last executing test programs:

8.691670977s ago: executing program 0 (id=888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xf98a88006de70c0, 0x84)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x200, 0x155)
sendfile(r2, r2, 0x0, 0x6)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x25, 0x40000ff, 0x1, 0x389, 0x8, 0x0, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0xf, 0x5, 0x1, [0xe, 0xfb]}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x30, r5, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r6 = socket$kcm(0x28, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000440)='environ\x00')
pread64(r7, 0x0, 0x0, 0x0)
open_by_handle_at(r7, &(0x7f00000002c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0xffffffffffffff81, 0x0, 0xd, 0x40}}, 0x11da00)

8.014698198s ago: executing program 0 (id=891):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
mkdirat(r3, 0x0, 0x2)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x7)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00')
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")

6.757799068s ago: executing program 0 (id=900):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
sendmsg$NFT_BATCH(r0, 0x0, 0x4028800)
dup(0xffffffffffffffff)
socket(0x11, 0x800000003, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0431a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000623000/0x4000)=nil, 0x4000)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=0x64010101, 0xb, 0x10}})
bind$inet6(r3, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb)
creat(&(0x7f0000000080)='./file0\x00', 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.146044808s ago: executing program 1 (id=912):
r0 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x3, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000508000240f9ffff0214000000110001"], 0xdc}}, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xc, 0x1, 0x0, 0x0, 0x800000000000bb39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x7, 0x7, 0x8, 0x0, 0xfffe, 0x0, 0x400, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x800)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000640)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000017148b"], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
write$cgroup_int(r3, &(0x7f0000000040), 0x1)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x9, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0})
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.799792629s ago: executing program 1 (id=913):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
symlink(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
io_setup(0x1, &(0x7f0000002500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000380)="a3", 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x4, 0x453, r3, 0x0, 0x0, 0x1}])
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r6 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0xfe5b)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x3}]}, 0x24}}, 0x44004)
unshare(0xc040400)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5, r7}, 0x38)

3.275011197s ago: executing program 0 (id=914):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7fff, 0x800}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r2 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r2)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x8004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r4)
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
tee(r3, r6, 0x8f5, 0x100000000000000)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, 0x0, 0xa40, 0x60)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r10, r9, 0x0, 0x3)
ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf25090002006c797a32000000000800410072786500140033006c6f0000000000000000000000000000c0b421d124da5257"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50)

3.225395269s ago: executing program 1 (id=916):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x30, r1, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

3.186336389s ago: executing program 2 (id=917):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2509000000840004801300010062726f6164636173742d6c696e6b00004c00078008000400070000000800020082b0000008000100"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @private=0xa010102, @remote}, 0xc)

3.16709735s ago: executing program 1 (id=918):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r1)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0}, 0x1, 0x0, 0x0, 0x4020}, 0xc814)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a82b0081"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
syz_clone(0x24800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, @perf_bp={0x0, 0x4}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
recvmsg$unix(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

3.149859381s ago: executing program 3 (id=919):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

3.011881875s ago: executing program 3 (id=920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x12)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e"], 0x3c}}, 0x40000)

3.011587425s ago: executing program 2 (id=921):
syz_emit_ethernet(0x10a9, &(0x7f0000000d40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x9, 0x109b, 0x66, 0x0, 0x3c, 0x2f, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc, 0x0, [], "d6e4cd0fe52290350d63f263"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "70e1e96b21"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x1, 0x6, 0x0], "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"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x6, 0x3, 0x0, 0x3, 0x4, 0x9}, 0x1, {0x5c}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0xd, 0x3, 0x0, 0x1, 0x4, 0x6}, 0x2, {0x7fffffff, 0xc, 0x1, 0x2, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "98008c56a912ee60dc3fd357a5511559ef9b5b2bb01693c764c98a664b4aa0fbb7767deee2d718f5"}}}}}}, 0x0)

2.989937096s ago: executing program 3 (id=922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000020)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x188, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x178, 0x1, [@m_simple={0x7c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeac3d23df27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf8, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}]}, {0x89, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8dad6c876d5cfce012a45cfa35105745b2f785d52e54c371d0be36b8374f3ce7c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socket$inet_tcp(0x2, 0x1, 0x0)

2.965471516s ago: executing program 2 (id=923):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
unshare(0x22020600)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==")
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0)

2.898336649s ago: executing program 3 (id=924):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
sendmsg$NFT_BATCH(r0, 0x0, 0x4028800)
dup(0xffffffffffffffff)
socket(0x11, 0x800000003, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0431a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000623000/0x4000)=nil, 0x4000)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=0x64010101, 0xb, 0x10}})
bind$inet6(r3, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb)
creat(&(0x7f0000000080)='./file0\x00', 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.888828649s ago: executing program 2 (id=925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000020)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x188, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x178, 0x1, [@m_simple={0x7c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeac3d23df27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf8, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}]}, {0x89, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8dad6c876d5cfce012a45cfa35105745b2f785d52e54c371d0be36b8374f3ce7c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socket$inet_tcp(0x2, 0x1, 0x0)

2.784946452s ago: executing program 2 (id=926):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x3, 0xc0b3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xd, 0x0, 0x11000, 0x8, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a0000020000ffffff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe8000000000000000000000000000bbfeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00"/272], 0x10c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x20)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000340)=ANY=[], 0x48)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, 0x0, 0x0)

2.572806829s ago: executing program 4 (id=927):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
symlink(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
io_setup(0x1, &(0x7f0000002500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000380)="a3", 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x4, 0x453, r3, 0x0, 0x0, 0x1}])
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r6 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0xfe5b)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x3}]}, 0x24}}, 0x44004)
unshare(0xc040400)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5, r7}, 0x38)

2.265716159s ago: executing program 1 (id=928):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = dup3(r1, r2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0xa6)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000400), 0x12)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

1.780743693s ago: executing program 4 (id=929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x30, 0x0, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

1.673145927s ago: executing program 4 (id=930):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
rt_sigsuspend(0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2a, 0x1, 0x0, 0xa, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0x400}, 0xb093, 0x800000, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2}, 0x0, 0x4000000003, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x10, r1, 0x1d)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34040840}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r5, r6, 0x4, r3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r7}, 0x38)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000440)=""/135, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38)
r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
file_getattr(r8, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x800)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x1)

731.585257ms ago: executing program 2 (id=931):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x26040, 0x1ac)
flock(r1, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGK660c0EqmulMZAYm0iQGl8SkwGm2nRsSafB1BiRlVvjh3BBWLIjUb4AG3e6ceOOjYkLWRjHdDpDoQxFSmkR/r+EzGHOPdN7O4Wc21A27r99ls9aWlYvSzCqJCAisikyKEHxBNxj0Ikjst1rudL34/P5uw8e3k6l02OTSo2npq4mlVIDQx+ev4y5w1Z7ZX3w8cb35Lf1/9fPbvyeepqzVM5ShWJZ6Wq6+LWsT5uGms1ZeU2pCdPQLUPlCpZRquWLtXzWLM7NVZRemO2Pz5UMy1J6oaLyRkWVi6pcqqjQEz1XUJqmqf64YD+ZpclJPdVi8UybJ4MjUiql9JCIxHZlMktdmRAAAOiqxv4/KKqd/f/yxbVy372VAbf/X4349f/XvtSutaP/j4qIb//vPb5v/68frP/f3RGdLofq/3E8DEV2nQrUw2qylNLj7s+vY/HR8rAT0P8DAAAAAAAAAAAAAAAAAAAAAPAv2LTthG3bCe/offWKSFREvO99SkMicqMLU0YbHeL+4wSof3AvPCBivpnPzGdqR3fAmoiYzv1PyC/n9eCqxt4nj1TVoHw0F9z6hflMyMmkspITUwwZkUSPNNbb9vit9NiIqtlZ3yPx7fVJSch//vVJ3/qIXL60rV6ThHyakaKYMuvMo17/akSpm3fSDfUxZxwAAAAAACeBprb47t81ba98rX5rfz3c8P5AqL6/Hvbdn4flXLi7awcAAAAA4LSwKi/yumkapSZBTPYf03oQPqIreyv82yrvbxmObqVNAu/Bd6Si7sm2Py2BAzwtewRBaaVqqLoa1ZC6sOiz9maB97bRXmNkYrTzd9AJzrx7/7N9F7y+Et1npa0HoeYvgJ7O/PYBAAAA0En1pt87M9rdCQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAp14r+jdXuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHHxJwAA//8/swLy")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8000}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r4, 0x1482}], 0x1, 0x0, 0x0, 0x0)
close(r6)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'wg0\x00', @multicast})
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r3], 0xb2)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaab884e1e3ec7217f37d25436ea0c3aaaabb86dd6000ed6a00142c00fc2200052514e5763c9bd424a686cbab3c62370b11a199b660e7e612bfa5000000000000000000000001fe8000000000000000000000000000aa132fdec76fa1ff2d904f6b75e616a17b0a5673ab5b7fba8ce3a2c0252b54ca34360d0077873bc58d439757d78f83a8862086313d3c15a22b29677b16d5e4ae8b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x20000, 0x4})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x4)
flock(r0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000005f00000095000000001e0000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002020}, 0x94)
close_range(r0, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1, 0x0)

675.321178ms ago: executing program 4 (id=932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x12)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)

529.974903ms ago: executing program 4 (id=933):
syz_emit_ethernet(0x10a3, &(0x7f0000000d40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x9, 0x1095, 0x66, 0x0, 0x3c, 0x2f, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc, 0x0, [], "d6e4cd0fe52290350d63f263"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "70e1e96b21"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x6, 0x3, 0x0, 0x3, 0x4, 0x9}, 0x1, {0x5c}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0xd, 0x3, 0x0, 0x1, 0x4, 0x6}, 0x2, {0x7fffffff, 0xc, 0x1, 0x2, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "98008c56a912ee60dc3fd357a5511559ef9b5b2bb01693c764c98a664b4aa0fbb7767deee2d718f5"}}}}}}, 0x0)

508.708713ms ago: executing program 1 (id=934):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xdc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffc, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@proto={0x5, 0x19, 0xff}, @coaddr={0x14, 0xe, @in6=@mcast2}, @extra_flags={0x8, 0x18, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x0)

456.929175ms ago: executing program 4 (id=935):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
unshare(0x22020600)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==")
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0)

228.849142ms ago: executing program 3 (id=936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x53, &(0x7f00000007c0), 0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_DESTROY(r3, &(0x7f0000000280), 0x4)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r5 = dup(r4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)=r1}, 0x20)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r9=>0x0})
getgroups(0x3, &(0x7f0000000400)=[0xee01, 0xee01, <r10=>0xee01])
r11 = getegid()
setresgid(0x0, r10, r11)
fstat(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = geteuid()
mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000740), 0x40000, &(0x7f0000000f80)=ANY=[@ANYBLOB='mode=0000000000000\"000000006,gid=', @ANYRESHEX=r11, @ANYBLOB=',uid=', @ANYRESHEX=r12, @ANYBLOB=',uid=', @ANYRESHEX=r13, @ANYBLOB=',pcr=00000000000000000012,defcontext=root,\x00'])
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r7], 0x7c}}, 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r14, 0x10, &(0x7f0000001100)={0x25, 0x0, &(0x7f0000001080)=[{&(0x7f0000000940)=""/98, 0x62}, {&(0x7f0000001040)=""/53, 0x35}], &(0x7f00000010c0)=[0x7, 0xd2, 0x5, 0xc25, 0x0, 0x9], 0x2}, 0x20)
fcntl$lock(r14, 0x24, &(0x7f0000000080)={0x2, 0x0, 0x1})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xd, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000480)='GPL\x00', 0x3, 0xc1, &(0x7f00000005c0)=""/193, 0x0, 0x26, '\x00', r9, 0x25, r14, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x2, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
openat(r5, &(0x7f0000000780)='./bus\x00', 0x200980, 0x152)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r15}})
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000000380), 0xfc, 0x586, &(0x7f00000009c0)="$eJzs3d9rW1UcAPDvTdPuJ66DMdQHKezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD64F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN7npujbpr2UmNZ8P3O2c3Htz7jfnntNz7k24AQyssfSfXMRLEfF1EnFs3bp8ZCvHmtutPr41nS5J1Ouf/JFEkr3W2j7J/j+SZV6MiF++jDiT21xudWl5rlgulxay/Hht/vp4dWn57NX54mxptnRtcmrq/JtTk++8/VbXYn3t0l/ffXz/g/NfnVr99qeHx+8mcSGOZuvWx/EMbq/PjBX/yVLDcWHDhhNdKKyfJL0+APZkKGvnw5H2AcdiKGv1wP/fFxFRBwbTSqL9w4BqjQNac/suzYP3jUfvNydAjdhH1sefb14biYONudHh1eSpmVE63x3tQvlpGT//fu9uusTW1yEObZMH2JXbKxFxLp/f3P8nWf/Xxgs7e+9zjYvHWxtrXnpaM2h/f6CX7qfjn9fbjf9ya+OfaDP+OdK6d/SMNr7H5vafe9iFYjpKx3/vth3/rnVdo0ONXOsOx3By5Wq5dC7rBk9HfdtbH+dXH9Q7rVs//kuXtPzWWDA7jof5A0/vM1OsFSNiZA/hbvJoJeLlfLv4k7X6T9rUf/rpXNphGSdL917ptG77+J+v+o8Rr7at/yfVmmx9f3K8cT6Mt86Kzf68c/LXTuX3Ov60/g9vHf9osv5+bXX3Zfxw8O9Sp3V7Pf9Hkk8b6VYjuFms1RYmIkaSjza/Pvlk31a+tX0a/+lTEatpN9eh/2t3/qeTr892GP+dE3c6btoP9T+zq/rffeLBh59/36n8ndX/G43U6eyVrP9rLztXdnqAz/r5AQAAAAAAQD/JRcTRSHKFtXQuVyg0v99xIg7nypVq7cyVyuK1mWj8VnY0hnOtO93HmvnG9yEmsu/DtvKTG/JTEXE8Ir4ZOtTIF6Yr5ZleBw8AAAAAAAAAAAAAAAAAAAB94kiH3/+nfhvq9dEBz13jwQYHen0UQC9s+8j/bjzpCehL27b/TjyCFva9Pbd/YN/T/mFwaf8wuLR/GFzaPwwu7R8Gl/YPAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXp4sV0qa8+vjWd5mduLC3OVW6cnSlV5wrzi9OF6crC9cJspTJbLhWmK/PbvV+5Urk+MRmLN8drpWptvLq0fHm+snitdvnqfHG2dLk03Nhqaeg/CA0AAAAAAAAAAAAAAAAAAAD2jerS8lyxXC4tSHRMvBd9cRjPM8CmPe2e75coJDokVrLq3d1ePeyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCDfwMAAP//Huwu3Q==")
syz_emit_ethernet(0x76, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "17c1ff2bbd7f1499f26ff189e3606b5d"}}}}}}}, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00')

83.130707ms ago: executing program 3 (id=937):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
symlink(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
io_setup(0x1, &(0x7f0000002500)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000380)="a3", 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x4, 0x453, r2, 0x0, 0x0, 0x1}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x33, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8)
socket$kcm(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0xc040400)

81.208717ms ago: executing program 0 (id=938):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x8ea, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x2a)

0s ago: executing program 0 (id=939):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7fff, 0x800}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r2 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r2)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x8004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r4)
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0)
tee(r3, r7, 0x8f5, 0x100000000000000)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, 0x0, 0xa40, 0x60)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r11, r10, 0x0, 0x3)
write(r5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf25090002006c797a32000000000800410072786500140033006c6f0000000000000000000000000000c0b421d124da5257"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50)

kernel console output (not intermixed with test programs):

n creating new route
[  122.300978][ T5043] loop4: detected capacity change from 0 to 512
[  122.317484][   T28] audit: type=1326 audit(1779399633.533:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.2.387" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  122.346472][ T5043] EXT4-fs: test_dummy_encryption option not supported
[  122.462343][   T28] audit: type=1326 audit(1779399633.533:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.2.387" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  122.553486][ T5045] loop0: detected capacity change from 0 to 512
[  122.566332][   T28] audit: type=1326 audit(1779399633.533:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.2.387" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  122.596764][ T5045] EXT4-fs: test_dummy_encryption option not supported
[  122.765550][ T5062] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  123.445216][ T5074] netlink: 'syz.1.389': attribute type 21 has an invalid length.
[  123.463568][ T5074] netlink: 'syz.1.389': attribute type 6 has an invalid length.
[  123.724437][ T5082] loop4: detected capacity change from 0 to 1024
[  123.768727][ T5082] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  123.837667][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.951289][ T5074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.389'.
[  124.178205][ T5087] loop3: detected capacity change from 0 to 1024
[  124.197441][ T5090] loop0: detected capacity change from 0 to 1024
[  124.228585][ T5087] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  124.260232][ T5090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.318811][ T5091] netlink: 'syz.2.396': attribute type 5 has an invalid length.
[  124.377344][ T5092] loop2: detected capacity change from 0 to 512
[  124.411839][ T5092] EXT4-fs: Ignoring removed bh option
[  124.434625][ T5092] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  124.435047][ T5092] EXT4-fs (loop2): 1 truncate cleaned up
[  124.435492][ T5092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.442354][ T5090] syzkaller0: entered promiscuous mode
[  124.442377][ T5090] syzkaller0: entered allmulticast mode
[  124.496395][ T5087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.394'.
[  124.670396][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.713148][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  124.713167][   T28] audit: type=1400 audit(1779399636.313:1102): avc:  denied  { setattr } for  pid=5101 comm="syz.0.398" name="SCO" dev="sockfs" ino=9593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  124.773422][ T5102] loop0: detected capacity change from 0 to 512
[  124.799421][ T5102] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  124.799470][ T5102] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  124.799795][ T5102] EXT4-fs (loop0): mount failed
[  125.183963][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.644292][ T5113] loop3: detected capacity change from 0 to 1024
[  125.680739][ T5113] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  125.751153][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.763874][   T28] audit: type=1400 audit(1779399638.313:1103): avc:  denied  { mount } for  pid=5111 comm="syz.1.401" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  127.012979][   T28] audit: type=1400 audit(1779399638.403:1104): avc:  denied  { allowed } for  pid=5109 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  127.384483][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.449725][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.946859][ T5112] loop1: detected capacity change from 0 to 764
[  128.013169][ T5112] rock: directory entry would overflow storage
[  128.021245][ T5112] rock: sig=0x4654, size=5, remaining=4
[  128.041590][   T28] audit: type=1400 audit(1779399639.643:1105): avc:  denied  { mount } for  pid=5111 comm="syz.1.401" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  128.148681][ T5112] syz.1.401 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  128.221898][   T28] audit: type=1400 audit(1779399639.823:1106): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  128.268921][ T5146] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  128.308679][ T5145] loop4: detected capacity change from 0 to 1024
[  128.332670][ T5148] loop1: detected capacity change from 0 to 1024
[  128.375068][ T5148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.408244][ T5145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.480344][ T5155] loop2: detected capacity change from 0 to 1024
[  128.481825][   T28] audit: type=1400 audit(1779399640.083:1107): avc:  denied  { mounton } for  pid=5154 comm="syz.2.410" path="/91/file1" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  128.487198][ T5155] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  128.505700][   T28] audit: type=1400 audit(1779399640.103:1108): avc:  denied  { write } for  pid=5142 comm="syz.4.407" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.511231][ T5148] syzkaller0: entered promiscuous mode
[  128.511253][ T5148] syzkaller0: entered allmulticast mode
[  128.635492][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.703112][ T5155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.410'.
[  128.815104][ T5160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'.
[  128.853169][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.038977][ T5158] loop1: detected capacity change from 0 to 512
[  129.075009][ T5158] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  129.510962][   T28] audit: type=1400 audit(1779399641.043:1109): avc:  denied  { remount } for  pid=5166 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  129.548838][ T5171] netlink: 'syz.4.413': attribute type 5 has an invalid length.
[  129.551035][   T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  129.616691][ T5176] loop4: detected capacity change from 0 to 512
[  129.641519][ T5175] FAULT_INJECTION: forcing a failure.
[  129.641519][ T5175] name failslab, interval 1, probability 0, space 0, times 0
[  129.668002][ T5176] EXT4-fs: Ignoring removed bh option
[  129.698241][   T28] audit: type=1400 audit(1779399641.053:1110): avc:  denied  { sqpoll } for  pid=5166 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  129.796685][ T5176] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  129.836416][ T5175] CPU: 1 UID: 0 PID: 5175 Comm: syz.2.417 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  129.836457][ T5175] Tainted: [W]=WARN
[  129.836465][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  129.836507][ T5175] Call Trace:
[  129.836516][ T5175]  <TASK>
[  129.836526][ T5175]  __dump_stack+0x1d/0x30
[  129.836556][ T5175]  dump_stack_lvl+0x95/0xd0
[  129.836580][ T5175]  dump_stack+0x15/0x1b
[  129.836603][ T5175]  should_fail_ex+0x263/0x280
[  129.836734][ T5175]  should_failslab+0x8c/0xb0
[  129.836770][ T5175]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  129.836893][ T5175]  ? __alloc_skb+0x2d6/0x690
[  129.836917][ T5175]  __alloc_skb+0x2d6/0x690
[  129.836938][ T5175]  ? release_sock+0x10c/0x180
[  129.837010][ T5175]  ? __alloc_skb+0x200/0x690
[  129.837032][ T5175]  netlink_alloc_large_skb+0xbf/0xf0
[  129.837081][ T5175]  netlink_sendmsg+0x40c/0x6f0
[  129.837290][ T5175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.837391][ T5175]  ____sys_sendmsg+0x563/0x5b0
[  129.837423][ T5175]  ___sys_sendmsg+0x195/0x1e0
[  129.837501][ T5175]  __x64_sys_sendmsg+0xd4/0x160
[  129.837536][ T5175]  x64_sys_call+0x194c/0x3020
[  129.837564][ T5175]  do_syscall_64+0x12c/0x3b0
[  129.837618][ T5175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.837644][ T5175] RIP: 0033:0x7f28485fce59
[  129.837664][ T5175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.837735][ T5175] RSP: 002b:00007f284704f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.837760][ T5175] RAX: ffffffffffffffda RBX: 00007f2848875fa0 RCX: 00007f28485fce59
[  129.837791][ T5175] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 000000000000000b
[  129.837808][ T5175] RBP: 00007f284704f090 R08: 0000000000000000 R09: 0000000000000000
[  129.837824][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.837885][ T5175] R13: 00007f2848876038 R14: 00007f2848875fa0 R15: 00007ffcfa0e0518
[  129.837909][ T5175]  </TASK>
[  129.884057][ T5176] EXT4-fs (loop4): 1 truncate cleaned up
[  130.047827][ T5176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.100658][   T28] audit: type=1400 audit(1779399641.693:1111): avc:  denied  { write } for  pid=5180 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  130.218811][ T5193] loop2: detected capacity change from 0 to 1024
[  130.274002][   T28] audit: type=1400 audit(1779399641.843:1112): avc:  denied  { ioctl } for  pid=5196 comm="syz.1.423" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  130.304089][ T5193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.349857][   T28] audit: type=1400 audit(1779399641.943:1113): avc:  denied  { wake_alarm } for  pid=5204 comm="syz.1.424" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  130.358151][ T5193] syzkaller0: entered promiscuous mode
[  130.376952][ T5193] syzkaller0: entered allmulticast mode
[  130.535357][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.123766][ T5225] loop3: detected capacity change from 0 to 1024
[  131.152656][ T5225] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  131.337321][ T5230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.370992][ T5230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.391444][ T5225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.429'.
[  131.438937][ T5230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'.
[  131.518298][ T5230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.577170][ T5226] loop0: detected capacity change from 0 to 512
[  131.923091][   T28] audit: type=1400 audit(1779399643.523:1114): avc:  denied  { accept } for  pid=5234 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.976215][   T28] audit: type=1400 audit(1779399643.573:1115): avc:  denied  { read } for  pid=5234 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  132.106905][ T5242] loop0: detected capacity change from 0 to 512
[  132.296367][ T5244] loop1: detected capacity change from 0 to 512
[  132.323245][ T5247] loop2: detected capacity change from 0 to 512
[  132.477573][ T5152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  132.573320][ T5249] loop0: detected capacity change from 0 to 512
[  134.318098][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.510332][ T5251] loop1: detected capacity change from 0 to 512
[  135.785140][ T5249] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0.
[  136.361305][   T28] audit: type=1400 audit(1779399647.963:1116): avc:  denied  { create } for  pid=5263 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  136.441670][ T5264] lo speed is unknown, defaulting to 1000
[  136.448342][ T5264] lo speed is unknown, defaulting to 1000
[  136.704899][ T5264] lo speed is unknown, defaulting to 1000
[  137.080765][ T5261] loop2: detected capacity change from 0 to 512
[  137.451691][ T5274] loop3: detected capacity change from 0 to 512
[  137.452324][ T5251] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1.
[  137.506295][ T5264] infiniband lyz2: set active
[  137.511115][ T3523] lo speed is unknown, defaulting to 1000
[  137.516946][ T5264] infiniband lyz2: added lo
[  137.530266][ T5261] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2.
[  137.673106][ T5264] RDS/IB: lyz2: added
[  137.682314][ T5264] smc: adding ib device lyz2 with port count 1
[  137.693101][ T5274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.709789][ T5264] smc:    ib device lyz2 port 1 has no pnetid
[  137.718334][ T5274] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  137.752547][ T3382] lo speed is unknown, defaulting to 1000
[  137.763543][ T5264] lo speed is unknown, defaulting to 1000
[  137.855803][ T5287] loop2: detected capacity change from 0 to 256
[  137.874669][ T5264] lo speed is unknown, defaulting to 1000
[  138.127164][ T5264] lo speed is unknown, defaulting to 1000
[  138.251089][ T5264] lo speed is unknown, defaulting to 1000
[  138.411985][ T5264] lo speed is unknown, defaulting to 1000
[  138.587934][   T28] audit: type=1400 audit(1779399650.173:1117): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  139.106754][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.824906][ T5314] loop0: detected capacity change from 0 to 1024
[  139.941461][ T5314] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  140.025636][ T5314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.095363][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'.
[  141.266788][ T5329] bond3: entered promiscuous mode
[  141.283554][ T5329] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.479361][ T5335] loop3: detected capacity change from 0 to 128
[  141.489669][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.673150][ T5344] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[  141.702361][ T5344] netlink: 5 bytes leftover after parsing attributes in process `syz.0.455'.
[  141.799326][   T28] audit: type=1400 audit(1779399653.393:1118): avc:  denied  { create } for  pid=5343 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.820772][ T5344] xt_hashlimit: invalid interval
[  141.855197][   T28] audit: type=1400 audit(1779399653.393:1119): avc:  denied  { setopt } for  pid=5343 comm="syz.0.455" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  142.068790][ T5366] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[  142.322680][ T5366] bond4: entered promiscuous mode
[  142.365864][   T28] audit: type=1400 audit(1779399653.963:1120): avc:  denied  { connect } for  pid=5361 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  142.393920][ T5366] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.674426][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[  143.713774][ T5373] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.751535][ T5373] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  143.788132][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.466'.
[  143.805939][ T5373] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  143.853965][ T5373] bond4: (slave vcan1): making interface the new active one
[  143.886410][ T5373] vcan1: entered promiscuous mode
[  143.902147][   T28] audit: type=1400 audit(1779399655.493:1121): avc:  denied  { connect } for  pid=5382 comm="syz.2.466" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  143.927351][ T5373] bond4: (slave vcan1): Enslaving as an active interface with an up link
[  143.984166][ T5375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.464'.
[  144.079680][ T5386] loop4: detected capacity change from 0 to 512
[  144.094190][ T5386] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.134239][ T5386] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  144.143049][ T5386] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.464: corrupted in-inode xattr: e_value size too large
[  144.143119][ T5386] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  144.144691][ T5386] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.464: couldn't read orphan inode 15 (err -117)
[  144.144725][ T5386] loop4: lost filesystem error report for type 5 error -117
[  144.146705][ T5386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.170430][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'.
[  144.317422][ T5402] lo speed is unknown, defaulting to 1000
[  144.606489][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.652066][ T5415] loop3: detected capacity change from 0 to 1024
[  144.664253][ T5417] loop4: detected capacity change from 0 to 764
[  144.683661][ T5415] EXT4-fs: Ignoring removed bh option
[  144.702594][ T5417] Symlink component flag not implemented
[  144.723528][ T5417] Symlink component flag not implemented (15)
[  144.733252][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.852995][   T28] audit: type=1400 audit(1779399656.453:1122): avc:  denied  { write } for  pid=5413 comm="syz.3.475" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  144.903120][ T5424] loop4: detected capacity change from 0 to 512
[  144.921180][ T5424] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  144.946852][ T5415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.475'.
[  144.958950][ T5424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=804ee02c, mo2=0002]
[  144.968233][   T28] audit: type=1326 audit(1779399656.563:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.3.475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194ef7ce59 code=0x7ffc0000
[  145.011908][ T5424] EXT4-fs (loop4): orphan cleanup on readonly fs
[  145.021609][   T28] audit: type=1326 audit(1779399656.593:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.3.475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194ef7ce59 code=0x7ffc0000
[  145.048297][   T28] audit: type=1326 audit(1779399656.593:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.3.475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194ef7ce59 code=0x7ffc0000
[  145.069681][ T5424] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.476: invalid indirect mapped block 2185560079 (level 1)
[  145.075168][   T28] audit: type=1326 audit(1779399656.593:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.3.475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f194ef7ce59 code=0x7ffc0000
[  145.113332][   T28] audit: type=1326 audit(1779399656.593:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.3.475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194ef7ce59 code=0x7ffc0000
[  145.126809][ T5424] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  145.166995][ T5424] EXT4-fs (loop4): Remounting filesystem read-only
[  145.176275][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  145.176300][    C1] EXT4-fs (loop4): initial error at time 1779399656: ext4_free_branches:1023: inode 11
[  145.176332][    C1] EXT4-fs (loop4): last error at time 1779399656: ext4_free_branches:1023: inode 11
[  145.210811][ T5424] EXT4-fs (loop4): 1 truncate cleaned up
[  145.217400][ T5424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  145.255573][ T5424] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.476: dx entry: limit 0 != root limit 125
[  145.282114][ T5424] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.476: Corrupt directory, running e2fsck is recommended
[  145.305455][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.014852][ T5443] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  146.907099][ T5445] loop2: detected capacity change from 0 to 1024
[  146.935044][ T5445] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  146.961767][ T5439] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  147.088398][ T5445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.323522][   T28] kauditd_printk_skb: 121 callbacks suppressed
[  147.323542][   T28] audit: type=1400 audit(1779399658.793:1249): avc:  denied  { write } for  pid=5437 comm="syz.2.479" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  147.583270][ T5455] syzkaller1: entered promiscuous mode
[  147.613079][ T5455] syzkaller1: entered allmulticast mode
[  147.731558][   T28] audit: type=1400 audit(1779399659.333:1250): avc:  denied  { ioctl } for  pid=5454 comm="syz.1.483" path="socket:[10236]" dev="sockfs" ino=10236 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  147.819116][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  148.319200][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  148.506738][ T5450] loop0: detected capacity change from 0 to 512
[  148.557431][ T5450] EXT4-fs: Ignoring removed nomblk_io_submit option
[  148.619442][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'.
[  148.670117][ T5450] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  148.707347][   T28] audit: type=1400 audit(1779399660.303:1251): avc:  denied  { setopt } for  pid=5476 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  148.746723][ T5450] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.481: corrupted in-inode xattr: e_value size too large
[  148.764079][ T5480] mmap: syz.4.484 (5480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  148.802246][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.813326][ T5450] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  148.813555][ T5450] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.481: couldn't read orphan inode 15 (err -117)
[  148.822751][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  148.822788][    C1] EXT4-fs (loop0): initial error at time 1779399660: ext4_iget_extra_inode:5128: inode 15
[  148.822816][    C1] EXT4-fs (loop0): last error at time 1779399660: ext4_iget_extra_inode:5128: inode 15
[  148.887184][ T5450] loop0: lost filesystem error report for type 5 error -117
[  148.889599][ T5450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.934546][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  149.167945][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.210641][ T5496] loop0: detected capacity change from 0 to 256
[  149.232810][ T5494] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  149.441222][ T5503] lo speed is unknown, defaulting to 1000
[  149.833611][ T5503] loop4: detected capacity change from 0 to 512
[  149.840259][ T5503] EXT4-fs: test_dummy_encryption option not supported
[  150.150758][ T5498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.557475][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'.
[  150.582621][ T5533] geneve3: entered promiscuous mode
[  150.594055][ T5533] geneve3: entered allmulticast mode
[  150.648194][ T5536] netlink: 140 bytes leftover after parsing attributes in process `syz.3.504'.
[  150.746311][ T5544] loop1: detected capacity change from 0 to 1024
[  150.758081][ T5544] EXT4-fs: Ignoring removed bh option
[  150.776798][ T5544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.809804][   T28] audit: type=1400 audit(1779399662.403:1252): avc:  denied  { write } for  pid=5543 comm="syz.1.507" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.898391][ T5544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.507'.
[  150.912477][   T28] audit: type=1326 audit(1779399662.513:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.1.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  150.946634][   T28] audit: type=1326 audit(1779399662.513:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.1.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  150.973529][   T28] audit: type=1326 audit(1779399662.513:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.1.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  151.000504][   T28] audit: type=1326 audit(1779399662.513:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.1.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  151.025998][   T28] audit: type=1326 audit(1779399662.513:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.1.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  151.051466][   T28] audit: type=1326 audit(1779399662.513:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.1.507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  151.190237][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.238449][ T5560] loop2: detected capacity change from 0 to 1024
[  151.278913][ T5560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.306564][ T5560] process 'syz.2.511' launched './file1' with NULL argv: empty string added
[  151.316986][ T5560] sock: sock_timestamping_bind_phc: sock not bind to device
[  151.330086][ T5564] loop0: detected capacity change from 0 to 512
[  151.352940][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.469104][ T5573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.514'.
[  151.479621][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.486814][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.527066][ T5573] netlink: 76 bytes leftover after parsing attributes in process `syz.0.514'.
[  151.552083][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.559271][ T5573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.566683][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.573918][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.613580][ T5573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.514'.
[  151.648511][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.655698][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.806000][ T5571] loop2: detected capacity change from 0 to 512
[  151.828038][ T5571] EXT4-fs: Ignoring removed i_version option
[  151.845918][ T5571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  151.883848][ T5571] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.513: invalid block
[  151.909017][ T5571] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  151.910940][ T5571] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.513: invalid indirect mapped block 4294967295 (level 1)
[  151.920617][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  151.927541][ T5571] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  151.934616][    C0] EXT4-fs (loop2): initial error at time 1779399663: ext4_get_branch:178: inode 11: block 4294967295
[  151.934661][    C0] EXT4-fs (loop2): last error at time 1779399663: ext4_get_branch:178: inode 11: block 4294967295
[  151.974319][ T5571] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.513: invalid indirect mapped block 4294967295 (level 1)
[  151.989392][ T5571] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  151.991068][ T5571] EXT4-fs (loop2): 2 truncates cleaned up
[  152.009201][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.130884][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[  152.184290][ T5592] IPv6: NLM_F_CREATE should be specified when creating new route
[  152.255431][ T5596] loop0: detected capacity change from 0 to 512
[  152.268341][ T5596] EXT4-fs: Ignoring removed nomblk_io_submit option
[  152.280662][ T5558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.339835][ T5596] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  152.349683][ T5596] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.518: corrupted in-inode xattr: e_value size too large
[  152.370994][ T5596] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  152.371252][ T5596] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.518: couldn't read orphan inode 15 (err -117)
[  152.392152][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  152.392176][    C0] EXT4-fs (loop0): initial error at time 1779399663: ext4_iget_extra_inode:5128: inode 15
[  152.392203][    C0] EXT4-fs (loop0): last error at time 1779399663: ext4_iget_extra_inode:5128: inode 15
[  152.398948][ T5587] loop3: detected capacity change from 0 to 512
[  152.424861][ T5587] EXT4-fs: Ignoring removed bh option
[  152.435040][ T5596] loop0: lost filesystem error report for type 5 error -117
[  152.435672][ T5596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.460953][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.541502][ T5587] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  152.564208][ T5609] loop1: detected capacity change from 0 to 256
[  152.616001][ T5610] loop2: detected capacity change from 0 to 764
[  152.643367][ T5587] EXT4-fs (loop3): 1 truncate cleaned up
[  152.657211][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.801250][   T28] kauditd_printk_skb: 86 callbacks suppressed
[  152.801311][   T28] audit: type=1400 audit(1779399664.393:1345): avc:  denied  { connect } for  pid=5601 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  154.291987][ T5617] set_capacity_and_notify: 1 callbacks suppressed
[  154.292240][ T5617] loop1: detected capacity change from 0 to 512
[  154.775311][ T5587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.807337][ T5618] loop0: detected capacity change from 0 to 1024
[  156.211484][ T5617] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1.
[  156.705908][ T5547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  156.734909][ T5604] lo speed is unknown, defaulting to 1000
[  156.750042][ T5622] __nla_validate_parse: 1 callbacks suppressed
[  156.750058][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'.
[  156.765443][   T28] audit: type=1400 audit(1779399668.343:1346): avc:  denied  { create } for  pid=5620 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  156.813480][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.846779][   T28] audit: type=1400 audit(1779399668.343:1347): avc:  denied  { write } for  pid=5620 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  157.208941][ T5629] loop3: detected capacity change from 0 to 1024
[  157.302415][ T5629] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  157.357903][ T5629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.273613][ T5638] loop1: detected capacity change from 0 to 1024
[  158.358653][ T5638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.420031][ T5639] loop2: detected capacity change from 0 to 512
[  158.459593][ T5639] EXT4-fs: Ignoring removed bh option
[  158.482485][ T5639] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  158.514051][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.523953][ T5639] EXT4-fs (loop2): 1 truncate cleaned up
[  158.537155][ T5639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.597861][ T5648] FAULT_INJECTION: forcing a failure.
[  158.597861][ T5648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.678469][ T5648] CPU: 1 UID: 0 PID: 5648 Comm: syz.1.531 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  158.678511][ T5648] Tainted: [W]=WARN
[  158.678520][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  158.678534][ T5648] Call Trace:
[  158.678542][ T5648]  <TASK>
[  158.678616][ T5648]  __dump_stack+0x1d/0x30
[  158.678645][ T5648]  dump_stack_lvl+0x95/0xd0
[  158.678670][ T5648]  dump_stack+0x15/0x1b
[  158.678694][ T5648]  should_fail_ex+0x263/0x280
[  158.678804][ T5648]  should_fail+0xb/0x20
[  158.678843][ T5648]  should_fail_usercopy+0x1a/0x20
[  158.678899][ T5648]  _copy_from_user+0x1c/0xb0
[  158.678929][ T5648]  ___sys_sendmsg+0xc1/0x1e0
[  158.678972][ T5648]  __x64_sys_sendmsg+0xd4/0x160
[  158.679041][ T5648]  x64_sys_call+0x194c/0x3020
[  158.679073][ T5648]  do_syscall_64+0x12c/0x3b0
[  158.679109][ T5648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.679133][ T5648] RIP: 0033:0x7fe2be41ce59
[  158.679220][ T5648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.679243][ T5648] RSP: 002b:00007fe2bce77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.679266][ T5648] RAX: ffffffffffffffda RBX: 00007fe2be695fa0 RCX: 00007fe2be41ce59
[  158.679281][ T5648] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000003
[  158.679295][ T5648] RBP: 00007fe2bce77090 R08: 0000000000000000 R09: 0000000000000000
[  158.679307][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.679386][ T5648] R13: 00007fe2be696038 R14: 00007fe2be695fa0 R15: 00007ffe38f8ef58
[  158.679405][ T5648]  </TASK>
[  158.957745][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.996655][ T5660] loop3: detected capacity change from 0 to 256
[  159.334703][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[  159.627103][ T5650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.921479][ T5669] loop1: detected capacity change from 0 to 512
[  159.946844][ T5669] EXT4-fs: Ignoring removed nomblk_io_submit option
[  160.037369][ T5669] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  160.089008][ T5672] loop0: detected capacity change from 0 to 512
[  160.113329][ T5674] Cannot find set identified by id 0 to match
[  160.129547][ T5669] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.534: corrupted in-inode xattr: e_value size too large
[  160.132833][ T5672] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  160.143729][ T5669] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  160.158706][ T5669] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.534: couldn't read orphan inode 15 (err -117)
[  160.167886][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  160.167909][    C0] EXT4-fs (loop1): initial error at time 1779399671: ext4_iget_extra_inode:5128: inode 15
[  160.167943][    C0] EXT4-fs (loop1): last error at time 1779399671: ext4_iget_extra_inode:5128: inode 15
[  160.207695][ T5669] loop1: lost filesystem error report for type 5 error -117
[  160.207834][ T5672] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  160.209231][ T5669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.239537][   T28] audit: type=1400 audit(1779399671.783:1348): avc:  denied  { write } for  pid=5633 comm="syz.2.528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.274144][   T28] audit: type=1400 audit(1779399671.833:1349): avc:  denied  { remove_name } for  pid=5633 comm="syz.2.528" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.303504][   T28] audit: type=1400 audit(1779399671.863:1350): avc:  denied  { unlink } for  pid=5633 comm="syz.2.528" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  160.326115][ T5672] EXT4-fs (loop0): mount failed
[  160.345502][   T28] audit: type=1400 audit(1779399671.933:1351): avc:  denied  { write } for  pid=5633 comm="syz.2.528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.378360][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[  160.408352][ T5682] loop3: detected capacity change from 0 to 512
[  160.449759][ T5639] lo speed is unknown, defaulting to 1000
[  160.602101][ T5688] loop4: detected capacity change from 0 to 1024
[  160.629900][ T5688] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  160.705268][ T5688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.131188][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.494736][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.583498][ T5698] loop3: detected capacity change from 0 to 512
[  161.692786][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'.
[  161.840034][ T5709] loop2: detected capacity change from 0 to 1024
[  161.908355][ T5709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  162.137483][ T5715] loop0: detected capacity change from 0 to 1024
[  162.168774][ T5715] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  162.235435][ T5715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.861413][ T5709] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.068211][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.443159][ T5709] batadv_slave_0: entered allmulticast mode
[  163.485716][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.522780][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.533718][   T28] audit: type=1400 audit(1779399675.113:1352): avc:  denied  { write } for  pid=5724 comm="syz.3.548" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.621827][ T5733] netlink: 7 bytes leftover after parsing attributes in process `syz.3.552'.
[  163.633514][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  163.923129][ T5742] loop1: detected capacity change from 0 to 1024
[  163.933619][ T5745] loop2: detected capacity change from 0 to 512
[  164.002079][ T5742] EXT4-fs: Ignoring removed bh option
[  164.012131][ T5745] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  164.101944][ T5742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.118261][   T28] audit: type=1400 audit(1779399675.713:1353): avc:  denied  { write } for  pid=5739 comm="syz.1.554" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  164.745228][ T5728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  164.778382][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.857553][ T5753] FAULT_INJECTION: forcing a failure.
[  164.857553][ T5753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.919793][   T28] audit: type=1400 audit(1779399676.513:1354): avc:  denied  { execute } for  pid=5758 comm="syz.1.556" path="/116/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  164.937205][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz.2.557 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  164.937242][ T5753] Tainted: [W]=WARN
[  164.937250][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  164.937263][ T5753] Call Trace:
[  164.937269][ T5753]  <TASK>
[  164.937285][ T5753]  __dump_stack+0x1d/0x30
[  164.937312][ T5753]  dump_stack_lvl+0x95/0xd0
[  164.937384][ T5753]  dump_stack+0x15/0x1b
[  164.937404][ T5753]  should_fail_ex+0x263/0x280
[  164.937465][ T5753]  should_fail+0xb/0x20
[  164.937491][ T5753]  should_fail_usercopy+0x1a/0x20
[  164.937522][ T5753]  _copy_from_user+0x1c/0xb0
[  164.937586][ T5753]  ___sys_sendmsg+0xc1/0x1e0
[  164.937621][ T5753]  __x64_sys_sendmsg+0xd4/0x160
[  164.937651][ T5753]  x64_sys_call+0x194c/0x3020
[  164.937677][ T5753]  do_syscall_64+0x12c/0x3b0
[  164.937730][ T5753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.937754][ T5753] RIP: 0033:0x7f28485fce59
[  164.937771][ T5753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.937886][ T5753] RSP: 002b:00007f284704f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.937909][ T5753] RAX: ffffffffffffffda RBX: 00007f2848875fa0 RCX: 00007f28485fce59
[  164.937925][ T5753] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  164.938005][ T5753] RBP: 00007f284704f090 R08: 0000000000000000 R09: 0000000000000000
[  164.938019][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.938160][ T5753] R13: 00007f2848876038 R14: 00007f2848875fa0 R15: 00007ffcfa0e0518
[  164.938187][ T5753]  </TASK>
[  165.106075][ T5764] loop4: detected capacity change from 0 to 1024
[  165.135705][ T5764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  165.158578][ T5764] System zones: 0-1, 3-36
[  165.171600][ T5764] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.559: bad orphan inode 134217728
[  165.184052][ T5764] loop4: lost filesystem error report for type 5 error -117
[  165.190861][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  165.207681][    C0] EXT4-fs (loop4): initial error at time 1779399676: ext4_orphan_get:1423
[  165.217321][    C0] EXT4-fs (loop4): last error at time 1779399676: ext4_orphan_get:1423
[  165.372001][ T5764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.536872][   T28] audit: type=1400 audit(1779399677.133:1355): avc:  denied  { write } for  pid=5756 comm="syz.4.559" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  165.566120][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'.
[  165.616714][ T5769] rdma_rxe: rxe_newlink: failed to add lo
[  165.683637][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.690744][   T28] audit: type=1400 audit(1779399677.283:1356): avc:  denied  { getopt } for  pid=5781 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  165.743901][ T5784] FAULT_INJECTION: forcing a failure.
[  165.743901][ T5784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.786293][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz.0.567 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  165.786326][ T5784] Tainted: [W]=WARN
[  165.786333][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  165.786345][ T5784] Call Trace:
[  165.786352][ T5784]  <TASK>
[  165.786362][ T5784]  __dump_stack+0x1d/0x30
[  165.786392][ T5784]  dump_stack_lvl+0x95/0xd0
[  165.786417][ T5784]  dump_stack+0x15/0x1b
[  165.786440][ T5784]  should_fail_ex+0x263/0x280
[  165.786475][ T5784]  should_fail+0xb/0x20
[  165.786529][ T5784]  should_fail_usercopy+0x1a/0x20
[  165.786559][ T5784]  _copy_to_iter+0x251/0xea0
[  165.786587][ T5784]  ? __rcu_read_unlock+0x4e/0x70
[  165.786640][ T5784]  ? ptype_seq_stop+0xe/0x20
[  165.786672][ T5784]  ? traverse+0x379/0x3a0
[  165.786703][ T5784]  seq_read_iter+0x1d5/0x940
[  165.786732][ T5784]  ? _parse_integer_limit+0x170/0x190
[  165.786783][ T5784]  seq_read+0x279/0x2c0
[  165.786815][ T5784]  ? __pfx_seq_read+0x10/0x10
[  165.786839][ T5784]  proc_reg_read+0x128/0x1c0
[  165.786926][ T5784]  ? __pfx_proc_reg_read+0x10/0x10
[  165.786958][ T5784]  vfs_readv+0x432/0x6e0
[  165.787029][ T5784]  ? __pfx_proc_reg_read+0x10/0x10
[  165.787070][ T5784]  __x64_sys_preadv+0xfd/0x1c0
[  165.787113][ T5784]  x64_sys_call+0x2915/0x3020
[  165.787143][ T5784]  do_syscall_64+0x12c/0x3b0
[  165.787176][ T5784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.787197][ T5784] RIP: 0033:0x7f9576c4ce59
[  165.787278][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.787299][ T5784] RSP: 002b:00007f95756a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  165.787325][ T5784] RAX: ffffffffffffffda RBX: 00007f9576ec5fa0 RCX: 00007f9576c4ce59
[  165.787344][ T5784] RDX: 0000000000000002 RSI: 0000200000003d40 RDI: 0000000000000005
[  165.787400][ T5784] RBP: 00007f95756a7090 R08: 00000000000000f7 R09: 0000000000000000
[  165.787415][ T5784] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001
[  165.787429][ T5784] R13: 00007f9576ec6038 R14: 00007f9576ec5fa0 R15: 00007fff6ea35f78
[  165.787449][ T5784]  </TASK>
[  166.081369][ T5799] lo speed is unknown, defaulting to 1000
[  166.433357][ T5806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.571'.
[  166.660880][ T5792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  166.739963][ T5815] netlink: 'syz.2.574': attribute type 3 has an invalid length.
[  167.485274][ T5819] loop3: detected capacity change from 0 to 1024
[  167.755975][ T5819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.835246][ T5830] loop4: detected capacity change from 0 to 2048
[  169.479451][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.691502][   T28] audit: type=1400 audit(1779399681.283:1357): avc:  denied  { mount } for  pid=5838 comm="syz.1.582" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  169.769111][   T28] audit: type=1400 audit(1779399681.333:1358): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  170.161591][ T5864] netlink: 'syz.3.588': attribute type 1 has an invalid length.
[  170.181811][ T5864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'.
[  170.191375][ T5864] 8021q: adding VLAN 0 to HW filter on device bond4
[  170.464673][ T5867] loop2: detected capacity change from 0 to 1024
[  170.498128][ T5867] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  170.579911][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.802037][ T5853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.883636][ T5883] loop1: detected capacity change from 0 to 512
[  172.935384][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.957080][ T5883] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  172.969550][ T5883] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  172.984754][ T5883] EXT4-fs (loop1): mount failed
[  173.354793][   T28] audit: type=1400 audit(1779399684.953:1359): avc:  denied  { bind } for  pid=5900 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  173.505435][ T5906] loop0: detected capacity change from 0 to 512
[  173.514261][ T5906] EXT4-fs: Ignoring removed bh option
[  173.527826][ T5906] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  173.547759][ T5906] EXT4-fs (loop0): 1 truncate cleaned up
[  173.555350][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.809866][ T5908] lo speed is unknown, defaulting to 1000
[  173.898390][   T28] audit: type=1400 audit(1779399685.493:1360): avc:  denied  { write } for  pid=5904 comm="syz.0.602" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  174.016021][ T5910] loop2: detected capacity change from 0 to 512
[  174.022429][   T28] audit: type=1400 audit(1779399685.593:1361): avc:  denied  { write } for  pid=5904 comm="syz.0.602" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  174.881037][ T5872] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  175.373354][ T3293] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  175.384572][ T3293] CPU: 1 UID: 0 PID: 3293 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  175.384612][ T3293] Tainted: [W]=WARN
[  175.384622][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  175.384637][ T3293] Call Trace:
[  175.384694][ T3293]  <TASK>
[  175.384703][ T3293]  __dump_stack+0x1d/0x30
[  175.384729][ T3293]  dump_stack_lvl+0x95/0xd0
[  175.384756][ T3293]  dump_stack+0x15/0x1b
[  175.384800][ T3293]  dump_header+0x80/0x240
[  175.384867][ T3293]  oom_kill_process+0x295/0x350
[  175.384898][ T3293]  out_of_memory+0x97d/0xb80
[  175.384933][ T3293]  try_charge_memcg+0x62f/0xa10
[  175.384979][ T3293]  ? radix_tree_lookup+0xfa/0x140
[  175.385011][ T3293]  charge_memcg+0x6d/0x120
[  175.385042][ T3293]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  175.385087][ T3293]  __swap_cache_prepare_and_add+0x69/0x4a0
[  175.385119][ T3293]  ? alloc_pages_mpol+0x217/0x260
[  175.385189][ T3293]  swap_cache_alloc_folio+0xa2/0x120
[  175.385220][ T3293]  swap_cluster_readahead+0x25f/0x3c0
[  175.385287][ T3293]  swapin_readahead+0xde/0x840
[  175.385314][ T3293]  ? next_uptodate_folio+0x771/0x7e0
[  175.385340][ T3293]  ? percpu_counter_add_batch+0xb6/0x130
[  175.385393][ T3293]  ? mm_trace_rss_stat+0x1d/0xc0
[  175.385427][ T3293]  ? __rcu_read_unlock+0x33/0x70
[  175.385448][ T3293]  ? __rcu_read_unlock+0x4e/0x70
[  175.385518][ T3293]  ? swap_cache_get_folio+0x1e0/0x1f0
[  175.385668][ T3293]  do_swap_page+0x31e/0x2180
[  175.385699][ T3293]  ? filemap_fault+0x85f/0xb70
[  175.385731][ T3293]  ? css_rstat_updated+0xbb/0x280
[  175.385816][ T3293]  ? __rcu_read_lock+0x36/0x50
[  175.385840][ T3293]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  175.385869][ T3293]  handle_mm_fault+0xb30/0x2e70
[  175.385975][ T3293]  ? vma_start_read+0x1c7/0x2c0
[  175.386020][ T3293]  do_user_addr_fault+0x62f/0x1050
[  175.386110][ T3293]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  175.386140][ T3293]  ? trace_page_fault_user+0x1f/0xa0
[  175.386168][ T3293]  exc_page_fault+0x62/0xa0
[  175.386193][ T3293]  asm_exc_page_fault+0x26/0x30
[  175.386285][ T3293] RIP: 0033:0x7fe2be2eae77
[  175.386302][ T3293] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24
[  175.386321][ T3293] RSP: 002b:00007ffe38f8f2c0 EFLAGS: 00010202
[  175.386340][ T3293] RAX: 0000001b32524000 RBX: 00000000000001a0 RCX: 000000000002ab98
[  175.386358][ T3293] RDX: 00000000049bb0e4 RSI: 00007ffe38f8f350 RDI: 0000000000000019
[  175.386376][ T3293] RBP: 00007ffe38f8f2fc R08: 00000000119429fa R09: 3fffffffffffffff
[  175.386412][ T3293] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  175.386429][ T3293] R13: 00000000000927c0 R14: 000000000002aa26 R15: 00007ffe38f8f350
[  175.386453][ T3293]  </TASK>
[  175.386472][ T3293] memory: usage 307200kB, limit 307200kB, failcnt 459
[  175.663962][ T3293] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  175.672259][ T3293] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0
[  175.679583][ T3293] Memory cgroup stats for /syz1:
[  175.679930][ T3293] cache 81920
[  175.688267][ T3293] rss 0
[  175.691124][ T3293] shmem 0
[  175.694209][ T3293] mapped_file 0
[  175.697680][ T3293] dirty 0
[  175.700663][ T3293] writeback 0
[  175.704027][ T3293] workingset_refault_anon 65
[  175.708687][ T3293] workingset_refault_file 1577
[  175.713505][ T3293] swap 192512
[  175.716810][ T3293] swapcached 507904
[  175.720753][ T3293] pgpgin 114811
[  175.724220][ T3293] pgpgout 114788
[  175.727770][ T3293] pgfault 140803
[  175.731375][ T3293] pgmajfault 60
[  175.734854][ T3293] inactive_anon 12288
[  175.738851][ T3293] active_anon 0
[  175.742355][ T3293] inactive_file 0
[  175.746098][ T3293] active_file 0
[  175.749563][ T3293] unevictable 0
[  175.753483][ T3293] hierarchical_memory_limit 314572800
[  175.758904][ T3293] hierarchical_memsw_limit 9223372036854771712
[  175.765737][ T3293] total_cache 81920
[  175.770159][ T3293] total_rss 0
[  175.773819][ T3293] total_shmem 0
[  175.777391][ T3293] total_mapped_file 0
[  175.781507][ T3293] total_dirty 0
[  175.785045][ T3293] total_writeback 0
[  175.788858][ T3293] total_workingset_refault_anon 65
[  175.794396][ T3293] total_workingset_refault_file 1577
[  175.799739][ T3293] total_swap 192512
[  175.803604][ T3293] total_swapcached 507904
[  175.807946][ T3293] total_pgpgin 114811
[  175.811976][ T3293] total_pgpgout 114788
[  175.816064][ T3293] total_pgfault 140803
[  175.820165][ T3293] total_pgmajfault 60
[  175.824242][ T3293] total_inactive_anon 12288
[  175.828756][ T3293] total_active_anon 0
[  175.832868][ T3293] total_inactive_file 0
[  175.837039][ T3293] total_active_file 0
[  175.841056][ T3293] total_unevictable 0
[  175.845048][ T3293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.593,pid=5882,uid=0
[  175.860031][ T3293] Memory cgroup out of memory: Killed process 5882 (syz.1.593) total-vm:94036kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  176.886827][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.937445][   T28] audit: type=1400 audit(1779399688.533:1362): avc:  denied  { mount } for  pid=5926 comm="syz.2.607" name="/" dev="autofs" ino=12519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  176.970153][   T28] audit: type=1326 audit(1779399688.563:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.2.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  177.000893][   T28] audit: type=1326 audit(1779399688.603:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.2.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  177.026817][   T28] audit: type=1326 audit(1779399688.603:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.2.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  177.052291][   T28] audit: type=1326 audit(1779399688.603:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.2.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  177.075843][ T5927] loop2: detected capacity change from 0 to 512
[  177.087106][   T28] audit: type=1326 audit(1779399688.603:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.2.607" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28485fce59 code=0x7ffc0000
[  177.116627][ T5927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.130713][ T5927] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.142576][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.770682][ T5922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  178.045885][ T5967] loop1: detected capacity change from 0 to 512
[  178.306030][ T5967] __quota_error: 36 callbacks suppressed
[  178.306059][ T5967] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  178.322397][ T5967] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.337530][ T5967] EXT4-fs (loop1): mount failed
[  179.356453][ T5997] loop4: detected capacity change from 0 to 256
[  179.375984][ T5997] vfat: Deprecated parameter 'posix'
[  179.387641][ T5997] FAT-fs: "posix" option is obsolete, not supported now
[  179.401041][ T5989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.407011][ T5997] FAT-fs (loop4): codepage cp775 not found
[  179.504409][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'.
[  179.539708][ T6015] loop0: detected capacity change from 0 to 1024
[  179.574513][ T6015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.684844][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.769267][ T6031] loop1: detected capacity change from 0 to 128
[  179.796791][ T6031] FAULT_INJECTION: forcing a failure.
[  179.796791][ T6031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.810532][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.1.639 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  179.810566][ T6031] Tainted: [W]=WARN
[  179.810573][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  179.810586][ T6031] Call Trace:
[  179.810627][ T6031]  <TASK>
[  179.810637][ T6031]  __dump_stack+0x1d/0x30
[  179.810798][ T6031]  dump_stack_lvl+0x95/0xd0
[  179.810823][ T6031]  dump_stack+0x15/0x1b
[  179.810843][ T6031]  should_fail_ex+0x263/0x280
[  179.810876][ T6031]  should_fail+0xb/0x20
[  179.810956][ T6031]  should_fail_usercopy+0x1a/0x20
[  179.810991][ T6031]  _copy_from_user+0x1c/0xb0
[  179.811049][ T6031]  __sys_connect+0xd0/0x2a0
[  179.811083][ T6031]  __x64_sys_connect+0x3f/0x50
[  179.811219][ T6031]  x64_sys_call+0x2df0/0x3020
[  179.811273][ T6031]  do_syscall_64+0x12c/0x3b0
[  179.811309][ T6031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.811336][ T6031] RIP: 0033:0x7fe2be41ce59
[  179.811357][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.811380][ T6031] RSP: 002b:00007fe2bce77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  179.811453][ T6031] RAX: ffffffffffffffda RBX: 00007fe2be695fa0 RCX: 00007fe2be41ce59
[  179.811471][ T6031] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000008
[  179.811487][ T6031] RBP: 00007fe2bce77090 R08: 0000000000000000 R09: 0000000000000000
[  179.811503][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.811518][ T6031] R13: 00007fe2be696038 R14: 00007fe2be695fa0 R15: 00007ffe38f8ef58
[  179.811537][ T6031]  </TASK>
[  180.648333][ T6049] loop0: detected capacity change from 0 to 512
[  180.681887][ T6049] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  180.692203][ T6049] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  180.707435][ T6049] EXT4-fs (loop0): mount failed
[  180.838789][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'.
[  180.940171][ T6059] loop4: detected capacity change from 0 to 128
[  180.998062][ T1038] IPVS: starting estimator thread 0...
[  181.090886][ T6062] IPVS: using max 2544 ests per chain, 127200 per kthread
[  181.109833][ T6068] loop4: detected capacity change from 0 to 1024
[  181.123336][ T6042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  181.135167][ T6068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.183659][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.278713][ T6078] loop4: detected capacity change from 0 to 512
[  181.420294][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'.
[  181.690210][ T6079] loop2: detected capacity change from 0 to 512
[  181.701078][ T6079] EXT4-fs: Ignoring removed nomblk_io_submit option
[  181.841590][ T6096] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  181.956982][ T6096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.124893][ T6079] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  182.264255][ T6079] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.653: corrupted in-inode xattr: e_value size too large
[  182.701520][ T6079] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  182.705988][ T6079] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.653: couldn't read orphan inode 15 (err -117)
[  182.715369][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  182.715387][    C0] EXT4-fs (loop2): initial error at time 1779399694: ext4_iget_extra_inode:5128: inode 15
[  182.715447][    C0] EXT4-fs (loop2): last error at time 1779399694: ext4_iget_extra_inode:5128: inode 15
[  182.876405][ T6079] loop2: lost filesystem error report for type 5 error -117
[  182.878401][ T6079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.132541][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  184.347250][ T6079] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  184.347359][ T6112] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  185.068690][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.167697][ T6125] set_capacity_and_notify: 1 callbacks suppressed
[  185.167739][ T6125] loop1: detected capacity change from 0 to 512
[  185.185535][ T6126] loop2: detected capacity change from 0 to 1024
[  185.196996][ T6125] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  185.209433][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.220685][ T6125] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  185.237722][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.252160][ T6125] EXT4-fs (loop1): group descriptors corrupted!
[  185.362457][ T6138] loop3: detected capacity change from 0 to 128
[  185.383913][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.446416][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'.
[  185.559689][ T6143] loop1: detected capacity change from 0 to 512
[  185.578632][ T6143] EXT4-fs: Ignoring removed bh option
[  185.591917][ T6143] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  185.644770][ T6157] loop2: detected capacity change from 0 to 1024
[  185.667164][   T28] audit: type=1400 audit(1779399697.263:1404): avc:  denied  { mounton } for  pid=6156 comm="syz.2.674" path="/syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  185.682614][ T6157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.793690][ T6143] EXT4-fs (loop1): 1 truncate cleaned up
[  185.844654][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'.
[  185.849207][ T6143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.873225][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  185.893634][ T6157] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  185.915975][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  185.943908][   T28] audit: type=1400 audit(1779399697.543:1405): avc:  denied  { write } for  pid=6156 comm="syz.2.674" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  186.000770][   T28] audit: type=1400 audit(1779399697.563:1406): avc:  denied  { append } for  pid=6156 comm="syz.2.674" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  186.162166][ T6170] loop3: detected capacity change from 0 to 512
[  186.212932][ T6170] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  186.254416][ T6170] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  186.270824][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  186.278862][    C0] EXT4-fs (loop3): initial error at time 1779399697: ext4_mb_generate_buddy:1317
[  186.280703][ T6170] Quota error (device loop3): write_blk: dquota write failed
[  186.280724][ T6170] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  186.280757][ T6170] Quota error (device loop3): write_blk: dquota write failed
[  186.280787][ T6170] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  186.280812][ T6170] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.677: Failed to acquire dquot type 1
[  186.280845][ T6170] loop3: lost filesystem error report for type 5 error -28
[  186.281227][ T6170] EXT4-fs (loop3): 1 truncate cleaned up
[  186.281731][ T6170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.284558][   T28] audit: type=1400 audit(1779399697.883:1407): avc:  denied  { remount } for  pid=6169 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  186.291295][    C0] EXT4-fs (loop3): last error at time 1779399697: ext4_acquire_dquot:7034
[  186.431937][ T6170] EXT4-fs error (device loop3): __ext4_remount:6837: comm syz.3.677: Abort forced by user
[  186.448299][ T6170] EXT4-fs (loop3): Remounting filesystem read-only
[  186.472994][ T6170] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  186.531509][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.601192][ T6185] loop3: detected capacity change from 0 to 1024
[  186.636450][ T6185] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  186.815585][ T6188] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  186.884380][ T6185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.683'.
[  186.896512][   T28] audit: type=1400 audit(1779399698.493:1408): avc:  denied  { load_policy } for  pid=6180 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  186.916918][ T6189] SELinux: failed to load policy
[  187.046866][ T6188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.684'.
[  187.560867][ T6198] lo speed is unknown, defaulting to 1000
[  187.978579][ T6205] lo speed is unknown, defaulting to 1000
[  188.186619][   T28] audit: type=1400 audit(1779399699.783:1409): avc:  denied  { write } for  pid=6142 comm="syz.1.670" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  188.463803][ T6143] lo speed is unknown, defaulting to 1000
[  188.671844][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'.
[  188.684275][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.910100][ T6223] FAULT_INJECTION: forcing a failure.
[  188.910100][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.957904][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.3.693 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  188.957946][ T6223] Tainted: [W]=WARN
[  188.957953][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  188.957965][ T6223] Call Trace:
[  188.957972][ T6223]  <TASK>
[  188.957980][ T6223]  __dump_stack+0x1d/0x30
[  188.958024][ T6223]  dump_stack_lvl+0x95/0xd0
[  188.958058][ T6223]  dump_stack+0x15/0x1b
[  188.958082][ T6223]  should_fail_ex+0x263/0x280
[  188.958116][ T6223]  should_fail+0xb/0x20
[  188.958148][ T6223]  should_fail_usercopy+0x1a/0x20
[  188.958180][ T6223]  _copy_to_user+0x20/0xa0
[  188.958210][ T6223]  simple_read_from_buffer+0xb5/0x130
[  188.958294][ T6223]  proc_fail_nth_read+0x10e/0x150
[  188.958391][ T6223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.958425][ T6223]  vfs_read+0x1ab/0x7f0
[  188.958481][ T6223]  ? __pfx_shmem_put_link+0x10/0x10
[  188.958614][ T6223]  ? __rcu_read_unlock+0x4e/0x70
[  188.958638][ T6223]  ? __fget_files+0x184/0x1c0
[  188.958660][ T6223]  ? kmem_cache_free+0xca/0x380
[  188.958683][ T6223]  ? mutex_lock+0x57/0x90
[  188.958720][ T6223]  ksys_read+0xdc/0x1a0
[  188.958748][ T6223]  __x64_sys_read+0x40/0x50
[  188.958775][ T6223]  x64_sys_call+0x2886/0x3020
[  188.958801][ T6223]  do_syscall_64+0x12c/0x3b0
[  188.958897][ T6223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.958923][ T6223] RIP: 0033:0x7f194ef3d68e
[  188.958941][ T6223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  188.958959][ T6223] RSP: 002b:00007f194d9cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.958985][ T6223] RAX: ffffffffffffffda RBX: 00007f194d9cf6c0 RCX: 00007f194ef3d68e
[  188.959042][ T6223] RDX: 000000000000000f RSI: 00007f194d9cf0a0 RDI: 0000000000000004
[  188.959065][ T6223] RBP: 00007f194d9cf090 R08: 0000000000000000 R09: 0000000000000000
[  188.959080][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.959093][ T6223] R13: 00007f194f1f6038 R14: 00007f194f1f5fa0 R15: 00007fff3a4f1078
[  188.959124][ T6223]  </TASK>
[  189.803552][ T6241] xt_NFQUEUE: number of total queues is 0
[  190.064982][ T6243] sock: sock_timestamping_bind_phc: sock not bind to device
[  190.133390][ T6244] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6244 comm=syz.1.699
[  190.458153][ T6246] lo speed is unknown, defaulting to 1000
[  190.468413][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.703'.
[  190.572987][ T6256] xt_hashlimit: size too large, truncated to 1048576
[  190.984116][ T6261] xt_hashlimit: size too large, truncated to 1048576
[  191.035238][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  191.035256][   T28] audit: type=1400 audit(1779399702.633:1416): avc:  denied  { watch watch_reads } for  pid=6260 comm="syz.1.705" path="/proc/485/net" dev="proc" ino=13406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  191.210493][ T6267] loop4: detected capacity change from 0 to 512
[  191.238629][ T6267] EXT4-fs: dax option not supported
[  193.254062][ T6284] loop4: detected capacity change from 0 to 512
[  193.300999][ T6284] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  193.328755][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.714'.
[  193.341298][ T6284] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  193.379044][ T6284] EXT4-fs (loop4): mount failed
[  193.497391][ T6297] loop3: detected capacity change from 0 to 128
[  193.882476][ T6311] rdma_rxe: rxe_newlink: failed to add lo
[  194.104630][ T6319] loop0: detected capacity change from 0 to 2048
[  194.148414][ T6281] syz.4.711 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  194.172262][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.189965][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.4.711 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  194.190058][ T6281] Tainted: [W]=WARN
[  194.190066][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  194.190078][ T6281] Call Trace:
[  194.190085][ T6281]  <TASK>
[  194.190092][ T6281]  __dump_stack+0x1d/0x30
[  194.190121][ T6281]  dump_stack_lvl+0x95/0xd0
[  194.190196][ T6281]  dump_stack+0x15/0x1b
[  194.190219][ T6281]  dump_header+0x80/0x240
[  194.190277][ T6281]  oom_kill_process+0x295/0x350
[  194.190340][ T6281]  out_of_memory+0x97d/0xb80
[  194.190378][ T6281]  try_charge_memcg+0x62f/0xa10
[  194.190467][ T6281]  ? radix_tree_lookup+0xfa/0x140
[  194.190525][ T6281]  charge_memcg+0x6d/0x120
[  194.190562][ T6281]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  194.190654][ T6281]  __swap_cache_prepare_and_add+0x69/0x4a0
[  194.190750][ T6281]  ? alloc_pages_mpol+0x217/0x260
[  194.190826][ T6281]  swap_cache_alloc_folio+0xa2/0x120
[  194.190866][ T6281]  swap_cluster_readahead+0x25f/0x3c0
[  194.190900][ T6281]  swapin_readahead+0xde/0x840
[  194.190936][ T6281]  ? _raw_spin_unlock+0x9/0x30
[  194.191028][ T6281]  ? swap_put_entries_cluster+0x46c/0x490
[  194.191060][ T6281]  ? __rcu_read_unlock+0x4e/0x70
[  194.191087][ T6281]  ? swap_cache_get_folio+0x1e0/0x1f0
[  194.191169][ T6281]  do_swap_page+0x31e/0x2180
[  194.191200][ T6281]  ? css_rstat_updated+0xbb/0x280
[  194.191226][ T6281]  ? __rcu_read_lock+0x36/0x50
[  194.191267][ T6281]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  194.191294][ T6281]  handle_mm_fault+0xb30/0x2e70
[  194.191325][ T6281]  ? vma_start_read+0x1c7/0x2c0
[  194.191367][ T6281]  do_user_addr_fault+0x62f/0x1050
[  194.191431][ T6281]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  194.191459][ T6281]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  194.191551][ T6281]  ? trace_page_fault_user+0x1f/0xa0
[  194.191596][ T6281]  exc_page_fault+0x62/0xa0
[  194.191624][ T6281]  asm_exc_page_fault+0x26/0x30
[  194.191648][ T6281] RIP: 0033:0x7f106af27f83
[  194.191669][ T6281] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  194.191690][ T6281] RSP: 002b:00007ffcbdba4bb0 EFLAGS: 00010246
[  194.191786][ T6281] RAX: 0000000000000000 RBX: 000055558589e500 RCX: 0000000000000000
[  194.191827][ T6281] RDX: 00007ffcbdba4bf0 RSI: 0000000000000000 RDI: 0000000000000000
[  194.191843][ T6281] RBP: 00007f106b1e7da0 R08: 0000000000000000 R09: 0000000000000000
[  194.191858][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002f602
[  194.191873][ T6281] R13: 00007f106b1e5fac R14: 000000000002f38c R15: 00007ffcbdba4d20
[  194.191895][ T6281]  </TASK>
[  194.560180][   T28] audit: type=1400 audit(1779399706.053:1417): avc:  denied  { write } for  pid=6318 comm="syz.0.723" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  194.586158][   T28] audit: type=1400 audit(1779399706.113:1418): avc:  denied  { write } for  pid=6318 comm="syz.0.723" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  194.613331][ T6281] memory: usage 307200kB, limit 307200kB, failcnt 309
[  194.620254][ T6281] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  194.628520][ T6281] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  194.636166][ T6281] Memory cgroup stats for /syz4:
[  194.636375][ T6281] cache 0
[  194.644569][ T6281] rss 0
[  194.647447][ T6281] shmem 0
[  194.650425][ T6281] mapped_file 0
[  194.654128][ T6281] dirty 0
[  194.657100][ T6281] writeback 0
[  194.660489][ T6281] workingset_refault_anon 49
[  194.665378][ T6281] workingset_refault_file 281
[  194.670076][ T6281] swap 192512
[  194.673634][ T6281] swapcached 5025792
[  194.677549][ T6281] pgpgin 142568
[  194.681765][ T6281] pgpgout 142568
[  194.685453][ T6281] pgfault 138981
[  194.689021][ T6281] pgmajfault 34
[  194.694859][ T6281] inactive_anon 0
[  194.698828][ T6281] active_anon 0
[  194.702661][ T6281] inactive_file 0
[  194.706318][ T6281] active_file 0
[  194.709915][ T6281] unevictable 0
[  194.713827][ T6281] hierarchical_memory_limit 314572800
[  194.719255][ T6281] hierarchical_memsw_limit 9223372036854771712
[  194.725690][ T6281] total_cache 0
[  194.729179][ T6281] total_rss 0
[  194.732678][ T6281] total_shmem 0
[  194.736388][ T6281] total_mapped_file 0
[  194.740437][ T6281] total_dirty 0
[  194.744286][ T6281] total_writeback 0
[  194.748259][ T6281] total_workingset_refault_anon 49
[  194.753622][ T6281] total_workingset_refault_file 281
[  194.758945][ T6281] total_swap 192512
[  194.763034][ T6281] total_swapcached 5025792
[  194.767483][ T6281] total_pgpgin 142568
[  194.771961][ T6281] total_pgpgout 142568
[  194.776066][ T6281] total_pgfault 138981
[  194.780143][ T6281] total_pgmajfault 34
[  194.797376][   T63] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  194.830252][   T63] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  194.843359][ T6281] total_inactive_anon 0
[  194.843969][   T63] EXT4-fs (loop0): This should not happen!! Data will be lost
[  194.843969][   T63] 
[  194.847824][ T6281] total_active_anon 0
[  194.866790][ T6281] total_inactive_file 0
[  194.873148][ T6281] total_active_file 0
[  194.877349][ T6281] total_unevictable 0
[  194.883564][ T6281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.711,pid=6281,uid=0
[  195.008193][ T6281] Memory cgroup out of memory: Killed process 6281 (syz.4.711) total-vm:94036kB, anon-rss:1232kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  195.031374][   T63] EXT4-fs (loop0): Total free blocks count 0
[  195.039000][   T63] EXT4-fs (loop0): Free/Dirty block details
[  195.047403][   T63] EXT4-fs (loop0): free_blocks=4096
[  195.055569][   T63] EXT4-fs (loop0): dirty_blocks=512
[  195.062263][   T63] EXT4-fs (loop0): Block reservation details
[  195.070136][   T63] EXT4-fs (loop0): i_reserved_data_blocks=32
[  195.229914][ T4894] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  195.309513][ T3297] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  195.448906][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'.
[  195.521332][ T6341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.729'.
[  195.571314][   T28] audit: type=1400 audit(1779399707.173:1419): avc:  denied  { append } for  pid=6335 comm="syz.2.729" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  196.515513][ T6359] loop4: detected capacity change from 0 to 512
[  196.543262][ T6359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.595630][ T6359] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  196.605978][ T6359] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.734: corrupted in-inode xattr: e_value size too large
[  196.619938][ T6359] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  196.620180][ T6359] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.734: couldn't read orphan inode 15 (err -117)
[  196.641085][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  196.641107][    C1] EXT4-fs (loop4): initial error at time 1779399708: ext4_iget_extra_inode:5128: inode 15
[  196.641141][    C1] EXT4-fs (loop4): last error at time 1779399708: ext4_iget_extra_inode:5128: inode 15
[  196.661707][ T6362] loop0: detected capacity change from 0 to 128
[  196.683082][ T6359] loop4: lost filesystem error report for type 5 error -117
[  196.687085][ T6359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.990290][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'.
[  197.631871][ T6373] loop3: detected capacity change from 0 to 1024
[  197.678383][ T6373] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  197.706478][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.785380][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.453707][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'.
[  198.599019][   T28] audit: type=1326 audit(1779399710.193:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  198.654861][ T6389] loop1: detected capacity change from 0 to 512
[  198.673364][ T6390] netlink: 14 bytes leftover after parsing attributes in process `syz.4.742'.
[  198.715122][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.738188][   T28] audit: type=1326 audit(1779399710.193:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  198.763865][   T28] audit: type=1326 audit(1779399710.193:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  198.799578][   T28] audit: type=1326 audit(1779399710.193:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  198.855583][ T6390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.870188][   T28] audit: type=1326 audit(1779399710.193:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  198.901968][ T6389] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.942631][ T6390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.954998][ T6389] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.989427][   T28] audit: type=1326 audit(1779399710.193:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  199.032363][ T6390] bond0 (unregistering): Released all slaves
[  199.084997][   T28] audit: type=1326 audit(1779399710.193:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  199.118736][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.203501][   T28] audit: type=1326 audit(1779399710.223:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  199.223882][ T6403] sctp: [Deprecated]: syz.3.745 (pid 6403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.223882][ T6403] Use struct sctp_sack_info instead
[  199.235377][   T28] audit: type=1326 audit(1779399710.223:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  199.274009][   T28] audit: type=1326 audit(1779399710.223:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  199.561343][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'.
[  200.064873][ T6433] loop1: detected capacity change from 0 to 1024
[  200.203722][ T6433] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  200.269517][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.560174][ T6435] loop4: detected capacity change from 0 to 1024
[  200.818357][ T6443] loop0: detected capacity change from 0 to 512
[  200.852520][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.877604][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  200.890321][ T6443] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.906572][ T6443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.160685][ T6435] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.172849][ T6435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003]
[  201.197558][ T6435] System zones: 0-1, 3-36
[  201.229169][ T6435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.296080][ T6435] EXT4-fs (loop4): shut down requested (2)
[  201.716836][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.742240][ T6470] loop0: detected capacity change from 0 to 512
[  201.752912][ T6470] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  201.773623][ T6470] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.765: orphan file block 0: bad magic
[  201.816857][ T6470] loop0: lost filesystem error report for type 5 error -117
[  201.817076][ T6470] EXT4-fs (loop0): Remounting filesystem read-only
[  201.824441][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  201.824477][    C1] EXT4-fs (loop0): initial error at time 1779399713: ext4_init_orphan_info:618
[  201.824499][    C1] EXT4-fs (loop0): last error at time 1779399713: ext4_init_orphan_info:618
[  201.916013][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.939025][ T6473] FAULT_INJECTION: forcing a failure.
[  201.939025][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.971391][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.1.764 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  201.971432][ T6473] Tainted: [W]=WARN
[  201.971441][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  201.971456][ T6473] Call Trace:
[  201.971465][ T6473]  <TASK>
[  201.971475][ T6473]  __dump_stack+0x1d/0x30
[  201.971512][ T6473]  dump_stack_lvl+0x95/0xd0
[  201.971539][ T6473]  dump_stack+0x15/0x1b
[  201.971563][ T6473]  should_fail_ex+0x263/0x280
[  201.971666][ T6473]  should_fail+0xb/0x20
[  201.971691][ T6473]  should_fail_usercopy+0x1a/0x20
[  201.971785][ T6473]  strncpy_from_user+0x27/0x250
[  201.971807][ T6473]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  201.971946][ T6473]  do_getname+0x59/0x1c0
[  201.971965][ T6473]  getname_uflags+0x23/0x30
[  201.972001][ T6473]  __se_sys_mount_setattr+0x112/0x260
[  201.972027][ T6473]  __x64_sys_mount_setattr+0x67/0x80
[  201.972054][ T6473]  x64_sys_call+0x2f2f/0x3020
[  201.972083][ T6473]  do_syscall_64+0x12c/0x3b0
[  201.972117][ T6473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.972217][ T6473] RIP: 0033:0x7fe2be41ce59
[  201.972236][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.972259][ T6473] RSP: 002b:00007fe2bce77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  201.972332][ T6473] RAX: ffffffffffffffda RBX: 00007fe2be695fa0 RCX: 00007fe2be41ce59
[  201.972351][ T6473] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[  201.972366][ T6473] RBP: 00007fe2bce77090 R08: 0000000000000020 R09: 0000000000000000
[  201.972460][ T6473] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001
[  201.972475][ T6473] R13: 00007fe2be696038 R14: 00007fe2be695fa0 R15: 00007ffe38f8ef58
[  201.972494][ T6473]  </TASK>
[  201.972657][ T6470] EXT4-fs (loop0): mount failed
[  202.167566][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'.
[  202.203199][ T6481] FAULT_INJECTION: forcing a failure.
[  202.203199][ T6481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.291382][ T6485] FAULT_INJECTION: forcing a failure.
[  202.291382][ T6485] name failslab, interval 1, probability 0, space 0, times 0
[  202.351584][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.3.767 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  202.351691][ T6485] Tainted: [W]=WARN
[  202.351700][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  202.351715][ T6485] Call Trace:
[  202.351723][ T6485]  <TASK>
[  202.351739][ T6485]  __dump_stack+0x1d/0x30
[  202.351769][ T6485]  dump_stack_lvl+0x95/0xd0
[  202.351874][ T6485]  dump_stack+0x15/0x1b
[  202.351894][ T6485]  should_fail_ex+0x263/0x280
[  202.351953][ T6485]  should_failslab+0x8c/0xb0
[  202.351989][ T6485]  __kvmalloc_node_noprof+0x155/0x640
[  202.352091][ T6485]  ? io_alloc_cache_init+0x36/0xb0
[  202.352121][ T6485]  io_alloc_cache_init+0x36/0xb0
[  202.352153][ T6485]  io_ring_ctx_alloc+0x2a3/0x670
[  202.352208][ T6485]  io_uring_create+0x50/0x500
[  202.352295][ T6485]  ? memchr_inv+0x30/0x2f0
[  202.352331][ T6485]  __se_sys_io_uring_setup+0x1cb/0x1e0
[  202.352392][ T6485]  __x64_sys_io_uring_setup+0x31/0x40
[  202.352476][ T6485]  x64_sys_call+0x2962/0x3020
[  202.352505][ T6485]  do_syscall_64+0x12c/0x3b0
[  202.352560][ T6485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.352610][ T6485] RIP: 0033:0x7f194ef7ce59
[  202.352630][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.352682][ T6485] RSP: 002b:00007f194d98d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  202.352706][ T6485] RAX: ffffffffffffffda RBX: 00007f194f1f6180 RCX: 00007f194ef7ce59
[  202.352777][ T6485] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000524
[  202.352793][ T6485] RBP: 00007f194d98d090 R08: 0000000000000000 R09: 0000000000000000
[  202.352821][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.352837][ T6485] R13: 00007f194f1f6218 R14: 00007f194f1f6180 R15: 00007fff3a4f1078
[  202.352858][ T6485]  </TASK>
[  202.553566][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.0.768 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  202.553687][ T6481] Tainted: [W]=WARN
[  202.553694][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  202.553737][ T6481] Call Trace:
[  202.553755][ T6481]  <TASK>
[  202.553764][ T6481]  __dump_stack+0x1d/0x30
[  202.553806][ T6481]  dump_stack_lvl+0x95/0xd0
[  202.553830][ T6481]  dump_stack+0x15/0x1b
[  202.553893][ T6481]  should_fail_ex+0x263/0x280
[  202.553927][ T6481]  should_fail+0xb/0x20
[  202.553965][ T6481]  should_fail_usercopy+0x1a/0x20
[  202.554025][ T6481]  _copy_from_user+0x1c/0xb0
[  202.554057][ T6481]  __sys_bpf+0x183/0x7e0
[  202.554086][ T6481]  __x64_sys_bpf+0x41/0x50
[  202.554237][ T6481]  x64_sys_call+0x10cb/0x3020
[  202.554266][ T6481]  do_syscall_64+0x12c/0x3b0
[  202.554296][ T6481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.554379][ T6481] RIP: 0033:0x7f9576c4ce59
[  202.554400][ T6481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.554422][ T6481] RSP: 002b:00007f95756a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  202.554446][ T6481] RAX: ffffffffffffffda RBX: 00007f9576ec5fa0 RCX: 00007f9576c4ce59
[  202.554491][ T6481] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000
[  202.554517][ T6481] RBP: 00007f95756a7090 R08: 0000000000000000 R09: 0000000000000000
[  202.554532][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.554545][ T6481] R13: 00007f9576ec6038 R14: 00007f9576ec5fa0 R15: 00007fff6ea35f78
[  202.554563][ T6481]  </TASK>
[  202.859942][ T6492] loop4: detected capacity change from 0 to 128
[  203.106007][ T6495] loop1: detected capacity change from 0 to 512
[  203.134331][ T6502] loop4: detected capacity change from 0 to 1024
[  203.141841][ T6495] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.183419][ T6502] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  203.213030][ T6495] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  203.247749][ T6495] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.769: corrupted in-inode xattr: e_value size too large
[  203.316394][ T6495] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  203.316540][ T6495] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.769: couldn't read orphan inode 15 (err -117)
[  203.325748][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  203.325769][    C0] EXT4-fs (loop1): initial error at time 1779399714: ext4_iget_extra_inode:5128: inode 15
[  203.325810][    C0] EXT4-fs (loop1): last error at time 1779399714: ext4_iget_extra_inode:5128: inode 15
[  203.439740][ T6496] loop3: detected capacity change from 0 to 512
[  203.453817][ T6495] loop1: lost filesystem error report for type 5 error -117
[  203.454400][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.492634][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'.
[  203.608268][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.721715][ T6520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6520 comm=syz.2.780
[  204.009098][   T28] kauditd_printk_skb: 132 callbacks suppressed
[  204.009179][   T28] audit: type=1400 audit(1779399715.603:1562): avc:  denied  { ioctl } for  pid=6525 comm="syz.4.784" path="net:[4026532630]" dev="nsfs" ino=4026532630 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  204.551610][   T28] audit: type=1400 audit(1779399716.153:1563): avc:  denied  { name_bind } for  pid=6538 comm="syz.2.788" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  204.611492][ T6536] lo speed is unknown, defaulting to 1000
[  204.901924][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'.
[  204.934704][ T6544] loop1: detected capacity change from 0 to 512
[  205.426517][ T6557] loop1: detected capacity change from 0 to 512
[  205.657429][ T6562] loop1: detected capacity change from 0 to 512
[  205.772798][ T6562] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.794: Bad quota inum: 1, type: 2
[  205.800854][ T6562] loop1: lost filesystem error report for type 5 error -117
[  205.810640][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  205.824440][    C0] EXT4-fs (loop1): initial error at time 1779399717: ext4_quota_enable:7221
[  205.833176][    C0] EXT4-fs (loop1): last error at time 1779399717: ext4_quota_enable:7221
[  205.891638][ T6562] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  205.931760][ T6562] EXT4-fs (loop1): mount failed
[  207.132200][ T6567] loop3: detected capacity change from 0 to 1024
[  207.171729][ T6567] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  207.626144][ T6580] loop0: detected capacity change from 0 to 512
[  207.931383][ T6585] loop4: detected capacity change from 0 to 512
[  207.938077][ T6585] EXT4-fs: Ignoring removed nomblk_io_submit option
[  207.949037][ T6585] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  207.959694][ T6585] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.803: corrupted in-inode xattr: e_value size too large
[  207.974086][ T6585] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  207.974381][ T6585] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.803: couldn't read orphan inode 15 (err -117)
[  207.990907][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  207.995907][ T6585] loop4: lost filesystem error report for type 5 error -117
[  207.996455][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.002945][    C1] EXT4-fs (loop4): initial error at time 1779399719: ext4_iget_extra_inode:5128: inode 15
[  208.003367][    C1] EXT4-fs (loop4): last error at time 1779399719: ext4_orphan_get:1402
[  208.015209][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  208.024387][    C1] 
[  208.056679][   T28] audit: type=1400 audit(1779399719.643:1564): avc:  denied  { setopt } for  pid=6586 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  208.077640][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.112787][   T28] audit: type=1400 audit(1779399719.713:1565): avc:  denied  { read write } for  pid=6599 comm="syz.3.807" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  208.138158][   T28] audit: type=1400 audit(1779399719.733:1566): avc:  denied  { open } for  pid=6599 comm="syz.3.807" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  208.189180][ T6602] FAULT_INJECTION: forcing a failure.
[  208.189180][ T6602] name fail_futex, interval 1, probability 0, space 0, times 1
[  208.192951][   T28] audit: type=1400 audit(1779399719.733:1567): avc:  denied  { read } for  pid=6599 comm="syz.3.807" path="socket:[14603]" dev="sockfs" ino=14603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  208.208777][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.3.807 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  208.208814][ T6602] Tainted: [W]=WARN
[  208.208821][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  208.208834][ T6602] Call Trace:
[  208.208841][ T6602]  <TASK>
[  208.208849][ T6602]  __dump_stack+0x1d/0x30
[  208.208877][ T6602]  dump_stack_lvl+0x95/0xd0
[  208.208959][ T6602]  dump_stack+0x15/0x1b
[  208.208981][ T6602]  should_fail_ex+0x263/0x280
[  208.209037][ T6602]  should_fail+0xb/0x20
[  208.209064][ T6602]  get_futex_key+0x12f/0xb50
[  208.209103][ T6602]  ? terminate_walk+0x1e6/0x210
[  208.209129][ T6602]  futex_wait_requeue_pi+0x177/0x730
[  208.209155][ T6602]  ? __pfx_futex_wake_mark+0x10/0x10
[  208.209186][ T6602]  ? proc_fail_nth_write+0x13b/0x160
[  208.209271][ T6602]  do_futex+0x136/0x380
[  208.209305][ T6602]  __se_sys_futex+0x2f6/0x370
[  208.209342][ T6602]  ? mutex_unlock+0x4e/0x90
[  208.209367][ T6602]  __x64_sys_futex+0x78/0x90
[  208.209435][ T6602]  x64_sys_call+0x24ab/0x3020
[  208.209461][ T6602]  do_syscall_64+0x12c/0x3b0
[  208.209539][ T6602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.209563][ T6602] RIP: 0033:0x7f194ef7ce59
[  208.209580][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.209645][ T6602] RSP: 002b:00007f194d9ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  208.209727][ T6602] RAX: ffffffffffffffda RBX: 00007f194f1f6090 RCX: 00007f194ef7ce59
[  208.209743][ T6602] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc
[  208.209757][ T6602] RBP: 00007f194d9ae090 R08: 0000200000048000 R09: 0000000000000020
[  208.209779][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.209793][ T6602] R13: 00007f194f1f6128 R14: 00007f194f1f6090 R15: 00007fff3a4f1078
[  208.209853][ T6602]  </TASK>
[  208.211303][ T6602] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[  208.232236][   T28] audit: type=1400 audit(1779399719.803:1568): avc:  denied  { mac_admin } for  pid=6599 comm="syz.3.807" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  208.276887][ T6612] loop4: detected capacity change from 0 to 1024
[  208.279275][   T28] audit: type=1400 audit(1779399719.833:1569): avc:  denied  { relabelto } for  pid=6599 comm="syz.3.807" name="145" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  208.284886][ T6612] EXT4-fs: Ignoring removed orlov option
[  208.289466][   T28] audit: type=1400 audit(1779399719.833:1570): avc:  denied  { associate } for  pid=6599 comm="syz.3.807" name="145" dev="tmpfs" ino=797 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  208.333936][ T6612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  208.521352][ T6612] System zones: 0-1, 3-12
[  208.526536][ T6612] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.812587][ T6632] lo speed is unknown, defaulting to 1000
[  208.953753][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'.
[  208.964906][   T28] audit: type=1400 audit(1779399720.563:1571): avc:  denied  { write } for  pid=3302 comm="syz-executor" name="145" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  209.001840][ T6640] loop3: detected capacity change from 0 to 1024
[  209.016405][ T6640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.072782][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  209.072800][   T28] audit: type=1400 audit(1779399720.663:1577): avc:  denied  { write } for  pid=3297 comm="syz-executor" name="167" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  209.127846][   T28] audit: type=1400 audit(1779399720.663:1578): avc:  denied  { write } for  pid=3297 comm="syz-executor" name="167" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  209.134564][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.154808][   T28] audit: type=1400 audit(1779399720.663:1579): avc:  denied  { write } for  pid=3297 comm="syz-executor" name="167" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  209.195398][   T28] audit: type=1400 audit(1779399720.663:1580): avc:  denied  { write } for  pid=3297 comm="syz-executor" name="167" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  209.204302][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  209.264762][   T28] audit: type=1400 audit(1779399720.863:1581): avc:  denied  { bind } for  pid=6649 comm="syz.3.820" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  209.324229][ T6644] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  209.891473][ T6672] loop3: detected capacity change from 0 to 512
[  210.465713][ T6676] loop0: detected capacity change from 0 to 256
[  210.711152][ T6680] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.831'.
[  210.821668][   T28] audit: type=1326 audit(1779399722.423:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.1.833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  210.847211][   T28] audit: type=1326 audit(1779399722.423:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.1.833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  210.850977][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'.
[  210.922987][ T6680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=6680 comm=syz.2.831
[  210.962053][   T28] audit: type=1326 audit(1779399722.423:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.1.833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  210.990555][ T6685] loop1: detected capacity change from 0 to 512
[  211.047140][ T6685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.063508][   T28] audit: type=1326 audit(1779399722.423:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.1.833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  211.124519][ T6685] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.165430][ T6685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.180332][   T28] audit: type=1326 audit(1779399722.423:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.1.833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2be41ce59 code=0x7ffc0000
[  211.275446][ T6695] lo speed is unknown, defaulting to 1000
[  211.604779][ T6705] loop0: detected capacity change from 0 to 256
[  211.667112][ T6711] loop4: detected capacity change from 0 to 512
[  211.683888][ T6714] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  211.772671][ T6707] netlink: 92 bytes leftover after parsing attributes in process `syz.1.841'.
[  211.899452][ T6714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.842'.
[  211.971466][ T6700] lo speed is unknown, defaulting to 1000
[  212.133084][ T6727] netlink: 'syz.1.846': attribute type 29 has an invalid length.
[  212.409690][ T6737] tipc: Started in network mode
[  212.430667][ T6737] tipc: Node identity 4, cluster identity 4711
[  212.454222][ T6737] tipc: Node number set to 4
[  213.049795][ T6747] set_capacity_and_notify: 1 callbacks suppressed
[  213.049815][ T6747] loop0: detected capacity change from 0 to 512
[  213.256904][ T6747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.270802][ T6749] loop3: detected capacity change from 0 to 256
[  213.357126][ T6747] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.484709][ T6747] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.313771][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  214.313791][   T28] audit: type=1400 audit(1779399725.893:1629): avc:  denied  { name_bind } for  pid=6726 comm="syz.1.846" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  214.630577][ T6777] loop4: detected capacity change from 0 to 512
[  214.954284][ T6777] EXT4-fs: Ignoring removed bh option
[  215.526021][ T6793] sctp: [Deprecated]: syz.2.864 (pid 6793) Use of struct sctp_assoc_value in delayed_ack socket option.
[  215.526021][ T6793] Use struct sctp_sack_info instead
[  215.574346][ T6777] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  215.928755][ T6777] EXT4-fs (loop4): 1 truncate cleaned up
[  216.192443][ T6777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.910949][ T6811] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  218.328185][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.655911][ T6823] lo speed is unknown, defaulting to 1000
[  218.944889][ T6837] loop4: detected capacity change from 0 to 1024
[  219.636561][ T6837] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  220.536429][ T6830] rdma_rxe: rxe_newlink: failed to add lo
[  220.825617][ T6837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.351602][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.645452][ T6823] loop1: detected capacity change from 0 to 512
[  221.656392][ T6823] EXT4-fs: test_dummy_encryption option not supported
[  224.251259][ T6878] loop1: detected capacity change from 0 to 512
[  224.302815][ T6878] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.889: corrupted in-inode xattr: invalid ea_ino
[  224.317106][ T6878] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  224.317431][ T6878] EXT4-fs (loop1): Remounting filesystem read-only
[  224.326645][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  224.326666][    C0] EXT4-fs (loop1): initial error at time 1779399735: ext4_iget_extra_inode:5128: inode 15
[  224.326692][    C0] EXT4-fs (loop1): last error at time 1779399735: ext4_iget_extra_inode:5128: inode 15
[  224.360901][ T6878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.385253][   T28] audit: type=1400 audit(1779399735.983:1630): avc:  denied  { mounton } for  pid=6875 comm="syz.1.889" path="/183/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  224.672572][   T28] audit: type=1400 audit(1779399736.273:1631): avc:  denied  { setopt } for  pid=6875 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  224.891928][ T6885] tun0: tun_chr_ioctl cmd 1074025675
[  224.902055][ T6885] tun0: persist enabled
[  224.908768][ T6886] tun0: tun_chr_ioctl cmd 1074025675
[  224.914755][ T6886] tun0: persist disabled
[  224.968205][ T6891] loop0: detected capacity change from 0 to 512
[  224.988007][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.014224][ T6891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.035216][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'.
[  225.040204][ T6891] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.074096][ T6891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.140479][ T6903] loop1: detected capacity change from 0 to 1024
[  225.186123][ T6903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.356545][ T6910] loop4: detected capacity change from 0 to 1024
[  225.390885][ T6910] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  225.475616][ T6910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.582724][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.314771][ T6923] loop0: detected capacity change from 0 to 512
[  226.456896][ T6923] EXT4-fs: Ignoring removed bh option
[  226.801016][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'.
[  227.044743][ T6947] lo speed is unknown, defaulting to 1000
[  227.137543][ T6923] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  227.270166][ T6923] EXT4-fs (loop0): 1 truncate cleaned up
[  227.456765][ T6923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.492584][ T6948] loop1: detected capacity change from 0 to 512
[  227.572523][ T6948] EXT4-fs: test_dummy_encryption option not supported
[  227.794341][ T6959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6959 comm=syz.1.912
[  227.825491][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  227.834117][ T6954] lo speed is unknown, defaulting to 1000
[  229.660076][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.660202][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.808547][ T6980] netlink: 391 bytes leftover after parsing attributes in process `syz.2.917'.
[  229.859039][ T6980] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[  229.881679][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'.
[  229.891116][ T6980] openvswitch: netlink: Message has 4 unknown bytes.
[  229.956533][ T6978] loop1: detected capacity change from 0 to 512
[  229.974339][ T6978] EXT4-fs: Ignoring removed nomblk_io_submit option
[  229.997574][ T6978] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  230.013904][ T6978] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.918: corrupted in-inode xattr: e_value size too large
[  230.066391][ T6978] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  230.066541][ T6978] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.918: couldn't read orphan inode 15 (err -117)
[  230.075771][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  230.075788][    C1] EXT4-fs (loop1): initial error at time 1779399741: ext4_iget_extra_inode:5128: inode 15
[  230.075823][    C1] EXT4-fs (loop1): last error at time 1779399741: ext4_iget_extra_inode:5128: inode 15
[  230.134249][ T7002] rdma_rxe: rxe_newlink: failed to add lo
[  230.170001][ T6978] loop1: lost filesystem error report for type 5 error -117
[  230.261682][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.290925][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'.
[  230.310911][ T7004] loop3: detected capacity change from 0 to 512
[  230.335968][ T7004] EXT4-fs: Ignoring removed bh option
[  230.669813][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.810972][ T7004] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  230.822132][ T7004] EXT4-fs (loop3): 1 truncate cleaned up
[  230.829331][ T7004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.572894][   T28] audit: type=1400 audit(1779399743.173:1632): avc:  denied  { read } for  pid=3019 comm="dhcpcd" name="n25" dev="tmpfs" ino=8242 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  231.598211][   T28] audit: type=1400 audit(1779399743.173:1633): avc:  denied  { open } for  pid=3019 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=8242 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  231.650554][   T28] audit: type=1400 audit(1779399743.173:1634): avc:  denied  { getattr } for  pid=3019 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=8242 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  231.804546][   T28] audit: type=1400 audit(1779399743.403:1635): avc:  denied  { write } for  pid=7003 comm="syz.3.924" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  231.910062][   T28] audit: type=1400 audit(1779399743.403:1636): avc:  denied  { unlink } for  pid=7003 comm="syz.3.924" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  231.983407][ T7004] lo speed is unknown, defaulting to 1000
[  232.042398][   T28] audit: type=1400 audit(1779399743.483:1637): avc:  denied  { write } for  pid=7003 comm="syz.3.924" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  232.169743][   T28] audit: type=1400 audit(1779399743.763:1638): avc:  denied  { write } for  pid=7027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  232.234131][   T28] audit: type=1400 audit(1779399743.763:1639): avc:  denied  { create } for  pid=7027 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  232.273469][   T28] audit: type=1400 audit(1779399743.763:1640): avc:  denied  { write } for  pid=7027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=8247 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  232.307218][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'.
[  232.324142][   T28] audit: type=1400 audit(1779399743.763:1641): avc:  denied  { append } for  pid=7027 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=8247 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  232.421883][ T7043] wg0: entered promiscuous mode
[  232.429748][ T7043] wg0: entered allmulticast mode
[  232.453237][ T7043] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in;
[  232.453237][ T7043]    program syz.2.931 not setting count and/or reply_len properly
[  232.492509][ T7063] loop4: detected capacity change from 0 to 128
[  232.701824][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.735776][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.3.936'.
[  232.747279][ T7067] 9p: Bad value for 'wfdno'
[  232.755583][ T7067] loop3: detected capacity change from 0 to 1024
[  232.782227][ T7067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.804941][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.951540][ T1038] ==================================================================
[  232.959810][ T1038] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  232.966868][ T1038] 
[  232.969201][ T1038] read-write to 0xffff888237c2a8e4 of 4 bytes by task 10 on cpu 0:
[  232.977084][ T1038]  wq_worker_running+0x9b/0x120
[  232.981938][ T1038]  synchronize_rcu_expedited+0x5f8/0x770
[  232.987650][ T1038]  synchronize_rcu+0x35/0x2e0
[  232.992325][ T1038]  try_check_zero+0x182/0x260
[  232.996996][ T1038]  process_srcu+0xc2/0xd90
[  233.001429][ T1038]  process_scheduled_works+0x4f0/0x9c0
[  233.007073][ T1038]  worker_thread+0x58a/0x780
[  233.011670][ T1038]  kthread+0x22a/0x280
[  233.015789][ T1038]  ret_from_fork+0x146/0x330
[  233.020378][ T1038]  ret_from_fork_asm+0x1a/0x30
[  233.025137][ T1038] 
[  233.027455][ T1038] read to 0xffff888237c2a8e4 of 4 bytes by task 1038 on cpu 1:
[  233.034985][ T1038]  kick_pool+0x49/0x2d0
[  233.039138][ T1038]  __queue_work+0x8b9/0xb00
[  233.043634][ T1038]  queue_work_on+0xa9/0x140
[  233.048148][ T1038]  process_srcu+0xa38/0xd90
[  233.052735][ T1038]  process_scheduled_works+0x4f0/0x9c0
[  233.058194][ T1038]  worker_thread+0x58a/0x780
[  233.062829][ T1038]  kthread+0x22a/0x280
[  233.066901][ T1038]  ret_from_fork+0x146/0x330
[  233.071494][ T1038]  ret_from_fork_asm+0x1a/0x30
[  233.076281][ T1038] 
[  233.078618][ T1038] value changed: 0x00000000 -> 0x00000001
[  233.084344][ T1038] 
[  233.086661][ T1038] Reported by Kernel Concurrency Sanitizer on:
[  233.092804][ T1038] CPU: 1 UID: 0 PID: 1038 Comm: kworker/1:2 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  233.103734][ T1038] Tainted: [W]=WARN
[  233.107523][ T1038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  233.117589][ T1038] Workqueue: rcu_gp process_srcu
[  233.122545][ T1038] ==================================================================
[  233.197798][ T7079] rdma_rxe: rxe_newlink: failed to add lo