last executing test programs:

48.065624722s ago: executing program 4 (id=445):
r0 = socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
stat(0x0, &(0x7f0000000380))
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind(r6, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80)
r7 = io_uring_setup(0x18e5, 0x0)
syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x4c032, r7, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="2f0000003200000004000010"], 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

46.85724803s ago: executing program 4 (id=448):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x7, 0x0, &(0x7f0000000300)="e02742e8680d85", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

46.728226305s ago: executing program 4 (id=451):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000094)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r6=>0x0})
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x0)

46.467547833s ago: executing program 4 (id=453):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
delete_module(0x0, 0x800)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a45404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2b5b093, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4ea1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x3c}}], 0x30}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370)

46.290643748s ago: executing program 4 (id=454):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

45.994994808s ago: executing program 4 (id=460):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCGSOFTCAR(r1, 0x5432, &(0x7f0000000000))

45.994932618s ago: executing program 32 (id=460):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCGSOFTCAR(r1, 0x5432, &(0x7f0000000000))

7.633369355s ago: executing program 3 (id=718):
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r2, 0x0, 0x24000890)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
unshare(0x20000400)
socket(0x28, 0x5, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x53}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

6.272428739s ago: executing program 3 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f00000003c0)={&(0x7f0000000280)=[{&(0x7f0000000180)="9243bcde196af697c97e", 0xa}, {&(0x7f00000001c0)="d6dbffeaf7e24e0b2ef5795825f07d59a9f15584", 0x14}, {&(0x7f0000000240)="e70004b19d5126fc504ac366ebcec59542c57178a21654e4287f", 0x1a}], 0x3, 0x100, 0x0, 0x3ff, 0x3, 0x5, 0x1, 0x6})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008000400010000", 0x23)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[@ANYBLOB="480000001000770400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010067656e657665000018000280040006"], 0x48}}, 0x0)

5.728399886s ago: executing program 1 (id=731):
semtimedop(0x0, 0x0, 0x0, 0x0)
r0 = semget$private(0x0, 0x3, 0x24)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESHEX=r0], 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r3 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r4})
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', <r6=>0x0, 0x2f, 0x0, 0x4, 0x800, 0x8, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8040, 0x400, 0x2}})
sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@ipv4_getaddr={0x78, 0x16, 0x10, 0x70bd25, 0x25dfdbfd, {0x2, 0x18, 0x10, 0xff, r6}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LABEL={0x14, 0x3, 'team0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LABEL={0x14, 0x3, 'veth0_to_team\x00'}, @IFA_FLAGS={0x8, 0x8, 0x480}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x8804)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="7a0a00ff0000002871108f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000180)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4110, 0x100e}, {&(0x7f00000009c0)=""/136, 0x88}], 0x2}, 0x6}], 0x1, 0x2300, 0x0)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
semop(r0, &(0x7f0000000000)=[{0x1, 0x7fff, 0x1800}, {0x3, 0x6, 0x1000}, {0x3, 0x6, 0x1000}], 0x3)
semop(0x0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)

4.462934487s ago: executing program 1 (id=736):
socket$inet_sctp(0x2, 0x1, 0x84)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=<r0=>0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0))

3.612306494s ago: executing program 1 (id=741):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@id, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r2, 0x0, 0x48010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c2bc9eea76efc047a47cf07e1ad7fd97a22ec3b5f4c91a18bf1460ea5d4ebf53853e39c79a244d791eda67ab085dd5ad21128f0400cbfe02006ed6e97fd775b4020000000000000089ceb28b8626b0794e163f9b108f3b455709cfd0a30997410c911015431fe17fd4bf362f6ecaa46f80af72e7ba6dce1161d1f5000000", @ANYRES32, @ANYBLOB="0800010004000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

2.691146543s ago: executing program 1 (id=747):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x12}, 0x12)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)

1.979322036s ago: executing program 3 (id=755):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000900000004000000000000120200000005000000000000080500"], 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r8 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000340)="9e91d91a92dc7c8fff658bb539e2ffb332c924909ebe9223a7dfe52c1f51218206f5ab", 0x23}], 0x2}, 0x20008b88)
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYBLOB="00fb9f01001130315fce7f50ab7ea925a764d20111750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe17d5f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139"], 0x9f, 0x3)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}})
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
dup(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xf, 0x200]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0)

1.770657483s ago: executing program 5 (id=757):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket(0x10, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x4, [{0x1, 0x4, 0x9}, {0x6, 0x3, 0x6}, {0x3, 0x1, 0x7}, {0x5, 0x1, 0x7f}]}]}, {0x0, [0x30, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f00000004c0)=""/228, 0x5f, 0xe4, 0x1, 0x8001, 0x10000, @value=r1}, 0x28)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

1.351713906s ago: executing program 0 (id=759):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000002c00028008000800060000000800"], 0x40}}, 0x44000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000f00)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1022000, 0x1000}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7ff, 0x4}}}}]}, 0x44}}, 0x4c840)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000480)={0x68000005})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000300), 0x7}, 0x8024, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x2, 0x0, 0x9, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)

1.326071557s ago: executing program 5 (id=760):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket(0x10, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x4, [{0x1, 0x4, 0x9}, {0x6, 0x3, 0x6}, {0x3, 0x1, 0x7}, {0x5, 0x1, 0x7f}]}]}, {0x0, [0x30, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f00000004c0)=""/228, 0x5f, 0xe4, 0x1, 0x8001, 0x10000, @value=r1}, 0x28)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

1.215804281s ago: executing program 0 (id=762):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000840)

1.166469692s ago: executing program 1 (id=764):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x4000003, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
writev(r1, &(0x7f0000002700)=[{&(0x7f0000000380)="a639ea6ae02eaf", 0x7}], 0x1)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setuid(0xee00)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10002, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@noquota}, {@auto_da_alloc}, {@block_validity}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
open_tree(0xffffffffffffffff, &(0x7f0000000300)='./cgroup\x00', 0x89801)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101)

1.159549863s ago: executing program 0 (id=765):
socket$inet_sctp(0x2, 0x1, 0x84)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=<r0=>0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0))

1.127634633s ago: executing program 3 (id=766):
socket$inet6_sctp(0xa, 0x1, 0x84)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x30, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast2}}, @RTA_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
getpgrp(0xffffffffffffffff)
clock_adjtime(0x0, &(0x7f0000000100)={0x1, 0x20000000000000fb, 0x100000000000, 0x0, 0x858, 0x6, 0x0, 0x6, 0x20000, 0x8000000000000001, 0xde1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x401, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101000000000000080002"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
listen(r3, 0x3)
close(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcff", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.054906406s ago: executing program 0 (id=768):
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.054649426s ago: executing program 2 (id=769):
socket$kcm(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4cf, 0x2, @perf_config_ext={0x8000000000000001, 0x4}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0xfffffef4}, 0x922bac8576bdadce)
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000340)=r0, 0x38)

1.041809986s ago: executing program 2 (id=770):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)

979.798308ms ago: executing program 2 (id=771):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) (async)

237.402682ms ago: executing program 0 (id=772):
socket$packet(0x11, 0x2, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xe, 0x28, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001, {[@generic={0x44, 0x2}]}}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xba, 0x100}}}}}}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfd45}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
pread64(r1, &(0x7f00000000c0)=""/105, 0x69, 0x96)

232.485252ms ago: executing program 3 (id=773):
r0 = socket$inet(0x2, 0x3, 0x7f)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000, 0x0)

166.400844ms ago: executing program 3 (id=774):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x12}, 0x12)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)

166.240244ms ago: executing program 2 (id=775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000840)

165.715594ms ago: executing program 5 (id=776):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x80000040)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x3e, 0x2ef4, 0x3d6, 0x40, 0x0, 0x0, 0x8000, 0x38, 0x1, 0xfffe, 0x12, 0xed86}, [{0x3, 0x5, 0x8, 0xd, 0x1, 0xe5, 0x10000000003, 0x450c}], "80cf513943c079d91810d33544894d21d5747ba1bc2239f434b18fb96e7bf05776bc47672036679999bf356d397c8ecddfdaf770955ce693825e584a7413fb7c143cd75267d1a6edd988a772f8192ad9106d3e9bd03e3fadb5910d0da68ac1fdd69dd8de9b59a0b1ace1071b1152f2ec6416c921403c1c802bcf375a4f76fdb2"}, 0xf8)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x1f, 0x7, 0xfffe, 0x1000, 0x0, 0x0, 0x0})

113.380786ms ago: executing program 0 (id=777):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000900000004000000000000120200000005000000000000080500"], 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r8 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000340)="9e91d91a92dc7c8fff658bb539e2ffb332c924909ebe9223a7dfe52c1f51218206f5ab", 0x23}], 0x2}, 0x20008b88)
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYBLOB="00fb9f01001130315fce7f50ab7ea925a764d20111750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe17d5f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139"], 0x9f, 0x3)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}})
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
dup(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xf, 0x200]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0)

112.990386ms ago: executing program 5 (id=778):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "cb"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000840)
close(0x3)

112.591596ms ago: executing program 2 (id=779):
socket$inet_sctp(0x2, 0x1, 0x84)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0))

95.774617ms ago: executing program 5 (id=780):
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040)
close(0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a4335555c631923a26cb9786fdacabd665d94e7687cec1b23cf08b5de17045201e7fae08db9c47cfa19a8ffef7762daf9ca316925775225ed050a32ac01458e3865d17d1cd62841819316e98ca36c8651a8ef808cf1bc7188969bcd205f004c58159bc941c6399a88bc124c8a0a47dc4e3546429ec3c363375811e7653317492a4486debfcab21d7af4fa39528e49a6b2885edd369dc1c6ec7b8c2311c393c725856147b06ce109172c480cc4ea6e3c30198ac84e75318f2f6a4ddad661ea76b41c1b614d2353ecd1e005772fff23095f20d54046cd7c0f938fa1c9d5c27adda5ef552a1d6fc1f271da3816f7b82540b12923b2d38f906912a8031e24fe6c1f9e6692b074128a3cd03faafeed41e5615bdb86ce3aa1e000c18010e95934b1c8a1dd14922773e8951889f9be3291b6842845ac06a28e233a394a57e6ce572b8810e98f7a7256ca494de41fe6c72099d38a6f4964f32ca61880c695d757d3346a0dc8e7c92e555e5c12b8cb9be8d9289fee2f17ef988d3e7acc8eeae5e7cde98153c409c48504eccd618b2676930711159b631c76b69c792a44a3696979495f06ddaffb7f60af1af0ab2df1ff3653a902201ffa93f77202b4637abfe654ab42abfadac65a09c45afde7aaec8623f9424885ec7c5fd4adf111192a5d36bb73e79cdc2a6a25e3a29d665beae71db419984f05bce4b0576d44e0c7f26c722aff26af467acaf2fd2e0d153b95281d59c985229772a2deeda2e27cda3010c66abf08dbb7d7b461bbe1f143762c03b755f81d829b77314e6cfc2fcca5269567b206530e15263c55045707db56b51ed3f797e086fde879863eff033bcacf01880c634df426cfb495c81c4048754a3f05b212909ac7a2a050461a60821b2b7e99a2ed2b2a87e90fa5995cfa3884758eca6d4aa8e35b952d3f4be73ad9c27bcdd287e895597b6ce0294ceede0abd6b8cf60cd5dfb0afcd2088611d10a39736eb224e369ff117bbd94c5a311c9b7075b739f0ac7780d1412d552dcd278245f98251b93b326c8d1ccb3c2a96bb7c161363bfc4f52aaa252af790c3a57979d1d81df8e147e0bdd46704a51d48765c1d1fff316c892b66b8d13319783ead3c7f89600e8f4440393eb2e3fff2319fc45cefb740c59db8680c9d17fb2f37f194d317e5e989d0c5c361f0915ebe2efea196dd3d8d2fd747043738d91fe4a4c02a7369c333c253a78eed8098fda8b92bd37b65bdfec9f1c499cfbd8dff47a81d01d88633984a63eb4277dc34d7c42eaf891c14d9a12b6971436023ffb223cc973382ec5c4d1188d2b9ccdb1faf96062088bdd25284f311bc2fb8b4d1e355e2f76ec15342d4d9413fed8987965eddcf69335c62d2d3fb66d68e203f9b71c998abd92a5b5b9f07da2ddb44eb05b25a1a8a991d7c602558ca40cddfa98371c893b1002f7f8cdcf913fc085a20aa584fee9614a7d3d7444c8a4a00cdcefb0c172ffcd9c6cd0653ecaf3526318f3b3cddc32c84d76c0f93f7d18cc625bb02b89df352a8eeba1662b4bd2a948266b2fb9dccae4d8fca25a9f3121fcb8056a0f8cbf31fc694035f588c46769d8ef23bd63de1c9fbbfab871d0d47764ef1805f86a09b35f6038c3c28bdd2dd8c61742f49e138fb833dec4d899057f676b9b91aa1d3f3eb54afa17c9ba78e678679ac88f4192ba7edf891b043d5020fd09246615e9e9941fb47cf6a6ee83115e2ef7d5aa9ffa63b7cb90068f4f769dbf78039e7dc794e41845ecafc75c126816e673fd534cec3c1304ea915b8e9a0cd8970722a419994e44d04db4ee81dfe23cc3abfd2c060a6ae7e6bac7589a2c8d4abc58aa90b6560823", 0x57f}], 0x1}, 0x400c000)
sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

81.388717ms ago: executing program 1 (id=781):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x11, 0x1, {{0x2, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}]}, 0x4c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
inotify_init1(0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0820a2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x358, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e7f0dd37d9178bd318c409d92c38444ffda7f185b4e7"}}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7a, 0x3, "dbe4b32f61b7f7bf67ca7bb44f59826393068aab275c754fe65766ba66daa8e83cd3d97a0c7125f655f3fdf59abf6783286e5d6cd8ddf05810e599bd8799370e9dac03cc8852b847b648d5f10c8ad7df8512cc5aadcb7ba036d4a195d2df78876c3c37043ea838ba9dc313a401cebb58762d10f40e86"}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "9f3141b1b547ed73e8230829c89080287bdf86f8007f78d76ebe54dede0b7458ef935b6e9375272f539e4f0d182607a659530eb04f1f8e303566d19842080468e18da896ff6cff5240f977e0a957d82cff6352e6921a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x350}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x39}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdc32}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4c}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f49}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b01}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x358}}, 0x4048001)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0xb, 0x20}, &(0x7f0000000180)=0xc)

21.111979ms ago: executing program 2 (id=782):
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 5 (id=783):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

kernel console output (not intermixed with test programs):

[   65.993221][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   65.993238][ T3987] Call Trace:
[   65.993247][ T3987]  <TASK>
[   65.993258][ T3987]  __dump_stack+0x1d/0x30
[   65.993307][ T3987]  dump_stack_lvl+0x95/0xd0
[   65.993334][ T3987]  dump_stack+0x15/0x1b
[   65.993358][ T3987]  dump_header+0x80/0x240
[   65.993428][ T3987]  oom_kill_process+0x295/0x350
[   65.993469][ T3987]  out_of_memory+0x97d/0xb80
[   65.993626][ T3987]  try_charge_memcg+0x62f/0xa10
[   65.993659][ T3987]  ? __rcu_read_unlock+0x33/0x70
[   65.993753][ T3987]  charge_memcg+0x6d/0x120
[   65.993788][ T3987]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   65.993857][ T3987]  __swap_cache_prepare_and_add+0x69/0x4a0
[   65.993885][ T3987]  ? alloc_pages_mpol+0x217/0x260
[   65.993911][ T3987]  swap_cache_alloc_folio+0xa2/0x120
[   65.993935][ T3987]  swap_cluster_readahead+0x25f/0x3c0
[   65.994041][ T3987]  swapin_readahead+0xde/0x840
[   65.994067][ T3987]  ? _raw_spin_unlock+0x9/0x30
[   65.994090][ T3987]  ? swap_put_entries_cluster+0x46c/0x490
[   65.994120][ T3987]  ? __rcu_read_unlock+0x4e/0x70
[   65.994152][ T3987]  ? swap_cache_get_folio+0x1e0/0x1f0
[   65.994184][ T3987]  do_swap_page+0x31e/0x2180
[   65.994213][ T3987]  ? __css_rstat_updated+0xbb/0x280
[   65.994242][ T3987]  ? __rcu_read_lock+0x36/0x50
[   65.994293][ T3987]  ? pte_offset_map_rw_nolock+0x19e/0x200
[   65.994322][ T3987]  handle_mm_fault+0xb30/0x2e70
[   65.994355][ T3987]  ? vma_start_read+0x1c7/0x2c0
[   65.994404][ T3987]  do_user_addr_fault+0x62f/0x1050
[   65.994484][ T3987]  ? fpregs_assert_state_consistent+0xb3/0xe0
[   65.994509][ T3987]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[   65.994584][ T3987]  ? trace_page_fault_user+0x1f/0xa0
[   65.994616][ T3987]  exc_page_fault+0x62/0xa0
[   65.994648][ T3987]  asm_exc_page_fault+0x26/0x30
[   65.994668][ T3987] RIP: 0033:0x7f67c6517fb8
[   65.994690][ T3987] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[   65.994736][ T3987] RSP: 002b:00007ffda0ae5d40 EFLAGS: 00010246
[   65.994758][ T3987] RAX: 0000000000000000 RBX: 00005555809aa500 RCX: 00007f67c651d68e
[   65.994776][ T3987] RDX: 00007ffda0ae5d90 RSI: 0000000000000000 RDI: 0000000000000000
[   65.994793][ T3987] RBP: 00007f67c67d7da0 R08: 0000000000000000 R09: 0000000000000000
[   65.994841][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001020f
[   65.994858][ T3987] R13: 00007f67c67d609c R14: 000000000000ff35 R15: 00007ffda0ae5ec0
[   65.994883][ T3987]  </TASK>
[   66.252599][ T3987] memory: usage 307200kB, limit 307200kB, failcnt 148
[   66.281830][ T3987] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[   66.308227][ T3987] kmem: usage 296280kB, limit 9007199254740988kB, failcnt 0
[   66.322955][ T3987] Memory cgroup stats for /syz1:
[   66.323302][ T3987] cache 0
[   66.344692][ T3987] rss 4096
[   66.352989][ T3987] shmem 0
[   66.359985][ T3987] mapped_file 0
[   66.370974][ T3987] dirty 0
[   66.376438][ T3987] writeback 0
[   66.457276][ T3987] workingset_refault_anon 72
[   66.485651][ T3987] workingset_refault_file 832
[   66.524495][ T3987] swap 176128
[   66.542716][ T3987] swapcached 528384
[   66.569151][ T3987] pgpgin 23228
[   66.589089][ T3987] pgpgout 23221
[   66.599056][ T3987] pgfault 32394
[   66.602598][ T3987] pgmajfault 30
[   66.612465][ T3987] inactive_anon 4096
[   66.626641][ T3987] active_anon 24576
[   66.637872][ T3987] inactive_file 0
[   66.650476][ T3987] active_file 0
[   66.662401][ T3987] unevictable 0
[   66.674380][ T3987] hierarchical_memory_limit 314572800
[   66.695130][ T3987] hierarchical_memsw_limit 9223372036854771712
[   66.718678][ T3987] total_cache 0
[   66.733113][ T3987] total_rss 4096
[   66.743358][ T3987] total_shmem 0
[   66.757347][ T3987] total_mapped_file 0
[   66.771571][ T3987] total_dirty 0
[   66.781413][ T3987] total_writeback 0
[   66.788015][ T3987] total_workingset_refault_anon 72
[   66.800446][ T3987] total_workingset_refault_file 832
[   66.811200][ T3987] total_swap 176128
[   66.821609][ T3987] total_swapcached 528384
[   66.831322][ T3987] total_pgpgin 23228
[   66.840891][ T3987] total_pgpgout 23221
[   66.850086][ T3987] total_pgfault 32394
[   66.864180][ T3987] total_pgmajfault 30
[   66.883230][ T3987] total_inactive_anon 4096
[   66.899727][ T3987] total_active_anon 24576
[   66.914587][ T3987] total_inactive_file 0
[   66.930759][ T3987] total_active_file 0
[   66.944228][ T3987] total_unevictable 0
[   66.959268][ T3987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.168,pid=3987,uid=0
[   66.966890][ T4008] netem: change failed
[   67.020761][ T3987] Memory cgroup out of memory: Killed process 3987 (syz.1.168) total-vm:96216kB, anon-rss:1232kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   67.025557][ T4008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'.
[   67.382566][ T4012] loop2: detected capacity change from 0 to 2048
[   67.453314][ T4012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.514036][ T4012] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.580512][   T28] audit: type=1400 audit(1780251027.234:222): avc:  denied  { write } for  pid=4011 comm="syz.2.177" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.618748][ T4034] loop1: detected capacity change from 0 to 2048
[   67.702172][ T4034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.725564][ T4034] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.764732][   T28] audit: type=1400 audit(1780251027.414:223): avc:  denied  { write } for  pid=4030 comm="syz.1.179" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.241556][   T36] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set
[   68.256913][   T36] EXT4-fs (loop2): Remounting filesystem read-only
[   68.281805][ T4048] loop4: detected capacity change from 0 to 512
[   68.309197][   T49] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   68.353132][ T4048] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.184: corrupted inode contents
[   68.365070][ T4048] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   68.365775][ T4048] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.184: mark_inode_dirty error
[   68.374975][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   68.374999][    C1] EXT4-fs (loop4): initial error at time 1780251028: ext4_do_update_inode:5690: inode 16
[   68.375036][    C1] EXT4-fs (loop4): last error at time 1780251028: ext4_do_update_inode:5690: inode 16
[   68.412260][ T4048] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   68.414188][ T4048] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.184: corrupted inode contents
[   68.435189][ T4048] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   68.435608][ T4048] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.184: mark_inode_dirty error
[   68.459156][ T4048] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.184: corrupted inode contents
[   68.474293][ T4048] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   68.482880][ T4048] loop4: lost filesystem error report for type 5 error -117
[   68.483473][ T4048] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.184: corrupted inode contents
[   68.507502][ T4048] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.184: mark_inode_dirty error
[   68.519290][ T4048] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   68.528333][ T4048] loop4: lost filesystem error report for type 5 error -117
[   68.529275][ T4048] EXT4-fs (loop4): 1 truncate cleaned up
[   68.543460][ T4048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.556036][ T4048] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.655012][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.709237][ T3518] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   68.723932][ T3518] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1
[   68.811922][   T30] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set
[   68.847864][   T30] EXT4-fs (loop1): Remounting filesystem read-only
[   68.869309][ T3518] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   68.907630][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.083456][ T4057] IPv6: NLM_F_REPLACE set, but no existing node found!
[   69.188387][ T4062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.187'.
[   69.717618][ T4067] tipc: Started in network mode
[   69.722727][ T4067] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   69.732336][ T4067] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[   69.742311][ T4067] tipc: Enabled bearer <udp:syz0>, priority 10
[   69.888706][ T4069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.191'.
[   69.991616][ T4069] bridge_slave_0: left allmulticast mode
[   69.998510][ T4069] bridge_slave_0: left promiscuous mode
[   70.005743][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.257099][ T4069] bridge_slave_1: left allmulticast mode
[   70.269777][ T4069] bridge_slave_1: left promiscuous mode
[   70.276310][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.304921][ T4069] bond0: (slave bond_slave_0): Releasing backup interface
[   70.340943][ T4069] bond0: (slave bond_slave_1): Releasing backup interface
[   70.384012][ T4069] team0: Port device team_slave_0 removed
[   70.415927][ T4069] team0: Port device team_slave_1 removed
[   70.431570][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.441883][ T4069] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.460100][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.468166][ T4069] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.491588][ T4069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   70.621754][ T4083] netlink: 84 bytes leftover after parsing attributes in process `syz.0.196'.
[   70.858694][ T3386] tipc: Node number set to 1
[   71.026858][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.013009][ T4108] loop1: detected capacity change from 0 to 512
[   72.100078][ T4108] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.203: corrupted inode contents
[   72.112834][ T4108] fserror_report: 4 callbacks suppressed
[   72.112914][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.122570][ T4108] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.203: mark_inode_dirty error
[   72.132248][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   72.132399][    C1] EXT4-fs (loop1): initial error at time 1780251031: ext4_do_update_inode:5690: inode 16
[   72.132638][    C1] EXT4-fs (loop1): last error at time 1780251031: ext4_do_update_inode:5690: inode 16
[   72.171977][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.176370][ T4108] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.203: corrupted inode contents
[   72.198254][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.204239][ T4108] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.203: mark_inode_dirty error
[   72.225766][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.228230][ T4108] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.203: corrupted inode contents
[   72.250614][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.252486][ T4108] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   72.271223][ T4108] loop1: lost filesystem error report for type 5 error -117
[   72.273714][ T4108] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.203: corrupted inode contents
[   72.293902][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.297957][ T4108] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.203: mark_inode_dirty error
[   72.319460][ T4108] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   72.321814][ T4108] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   72.341338][ T4108] loop1: lost filesystem error report for type 5 error -117
[   72.350006][ T4108] EXT4-fs (loop1): 1 truncate cleaned up
[   72.374538][ T4108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.389564][ T4108] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.558599][ T3519] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   72.582902][ T3519] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1
[   73.650264][ T4115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.204'.
[   73.797347][ T4116] bridge_slave_0: left allmulticast mode
[   73.824331][ T4116] bridge_slave_0: left promiscuous mode
[   73.840415][ T4116] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.849074][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.866282][ T4116] bridge_slave_1: left allmulticast mode
[   73.872030][ T4116] bridge_slave_1: left promiscuous mode
[   73.889768][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.926812][ T4116] bond0: (slave bond_slave_0): Releasing backup interface
[   73.956176][ T4116] bond0: (slave bond_slave_1): Releasing backup interface
[   73.981212][ T4116] team0: Port device team_slave_0 removed
[   74.009556][ T4116] team0: Port device team_slave_1 removed
[   74.032632][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.060656][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.086391][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.115709][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.143869][ T4116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.438765][ T4141] loop4: detected capacity change from 0 to 2048
[   75.528622][ T4141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.585779][ T4141] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.647056][   T28] audit: type=1400 audit(1780251035.294:224): avc:  denied  { write } for  pid=4140 comm="syz.4.212" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.246219][ T3519] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[   76.261751][ T3519] EXT4-fs (loop4): Remounting filesystem read-only
[   76.271506][ T3518] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   76.286515][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.516539][ T4154] loop4: detected capacity change from 0 to 128
[   76.666122][ T4155] loop3: detected capacity change from 0 to 512
[   76.724664][ T4157] bio_check_eod: 10607 callbacks suppressed
[   76.724678][ T4157] syz.4.216: attempt to access beyond end of device
[   76.724678][ T4157] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[   76.756144][ T4155] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.215: corrupted inode contents
[   76.768062][ T4155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   76.768652][ T4155] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.215: mark_inode_dirty error
[   76.777843][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   76.777883][    C1] EXT4-fs (loop3): initial error at time 1780251036: ext4_do_update_inode:5690: inode 16
[   76.777915][    C1] EXT4-fs (loop3): last error at time 1780251036: ext4_do_update_inode:5690: inode 16
[   76.815065][ T4155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   76.823664][ T4155] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.215: corrupted inode contents
[   76.844730][ T4155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   76.845733][ T4155] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.215: mark_inode_dirty error
[   76.867770][ T4155] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.215: corrupted inode contents
[   76.885829][ T4155] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   76.894476][ T4155] loop3: lost filesystem error report for type 5 error -117
[   76.895599][ T4155] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.215: corrupted inode contents
[   76.916315][ T4155] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.215: mark_inode_dirty error
[   76.930472][ T4155] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   76.939564][ T4155] loop3: lost filesystem error report for type 5 error -117
[   76.941554][ T4155] EXT4-fs (loop3): 1 truncate cleaned up
[   76.956965][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.969772][ T4155] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.095674][ T4157] syz.4.216: attempt to access beyond end of device
[   77.095674][ T4157] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[   77.183862][ T4157] syz.4.216: attempt to access beyond end of device
[   77.183862][ T4157] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[   77.316897][ T4157] syz.4.216: attempt to access beyond end of device
[   77.316897][ T4157] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[   77.421150][ T4157] syz.4.216: attempt to access beyond end of device
[   77.421150][ T4157] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[   77.510870][ T4157] syz.4.216: attempt to access beyond end of device
[   77.510870][ T4157] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[   77.525323][   T30] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   77.546914][   T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1
[   77.577295][ T4157] syz.4.216: attempt to access beyond end of device
[   77.577295][ T4157] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[   77.617459][ T4157] syz.4.216: attempt to access beyond end of device
[   77.617459][ T4157] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[   77.660996][ T4157] syz.4.216: attempt to access beyond end of device
[   77.660996][ T4157] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[   77.701638][ T4157] syz.4.216: attempt to access beyond end of device
[   77.701638][ T4157] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[   78.540210][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.451507][ T4216] loop0: detected capacity change from 0 to 512
[   81.583694][ T4216] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.236: corrupted inode contents
[   81.596295][ T4216] fserror_report: 4 callbacks suppressed
[   81.596368][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   81.607682][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   81.623312][    C1] EXT4-fs (loop0): initial error at time 1780251041: ext4_do_update_inode:5690: inode 16
[   81.633206][    C1] EXT4-fs (loop0): last error at time 1780251041: ext4_do_update_inode:5690: inode 16
[   81.894008][ T4216] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.236: mark_inode_dirty error
[   81.898723][ T4181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'.
[   81.907578][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   81.914263][ T4216] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.236: corrupted inode contents
[   81.945560][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   81.950993][ T4216] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.236: mark_inode_dirty error
[   81.972813][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   81.975009][ T4216] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.236: corrupted inode contents
[   81.997567][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   81.998932][ T4216] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   82.021132][ T4216] loop0: lost filesystem error report for type 5 error -117
[   82.022815][ T4216] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.236: corrupted inode contents
[   82.044162][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   82.045396][ T4216] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.236: mark_inode_dirty error
[   82.067995][ T4216] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   82.069482][ T4216] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   82.090251][ T4216] loop0: lost filesystem error report for type 5 error -117
[   82.096490][ T4216] EXT4-fs (loop0): 1 truncate cleaned up
[   82.112051][   T68] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   82.112086][   T68] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1
[   82.112202][   T68] loop0: lost filesystem error report for type 5 error -117
[   82.144910][ T4216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.167320][ T4216] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.790927][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.202624][ T4241] loop0: detected capacity change from 0 to 2048
[   83.240454][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.258968][ T4241] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.283041][   T28] audit: type=1400 audit(1780251042.934:225): avc:  denied  { write } for  pid=4239 comm="syz.0.243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   83.952555][   T68] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set
[   83.982869][   T68] EXT4-fs (loop0): Remounting filesystem read-only
[   84.015726][   T49] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   84.136474][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.315115][ T4250] loop1: detected capacity change from 0 to 2048
[   84.369339][ T4250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.396996][ T4250] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.424354][   T28] audit: type=1400 audit(1780251044.074:226): avc:  denied  { write } for  pid=4247 comm="syz.1.246" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   85.390975][ T4264] loop0: detected capacity change from 0 to 512
[   85.477257][ T4220] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[   85.569651][ T4264] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.249: corrupted inode contents
[   85.582500][ T4264] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   85.586496][ T4264] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.249: mark_inode_dirty error
[   85.596606][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   85.596635][    C1] EXT4-fs (loop0): initial error at time 1780251045: ext4_do_update_inode:5690: inode 16
[   85.596756][    C1] EXT4-fs (loop0): last error at time 1780251045: ext4_do_update_inode:5690: inode 16
[   85.637349][ T4264] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   85.642956][ T4264] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.249: corrupted inode contents
[   85.665872][ T4264] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   85.667678][ T4264] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.249: mark_inode_dirty error
[   85.694118][ T4264] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.249: corrupted inode contents
[   85.710490][ T4264] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   85.719976][ T4264] loop0: lost filesystem error report for type 5 error -117
[   85.721758][ T4264] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.249: corrupted inode contents
[   85.743871][ T4264] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.249: mark_inode_dirty error
[   85.757170][ T4264] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   85.766941][ T4264] loop0: lost filesystem error report for type 5 error -117
[   85.772489][ T4264] EXT4-fs (loop0): 1 truncate cleaned up
[   85.791847][   T49] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   85.812339][ T4220] EXT4-fs (loop1): Remounting filesystem read-only
[   85.812719][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.825450][   T49] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1
[   85.834039][ T4264] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.912306][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.063966][ T4274] IPv6: NLM_F_REPLACE set, but no existing node found!
[   86.086943][ T4264] syz.0.249 (4264) used greatest stack depth: 8256 bytes left
[   86.108484][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.316086][ T4274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.252'.
[   86.557203][ T4285] loop0: detected capacity change from 0 to 2048
[   86.595667][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.608444][ T4285] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.814682][   T28] audit: type=1400 audit(1780251046.464:227): avc:  denied  { write } for  pid=4283 comm="syz.0.257" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.164326][ T4303] loop3: detected capacity change from 0 to 2048
[   87.189099][ T4304] loop4: detected capacity change from 0 to 2048
[   87.231608][ T4303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.247238][ T4304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.291640][ T4303] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.309683][ T4304] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.330585][   T28] audit: type=1400 audit(1780251046.974:228): avc:  denied  { write } for  pid=4300 comm="syz.3.263" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.400366][   T28] audit: type=1400 audit(1780251047.014:229): avc:  denied  { write } for  pid=4299 comm="syz.4.262" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.470317][ T3518] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set
[   87.509576][ T4312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.266'.
[   87.512714][ T3518] EXT4-fs (loop0): Remounting filesystem read-only
[   87.556552][   T68] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   87.593165][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.851960][ T4321] IPv6: NLM_F_REPLACE set, but no existing node found!
[   87.968919][   T68] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set
[   87.983808][ T3519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[   87.995848][   T68] EXT4-fs (loop4): Remounting filesystem read-only
[   88.005793][ T3519] EXT4-fs (loop3): Remounting filesystem read-only
[   88.013511][   T49] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   88.037708][ T3518] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   88.052810][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.063711][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.262333][ T4312] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   88.919716][ T4343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.274'.
[   89.337228][ T4327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'.
[   89.623373][ T4343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   90.130130][ T4359] loop2: detected capacity change from 0 to 2048
[   90.207664][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.242182][ T4359] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.392092][   T28] audit: type=1400 audit(1780251050.034:230): avc:  denied  { write } for  pid=4357 comm="syz.2.280" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   90.915841][ T3519] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[   90.930904][ T3519] EXT4-fs (loop2): Remounting filesystem read-only
[   90.950695][ T3518] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   90.974269][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.413679][ T4370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'.
[   91.785159][ T4373] IPv6: NLM_F_REPLACE set, but no existing node found!
[   91.987438][ T4373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'.
[   92.348985][ T4379] IPv6: NLM_F_REPLACE set, but no existing node found!
[   92.897850][   T28] audit: type=1400 audit(1780251052.544:231): avc:  denied  { name_bind } for  pid=4398 comm="syz.3.292" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   92.933405][ T4404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.291'.
[   93.264483][ T4404] bridge_slave_0: left allmulticast mode
[   93.272136][ T4404] bridge_slave_0: left promiscuous mode
[   93.279360][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.312676][ T4404] bridge_slave_1: left allmulticast mode
[   93.319644][ T4404] bridge_slave_1: left promiscuous mode
[   93.336192][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.410684][ T4404] bond0: (slave bond_slave_0): Releasing backup interface
[   93.470907][ T4404] bond0: (slave bond_slave_1): Releasing backup interface
[   93.539681][ T4404] team0: Port device team_slave_0 removed
[   93.607536][ T4404] team0: Port device team_slave_1 removed
[   93.650199][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.666330][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.722408][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.747374][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.819748][ T4404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.312420][   T28] audit: type=1400 audit(1780251053.964:232): avc:  denied  { read write } for  pid=4442 comm="syz.4.305" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   94.361679][   T28] audit: type=1400 audit(1780251053.994:233): avc:  denied  { open } for  pid=4442 comm="syz.4.305" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   94.368128][ T4446] IPv6: NLM_F_REPLACE set, but no existing node found!
[   94.419684][ T4448] netlink: 'syz.3.307': attribute type 12 has an invalid length.
[   94.463092][ T4451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'.
[   94.511745][   T28] audit: type=1400 audit(1780251054.164:234): avc:  denied  { mount } for  pid=4459 comm="syz.3.309" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[   94.572470][   T28] audit: type=1400 audit(1780251054.204:235): avc:  denied  { create } for  pid=4459 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.621672][ T4444] loop4: detected capacity change from 0 to 512
[   94.640970][ T4444] EXT4-fs: Ignoring removed nobh option
[   94.747967][ T4444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.763112][ T4444] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.789152][   T28] audit: type=1400 audit(1780251054.434:236): avc:  denied  { write } for  pid=4442 comm="syz.4.305" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.071585][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.274068][ T4477] loop3: detected capacity change from 0 to 512
[   95.310660][ T4477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   95.338392][ T4477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   95.346439][ T4477] System zones: 1-12
[   95.354458][ T4477] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   95.484212][ T4482] loop0: detected capacity change from 0 to 512
[   95.586399][ T4477] EXT4-fs (loop3): 1 truncate cleaned up
[   95.613206][ T4482] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.316: corrupted inode contents
[   95.625059][ T4482] fserror_report: 4 callbacks suppressed
[   95.625098][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.632441][ T4482] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.316: mark_inode_dirty error
[   95.641702][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   95.641725][    C0] EXT4-fs (loop0): initial error at time 1780251055: ext4_do_update_inode:5690: inode 16
[   95.641783][    C0] EXT4-fs (loop0): last error at time 1780251055: ext4_do_update_inode:5690: inode 16
[   95.678899][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.680890][ T4482] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.316: corrupted inode contents
[   95.701985][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.706663][ T4482] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.316: mark_inode_dirty error
[   95.727137][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.728781][ T4482] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.316: corrupted inode contents
[   95.749830][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.750537][ T4482] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   95.768459][ T4482] loop0: lost filesystem error report for type 5 error -117
[   95.769401][ T4482] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.316: corrupted inode contents
[   95.788781][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.789612][ T4482] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.316: mark_inode_dirty error
[   95.809770][ T4482] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   95.812366][ T4482] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   95.830501][ T4482] loop0: lost filesystem error report for type 5 error -117
[   95.831788][ T4482] EXT4-fs (loop0): 1 truncate cleaned up
[   95.849601][   T49] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   95.860988][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.873697][ T4482] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.909100][ T4477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.987984][   T49] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1
[   96.244851][   T28] audit: type=1400 audit(1780251055.884:237): avc:  denied  { write } for  pid=4474 comm="syz.3.317" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   96.420450][   T28] audit: type=1400 audit(1780251055.974:238): avc:  denied  { getopt } for  pid=4474 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.573719][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.049786][ T4508] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.219735][ T4512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.328'.
[   97.509861][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.744924][   T28] audit: type=1400 audit(1780251057.394:239): avc:  denied  { create } for  pid=4528 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   98.319234][ T4530] loop3: detected capacity change from 0 to 512
[   98.356525][ T4530] ext4: Unknown parameter 'obj_role'
[   99.246489][ T4558] dvmrp1: entered allmulticast mode
[   99.252036][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   99.252054][   T28] audit: type=1400 audit(1780251058.894:242): avc:  denied  { setopt } for  pid=4557 comm="syz.1.348" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   99.295029][   T28] audit: type=1400 audit(1780251058.934:243): avc:  denied  { create } for  pid=4559 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   99.343308][   T28] audit: type=1400 audit(1780251058.934:244): avc:  denied  { bind } for  pid=4557 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   99.368396][   T28] audit: type=1400 audit(1780251058.994:245): avc:  denied  { setopt } for  pid=4559 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   99.387948][   T28] audit: type=1400 audit(1780251058.994:246): avc:  denied  { ioctl } for  pid=4557 comm="syz.1.348" path="socket:[8276]" dev="sockfs" ino=8276 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   99.528873][   T28] audit: type=1400 audit(1780251059.174:247): avc:  denied  { write } for  pid=4574 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   99.552486][ T4579] FAULT_INJECTION: forcing a failure.
[   99.552486][ T4579] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   99.559114][ T4575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.355'.
[   99.581609][ T4579] CPU: 1 UID: 0 PID: 4579 Comm: syz.0.357 Not tainted syzkaller #0 PREEMPT(lazy) 
[   99.581665][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   99.581679][ T4579] Call Trace:
[   99.581688][ T4579]  <TASK>
[   99.581715][ T4579]  __dump_stack+0x1d/0x30
[   99.581745][ T4579]  dump_stack_lvl+0x95/0xd0
[   99.581765][ T4579]  dump_stack+0x15/0x1b
[   99.581785][ T4579]  should_fail_ex+0x263/0x280
[   99.581863][ T4579]  should_fail+0xb/0x20
[   99.581959][ T4579]  should_fail_usercopy+0x1a/0x20
[   99.581981][ T4579]  _copy_to_user+0x20/0xa0
[   99.582121][ T4579]  simple_read_from_buffer+0xb5/0x130
[   99.582245][ T4579]  proc_fail_nth_read+0x10e/0x150
[   99.582330][ T4579]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   99.582418][ T4579]  vfs_read+0x1ab/0x7f0
[   99.582454][ T4579]  ? __rcu_read_unlock+0x4e/0x70
[   99.582474][ T4579]  ? __fget_files+0x184/0x1c0
[   99.582500][ T4579]  ? mutex_lock+0x57/0x90
[   99.582529][ T4579]  ksys_read+0xdc/0x1a0
[   99.582611][ T4579]  __x64_sys_read+0x40/0x50
[   99.582640][ T4579]  x64_sys_call+0x2886/0x3020
[   99.582672][ T4579]  do_syscall_64+0x12c/0x3b0
[   99.582713][ T4579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.582761][ T4579] RIP: 0033:0x7f455bc5d68e
[   99.582782][ T4579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   99.582861][ T4579] RSP: 002b:00007f455a6eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   99.582883][ T4579] RAX: ffffffffffffffda RBX: 00007f455a6ef6c0 RCX: 00007f455bc5d68e
[   99.582900][ T4579] RDX: 000000000000000f RSI: 00007f455a6ef0a0 RDI: 0000000000000004
[   99.582995][ T4579] RBP: 00007f455a6ef090 R08: 0000000000000000 R09: 0000000000000000
[   99.583008][ T4579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.583020][ T4579] R13: 00007f455bf16038 R14: 00007f455bf15fa0 R15: 00007ffd172dd058
[   99.583043][ T4579]  </TASK>
[   99.782367][   T28] audit: type=1400 audit(1780251059.224:248): avc:  denied  { read write } for  pid=4574 comm="syz.1.354" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   99.828997][   T28] audit: type=1400 audit(1780251059.224:249): avc:  denied  { open } for  pid=4574 comm="syz.1.354" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   99.941851][ T4575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  100.105064][ T4591] loop0: detected capacity change from 0 to 512
[  100.158664][ T4591] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.358: corrupted inode contents
[  100.170625][ T4591] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  100.171744][ T4591] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.358: mark_inode_dirty error
[  100.181157][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  100.181176][    C0] EXT4-fs (loop0): initial error at time 1780251059: ext4_do_update_inode:5690: inode 16
[  100.181206][    C0] EXT4-fs (loop0): last error at time 1780251059: ext4_do_update_inode:5690: inode 16
[  100.218459][ T4591] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  100.219564][ T4591] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.358: corrupted inode contents
[  100.240669][ T4591] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  100.241197][ T4591] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.358: mark_inode_dirty error
[  100.265906][ T4591] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.358: corrupted inode contents
[  100.278449][ T4591] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  100.287111][ T4591] loop0: lost filesystem error report for type 5 error -117
[  100.287896][ T4591] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.358: corrupted inode contents
[  100.307767][ T4591] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.358: mark_inode_dirty error
[  100.321960][ T4591] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  100.330914][ T4591] loop0: lost filesystem error report for type 5 error -117
[  100.331938][ T4591] EXT4-fs (loop0): 1 truncate cleaned up
[  100.346706][ T4591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.359291][ T4591] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.380265][   T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  100.397403][   T36] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1
[  102.473702][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.625536][   T28] audit: type=1400 audit(1780251062.274:250): avc:  denied  { read } for  pid=4617 comm="syz.1.371" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  102.750208][ T4618] loop1: detected capacity change from 0 to 512
[  102.836232][ T4618] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.371: Invalid inode bitmap blk 4 in block_group 0
[  102.873885][ T4618] loop1: lost filesystem error report for type 5 error -117
[  102.874488][ T4618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.014281][ T4618] smc: net device ip6_vti0 applied user defined pnetid SYZ2
[  103.100085][ T4629] loop0: detected capacity change from 0 to 2048
[  103.152949][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.164767][ T4629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.277785][ T4629] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.985475][ T3518] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set
[  104.031279][ T3518] EXT4-fs (loop0): Remounting filesystem read-only
[  104.051129][   T68] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  104.089948][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.248577][ T4667] FAULT_INJECTION: forcing a failure.
[  104.248577][ T4667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.285741][ T4667] CPU: 1 UID: 0 PID: 4667 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(lazy) 
[  104.285770][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  104.285787][ T4667] Call Trace:
[  104.285795][ T4667]  <TASK>
[  104.285805][ T4667]  __dump_stack+0x1d/0x30
[  104.285829][ T4667]  dump_stack_lvl+0x95/0xd0
[  104.285849][ T4667]  dump_stack+0x15/0x1b
[  104.285882][ T4667]  should_fail_ex+0x263/0x280
[  104.285911][ T4667]  should_fail+0xb/0x20
[  104.285933][ T4667]  should_fail_usercopy+0x1a/0x20
[  104.285960][ T4667]  _copy_from_user+0x1c/0xb0
[  104.285983][ T4667]  memdup_user+0x5e/0xd0
[  104.286064][ T4667]  strndup_user+0x68/0xb0
[  104.286099][ T4667]  __se_sys_mount+0x4d/0x2e0
[  104.286171][ T4667]  ? fput+0x8f/0xc0
[  104.286190][ T4667]  ? ksys_write+0x194/0x1a0
[  104.286218][ T4667]  __x64_sys_mount+0x67/0x80
[  104.286336][ T4667]  x64_sys_call+0x2d61/0x3020
[  104.286359][ T4667]  do_syscall_64+0x12c/0x3b0
[  104.286395][ T4667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.286515][ T4667] RIP: 0033:0x7f555e14ce59
[  104.286530][ T4667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.286548][ T4667] RSP: 002b:00007f555cb9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  104.286570][ T4667] RAX: ffffffffffffffda RBX: 00007f555e3c5fa0 RCX: 00007f555e14ce59
[  104.286642][ T4667] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[  104.286656][ T4667] RBP: 00007f555cb9f090 R08: 0000200000000540 R09: 0000000000000000
[  104.286670][ T4667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.286683][ T4667] R13: 00007f555e3c6038 R14: 00007f555e3c5fa0 R15: 00007fffd7fcf188
[  104.286707][ T4667]  </TASK>
[  105.717936][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  105.717953][   T28] audit: type=1400 audit(1780251065.374:262): avc:  denied  { name_bind } for  pid=4696 comm="syz.2.404" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  105.787825][   T28] audit: type=1400 audit(1780251065.374:263): avc:  denied  { node_bind } for  pid=4696 comm="syz.2.404" saddr=10.1.1.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  105.849027][ T4708] IPv6: NLM_F_REPLACE set, but no existing node found!
[  106.842309][ T4718] syz.0.409 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  106.856607][ T4718] CPU: 0 UID: 0 PID: 4718 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(lazy) 
[  106.856646][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  106.856668][ T4718] Call Trace:
[  106.856677][ T4718]  <TASK>
[  106.856699][ T4718]  __dump_stack+0x1d/0x30
[  106.856735][ T4718]  dump_stack_lvl+0x95/0xd0
[  106.856776][ T4718]  dump_stack+0x15/0x1b
[  106.856803][ T4718]  dump_header+0x80/0x240
[  106.856835][ T4718]  oom_kill_process+0x295/0x350
[  106.856947][ T4718]  out_of_memory+0x97d/0xb80
[  106.857040][ T4718]  try_charge_memcg+0x62f/0xa10
[  106.857157][ T4718]  __memcg_kmem_charge_page+0x1ce/0x3d0
[  106.857197][ T4718]  __alloc_frozen_pages_noprof+0x18a/0x350
[  106.857233][ T4718]  alloc_pages_mpol+0xb3/0x260
[  106.857288][ T4718]  alloc_pages_noprof+0x8f/0x140
[  106.857318][ T4718]  __vmalloc_node_range_noprof+0xaed/0x11c0
[  106.857374][ T4718]  __kvmalloc_node_noprof+0x3d4/0x640
[  106.857402][ T4718]  ? futex_hash_allocate+0x190/0x9a0
[  106.857444][ T4718]  ? futex_hash_allocate+0x190/0x9a0
[  106.857502][ T4718]  futex_hash_allocate+0x190/0x9a0
[  106.857542][ T4718]  ? cap_task_prctl+0x13f/0x6b0
[  106.857646][ T4718]  futex_hash_prctl+0xd8/0xf0
[  106.857685][ T4718]  __se_sys_prctl+0x4f4/0x1400
[  106.857720][ T4718]  __x64_sys_prctl+0x67/0x80
[  106.857772][ T4718]  x64_sys_call+0x2533/0x3020
[  106.857917][ T4718]  do_syscall_64+0x12c/0x3b0
[  106.857960][ T4718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.857987][ T4718] RIP: 0033:0x7f455bc9ce59
[  106.858006][ T4718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.858073][ T4718] RSP: 002b:00007f455a6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  106.858098][ T4718] RAX: ffffffffffffffda RBX: 00007f455bf16090 RCX: 00007f455bc9ce59
[  106.858140][ T4718] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  106.858156][ T4718] RBP: 00007f455bd32d6f R08: 0000000000000000 R09: 0000000000000000
[  106.858172][ T4718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.858190][ T4718] R13: 00007f455bf16128 R14: 00007f455bf16090 R15: 00007ffd172dd058
[  106.858215][ T4718]  </TASK>
[  107.092548][ T4718] memory: usage 307200kB, limit 307200kB, failcnt 390
[  107.110749][ T4718] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[  107.122957][ T4732] loop2: detected capacity change from 0 to 512
[  107.133264][ T4732] EXT4-fs: Invalid want_extra_isize 1969
[  107.139330][ T4718] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  107.164702][ T4718] Memory cgroup stats for /syz0:
[  107.165016][ T4718] cache 0
[  107.175957][ T4718] rss 0
[  107.179072][ T4718] shmem 0
[  107.182150][ T4718] mapped_file 0
[  107.185951][ T4718] dirty 0
[  107.189231][ T4718] writeback 0
[  107.192590][ T4718] workingset_refault_anon 52
[  107.197389][ T4718] workingset_refault_file 639
[  107.202397][ T4718] swap 196608
[  107.205809][ T4718] swapcached 413696
[  107.210007][ T4718] pgpgin 66238
[  107.213431][ T4718] pgpgout 66237
[  107.217019][ T4718] pgfault 92234
[  107.221036][ T4718] pgmajfault 24
[  107.224546][ T4718] inactive_anon 0
[  107.228535][ T4718] active_anon 4096
[  107.232549][ T4718] inactive_file 0
[  107.236279][ T4718] active_file 0
[  107.241354][ T4718] unevictable 0
[  107.244993][ T4718] hierarchical_memory_limit 314572800
[  107.250603][ T4718] hierarchical_memsw_limit 9223372036854771712
[  107.256900][ T4718] total_cache 0
[  107.260946][ T4718] total_rss 0
[  107.264602][ T4718] total_shmem 0
[  107.268349][ T4718] total_mapped_file 0
[  107.272422][ T4718] total_dirty 0
[  107.275930][ T4718] total_writeback 0
[  107.280152][ T4718] total_workingset_refault_anon 52
[  107.285389][ T4718] total_workingset_refault_file 639
[  107.290955][ T4718] total_swap 196608
[  107.295074][ T4718] total_swapcached 413696
[  107.300596][ T4718] total_pgpgin 66238
[  107.306667][ T4718] total_pgpgout 66237
[  107.310902][ T4718] total_pgfault 92234
[  107.314977][ T4718] total_pgmajfault 24
[  107.319317][ T4718] total_inactive_anon 0
[  107.323615][ T4718] total_active_anon 4096
[  107.328101][ T4718] total_inactive_file 0
[  107.332431][ T4718] total_active_file 0
[  107.336498][ T4718] total_unevictable 0
[  107.340877][ T4718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.409,pid=4716,uid=0
[  107.356891][ T4718] Memory cgroup out of memory: Killed process 4716 (syz.0.409) total-vm:96216kB, anon-rss:1232kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  107.619365][ T4754] loop4: detected capacity change from 0 to 2048
[  108.606582][ T4754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.619646][ T4754] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.637320][   T28] audit: type=1400 audit(1780251069.284:264): avc:  denied  { write } for  pid=4747 comm="syz.4.421" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  109.810004][ T4765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  110.028969][ T4765] EXT4-fs (loop4): Remounting filesystem read-only
[  110.150455][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.253473][   T28] audit: type=1326 audit(1780251069.874:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.1.433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67c655ce59 code=0x0
[  110.316474][ T4790] syz.3.436 uses obsolete (PF_INET,SOCK_PACKET)
[  110.356402][   T28] audit: type=1326 audit(1780251070.004:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.1.433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c655ce59 code=0x7ffc0000
[  110.385948][   T28] audit: type=1326 audit(1780251070.004:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.1.433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c655ce59 code=0x7ffc0000
[  110.477362][   T28] audit: type=1326 audit(1780251070.004:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.1.433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f67c651d68e code=0x7ffc0000
[  110.559203][   T28] audit: type=1326 audit(1780251070.014:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.1.433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f67c651d68e code=0x7ffc0000
[  110.589787][ T4803] loop0: detected capacity change from 0 to 2048
[  110.621943][ T4803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.634642][ T4788] loop4: detected capacity change from 0 to 2048
[  110.659773][   T28] audit: type=1326 audit(1780251070.014:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.1.433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f67c651d68e code=0x7ffc0000
[  110.675836][ T4813] audit: audit_backlog=65 > audit_backlog_limit=64
[  110.693463][ T4803] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.735336][ T4788] Alternate GPT is invalid, using primary GPT.
[  110.743783][   T28] kauditd_printk_skb: 68 callbacks suppressed
[  110.743800][   T28] audit: type=1400 audit(1780251070.394:336): avc:  denied  { shutdown } for  pid=4786 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  110.773222][ T4813] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  110.782865][ T4788]  loop4: p2 p3 p7
[  110.817140][ T4813] audit: backlog limit exceeded
[  110.850454][   T28] audit: type=1400 audit(1780251070.504:337): avc:  denied  { name_connect } for  pid=4786 comm="syz.4.431" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  111.187345][   T28] audit: type=1400 audit(1780251070.834:338): avc:  denied  { create } for  pid=4797 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  111.699604][ T4811] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  111.735292][ T4811] EXT4-fs (loop0): Remounting filesystem read-only
[  112.204804][   T28] audit: type=1400 audit(1780251070.854:339): avc:  denied  { bind } for  pid=4797 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  112.337720][   T28] audit: type=1400 audit(1780251071.984:340): avc:  denied  { setopt } for  pid=4831 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  112.361972][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.372252][ T4833] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  112.387149][ T4834] loop3: detected capacity change from 0 to 512
[  112.397197][ T4834] EXT4-fs: Ignoring removed nobh option
[  112.439769][ T4834] ------------[ cut here ]------------
[  112.445315][ T4834] EA inode 11 i_nlink=1026
[  112.445354][ T4834] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.450/4834
[  112.460580][ T4834] Modules linked in:
[  112.464558][ T4834] CPU: 1 UID: 0 PID: 4834 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT(lazy) 
[  112.473935][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  112.484099][ T4834] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  112.490829][ T4834] Code: f4 52 98 ff 4c 8d 2d 0d 5d 5c 05 49 8d 7e 40 e8 d4 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 11 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 86 d8 03 66 66 66 66 66 66 2e
[  112.510556][ T4834] RSP: 0018:ffffc90001e7f5a8 EFLAGS: 00010246
[  112.516795][ T4834] RAX: ffff888102238b00 RBX: ffff8881082be698 RCX: ffffffff81c0e0f8
[  112.525031][ T4834] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3df0
[  112.533208][ T4834] RBP: 000000000000000b R08: 00018881082be64b R09: 0000000000000000
[  112.541317][ T4834] R10: ffffc90001e7f4d8 R11: 0001c90001e7f4d8 R12: ffff8881082be648
[  112.549365][ T4834] R13: ffffffff871d3df0 R14: ffff8881082be600 R15: 0000000000000001
[  112.557375][ T4834] FS:  00007f9d09a776c0(0000) GS:ffff8882ae9f4000(0000) knlGS:0000000000000000
[  112.566405][ T4834] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.573106][ T4834] CR2: 000000110c2db3e8 CR3: 000000013e16e000 CR4: 00000000003506f0
[  112.581234][ T4834] Call Trace:
[  112.584559][ T4834]  <TASK>
[  112.587545][ T4834]  ext4_xattr_set_entry+0x77c/0x1010
[  112.592983][ T4834]  ext4_xattr_ibody_set+0x184/0x3c0
[  112.598328][ T4834]  ext4_expand_extra_isize_ea+0xd7b/0x11a0
[  112.604223][ T4834]  __ext4_expand_extra_isize+0x246/0x280
[  112.609935][ T4834]  __ext4_mark_inode_dirty+0x29b/0x3d0
[  112.615451][ T4834]  ext4_evict_inode+0x8ba/0xe30
[  112.620410][ T4834]  ? __pfx_ext4_evict_inode+0x10/0x10
[  112.625848][ T4834]  evict+0x2af/0x510
[  112.629839][ T4834]  ? __dquot_initialize+0x146/0x7c0
[  112.635198][ T4834]  iput+0x41a/0x580
[  112.639092][ T4834]  ext4_process_orphan+0x1a9/0x1c0
[  112.644263][ T4834]  ext4_orphan_cleanup+0x69c/0x9f0
[  112.649472][ T4834]  ext4_fill_super+0x3408/0x37c0
[  112.654465][ T4834]  ? set_blocksize+0x14c/0x270
[  112.659441][ T4834]  ? setup_bdev_super+0x30e/0x370
[  112.664513][ T4834]  ? __pfx_ext4_fill_super+0x10/0x10
[  112.669973][ T4834]  get_tree_bdev_flags+0x291/0x300
[  112.675144][ T4834]  ? __pfx_ext4_fill_super+0x10/0x10
[  112.680714][ T4834]  get_tree_bdev+0x1f/0x30
[  112.684229][   T28] audit: type=1400 audit(1780251072.334:341): avc:  denied  { create } for  pid=4850 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.685245][ T4834]  ext4_get_tree+0x1c/0x30
[  112.685274][ T4834]  vfs_get_tree+0x57/0x1d0
[  112.685316][ T4834]  do_new_mount+0x288/0x8d0
[  112.710258][ T4851] xt_l2tp: missing protocol rule (udp|l2tpip)
[  112.713456][ T4834]  path_mount+0x4d0/0xbc0
[  112.728499][ T4834]  __se_sys_mount+0x28c/0x2e0
[  112.733290][ T4834]  __x64_sys_mount+0x67/0x80
[  112.738120][ T4834]  x64_sys_call+0x2d61/0x3020
[  112.740861][   T28] audit: type=1400 audit(1780251072.364:342): avc:  denied  { bind } for  pid=4850 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.742834][ T4834]  do_syscall_64+0x12c/0x3b0
[  112.742874][ T4834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.772531][ T4834] RIP: 0033:0x7f9d0b01e0ca
[  112.776982][ T4834] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.781253][   T28] audit: type=1400 audit(1780251072.364:343): avc:  denied  { write } for  pid=4850 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.796685][ T4834] RSP: 002b:00007f9d09a76e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  112.824442][ T4834] RAX: ffffffffffffffda RBX: 00007f9d09a76ee0 RCX: 00007f9d0b01e0ca
[  112.832498][ T4834] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f9d09a76ea0
[  112.840523][ T4834] RBP: 0000200000000180 R08: 00007f9d09a76ee0 R09: 0000000000800718
[  112.848587][ T4834] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  112.856588][ T4834] R13: 00007f9d09a76ea0 R14: 00000000000004a3 R15: 00002000000003c0
[  112.864693][ T4834]  </TASK>
[  112.867756][ T4834] ---[ end trace 0000000000000000 ]---
[  112.896034][ T4834] EXT4-fs (loop3): 1 orphan inode deleted
[  112.912432][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.080018][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  113.097247][ T4860] vxcan1: tx drop: invalid da for name 0x0000000000000002
[  113.159518][   T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.203419][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.322138][   T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.390500][ T4882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.466'.
[  113.422187][   T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.434261][ T4883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'.
[  113.454508][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[  113.704366][ T4882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  113.800400][   T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.072376][   T30] bond0 (unregistering): Released all slaves
[  114.171237][   T30] hsr_slave_0: left promiscuous mode
[  114.199920][   T30] hsr_slave_1: left promiscuous mode
[  114.204617][ T4888] 9pnet_fd: p9_fd_create_tcp (4888): problem connecting socket to 127.0.0.1
[  114.225202][   T30] veth1_macvtap: left promiscuous mode
[  114.231018][   T30] veth0_macvtap: left promiscuous mode
[  114.261987][   T30] veth1_vlan: left promiscuous mode
[  114.287836][   T30] veth0_vlan: left promiscuous mode
[  114.330492][ T4895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.464'.
[  114.407809][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'.
[  114.507739][ T4924] IPv6: NLM_F_REPLACE set, but no existing node found!
[  114.740896][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2
[  114.927685][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.966038][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.995628][ T4865] bridge_slave_0: entered allmulticast mode
[  115.008474][ T4865] bridge_slave_0: entered promiscuous mode
[  115.033565][ T4959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.480'.
[  115.100387][ T4965] bridge_slave_0: left allmulticast mode
[  115.106180][ T4965] bridge_slave_0: left promiscuous mode
[  115.126899][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.150027][ T4965] bridge_slave_1: left allmulticast mode
[  115.156079][ T4965] bridge_slave_1: left promiscuous mode
[  115.162526][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.176888][ T4965] bond0: (slave bond_slave_0): Releasing backup interface
[  115.196923][ T4965] bond0: (slave bond_slave_1): Releasing backup interface
[  115.228488][ T4965] team0: Port device team_slave_0 removed
[  115.241301][ T4965] team0: Port device team_slave_1 removed
[  115.265177][ T4965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.273363][ T4965] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.285909][ T4965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.314631][ T4965] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.335951][ T4965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  115.368240][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.382926][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.400681][ T4865] bridge_slave_1: entered allmulticast mode
[  115.422981][ T4865] bridge_slave_1: entered promiscuous mode
[  115.447524][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1
[  115.490744][ T4865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.515619][ T4865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.551101][ T4865] team0: Port device team_slave_0 added
[  115.563737][ T4865] team0: Port device team_slave_1 added
[  115.596150][ T4865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.603273][ T4865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.655534][ T4865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.685088][ T4865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.710757][ T4865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.757908][ T4987] loop2: detected capacity change from 0 to 4096
[  115.779461][ T4865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.800823][ T4987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.825083][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  115.825098][   T28] audit: type=1400 audit(1780251075.474:360): avc:  denied  { setopt } for  pid=4986 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  115.865764][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.874157][   T28] audit: type=1400 audit(1780251075.504:361): avc:  denied  { write } for  pid=4986 comm="syz.2.486" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  115.943822][   T28] audit: type=1400 audit(1780251075.584:362): avc:  denied  { bind } for  pid=4996 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  115.960054][ T4865] hsr_slave_0: entered promiscuous mode
[  115.989511][ T4865] hsr_slave_1: entered promiscuous mode
[  116.008466][   T28] audit: type=1400 audit(1780251075.584:363): avc:  denied  { name_bind } for  pid=4996 comm="syz.3.488" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  116.024232][ T4865] debugfs: 'hsr0' already exists in 'hsr'
[  116.066710][ T4865] Cannot create hsr debugfs directory
[  116.074576][   T28] audit: type=1400 audit(1780251075.584:364): avc:  denied  { node_bind } for  pid=4996 comm="syz.3.488" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  116.126496][ T5005] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.155183][   T28] audit: type=1400 audit(1780251075.654:365): avc:  denied  { write } for  pid=4988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.198026][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3
[  116.227062][   T28] audit: type=1400 audit(1780251075.764:366): avc:  denied  { write } for  pid=5006 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.289376][ T5014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.487'.
[  116.311758][   T28] audit: type=1400 audit(1780251075.774:367): avc:  denied  { write } for  pid=4996 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  116.389278][ T4865] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  116.420770][ T4865] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  116.436824][   T28] audit: type=1400 audit(1780251076.084:368): avc:  denied  { write } for  pid=5015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.462656][ T4865] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  116.484017][ T4865] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  116.499521][ T4865] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  116.506417][   T28] audit: type=1400 audit(1780251076.154:369): avc:  denied  { write } for  pid=5026 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.539458][ T4865] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  116.562137][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4
[  116.571369][ T4865] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  116.588319][ T4865] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  116.673844][ T4865] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.691366][ T4865] 8021q: adding VLAN 0 to HW filter on device team0
[  116.711750][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.718863][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.732693][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.739883][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.785237][ T5068] loop3: detected capacity change from 0 to 1024
[  118.845989][ T4865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.860616][ T5068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  119.467951][ T5080] FAULT_INJECTION: forcing a failure.
[  119.467951][ T5080] name failslab, interval 1, probability 0, space 0, times 0
[  119.480693][ T5080] CPU: 1 UID: 0 PID: 5080 Comm: syz.0.496 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  119.480753][ T5080] Tainted: [W]=WARN
[  119.480762][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  119.480778][ T5080] Call Trace:
[  119.480785][ T5080]  <TASK>
[  119.480793][ T5080]  __dump_stack+0x1d/0x30
[  119.480837][ T5080]  dump_stack_lvl+0x95/0xd0
[  119.480894][ T5080]  dump_stack+0x15/0x1b
[  119.480915][ T5080]  should_fail_ex+0x263/0x280
[  119.480941][ T5080]  should_failslab+0x8c/0xb0
[  119.481034][ T5080]  kmem_cache_alloc_noprof+0x66/0x3f0
[  119.481074][ T5080]  ? security_file_alloc+0x32/0xf0
[  119.481144][ T5080]  security_file_alloc+0x32/0xf0
[  119.481171][ T5080]  init_file+0x5b/0x1b0
[  119.481198][ T5080]  alloc_empty_file+0x85/0x1e0
[  119.481219][ T5080]  alloc_file_pseudo+0xf6/0x190
[  119.481345][ T5080]  __shmem_file_setup+0x226/0x260
[  119.481374][ T5080]  shmem_file_setup+0x3b/0x50
[  119.481433][ T5080]  memfd_alloc_file+0x4e/0x300
[  119.481470][ T5080]  __se_sys_memfd_create+0x2e1/0x3b0
[  119.481516][ T5080]  __x64_sys_memfd_create+0x31/0x40
[  119.481543][ T5080]  x64_sys_call+0x1f22/0x3020
[  119.481566][ T5080]  do_syscall_64+0x12c/0x3b0
[  119.481620][ T5080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.481647][ T5080] RIP: 0033:0x7f455bc9ce59
[  119.481728][ T5080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.481751][ T5080] RSP: 002b:00007f455a6acd58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[  119.481774][ T5080] RAX: ffffffffffffffda RBX: 00000000000005c6 RCX: 00007f455bc9ce59
[  119.481788][ T5080] RDX: 00007f455a6acddc RSI: 0000000000000000 RDI: 00007f455bd32f4f
[  119.481800][ T5080] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000
[  119.481813][ T5080] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[  119.481875][ T5080] R13: 00007f455a6acddc R14: 00007f455a6acde0 R15: 00007ffd172dd058
[  119.481937][ T5080]  </TASK>
[  119.852906][ T5068] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.404207][ T4865] veth0_vlan: entered promiscuous mode
[  120.412576][ T4865] veth1_vlan: entered promiscuous mode
[  120.430010][ T4865] veth0_macvtap: entered promiscuous mode
[  120.457549][ T4865] veth1_macvtap: entered promiscuous mode
[  120.480377][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.492294][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.504147][   T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.513385][   T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.523509][   T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.537134][   T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.552453][ T5099] IPv6: NLM_F_REPLACE set, but no existing node found!
[  120.721041][ T5103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.499'.
[  122.724824][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  122.778281][ T5129] loop5: detected capacity change from 0 to 512
[  122.812653][ T5129] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.507: corrupted xattr block 95: invalid header
[  122.827068][ T5129] fserror_report: 4 callbacks suppressed
[  122.827343][ T5129] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  122.837085][ T5129] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.507: bg 0: block 7: invalid block bitmap
[  122.846961][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  122.847112][    C0] EXT4-fs (loop5): initial error at time 1780251082: ext4_expand_extra_isize_ea:2810: inode 11
[  122.847385][    C0] EXT4-fs (loop5): last error at time 1780251082: ext4_expand_extra_isize_ea:2810: inode 11
[  122.889539][ T5129] loop5: lost filesystem error report for type 5 error -117
[  122.891389][ T5129] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  122.913252][ T5129] loop5: lost filesystem error report for type 5 error -117
[  122.917466][ T5129] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.507: corrupted xattr block 95: invalid header
[  122.938978][ T5129] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  122.940694][ T5129] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117)
[  122.960544][ T5129] EXT4-fs (loop5): 1 orphan inode deleted
[  122.973485][ T5129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.131846][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  123.131879][   T28] audit: type=1400 audit(1780251082.774:374): avc:  denied  { mount } for  pid=5125 comm="syz.5.507" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  123.206011][ T3386] IPVS: starting estimator thread 0...
[  123.807979][   T28] audit: type=1400 audit(1780251083.454:375): avc:  denied  { create } for  pid=5148 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  123.859694][ T5151] netlink: 'syz.3.508': attribute type 3 has an invalid length.
[  123.867399][ T5151] netlink: 'syz.3.508': attribute type 1 has an invalid length.
[  123.875107][ T5151] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.508'.
[  123.923854][ T5151] loop3: detected capacity change from 0 to 764
[  123.945158][ T5151] Symlink component flag not implemented
[  123.951405][ T5151] Symlink component flag not implemented
[  124.191849][ T5142] 9pnet_fd: p9_fd_create_tcp (5142): problem connecting socket to 127.0.0.1
[  124.261249][   T28] audit: type=1400 audit(1780251083.594:376): avc:  denied  { mount } for  pid=5148 comm="syz.3.508" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  124.265065][ T4865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.283656][   T28] audit: type=1400 audit(1780251083.904:377): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  124.299267][ T5132] IPVS: using max 1872 ests per chain, 93600 per kthread
[  124.349232][ T5155] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.559614][ T5155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'.
[  124.789056][   T28] audit: type=1400 audit(1780251084.384:378): avc:  denied  { read } for  pid=5169 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  124.812415][ T5185] process 'syz.1.525' launched './file0' with NULL argv: empty string added
[  124.860794][ T5185] Invalid argument reading file caps for ./file0
[  124.940703][   T28] audit: type=1400 audit(1780251084.464:379): avc:  denied  { execute } for  pid=5181 comm="syz.1.525" name="file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  125.032839][   T28] audit: type=1400 audit(1780251084.514:380): avc:  denied  { execute_no_trans } for  pid=5181 comm="syz.1.525" path="/106/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  125.088825][ T5154] 9pnet_fd: p9_fd_create_tcp (5154): problem connecting socket to 127.0.0.1
[  125.192487][ T5189] FAULT_INJECTION: forcing a failure.
[  125.192487][ T5189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.245629][   T28] audit: type=1400 audit(1780251084.554:381): avc:  denied  { map } for  pid=5169 comm="syz.5.520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  125.534652][ T5189] CPU: 0 UID: 0 PID: 5189 Comm: syz.0.526 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  125.534760][ T5189] Tainted: [W]=WARN
[  125.534768][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  125.534784][ T5189] Call Trace:
[  125.534794][ T5189]  <TASK>
[  125.534805][ T5189]  __dump_stack+0x1d/0x30
[  125.534896][ T5189]  dump_stack_lvl+0x95/0xd0
[  125.534925][ T5189]  dump_stack+0x15/0x1b
[  125.534953][ T5189]  should_fail_ex+0x263/0x280
[  125.534983][ T5189]  should_fail+0xb/0x20
[  125.535002][ T5189]  should_fail_usercopy+0x1a/0x20
[  125.535091][ T5189]  _copy_from_user+0x1c/0xb0
[  125.535172][ T5189]  get_user_ifreq+0x52/0x110
[  125.535211][ T5189]  sock_ioctl+0x54e/0x610
[  125.535247][ T5189]  ? __pfx_sock_ioctl+0x10/0x10
[  125.535360][ T5189]  __se_sys_ioctl+0xce/0x140
[  125.535399][ T5189]  __x64_sys_ioctl+0x43/0x50
[  125.535447][ T5189]  x64_sys_call+0x1563/0x3020
[  125.535482][ T5189]  do_syscall_64+0x12c/0x3b0
[  125.535524][ T5189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.535577][ T5189] RIP: 0033:0x7f455bc9ce59
[  125.535594][ T5189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.535629][ T5189] RSP: 002b:00007f455a6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.535711][ T5189] RAX: ffffffffffffffda RBX: 00007f455bf15fa0 RCX: 00007f455bc9ce59
[  125.535728][ T5189] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005
[  125.535746][ T5189] RBP: 00007f455a6ef090 R08: 0000000000000000 R09: 0000000000000000
[  125.535763][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.535776][ T5189] R13: 00007f455bf16038 R14: 00007f455bf15fa0 R15: 00007ffd172dd058
[  125.535881][ T5189]  </TASK>
[  125.718336][   T28] audit: type=1400 audit(1780251084.554:382): avc:  denied  { read write } for  pid=5169 comm="syz.5.520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  125.779114][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'.
[  126.128204][ T5211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.536'.
[  126.293007][   T28] audit: type=1400 audit(1780251085.944:383): avc:  denied  { create } for  pid=5216 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  126.358025][ T5213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  127.014296][ T5215] 9pnet_fd: p9_fd_create_tcp (5215): problem connecting socket to 127.0.0.1
[  127.532379][ T5247] loop5: detected capacity change from 0 to 4096
[  127.641874][ T5247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.078061][ T4865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.151238][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  128.151255][   T28] audit: type=1400 audit(1780251087.804:388): avc:  denied  { map } for  pid=5275 comm="syz.3.549" path="socket:[10121]" dev="sockfs" ino=10121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  128.255791][   T28] audit: type=1400 audit(1780251087.804:389): avc:  denied  { read } for  pid=5275 comm="syz.3.549" path="socket:[10121]" dev="sockfs" ino=10121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  128.315122][   T28] audit: type=1400 audit(1780251087.874:390): avc:  denied  { write } for  pid=5265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.371635][ T5297] --map-set only usable from mangle table
[  128.382025][   T28] audit: type=1400 audit(1780251087.904:391): avc:  denied  { connect } for  pid=5283 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  128.402117][ T5292] loop5: detected capacity change from 0 to 2048
[  128.413516][   T28] audit: type=1400 audit(1780251087.994:392): avc:  denied  { write } for  pid=5289 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.444884][   T28] audit: type=1400 audit(1780251088.054:393): avc:  denied  { ioctl } for  pid=5295 comm="syz.1.554" path="socket:[10149]" dev="sockfs" ino=10149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  128.493906][ T5292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.506677][ T5292] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.518401][   T28] audit: type=1400 audit(1780251088.174:394): avc:  denied  { write } for  pid=5283 comm="syz.5.547" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.585482][ T3519] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[  128.671942][ T3519] EXT4-fs (loop5): Remounting filesystem read-only
[  128.680612][   T30] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  128.721608][ T4865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.443969][   T28] audit: type=1400 audit(1780251089.094:395): avc:  denied  { write } for  pid=5305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.693856][   T28] audit: type=1400 audit(1780251089.344:396): avc:  denied  { write } for  pid=5332 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.822365][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.867012][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.942278][   T28] audit: type=1400 audit(1780251089.574:397): avc:  denied  { append } for  pid=5337 comm="syz.3.560" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  130.826716][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.852781][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.684136][ T5394] loop5: detected capacity change from 0 to 512
[  133.227882][ T5394] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  133.239566][ T5394] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  133.252525][ T5394] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.570: Corrupt directory, running e2fsck is recommended
[  133.268078][ T5394] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  133.276576][ T5394] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.570: corrupted in-inode xattr: e_name out of bounds
[  133.290839][ T5394] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  133.291227][ T5394] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.570: couldn't read orphan inode 15 (err -117)
[  133.300401][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  133.300419][    C0] EXT4-fs (loop5): initial error at time 1780251092: ext4_iget_extra_inode:5128: inode 15
[  133.300457][    C0] EXT4-fs (loop5): last error at time 1780251092: ext4_iget_extra_inode:5128: inode 15
[  133.427648][ T5394] loop5: lost filesystem error report for type 5 error -117
[  134.263696][ T5394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.747043][ T4865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.781758][ T5416] loop0: detected capacity change from 0 to 764
[  134.797565][ T5416] rock: directory entry would overflow storage
[  134.813558][ T5416] rock: sig=0x4654, size=5, remaining=4
[  134.845280][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  134.845297][   T28] audit: type=1400 audit(1780251094.494:401): avc:  denied  { read append } for  pid=5421 comm="syz.5.585" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  134.848324][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  134.857606][   T28] audit: type=1400 audit(1780251094.494:402): avc:  denied  { open } for  pid=5421 comm="syz.5.585" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  134.914706][ T5423] netlink: 'syz.0.584': attribute type 74 has an invalid length.
[  134.927773][   T28] audit: type=1400 audit(1780251094.504:403): avc:  denied  { ioctl } for  pid=5421 comm="syz.5.585" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  134.968347][   T28] audit: type=1400 audit(1780251094.564:404): avc:  denied  { write } for  pid=5415 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  134.995195][   T28] audit: type=1400 audit(1780251094.624:405): avc:  denied  { connect } for  pid=5426 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  135.015755][   T28] audit: type=1400 audit(1780251094.624:406): avc:  denied  { read } for  pid=5426 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  135.040810][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'.
[  135.050005][   T28] audit: type=1400 audit(1780251094.694:407): avc:  denied  { setopt } for  pid=5426 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  135.091564][   T28] audit: type=1326 audit(1780251094.744:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.3.588" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0b01ce59 code=0x7fc00000
[  135.093466][ T5431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.590'.
[  135.140975][   T28] audit: type=1400 audit(1780251094.774:409): avc:  denied  { mount } for  pid=5425 comm="syz.5.589" name="/" dev="autofs" ino=11410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  135.169182][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[  135.466889][   T28] audit: type=1400 audit(1780251095.114:410): avc:  denied  { view } for  pid=5448 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  135.831568][ T5431] 9pnet_fd: p9_fd_create_tcp (5431): problem connecting socket to 127.0.0.1
[  136.002044][ T5475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'.
[  136.019627][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'.
[  136.038850][ T5476] loop1: detected capacity change from 0 to 764
[  136.058729][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'.
[  136.067585][ T5476] iso9660: Unknown parameter ''
[  136.089782][ T5479] loop2: detected capacity change from 0 to 128
[  136.849607][ T5477] 9pnet_fd: p9_fd_create_tcp (5477): problem connecting socket to 127.0.0.1
[  137.142743][ T5500] FAULT_INJECTION: forcing a failure.
[  137.142743][ T5500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.164966][ T5500] CPU: 0 UID: 0 PID: 5500 Comm: syz.5.610 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  137.165069][ T5500] Tainted: [W]=WARN
[  137.165076][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  137.165088][ T5500] Call Trace:
[  137.165094][ T5500]  <TASK>
[  137.165103][ T5500]  __dump_stack+0x1d/0x30
[  137.165144][ T5500]  dump_stack_lvl+0x95/0xd0
[  137.165164][ T5500]  dump_stack+0x15/0x1b
[  137.165182][ T5500]  should_fail_ex+0x263/0x280
[  137.165207][ T5500]  should_fail+0xb/0x20
[  137.165232][ T5500]  should_fail_usercopy+0x1a/0x20
[  137.165257][ T5500]  _copy_from_user+0x1c/0xb0
[  137.165356][ T5500]  ____sys_sendmsg+0x1e2/0x5b0
[  137.165394][ T5500]  ___sys_sendmsg+0x195/0x1e0
[  137.165435][ T5500]  ? path_openat+0x1b01/0x2050
[  137.165478][ T5500]  __sys_sendmmsg+0x185/0x320
[  137.165579][ T5500]  __x64_sys_sendmmsg+0x57/0x70
[  137.165608][ T5500]  x64_sys_call+0x27aa/0x3020
[  137.165678][ T5500]  do_syscall_64+0x12c/0x3b0
[  137.165751][ T5500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.165776][ T5500] RIP: 0033:0x7f33ea2fce59
[  137.165791][ T5500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.165808][ T5500] RSP: 002b:00007f33e8d4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  137.165828][ T5500] RAX: ffffffffffffffda RBX: 00007f33ea575fa0 RCX: 00007f33ea2fce59
[  137.165918][ T5500] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000003
[  137.165934][ T5500] RBP: 00007f33e8d4f090 R08: 0000000000000000 R09: 0000000000000000
[  137.165951][ T5500] R10: 00000000000048c5 R11: 0000000000000246 R12: 0000000000000001
[  137.165967][ T5500] R13: 00007f33ea576038 R14: 00007f33ea575fa0 R15: 00007ffdf3000598
[  137.165997][ T5500]  </TASK>
[  137.390304][ T5502] loop2: detected capacity change from 0 to 764
[  138.171728][ T5516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.615'.
[  138.456704][ T5516] bridge_slave_0: left allmulticast mode
[  138.469335][ T5516] bridge_slave_0: left promiscuous mode
[  138.487973][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.522632][ T5516] bridge_slave_1: left allmulticast mode
[  138.539237][ T5516] bridge_slave_1: left promiscuous mode
[  138.547507][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.584565][ T5516] bond0: (slave bond_slave_0): Releasing backup interface
[  138.616149][ T5516] bond0: (slave bond_slave_1): Releasing backup interface
[  138.676082][ T5516] team0: Port device team_slave_0 removed
[  138.721798][ T5516] team0: Port device team_slave_1 removed
[  138.745874][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.760645][ T5516] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.792568][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.809473][ T5516] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.844831][ T5516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.285679][ T5558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.624'.
[  139.580261][ T5564] IPv6: NLM_F_REPLACE set, but no existing node found!
[  139.770994][ T5585] loop1: detected capacity change from 0 to 2048
[  139.809690][ T5585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.822462][ T5585] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.856564][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.922882][ T5592] loop1: detected capacity change from 0 to 1764
[  139.930078][ T5592] iso9660: Bad value for 'gid'
[  139.943798][ T5592] iso9660: Bad value for 'gid'
[  139.971563][ T5592] loop1: detected capacity change from 0 to 512
[  139.989224][ T5592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  140.018304][ T5592] EXT4-fs (loop1): mount failed
[  140.145080][ T5598] loop1: detected capacity change from 0 to 512
[  140.161388][ T5598] EXT4-fs: Ignoring removed bh option
[  140.175758][ T5598] ext4: Unknown parameter 'smackfstransmute'
[  140.588219][ T5619] loop1: detected capacity change from 0 to 512
[  140.661500][ T5619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.745979][ T5619] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.821435][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  140.821452][   T28] audit: type=1400 audit(1780251100.464:439): avc:  denied  { mount } for  pid=5617 comm="syz.1.644" name="/" dev="ramfs" ino=11120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  141.150020][ T5651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.639'.
[  141.204877][ T5650] IPv6: NLM_F_REPLACE set, but no existing node found!
[  141.353947][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.487410][   T28] audit: type=1400 audit(1780251101.134:440): avc:  denied  { create } for  pid=5661 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  141.524472][ T5662] FAULT_INJECTION: forcing a failure.
[  141.524472][ T5662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.547390][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.1.654 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  141.547436][ T5662] Tainted: [W]=WARN
[  141.547446][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  141.547464][ T5662] Call Trace:
[  141.547474][ T5662]  <TASK>
[  141.547484][ T5662]  __dump_stack+0x1d/0x30
[  141.547520][ T5662]  dump_stack_lvl+0x95/0xd0
[  141.547562][ T5662]  dump_stack+0x15/0x1b
[  141.547589][ T5662]  should_fail_ex+0x263/0x280
[  141.547620][ T5662]  ? __pfx_ucma_resolve_addr+0x10/0x10
[  141.547735][ T5662]  should_fail+0xb/0x20
[  141.547759][ T5662]  should_fail_usercopy+0x1a/0x20
[  141.547790][ T5662]  _copy_from_user+0x1c/0xb0
[  141.547878][ T5662]  ucma_resolve_addr+0x52/0x280
[  141.547951][ T5662]  ? __pfx_ucma_resolve_addr+0x10/0x10
[  141.547990][ T5662]  ucma_write+0x1c9/0x260
[  141.548075][ T5662]  ? __pfx_ucma_write+0x10/0x10
[  141.548180][ T5662]  vfs_write+0x269/0x9f0
[  141.548214][ T5662]  ? __rcu_read_unlock+0x4e/0x70
[  141.548246][ T5662]  ? __fget_files+0x184/0x1c0
[  141.548271][ T5662]  ksys_write+0xdc/0x1a0
[  141.548370][ T5662]  __x64_sys_write+0x40/0x50
[  141.548406][ T5662]  x64_sys_call+0x27e1/0x3020
[  141.548441][ T5662]  do_syscall_64+0x12c/0x3b0
[  141.548484][ T5662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.548538][ T5662] RIP: 0033:0x7f67c655ce59
[  141.548560][ T5662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.548586][ T5662] RSP: 002b:00007f67c4faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.548614][ T5662] RAX: ffffffffffffffda RBX: 00007f67c67d5fa0 RCX: 00007f67c655ce59
[  141.548633][ T5662] RDX: 0000000000000118 RSI: 0000200000000140 RDI: 0000000000000003
[  141.548717][ T5662] RBP: 00007f67c4faf090 R08: 0000000000000000 R09: 0000000000000000
[  141.548736][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.548751][ T5662] R13: 00007f67c67d6038 R14: 00007f67c67d5fa0 R15: 00007ffda0ae5c58
[  141.548778][ T5662]  </TASK>
[  141.999915][ T5665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'.
[  142.156698][ T5678] loop2: detected capacity change from 0 to 2048
[  142.267984][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.167747][ T5678] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.263121][   T28] audit: type=1400 audit(1780251102.834:441): avc:  denied  { write } for  pid=5673 comm="syz.2.658" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.508895][   T49] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  143.732428][   T49] EXT4-fs (loop2): Remounting filesystem read-only
[  143.807966][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.665'.
[  143.822751][   T30] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  143.862943][ T5694] syz_tun: refused to change device tx_queue_len
[  143.877948][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.019339][ T5695] IPVS: set_ctl: invalid protocol: 103 172.20.20.68:20004
[  144.092472][   T28] audit: type=1400 audit(1780251103.744:442): avc:  denied  { getopt } for  pid=5693 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  145.220823][ T5703] IPv6: NLM_F_REPLACE set, but no existing node found!
[  145.478756][ T5724] loop5: detected capacity change from 0 to 512
[  145.605924][ T5724] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  145.779796][ T5724] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  145.797630][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  145.804101][    C1] EXT4-fs (loop5): initial error at time 1780251105: ext4_mb_generate_buddy:1317
[  145.813282][    C1] EXT4-fs (loop5): last error at time 1780251105: ext4_mb_generate_buddy:1317
[  145.839720][ T5724] Quota error (device loop5): write_blk: dquota write failed
[  145.861450][ T5724] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  145.872551][ T5724] Quota error (device loop5): write_blk: dquota write failed
[  145.881762][ T5724] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  145.892354][ T5724] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.673: Failed to acquire dquot type 1
[  145.906904][ T5724] loop5: lost filesystem error report for type 5 error -28
[  145.918363][ T5724] EXT4-fs (loop5): 1 truncate cleaned up
[  145.977586][ T5724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.043470][   T28] audit: type=1400 audit(1780251105.694:443): avc:  denied  { connect } for  pid=5723 comm="syz.5.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  146.089359][ T5738] loop0: detected capacity change from 0 to 764
[  146.109858][   T28] audit: type=1400 audit(1780251105.734:444): avc:  denied  { setattr } for  pid=5723 comm="syz.5.673" path="/38/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  146.158751][ T5734] Symlink component flag not implemented
[  146.191723][ T5734] Symlink component flag not implemented (116)
[  146.855692][ T4865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.969656][ T5747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[  147.001649][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  147.022936][   T28] audit: type=1400 audit(1780251106.664:445): avc:  denied  { write } for  pid=5746 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  147.069656][ T5754] 
: renamed from bond_slave_0
[  147.131822][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.140770][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.549563][   T28] audit: type=1326 audit(1780251107.194:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.5.686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ea2fce59 code=0x7ffc0000
[  147.601482][   T28] audit: type=1326 audit(1780251107.204:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.5.686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ea2fce59 code=0x7ffc0000
[  147.655539][   T28] audit: type=1326 audit(1780251107.204:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.5.686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ea2fce59 code=0x7ffc0000
[  147.724358][ T5747] 9pnet_fd: p9_fd_create_tcp (5747): problem connecting socket to 127.0.0.1
[  148.015363][ T5773] IPv6: NLM_F_REPLACE set, but no existing node found!
[  149.139235][ T5795] netlink: 'syz.2.698': attribute type 2 has an invalid length.
[  149.153319][ T5795] loop2: detected capacity change from 0 to 136
[  149.176941][ T5795] rock: directory entry would overflow storage
[  149.184261][ T5795] rock: sig=0x4f50, size=4, remaining=3
[  149.198048][ T5795] iso9660: Corrupted directory entry in block 2 of inode 1472
[  149.449724][ T5808] loop3: detected capacity change from 0 to 512
[  149.467493][ T3394] IPVS: starting estimator thread 0...
[  149.515061][ T5808] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.697: corrupted xattr block 95: invalid header
[  149.529975][ T5808] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  149.534185][ T5808] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.697: bg 0: block 7: invalid block bitmap
[  149.545394][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  149.545552][    C1] EXT4-fs (loop3): initial error at time 1780251109: ext4_expand_extra_isize_ea:2810: inode 11
[  149.545793][    C1] EXT4-fs (loop3): last error at time 1780251109: ext4_expand_extra_isize_ea:2810: inode 11
[  149.589509][ T5808] loop3: lost filesystem error report for type 5 error -117
[  149.597737][ T5808] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  149.615276][ T5808] loop3: lost filesystem error report for type 5 error -117
[  149.619273][ T5808] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.697: corrupted xattr block 95: invalid header
[  149.641181][ T5808] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  149.647267][ T5808] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117)
[  149.667117][ T5808] EXT4-fs (loop3): 1 orphan inode deleted
[  149.686669][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.828277][ T5809] IPVS: using max 2304 ests per chain, 115200 per kthread
[  150.281007][ T5814] IPv6: NLM_F_REPLACE set, but no existing node found!
[  151.152654][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.226122][   T28] kauditd_printk_skb: 77 callbacks suppressed
[  151.226217][   T28] audit: type=1400 audit(1780251110.874:526): avc:  denied  { bind } for  pid=5834 comm="syz.5.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  151.233295][ T5835] loop5: detected capacity change from 0 to 164
[  151.332271][   T28] audit: type=1400 audit(1780251110.974:527): avc:  denied  { ioctl } for  pid=5826 comm="syz.1.708" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  151.370316][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.711'.
[  151.553762][   T28] audit: type=1400 audit(1780251111.204:528): avc:  denied  { name_bind } for  pid=5865 comm="syz.0.720" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  151.671605][ T5832] loop1: detected capacity change from 0 to 1024
[  151.716444][ T5832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.843597][ T5832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  151.860227][ T5832] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.442467][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  152.590247][ T5886] loop1: detected capacity change from 0 to 2048
[  152.602911][ T5885] loop5: detected capacity change from 0 to 2048
[  152.638211][ T5885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.662495][ T5886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.683463][ T5885] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.703634][ T5886] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.728373][   T28] audit: type=1400 audit(1780251112.384:529): avc:  denied  { write } for  pid=5877 comm="syz.5.725" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  152.783702][   T28] audit: type=1400 audit(1780251112.404:530): avc:  denied  { write } for  pid=5881 comm="syz.1.722" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  152.850820][ T5888] loop0: detected capacity change from 0 to 1024
[  152.982601][   T28] audit: type=1400 audit(1780251112.634:531): avc:  denied  { remount } for  pid=5887 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  153.424090][   T30] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set
[  153.510312][   T30] EXT4-fs (loop1): Remounting filesystem read-only
[  153.533786][   T12] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  153.553060][ T3519] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[  153.616721][ T3519] EXT4-fs (loop5): Remounting filesystem read-only
[  153.637703][ T1020] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  153.684174][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.762629][   T28] audit: type=1400 audit(1780251113.414:532): avc:  denied  { create } for  pid=5903 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  153.788726][ T5904] loop1: detected capacity change from 0 to 512
[  153.826081][ T5904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  153.841213][ T4865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.859212][   T28] audit: type=1400 audit(1780251113.414:533): avc:  denied  { ioctl } for  pid=5903 comm="syz.1.731" path="socket:[12136]" dev="sockfs" ino=12136 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  153.886939][ T5904] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.731: bad orphan inode 131083
[  153.917148][ T5904] loop1: lost filesystem error report for type 5 error -117
[  153.917622][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  153.931454][    C1] EXT4-fs (loop1): initial error at time 1780251113: ext4_orphan_get:1423
[  153.940053][    C1] EXT4-fs (loop1): last error at time 1780251113: ext4_orphan_get:1423
[  153.952961][ T5904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.989530][   T28] audit: type=1400 audit(1780251113.624:534): avc:  denied  { write } for  pid=5903 comm="syz.1.731" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  154.017273][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'.
[  154.092613][ T1020] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.101545][ T1020] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.140887][ T1020] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.168981][ T1020] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.401749][ T5910] netlink: 5 bytes leftover after parsing attributes in process `syz.5.732'.
[  154.411755][ T5910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.420838][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.603284][ T5941] loop1: detected capacity change from 0 to 2048
[  155.649098][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.661911][ T5941] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.716185][   T28] audit: type=1400 audit(1780251115.364:535): avc:  denied  { write } for  pid=5934 comm="syz.1.741" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  156.257800][ T5945] loop0: detected capacity change from 0 to 128
[  156.271888][ T5945] EXT4-fs: Ignoring removed nobh option
[  156.289453][ T5945] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  156.345043][ T5945] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.441648][ T1020] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  156.477294][   T28] audit: type=1400 audit(1780251116.124:536): avc:  denied  { write } for  pid=5944 comm="syz.0.744" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  156.505665][ T1020] EXT4-fs (loop1): Remounting filesystem read-only
[  156.515726][ T5954] FAULT_INJECTION: forcing a failure.
[  156.515726][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.518072][   T49] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  156.542723][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.5.748 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  156.542762][ T5954] Tainted: [W]=WARN
[  156.542771][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  156.542788][ T5954] Call Trace:
[  156.542796][ T5954]  <TASK>
[  156.542807][ T5954]  __dump_stack+0x1d/0x30
[  156.542852][ T5954]  dump_stack_lvl+0x95/0xd0
[  156.542872][ T5954]  dump_stack+0x15/0x1b
[  156.542891][ T5954]  should_fail_ex+0x263/0x280
[  156.542914][ T5954]  should_fail+0xb/0x20
[  156.542936][ T5954]  should_fail_usercopy+0x1a/0x20
[  156.542987][ T5954]  _copy_from_user+0x1c/0xb0
[  156.543017][ T5954]  input_event_from_user+0x5e/0x190
[  156.543052][ T5954]  ? input_inject_event+0xe3/0x100
[  156.543088][ T5954]  evdev_write+0x1b0/0x2b0
[  156.543191][ T5954]  ? __pfx_evdev_write+0x10/0x10
[  156.543231][ T5954]  vfs_write+0x269/0x9f0
[  156.543264][ T5954]  ? __rcu_read_unlock+0x4e/0x70
[  156.543285][ T5954]  ? __fget_files+0x184/0x1c0
[  156.543333][ T5954]  ksys_write+0xdc/0x1a0
[  156.543443][ T5954]  __x64_sys_write+0x40/0x50
[  156.543471][ T5954]  x64_sys_call+0x27e1/0x3020
[  156.543535][ T5954]  do_syscall_64+0x12c/0x3b0
[  156.543632][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.543668][ T5954] RIP: 0033:0x7f33ea2fce59
[  156.543685][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.543704][ T5954] RSP: 002b:00007f33e8d4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  156.543861][ T5954] RAX: ffffffffffffffda RBX: 00007f33ea575fa0 RCX: 00007f33ea2fce59
[  156.543879][ T5954] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  156.543895][ T5954] RBP: 00007f33e8d4f090 R08: 0000000000000000 R09: 0000000000000000
[  156.543911][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.543956][ T5954] R13: 00007f33ea576038 R14: 00007f33ea575fa0 R15: 00007ffdf3000598
[  156.543982][ T5954]  </TASK>
[  156.577721][   T28] audit: type=1400 audit(1780251116.154:537): avc:  denied  { map } for  pid=5944 comm="syz.0.744" path="/147/mnt/memory.events.local" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  156.771600][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.785933][   T28] audit: type=1400 audit(1780251116.154:538): avc:  denied  { write } for  pid=5944 comm="syz.0.744" path="/147/mnt/memory.events.local" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  156.960468][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.030293][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.754'.
[  157.051119][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  157.831578][ T5970] 9pnet_fd: p9_fd_create_tcp (5970): problem connecting socket to 127.0.0.1
[  158.096332][ T6007] IPv6: NLM_F_REPLACE set, but no existing node found!
[  158.214943][   T28] audit: type=1400 audit(1780251117.854:539): avc:  denied  { create } for  pid=5999 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  158.281027][   T28] audit: type=1400 audit(1780251117.924:540): avc:  denied  { bind } for  pid=5999 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  158.331739][   T28] audit: type=1400 audit(1780251117.954:541): avc:  denied  { listen } for  pid=5999 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  158.374754][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'.
[  159.088427][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.781'.
[  159.116107][ T6040] loop1: detected capacity change from 0 to 512
[  159.123226][ T6040] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  159.141559][ T6040] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.781: bad orphan inode 13
[  159.157141][ T6040] loop1: lost filesystem error report for type 5 error -117
[  159.157337][ T6040] ext4_test_bit(bit=12, block=18) = 1
[  159.164709][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  159.164733][    C1] EXT4-fs (loop1): last error at time 1780251118: ext4_orphan_get:1423
[  159.187017][ T6040] is_bad_inode(inode)=0
[  159.191455][ T6040] NEXT_ORPHAN(inode)=0
[  159.195602][ T6040] max_ino=32
[  159.199103][ T6040] i_nlink=1
[  159.202735][ T6040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  159.216826][   T28] audit: type=1400 audit(1780251118.874:542): avc:  denied  { write } for  pid=6039 comm="syz.1.781" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.241745][ T6040] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  159.256502][ T6040] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.781: bg 0: block 248: padding at end of block bitmap is not set
[  159.271730][   T28] audit: type=1400 audit(1780251118.924:543): avc:  denied  { write } for  pid=6039 comm="syz.1.781" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.293903][ T6040] Quota error (device loop1): write_blk: dquota write failed
[  159.301580][ T6040] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  159.311767][ T6040] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.781: Failed to acquire dquot type 1
[  159.323400][ T6044] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.781: Failed to acquire dquot type 1
[  159.335136][ T6051] capability: warning: `syz.1.781' uses deprecated v2 capabilities in a way that may be insecure
[  159.387715][ T6043] ==================================================================
[  159.395885][ T6043] BUG: KCSAN: data-race in ktime_get_mono_fast_ns / update_fast_timekeeper
[  159.404560][ T6043] 
[  159.406906][ T6043] write to 0xffffffff86d4fb48 of 56 bytes by interrupt on cpu 1:
[  159.414658][ T6043]  update_fast_timekeeper+0x38/0x70
[  159.419913][ T6043]  timekeeping_update_from_shadow+0x3ab/0x440
[  159.426066][ T6043]  __timekeeping_advance+0xa5d/0xc10
[  159.431383][ T6043]  update_wall_time+0x21/0x50
[  159.436109][ T6043]  tick_do_update_jiffies64+0x169/0x1c0
[  159.441710][ T6043]  tick_nohz_handler+0x8d/0x3d0
[  159.446604][ T6043]  __hrtimer_run_queues+0x276/0x4f0
[  159.451846][ T6043]  hrtimer_interrupt+0x261/0x850
[  159.456833][ T6043]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  159.462764][ T6043]  sysvec_apic_timer_interrupt+0x6f/0x80
[  159.468439][ T6043]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  159.474459][ T6043]  kcsan_setup_watchpoint+0x1/0x410
[  159.479695][ T6043]  filemap_map_pages+0x375/0xea0
[  159.484658][ T6043]  handle_mm_fault+0x1508/0x2e70
[  159.489639][ T6043]  __get_user_pages+0x1290/0x1f10
[  159.494707][ T6043]  __mm_populate+0x242/0x390
[  159.499338][ T6043]  vm_mmap_pgoff+0x23b/0x2d0
[  159.503966][ T6043]  ksys_mmap_pgoff+0xc1/0x310
[  159.508676][ T6043]  x64_sys_call+0x14df/0x3020
[  159.513390][ T6043]  do_syscall_64+0x12c/0x3b0
[  159.518104][ T6043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.524025][ T6043] 
[  159.526371][ T6043] read to 0xffffffff86d4fb68 of 8 bytes by task 6043 on cpu 0:
[  159.533950][ T6043]  ktime_get_mono_fast_ns+0xdf/0x1a0
[  159.539280][ T6043]  bpf_ktime_get_ns+0xe/0x20
[  159.543949][ T6043]  bpf_prog_3aa7d5b0ccc3ba5f+0x48/0x50
[  159.549443][ T6043]  bpf_flow_dissect+0x158/0x350
[  159.554336][ T6043]  bpf_prog_test_run_flow_dissector+0x25d/0x360
[  159.560626][ T6043]  bpf_prog_test_run+0x204/0x340
[  159.565621][ T6043]  __sys_bpf+0x52e/0x7e0
[  159.569899][ T6043]  __x64_sys_bpf+0x41/0x50
[  159.574352][ T6043]  x64_sys_call+0x10cb/0x3020
[  159.579069][ T6043]  do_syscall_64+0x12c/0x3b0
[  159.583716][ T6043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.589643][ T6043] 
[  159.591991][ T6043] value changed: 0x00020ae66381d4a0 -> 0x0002a37ce3b13866
[  159.599126][ T6043] 
[  159.601471][ T6043] Reported by Kernel Concurrency Sanitizer on:
[  159.607650][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.2.782 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  159.618451][ T6043] Tainted: [W]=WARN
[  159.622289][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  159.632371][ T6043] ==================================================================
[  159.905597][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  159.914908][   T49] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1