818354][T26108] R13: 00007f0c3f346038 R14: 00007f0c3f345fa0 R15: 00007ffd3e4e39e8
[  668.818376][T26108]  </TASK>
[  668.902830][T26111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5614'.
[  668.974709][   T28] kauditd_printk_skb: 70 callbacks suppressed
[  668.974774][   T28] audit: type=1400 audit(1784965500.010:2216): avc:  denied  { write } for  pid=26098 comm="syz.5.5614" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  669.143791][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.148281][T26119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  669.220571][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.277938][   T28] audit: type=1326 audit(1784965500.310:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.5.5621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  669.320475][   T28] audit: type=1326 audit(1784965500.310:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.5.5621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  669.356689][T26130] loop6: detected capacity change from 0 to 1024
[  669.357163][   T28] audit: type=1326 audit(1784965500.340:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.5.5621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  669.369953][T26130] EXT4-fs: inline encryption not supported
[  669.397769][   T28] audit: type=1326 audit(1784965500.340:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.5.5621" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60771ade99 code=0x7ffc0000
[  669.451015][T26130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  669.469851][   T28] audit: type=1400 audit(1784965500.500:2221): avc:  denied  { write } for  pid=26129 comm="syz.6.5625" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  669.518688][T24890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.529767][T26136] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  669.550307][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.562051][T26136] EXT4-fs: Ignoring removed i_version option
[  669.577061][T26136] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.5627: Directory hole found for htree index block 0
[  669.599091][T26136] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  669.599275][T26136] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  669.608403][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  669.608428][    C1] EXT4-fs (loop5): initial error at time 1784965500: dx_probe:791: inode 2
[  669.608473][    C1] EXT4-fs (loop5): last error at time 1784965500: dx_probe:791: inode 2
[  669.654896][T26136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.729639][T19869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.793913][   T28] audit: type=1400 audit(1784965500.820:2222): avc:  denied  { remount } for  pid=26146 comm="syz.0.5631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  669.815790][T26152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.825753][T26152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.889065][T26155] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  670.028047][   T28] audit: type=1326 audit(1784965501.060:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26158 comm="syz.0.5636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3f0bde99 code=0x7ffc0000
[  670.082970][   T28] audit: type=1326 audit(1784965501.060:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26158 comm="syz.0.5636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3f0bde99 code=0x7ffc0000
[  670.137061][   T28] audit: type=1326 audit(1784965501.090:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26158 comm="syz.0.5636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0c3f0bde99 code=0x7ffc0000
[  670.339695][ T3588] Bluetooth: hci0: command 0x1003 tx timeout
[  670.347357][T16844] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  671.128325][T26185] FAULT_INJECTION: forcing a failure.
[  671.128325][T26185] name failslab, interval 1, probability 0, space 0, times 0
[  671.141108][T26185] CPU: 1 UID: 0 PID: 26185 Comm: syz.0.5644 Not tainted syzkaller #0 PREEMPT(lazy) 
[  671.141140][T26185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  671.141179][T26185] Call Trace:
[  671.141186][T26185]  <TASK>
[  671.141194][T26185]  __dump_stack+0x1d/0x30
[  671.141230][T26185]  dump_stack_lvl+0x95/0xd0
[  671.141257][T26185]  dump_stack+0x15/0x1b
[  671.141282][T26185]  should_fail_ex+0x25e/0x270
[  671.141324][T26185]  should_failslab+0x8c/0xb0
[  671.141354][T26185]  __kvmalloc_node_noprof+0x15b/0x590
[  671.141423][T26185]  ? simple_xattr_alloc+0x58/0xe0
[  671.141456][T26185]  ? simple_xattr_alloc+0x58/0xe0
[  671.141495][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.141494][T26185]  ? security_sid_to_context_force+0x2a/0x40
[  671.141655][T26185]  simple_xattr_alloc+0x58/0xe0
[  671.141766][T26185]  shmem_initxattrs+0x19f/0x360
[  671.141887][T26185]  security_inode_init_security+0x249/0x320
[  671.142059][T26185]  ? __pfx_shmem_initxattrs+0x10/0x10
[  671.142174][T26185]  shmem_mknod+0xaa/0x170
[  671.142353][T26185]  shmem_mkdir+0x33/0x70
[  671.142464][T26185]  vfs_mkdir+0x28a/0x3e0
[  671.142569][T26185]  filename_mkdirat+0x138/0x300
[  671.142652][T26185]  __se_sys_mkdirat+0x32/0xf0
[  671.142760][T26185]  __x64_sys_mkdirat+0x43/0x50
[  671.142832][T26185]  x64_sys_call+0x2c4e/0x3020
[  671.142916][T26185]  do_syscall_64+0x136/0x3c0
[  671.142998][T26185]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  671.143196][T26185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.143269][T26185] RIP: 0033:0x7f0c3f0bcd07
[  671.143308][T26185] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.143371][T26185] RSP: 002b:00007f0c3db16e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  671.143508][T26185] RAX: ffffffffffffffda RBX: 00007f0c3db16ee0 RCX: 00007f0c3f0bcd07
[  671.143559][T26185] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c
[  671.143607][T26185] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000
[  671.143655][T26185] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080
[  671.143717][T26185] R13: 00007f0c3db16ea0 R14: 0000000000000000 R15: 0000000000000000
[  671.143787][T26185]  </TASK>
[  671.708183][T26198] EXT4-fs: Ignoring removed bh option
[  671.739396][T26198] EXT4-fs: Ignoring removed bh option
[  671.828585][T26198] EXT4-fs (loop6): 1 truncate cleaned up
[  671.834921][T26198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  671.854372][T26202] ALSA: seq fatal error: cannot create timer (-22)
[  671.869796][T26198] __nla_validate_parse: 7 callbacks suppressed
[  671.869815][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5650'.
[  672.036541][T26220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5650'.
[  672.154624][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.163083][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.296736][T26240] set_capacity_and_notify: 3 callbacks suppressed
[  672.296759][T26240] loop3: detected capacity change from 0 to 132
[  672.541311][T26244] loop3: detected capacity change from 0 to 128
[  672.619423][T26244] bio_check_eod: 5938 callbacks suppressed
[  672.619441][T26244] syz.3.5663: attempt to access beyond end of device
[  672.619441][T26244] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128
[  673.062064][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.344605][T26243] syz.3.5663: attempt to access beyond end of device
[  673.344605][T26243] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128
[  673.358872][T26243] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  673.391935][T26243] syz.3.5663: attempt to access beyond end of device
[  673.391935][T26243] loop3: rw=8390657, sector=156, nr_sectors = 2 limit=128
[  673.420356][T26243] Buffer I/O error on dev loop3, logical block 78, lost async page write
[  673.432276][T26243] syz.3.5663: attempt to access beyond end of device
[  673.432276][T26243] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  673.457826][T26254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5666'.
[  673.472815][T26243] Buffer I/O error on dev loop3, logical block 79, lost async page write
[  673.488276][T26255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  673.552932][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5666'.
[  674.186086][T26264] ALSA: seq fatal error: cannot create timer (-22)
[  674.292257][T26280] loop3: detected capacity change from 0 to 512
[  674.297062][T26269] ALSA: seq fatal error: cannot create timer (-22)
[  674.307480][T26280] EXT4-fs: Ignoring removed bh option
[  674.318756][T26280] EXT4-fs: Ignoring removed bh option
[  674.322627][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  674.322669][   T28] audit: type=1400 audit(1784965505.350:2234): avc:  denied  { write } for  pid=26273 comm="syz.4.5672" laddr=::ffff:172.20.20.10 lport=53269 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  674.357085][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.378255][T26280] EXT4-fs (loop3): 1 truncate cleaned up
[  674.384354][   T28] audit: type=1400 audit(1784965505.350:2235): avc:  denied  { setopt } for  pid=26273 comm="syz.4.5672" laddr=::ffff:172.20.20.10 lport=53269 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  674.384702][T26280] EXT4-fs mount: 1 callbacks suppressed
[  674.384750][T26280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  674.507901][T26280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5674'.
[  674.524455][T26284] syzkaller0: entered promiscuous mode
[  674.529982][T26284] syzkaller0: entered allmulticast mode
[  674.659761][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5674'.
[  674.716187][T26296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.725134][T26296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  674.764207][   T28] audit: type=1400 audit(1784965505.800:2236): avc:  denied  { write } for  pid=26279 comm="syz.3.5674" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  674.854261][T26303] loop5: detected capacity change from 0 to 128
[  674.869701][T26303] syz.5.5681: attempt to access beyond end of device
[  674.869701][T26303] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128
[  674.884802][T26303] syz.5.5681: attempt to access beyond end of device
[  674.884802][T26303] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  674.899494][T26303] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  674.908251][T26304] loop6: detected capacity change from 0 to 128
[  674.909845][T26303] syz.5.5681: attempt to access beyond end of device
[  674.909845][T26303] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128
[  674.929289][T26303] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  674.938301][T26303] syz.5.5681: attempt to access beyond end of device
[  674.938301][T26303] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128
[  674.952833][T26304] syz.6.5682: attempt to access beyond end of device
[  674.952833][T26304] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128
[  674.967927][T26304] syz.6.5682: attempt to access beyond end of device
[  674.967927][T26304] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  674.981755][T26304] Buffer I/O error on dev loop6, logical block 79, lost async page write
[  674.990317][T26304] Buffer I/O error on dev loop6, logical block 80, lost async page write
[  674.991991][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.008602][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.034944][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.085815][T26309] loop4: detected capacity change from 0 to 128
[  675.101203][T26309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  675.109341][T26309] System zones: 1-3, 19-19, 35-36
[  675.115148][T26309] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  675.129206][T26309] ext4 filesystem being mounted at /508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  675.163843][T26309] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 571342851 (only 1 groups)
[  675.210409][T15835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  675.526748][T26306] ALSA: seq fatal error: cannot create timer (-22)
[  675.621015][T26320] FAULT_INJECTION: forcing a failure.
[  675.621015][T26320] name failslab, interval 1, probability 0, space 0, times 0
[  675.761286][T26320] CPU: 1 UID: 0 PID: 26320 Comm: syz.3.5687 Not tainted syzkaller #0 PREEMPT(lazy) 
[  675.761322][T26320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  675.761340][T26320] Call Trace:
[  675.761350][T26320]  <TASK>
[  675.761361][T26320]  __dump_stack+0x1d/0x30
[  675.761390][T26320]  dump_stack_lvl+0x95/0xd0
[  675.761412][T26320]  dump_stack+0x15/0x1b
[  675.761432][T26320]  should_fail_ex+0x25e/0x270
[  675.761490][T26320]  should_failslab+0x8c/0xb0
[  675.761521][T26320]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  675.761550][T26320]  ? vm_area_alloc+0x2c/0xb0
[  675.761572][T26320]  ? vm_area_alloc+0x2c/0xb0
[  675.761615][T26320]  vm_area_alloc+0x2c/0xb0
[  675.761647][T26320]  mmap_region+0x112b/0x20c0
[  675.761672][T26320]  ? context_to_sid+0x291/0x2c0
[  675.761740][T26320]  do_mmap+0x970/0xbc0
[  675.761777][T26320]  vm_mmap_pgoff+0x183/0x2d0
[  675.761808][T26320]  ksys_mmap_pgoff+0xc1/0x310
[  675.761837][T26320]  ? __x64_sys_mmap+0x49/0x70
[  675.761869][T26320]  x64_sys_call+0x14df/0x3020
[  675.761893][T26320]  do_syscall_64+0x136/0x3c0
[  675.761942][T26320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.761975][T26320] RIP: 0033:0x7fc66034dc02
[  675.761993][T26320] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  675.762012][T26320] RSP: 002b:00007fc65eda6df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  675.762033][T26320] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc66034dc02
[  675.762050][T26320] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  675.762068][T26320] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  675.762086][T26320] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  675.762103][T26320] R13: 00007fc65eda6ee0 R14: 00007fc65eda6ea0 R15: 00002000000002c0
[  675.762133][T26320]  </TASK>
[  676.019623][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.263541][T26324] loop3: detected capacity change from 0 to 512
[  676.270761][T26324] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  676.284071][T26324] loop3: detected capacity change from 0 to 512
[  676.293193][T26324] EXT4-fs: Ignoring removed i_version option
[  676.303036][T26324] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.5688: Directory hole found for htree index block 0
[  676.315823][T26324] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  676.315965][T26324] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  676.325054][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  676.325079][    C0] EXT4-fs (loop3): initial error at time 1784965507: dx_probe:791: inode 2
[  676.325116][    C0] EXT4-fs (loop3): last error at time 1784965507: dx_probe:791: inode 2
[  676.366051][T26324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  676.392316][ T5862] ==================================================================
[  676.400476][ T5862] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod
[  676.407475][ T5862] 
[  676.409827][ T5862] write to 0xffff888103a3d6b4 of 4 bytes by task 3284 on cpu 1:
[  676.417479][ T5862]  shmem_mknod+0x143/0x170
[  676.421959][ T5862]  shmem_create+0x34/0x50
[  676.426360][ T5862]  path_openat+0xcfb/0x2000
[  676.430914][ T5862]  do_file_open+0x16c/0x290
[  676.435480][ T5862]  do_sys_openat2+0xa0/0x130
[  676.440122][ T5862]  __x64_sys_openat+0xf2/0x120
[  676.444939][ T5862]  x64_sys_call+0x1e39/0x3020
[  676.449659][ T5862]  do_syscall_64+0x136/0x3c0
[  676.454279][ T5862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.460194][ T5862] 
[  676.462535][ T5862] read to 0xffff888103a3d6b4 of 4 bytes by task 5862 on cpu 0:
[  676.470091][ T5862]  fill_mg_cmtime+0x5b/0x240
[  676.474707][ T5862]  generic_fillattr+0x24d/0x340
[  676.479592][ T5862]  shmem_getattr+0x181/0x200
[  676.484216][ T5862]  vfs_getattr_nosec+0x146/0x1e0
[  676.489178][ T5862]  vfs_getattr+0x48/0x60
[  676.493447][ T5862]  vfs_statx_path+0x28/0x140
[  676.498064][ T5862]  vfs_statx+0xc4/0x170
[  676.502241][ T5862]  vfs_fstatat+0x118/0x170
[  676.506686][ T5862]  __se_sys_newfstatat+0x55/0x3e0
[  676.511736][ T5862]  __x64_sys_newfstatat+0x55/0x70
[  676.516792][ T5862]  x64_sys_call+0x2c64/0x3020
[  676.521493][ T5862]  do_syscall_64+0x136/0x3c0
[  676.526103][ T5862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.532018][ T5862] 
[  676.534370][ T5862] value changed: 0x1a5157d4 -> 0x1a59787e
[  676.540098][ T5862] 
[  676.542433][ T5862] Reported by Kernel Concurrency Sanitizer on:
[  676.548593][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  676.557461][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  676.567533][ T5862] ==================================================================
[  676.639260][T17140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.068690][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.076921][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.099715][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.190402][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.139669][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.100911][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.179657][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.740343][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.219754][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.259654][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.660276][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.299739][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.307883][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.582874][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.140158][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.619657][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.860128][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog