last executing test programs:

3m35.58836484s ago: executing program 4 (id=174):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ftruncate(0xffffffffffffffff, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0x40000f, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x2, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0xfffffffe, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

3m34.600556922s ago: executing program 4 (id=180):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000406000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3m32.390340568s ago: executing program 4 (id=183):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0xcd32, 0x10, 0x0, 0x0, 0x8, 0xc, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b610000ec2c909cda49a11ff76e906b1380c2f8ec49aa58548a77736700000000000000000000000000000000000100", "000000000000000015b9ac000036ea494a0000000000edff00", [0x3, 0x2000000000006]})

3m32.254533171s ago: executing program 4 (id=185):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000238000/0x3000)=nil, &(0x7f0000063000/0x3000)=nil, &(0x7f00002db000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005a2000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x4801)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, r4}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r8, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x400c800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
getsockname(r1, &(0x7f0000000200)=@l2, &(0x7f0000000280)=0x80)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r9)

3m31.351776661s ago: executing program 4 (id=190):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ftruncate(0xffffffffffffffff, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0x40000f, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x2, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0xfffffffe, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

3m30.998871298s ago: executing program 4 (id=193):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
rt_sigsuspend(0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x1a, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000080000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800003eb70300000180000085000000ae00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x10, 0xbc3}, 0x94)

3m30.985658799s ago: executing program 32 (id=193):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
rt_sigsuspend(0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x1a, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000080000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800003eb70300000180000085000000ae00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x10, 0xbc3}, 0x94)

14.188941518s ago: executing program 2 (id=903):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000980018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)

12.353184057s ago: executing program 2 (id=909):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
fcntl$getflags(r5, 0x401)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
close(r8)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xfd}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c)

9.125078876s ago: executing program 2 (id=917):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
gettid()
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0057000000002fbcd45e427a0b87d01000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async)
r6 = syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r6, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, 0x0)
creat(0x0, 0x0) (async)
creat(0x0, 0x0)
open(0x0, 0x20000, 0x0) (async)
r7 = open(0x0, 0x20000, 0x0)
getdents64(r7, 0x0, 0x0)

8.068511748s ago: executing program 2 (id=922):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4000, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
unshare(0x68040200)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x200, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

7.633558737s ago: executing program 3 (id=926):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000001000000000000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c2a1efa"])

7.559592009s ago: executing program 1 (id=927):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
fcntl$getflags(r5, 0x401)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
close(r8)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xfd}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c)

6.450406093s ago: executing program 3 (id=928):
prctl$PR_GET_UNALIGN(0x5, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x7, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0xa00}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x46}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.187685338s ago: executing program 3 (id=930):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
socket(0x23, 0x5, 0x0)

6.10809979s ago: executing program 3 (id=932):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000890000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

5.757002637s ago: executing program 3 (id=934):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r7, 0x407, 0x100004)
write$eventfd(r7, &(0x7f0000000240), 0xffffff14)

5.728118138s ago: executing program 1 (id=935):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa05", 0x2b)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810003308030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x6}, 0xe)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x4480, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c00028005000100fdff0000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4)
accept4$bt_l2cap(r2, 0x0, 0x0, 0x800)

5.442930214s ago: executing program 1 (id=938):
socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$inet6_icmp(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac14141100000000000100000000000000000001000000000000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/344], 0x1a0}}, 0x0)

5.299776467s ago: executing program 2 (id=940):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x51}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x20040005)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040000200002000000008000000000000000000000000000000004400eefffb000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004000000000000000000000000000000fd83e59f2f0a78079fd9f420cd5a40adf34b73039729cb60f8cb0a"], 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001900)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r8, 0x407, 0x100004)

4.994546874s ago: executing program 5 (id=943):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x12003) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
getpid() (async)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000380)={[{@uid}, {@session={'session', 0x3d, 0x5f}}, {@map_acorn}, {@hide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@session={'session', 0x3d, 0x35}}, {@nojoliet}, {@gid}]}, 0x0, 0x691, &(0x7f0000000f00)="$eJzs3V1vFOf1APCzBAvLf/1R1VYIIUIm0EogEbO7Do6s3HS7HtuTrHdWM+sIrlIU7AhhkhZSqXAFN2krtR8it/0Q7SeKets7qp3dJQt+WYcQL6G/3yqZZ3fOzHNmvMzRY89LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRa6/W641adLLu1o3kYO3VIt88ZP54ff96bnJIvxG1wX8xPx9nhx+d/eV3s88M/ncxzg/fnY/5wWQ+Hv3fmZ99+IuTJ8bLH5LQsXjw8NHdW7u72/dnnciMrKfdrMyzzdZ6mmRlnqwsL9evbayVyVrWScubZT/dTNpF2urnRXK5fSVprKwsJenizXyru77a6qTjDz94r1mvLycfLfbSVlHm3WsfLZbtjazTybrrVcxg9vzou1F8nPWTftraTJKdO7vbS9OSHAQ1jhLUnBbUrDebjUaz2Vi+vnL9g3r95J4P6i+IPRGz/9IyW6/w6A0/zIlR/Y9OZNGNrbgRyb6vdqxGEXlsHjB/ZFz/f30tHbYe79/vZP0fV/mz380+F1X9vzB8d+Gg+n9ALsf3ehAP41HcjVuxG7uxHfdnntHxvtYjjW5kUUYeWWxGK9af/Qzzx0msxHIsRz0+jY1YizKSWDuZRSfSKONmlNGPtPpGtaOINFrRjzyKSOJytONKJNGIlViJpUgijcW4GXlsRTfWYzVa1Vp24k6135cOyfFZUOMoQc1DgtR/vq/5PZ+86kM4vLSn4/oPAAAAvLFq1W/fB+P/uXi7aq1lnbQ+67QAAACAV6j6y//5wWRu0Ho7asb/AAAA8KapVdfY1SJiId4ZtsZXQo1/CTA34xQBAACAH6j6+/+FwWRh0HonanvG/wAAAMBP3F+m3mN/vneq9s9/R1HM1Z70bvyqdq81iGvde2u4XDX5z9OhQbu/dq52erSSarJ8cvSunZ6vje5++ewmmKOTC77dmZZH7dAEJh2cQPwt3h3GvHt7OL09njPsZWEt66SL7bzzYSNardMn+umN/h+/uPOnqDb/r93N07XYubO7vfjZl7u3q1yeDNby5N7oBop77qO4Ty7jWV9V91uorrnYd4vnqgsxRv0uDPutT27/ieHiJ77H9n8dF4cxFxfi6amIWHh+++cHfTYWD9r6URaNKov55zodbfn/Hy2LS8OYS5cvDSf7ZNGclkVzcv+/1L44QhZL07JYOmIWg2/pflkAzMrOlCpU21v4X+JYezzV/eu4PIy5fK46sJ48t88RvT7tiF5/ybo+7usfcWUYc2UcfFCNHfT79xeq6jeDBb45sN+y06wNduFbX937fZx58PDRe3fu3fp8+/PtL5rNpeX6+/X69WbMVZsxmhySKQD/u6Y/Y2dqRO39KaPqnz87pWAxPosvYzdux9XqaoPqjIN917oQO7+J0WkIVydGrZUXRq0LE094uTplVLcw8aCXo8cuHcNPAgCOz8Updfgo9f/qlHH3wsQphVenjI4nazkA8ONIi29rC/0/14oi633aWFlptPobaVLk7Y+TIltdT5Os20+L9karu54mvSLv5+28M2h8kq2mZVJu9Xp50U/W8iLp5WV2o3ryezJ69HuZbra6/axd9jppq0yTdt7tt9r9ZDUr20lv67edrNxIi2rhspe2s7Ws3epneTcp862inS4mSZmmE4HZatrtZ2vZoNlNekW22SpuJp/kna3NNFlNy3aR9fr5cIXjvrLuWl5sVqtdnPXOBoDXxIOHj+7e2t3dvv8jNuLUrLcSAJg0UaUBAAAAAAAAAAAAAIDX1HFc//cGNv7wU951p16PNDRm0nj8u+G//GnBsz4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBe/w0AAP//UiVW8Q==") (async)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) (async)
unshare(0x64000600) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) (async)
close(0xffffffffffffffff) (async)
socket$kcm(0x11, 0x2, 0x0) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x1, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000400)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

4.829852867s ago: executing program 5 (id=945):
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
fstatfs(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00, 0x10000000}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.73513782s ago: executing program 5 (id=947):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18})
fstat(r0, &(0x7f0000002a00))

2.366506309s ago: executing program 0 (id=948):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x4}, 0x8)
creat(&(0x7f0000000400)='./file0\x00', 0x128)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}}, 0x4000050)

2.36349352s ago: executing program 5 (id=949):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x3fffffff9}, 0x2c10, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

2.161752024s ago: executing program 1 (id=950):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000440, &(0x7f0000000340), 0x1, 0x593, &(0x7f0000000380)="$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")

2.161154454s ago: executing program 0 (id=951):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
msgget(0x0, 0x358)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000010010000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

1.038987328s ago: executing program 3 (id=952):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x20000000000, 0x7}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x1000000, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

427.041041ms ago: executing program 0 (id=953):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x700, 0x310, 0x240, 0x400, 0x310, 0x400, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0xff3f0000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xff3f}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760)

364.690802ms ago: executing program 2 (id=954):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x1, 0x9, 0x4, 0x0, 0x5a1d, 0x1020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1, 0xa}, 0x8a0, 0x400000, 0x3, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x24, 0x2, 0x6)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r6=>0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82704, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000400), 0x8}, 0x0, 0x1, 0xfffffffe, 0x5, 0x47, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r9 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000000940)=""/55, 0x37}, {&(0x7f0000000980)=""/209, 0xd1}], 0x4)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
sendmsg$AUDIT_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
accept(r4, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)

275.805644ms ago: executing program 0 (id=955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000f53c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x40004)

272.068774ms ago: executing program 0 (id=956):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x5)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xb4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x1f, 0x10000, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040)

196.510435ms ago: executing program 1 (id=957):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000580)="$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")

175.609546ms ago: executing program 0 (id=958):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000010001fff28bd70000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff0000000044002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="08000364b6ab510bd6664f4f0098ff0805", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet6(0xa, 0x80001, 0x0)
fchdir(r3)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)={0x0, {{0xa, 0x4e20, 0x1, @mcast1, 0x5}}, 0x1}, 0x90)
syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003c20000000000190780a010102ac1414aa0400907800000000461200360064000009210cef0a0101010a010100440449207f94bdc1d1206b8543e12272cf8fd96a069b22ff12f760b836fa45a36b454db00447d49b9f2ec3451625c943b3cedc8bc8e9eba690c71e245bbff14acccff7dc9e474b96658d01b67a7200555c3090848ab65b499b77599003f6bea780e9df244190cc4d448b4b110066633d85603c07a81a341e2336bf1238601d770f5da1628f23305e33bee756c0df86eb3973a8d039b218eab12a558228cbc4bc1f35cb82e0"], 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r6, &(0x7f0000006400)=[{{&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f0000002540)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/218, 0xda}, {&(0x7f0000007600)=""/4097, 0x1001}, {&(0x7f0000002340)=""/168, 0xa8}, {&(0x7f0000002400)=""/88, 0x58}, {&(0x7f0000002480)=""/62, 0x3e}, {&(0x7f00000024c0)=""/101, 0x65}], 0x8, &(0x7f00000025c0)=""/9, 0x9}}, {{&(0x7f0000002600)=@nl=@proc, 0x80, &(0x7f0000002740)=[{&(0x7f0000002680)=""/145, 0x2}], 0x1, &(0x7f0000002780)=""/63, 0x3f}, 0x2}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/232, 0xe8}, {&(0x7f00000038c0)=""/236, 0xec}, {&(0x7f00000039c0)=""/106, 0x6a}, {&(0x7f0000003a40)=""/207, 0xcf}, {&(0x7f0000003b40)=""/160, 0xa0}, {&(0x7f0000003c00)=""/61, 0x43}, {&(0x7f0000003c80)=""/173, 0xad}], 0x8}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003dc0)=""/92, 0x5c}], 0x1, &(0x7f0000003e80)=""/4096, 0x1000}, 0x3f708e0c}, {{&(0x7f0000004e80)=@x25={0x9, @remote}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004f00)=""/83, 0x53}], 0x1, &(0x7f0000004fc0)=""/73, 0x49}, 0xdc2b}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000005040)=""/200, 0xc8}], 0x1, &(0x7f0000005180)=""/42, 0x2a}, 0x6}, {{&(0x7f00000051c0)=@x25, 0x80, &(0x7f00000052c0)=[{&(0x7f0000000940)=""/122, 0x7a}], 0x1, &(0x7f0000006600)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006300)=""/135, 0x87}], 0x1}, 0x8001}], 0x8, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

96.463628ms ago: executing program 5 (id=959):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x4}, 0x8)
creat(&(0x7f0000000400)='./file0\x00', 0x128)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}}, 0x4000050)

488.1µs ago: executing program 1 (id=960):
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x1000000}, 0x1a)

0s ago: executing program 5 (id=961):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="2e00000010000000", @ANYRES32], 0x20)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

83.189229][ T5596]  x64_sys_call+0x194c/0x3020
[  183.189289][ T5596]  do_syscall_64+0x136/0x3c0
[  183.189323][ T5596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.189404][ T5596] RIP: 0033:0x7f1b022cce59
[  183.189422][ T5596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.189457][ T5596] RSP: 002b:00007f1b00d1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.189482][ T5596] RAX: ffffffffffffffda RBX: 00007f1b02545fa0 RCX: 00007f1b022cce59
[  183.189498][ T5596] RDX: 0000000000040014 RSI: 0000200000000080 RDI: 0000000000000006
[  183.189510][ T5596] RBP: 00007f1b00d1f090 R08: 0000000000000000 R09: 0000000000000000
[  183.189598][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.189610][ T5596] R13: 00007f1b02546038 R14: 00007f1b02545fa0 R15: 00007ffc0860f5c8
[  183.189629][ T5596]  </TASK>
[  183.495947][ T5596] loop2: detected capacity change from 0 to 2048
[  183.610189][ T5596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.640095][ T5596] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.446: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  183.666129][ T5596] EXT4-fs (loop2): Remounting filesystem read-only
[  183.714593][ T5605] capability: warning: `syz.0.448' uses 32-bit capabilities (legacy support in use)
[  183.757184][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.974069][   T28] audit: type=1400 audit(1782825421.489:837): avc:  denied  { append } for  pid=5627 comm="syz.0.455" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  187.310921][ T5638] net_ratelimit: 175 callbacks suppressed
[  187.310986][ T5638] netlink: zone id is out of range
[  187.948753][ T5638] netlink: zone id is out of range
[  187.954290][ T5638] netlink: zone id is out of range
[  187.960605][ T5638] netlink: zone id is out of range
[  187.974396][ T5638] netlink: zone id is out of range
[  187.980216][ T5638] netlink: zone id is out of range
[  187.986346][ T5638] netlink: zone id is out of range
[  187.992054][ T5638] netlink: zone id is out of range
[  188.339140][ T5638] netlink: zone id is out of range
[  188.349342][   T28] audit: type=1400 audit(1782825423.869:838): avc:  denied  { cpu } for  pid=5641 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  188.986181][ T5643] mmap: syz.0.459 (5643) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  189.205539][ T5638] netlink: zone id is out of range
[  189.417586][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  189.581475][ T5651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.731724][ T5651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.878674][ T5665] loop1: detected capacity change from 0 to 512
[  189.897630][ T5665] EXT4-fs (loop1): 1 truncate cleaned up
[  189.904080][ T5665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.925917][   T28] audit: type=1400 audit(1782825425.449:839): avc:  denied  { write } for  pid=5663 comm="syz.1.469" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  189.957719][ T5665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.469: bg 0: block 465: padding at end of block bitmap is not set
[  190.001729][ T5651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.009202][ T5665] EXT4-fs (loop1): Remounting filesystem read-only
[  190.155444][   T28] audit: type=1400 audit(1782825425.659:840): avc:  denied  { write } for  pid=5670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.219595][   T28] audit: type=1400 audit(1782825425.739:841): avc:  denied  { write } for  pid=5686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.247495][ T5651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.526822][ T3467] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.560670][ T3467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.596748][ T3467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.615780][ T3467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.628434][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.073383][   T28] audit: type=1400 audit(1782825426.589:842): avc:  denied  { write } for  pid=5689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.123148][ T5702] loop1: detected capacity change from 0 to 512
[  191.309200][   T28] audit: type=1400 audit(1782825426.829:843): avc:  denied  { write } for  pid=5710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.468706][ T5713] xt_connbytes: Forcing CT accounting to be enabled
[  191.604450][ T5702] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.471: corrupted inode contents
[  191.755600][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  191.758195][ T5702] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.471: mark_inode_dirty error
[  191.767753][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  191.767777][    C0] EXT4-fs (loop1): initial error at time 1782825427: ext4_do_update_inode:5742: inode 16
[  191.767838][    C0] EXT4-fs (loop1): last error at time 1782825427: ext4_do_update_inode:5742: inode 16
[  191.813763][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  191.813934][ T5702] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.471: corrupted inode contents
[  191.845586][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  191.845918][ T5702] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.471: mark_inode_dirty error
[  191.885556][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  191.886018][ T5702] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.471: corrupted inode contents
[  191.945051][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  191.945287][ T5702] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  191.971761][ T5702] loop1: lost filesystem error report for type 5 error -117
[  191.971949][ T5702] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.471: corrupted inode contents
[  192.014129][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  192.056311][ T5702] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.471: mark_inode_dirty error
[  192.097392][ T5702] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  192.100376][ T5702] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  192.120910][ T5702] loop1: lost filesystem error report for type 5 error -117
[  192.124981][ T5702] EXT4-fs (loop1): 1 truncate cleaned up
[  192.145380][ T3467] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  192.156513][ T3467] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1
[  192.176276][ T5702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.190291][ T5724] loop0: detected capacity change from 0 to 512
[  192.198329][ T3467] loop1: lost filesystem error report for type 5 error -117
[  192.209164][ T5702] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.213296][ T5724] EXT4-fs: inline encryption not supported
[  192.259307][ T5702] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in;
[  192.259307][ T5702]    program syz.1.471 not setting count and/or reply_len properly
[  192.260106][   T28] audit: type=1400 audit(1782825427.779:844): avc:  denied  { write } for  pid=5700 comm="syz.1.471" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  192.385278][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'.
[  192.524254][ T5724] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.476: bad orphan inode 15
[  192.535056][ T5724] loop0: lost filesystem error report for type 5 error -117
[  192.536669][ T5724] ext4_test_bit(bit=14, block=5) = 0
[  192.549584][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  192.549614][    C1] EXT4-fs (loop0): initial error at time 1782825428: ext4_orphan_get:1425
[  192.549652][    C1] EXT4-fs (loop0): last error at time 1782825428: ext4_orphan_get:1425
[  192.691536][ T5724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.694848][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.689137][ T5724] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.476: reserved inode found cleared - inode=1
[  193.689786][   T28] audit: type=1400 audit(1782825429.209:845): avc:  denied  { write } for  pid=5723 comm="syz.0.476" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  194.099453][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.558304][ T5742] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  194.633355][ T5749] loop0: detected capacity change from 0 to 1024
[  194.742888][ T5752] bond1: entered promiscuous mode
[  194.760903][ T5752] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.777899][ T5756] loop2: detected capacity change from 0 to 512
[  194.788070][ T5749] loop0: detected capacity change from 0 to 512
[  194.813615][ T5749] EXT4-fs: Ignoring removed nobh option
[  194.827712][ T5754] net_ratelimit: 106 callbacks suppressed
[  194.827737][ T5754] netlink: zone id is out of range
[  194.842637][ T5756] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  194.851042][ T5749] EXT4-fs: test_dummy_encryption option not supported
[  194.910392][ T5756] EXT4-fs (loop2): orphan cleanup on readonly fs
[  194.927952][ T5754] netlink: zone id is out of range
[  194.948558][ T5768] tipc: Started in network mode
[  194.953886][ T5756] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  194.966341][ T5754] netlink: zone id is out of range
[  194.974178][ T5768] tipc: Node identity ac14140f, cluster identity 4711
[  194.991411][ T5754] netlink: zone id is out of range
[  195.005046][ T5756] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  195.016743][ T5768] tipc: Enabled bearer <udp:syz2>, priority 10
[  195.026886][ T5754] netlink: zone id is out of range
[  195.044281][ T5754] netlink: zone id is out of range
[  195.050510][ T5756] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  195.060243][ T5754] netlink: zone id is out of range
[  195.074901][ T5756] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.485: inode has both inline data and extents flags
[  195.089303][ T5754] netlink: zone id is out of range
[  195.096642][ T5756] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  195.096886][ T5756] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.485: couldn't read orphan inode 16 (err -117)
[  195.101606][   T28] audit: type=1400 audit(1782825430.619:846): avc:  denied  { execute } for  pid=5772 comm="syz.5.490" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=11437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  195.106048][ T5756] loop2: lost filesystem error report for type 5 error -117
[  195.107376][ T5754] netlink: zone id is out of range
[  195.120102][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[  195.141457][ T5754] netlink: zone id is out of range
[  195.142839][ T5756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.481019][ T5752] vcan0 speed is unknown, defaulting to 1000
[  196.212586][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.391123][ T5802] loop3: detected capacity change from 0 to 512
[  196.438122][ T5802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.441448][   T11] tipc: Node number set to 2886997007
[  196.501514][ T5802] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.551249][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'.
[  196.725515][ T5814] loop5: detected capacity change from 0 to 256
[  197.234340][ T5816] netlink: 76 bytes leftover after parsing attributes in process `syz.3.501'.
[  197.544502][   T28] audit: type=1400 audit(1782825433.059:847): avc:  denied  { listen } for  pid=5818 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  198.744458][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.848393][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[  198.864632][ T5832] loop1: detected capacity change from 0 to 512
[  198.897259][ T5832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.898808][   T28] audit: type=1400 audit(1782825434.249:848): avc:  denied  { read } for  pid=5827 comm="syz.1.507" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  198.932675][   T28] audit: type=1400 audit(1782825434.249:849): avc:  denied  { ioctl } for  pid=5827 comm="syz.1.507" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  198.980070][ T5837] netlink: 'syz.3.509': attribute type 1 has an invalid length.
[  199.005971][ T5832] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.507: iget: bad i_size value: 38620345925642
[  199.023177][ T5832] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  199.023443][ T5832] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.507: couldn't read orphan inode 15 (err -117)
[  199.032683][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  199.032726][    C1] EXT4-fs (loop1): initial error at time 1782825434: ext4_orphan_get:1399: inode 15
[  199.032751][    C1] EXT4-fs (loop1): last error at time 1782825434: ext4_orphan_get:1399: inode 15
[  199.076918][ T5832] loop1: lost filesystem error report for type 5 error -117
[  199.078238][ T5832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.100758][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.244298][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'.
[  199.259334][   T28] audit: type=1400 audit(1782825434.769:850): avc:  denied  { write } for  pid=5827 comm="syz.1.507" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  199.259499][ T5847] bond0: entered promiscuous mode
[  199.288822][ T5847] bond0: entered allmulticast mode
[  199.360304][   T28] audit: type=1400 audit(1782825434.879:851): avc:  denied  { map } for  pid=5827 comm="syz.1.507" path="/94/bus/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  199.444303][ T5837] bond0: (slave dummy0): making interface the new active one
[  199.479382][ T5832] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.507: bg 0: block 5: invalid block bitmap
[  199.498857][ T5837] dummy0: entered promiscuous mode
[  199.510254][ T5837] dummy0: entered allmulticast mode
[  199.519488][ T5837] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  199.581950][ T5832] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28
[  199.636172][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'.
[  199.712311][ T5832] EXT4-fs (loop1): This should not happen!! Data will be lost
[  199.712311][ T5832] 
[  199.859942][ T5832] EXT4-fs (loop1): Total free blocks count 0
[  199.866090][ T5832] EXT4-fs (loop1): Free/Dirty block details
[  199.872030][ T5832] EXT4-fs (loop1): free_blocks=0
[  199.881989][ T5832] EXT4-fs (loop1): dirty_blocks=160
[  199.894618][ T5832] EXT4-fs (loop1): Block reservation details
[  199.916284][ T5832] EXT4-fs (loop1): i_reserved_data_blocks=160
[  199.920128][ T5857] net_ratelimit: 130 callbacks suppressed
[  199.920170][ T5857] netlink: zone id is out of range
[  199.933365][ T5857] netlink: zone id is out of range
[  199.938497][ T5857] netlink: zone id is out of range
[  199.943617][ T5857] netlink: zone id is out of range
[  199.948872][ T5857] netlink: zone id is out of range
[  199.954225][ T5857] netlink: zone id is out of range
[  199.959381][ T5857] netlink: zone id is out of range
[  199.964520][ T5857] netlink: zone id is out of range
[  199.969657][ T5857] netlink: zone id is out of range
[  199.974886][ T5857] netlink: zone id is out of range
[  200.014751][   T28] audit: type=1400 audit(1782825435.529:852): avc:  denied  { ioctl } for  pid=5858 comm="syz.0.516" path="socket:[11526]" dev="sockfs" ino=11526 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  200.117780][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[  200.126852][ T5859] loop0: detected capacity change from 0 to 1024
[  200.134779][ T3305] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  200.171877][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.182766][ T5867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.520'.
[  200.183261][ T5859] EXT4-fs: Ignoring removed nobh option
[  200.197352][ T5859] EXT4-fs: Ignoring removed i_version option
[  200.312450][   T28] audit: type=1400 audit(1782825435.819:853): avc:  denied  { connect } for  pid=5873 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  200.345577][ T5859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.415133][   T28] audit: type=1400 audit(1782825435.939:854): avc:  denied  { ioctl } for  pid=5873 comm="syz.1.519" path="socket:[10210]" dev="sockfs" ino=10210 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  200.461150][ T5877] can0: slcan on ttyS3.
[  200.461161][ T5882] loop3: detected capacity change from 0 to 1024
[  200.476212][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.479449][ T5875] netlink: 'syz.1.519': attribute type 13 has an invalid length.
[  200.505111][   T28] audit: type=1400 audit(1782825435.969:855): avc:  denied  { write } for  pid=5876 comm="syz.5.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  200.554954][   T28] audit: type=1400 audit(1782825435.999:856): avc:  denied  { lock } for  pid=5858 comm="syz.0.516" path="socket:[11526]" dev="sockfs" ino=11526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  200.580973][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.591454][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.656118][ T5878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'.
[  200.758741][ T5878] bond0: (slave bond_slave_0): Releasing backup interface
[  200.775508][ T5888] can0 (unregistered): slcan off ttyS3.
[  200.799860][ T5899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.526'.
[  200.827542][ T5878] bond_slave_0: entered promiscuous mode
[  200.833265][ T5878] bond_slave_0: entered allmulticast mode
[  200.861038][ T5897] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  201.049494][ T5913] netlink: 104 bytes leftover after parsing attributes in process `syz.3.534'.
[  201.266538][   T23] vcan0 speed is unknown, defaulting to 1000
[  201.266855][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[  201.361110][ T5921] loop5: detected capacity change from 0 to 128
[  201.371687][ T5917] bond1: option ad_user_port_key: invalid value (2311)
[  201.378604][ T5917] bond1: option ad_user_port_key: allowed values 0 - 1023
[  201.476585][ T5926] netlink: 666 bytes leftover after parsing attributes in process `syz.1.537'.
[  201.547998][ T5917] bond1 (unregistering): Released all slaves
[  202.201368][ T5958] loop1: detected capacity change from 0 to 512
[  202.313296][ T5964] tmpfs: Bad value for 'mpol'
[  203.085800][ T5977] loop5: detected capacity change from 0 to 512
[  203.118646][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  203.118663][   T28] audit: type=1400 audit(1782825438.639:865): avc:  denied  { nlmsg_read } for  pid=5976 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  203.131561][ T5980] loop3: detected capacity change from 0 to 2048
[  203.187135][ T5980] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.194507][ T5982] loop1: detected capacity change from 0 to 2048
[  203.199446][ T5977] EXT4-fs: journaled quota format not specified
[  203.223481][ T5982] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.240533][ T5980] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.240740][ T5982] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.311210][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.341493][ T5980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.400247][   T28] audit: type=1400 audit(1782825438.919:866): avc:  denied  { connect } for  pid=5993 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  203.445833][   T28] audit: type=1400 audit(1782825438.949:867): avc:  denied  { getopt } for  pid=5993 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  204.549582][   T28] audit: type=1400 audit(1782825439.249:868): avc:  denied  { write } for  pid=5979 comm="syz.3.549" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  205.571004][   T28] audit: type=1400 audit(1782825440.029:869): avc:  denied  { write } for  pid=5981 comm="syz.1.550" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  205.907229][ T6005] loop0: detected capacity change from 0 to 2048
[  206.072194][ T6005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.110169][ T6004] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.554: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  206.160217][ T6004] EXT4-fs (loop0): Remounting filesystem read-only
[  206.172731][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.192109][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.226995][ T6010] loop1: detected capacity change from 0 to 256
[  206.253286][ T6012] netlink: 68 bytes leftover after parsing attributes in process `syz.2.557'.
[  206.268864][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.331581][ T6014] FAULT_INJECTION: forcing a failure.
[  206.331581][ T6014] name failslab, interval 1, probability 0, space 0, times 0
[  206.345532][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.3.556 Not tainted syzkaller #0 PREEMPT(lazy) 
[  206.345564][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  206.345580][ T6014] Call Trace:
[  206.345590][ T6014]  <TASK>
[  206.345600][ T6014]  __dump_stack+0x1d/0x30
[  206.345631][ T6014]  dump_stack_lvl+0x95/0xd0
[  206.345718][ T6014]  dump_stack+0x15/0x1b
[  206.345741][ T6014]  should_fail_ex+0x25e/0x270
[  206.345773][ T6014]  should_failslab+0x8c/0xb0
[  206.345802][ T6014]  __kvmalloc_node_noprof+0x15b/0x590
[  206.345907][ T6014]  ? alloc_netdev_mqs+0xa7/0xa90
[  206.345941][ T6014]  ? alloc_netdev_mqs+0xa7/0xa90
[  206.346049][ T6014]  ? __tsan_read1+0x12/0x180
[  206.346155][ T6014]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  206.346187][ T6014]  alloc_netdev_mqs+0xa7/0xa90
[  206.346221][ T6014]  rtnl_create_link+0x239/0x720
[  206.346326][ T6014]  rtnl_newlink_create+0x175/0x650
[  206.346349][ T6014]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  206.346441][ T6014]  rtnl_newlink+0x1181/0x1400
[  206.346467][ T6014]  ? task_clock_event_del+0x1a/0x30
[  206.346556][ T6014]  ? tick_program_event+0x79/0xc0
[  206.346628][ T6014]  ? _raw_spin_unlock+0x9/0x30
[  206.346660][ T6014]  ? __hrtimer_rearm_deferred+0x571/0x650
[  206.346754][ T6014]  ? __tsan_read2+0xe8/0x190
[  206.346853][ T6014]  ? irqentry_exit+0x58f/0x610
[  206.346888][ T6014]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  206.346924][ T6014]  ? ns_capable+0x57/0xb0
[  206.347018][ T6014]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  206.347059][ T6014]  ? ns_capable+0x80/0xb0
[  206.347101][ T6014]  ? __pfx_rtnl_newlink+0x10/0x10
[  206.347166][ T6014]  rtnetlink_rcv_msg+0x64b/0x720
[  206.347287][ T6014]  ? irqentry_exit+0x58f/0x610
[  206.347322][ T6014]  netlink_rcv_skb+0x11e/0x220
[  206.347348][ T6014]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  206.347398][ T6014]  rtnetlink_rcv+0x1c/0x30
[  206.347437][ T6014]  netlink_unicast+0x5a7/0x680
[  206.347492][ T6014]  netlink_sendmsg+0x5be/0x6f0
[  206.347521][ T6014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  206.347542][ T6014]  ____sys_sendmsg+0x532/0x580
[  206.347574][ T6014]  ___sys_sendmsg+0x195/0x1e0
[  206.347634][ T6014]  __x64_sys_sendmsg+0xd4/0x160
[  206.347705][ T6014]  x64_sys_call+0x194c/0x3020
[  206.347759][ T6014]  do_syscall_64+0x136/0x3c0
[  206.347792][ T6014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.347821][ T6014] RIP: 0033:0x7f27b6abce59
[  206.347843][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.347874][ T6014] RSP: 002b:00007f27b5517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.347899][ T6014] RAX: ffffffffffffffda RBX: 00007f27b6d35fa0 RCX: 00007f27b6abce59
[  206.347914][ T6014] RDX: 0000000000040014 RSI: 0000200000000080 RDI: 0000000000000006
[  206.347927][ T6014] RBP: 00007f27b5517090 R08: 0000000000000000 R09: 0000000000000000
[  206.347964][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.347977][ T6014] R13: 00007f27b6d36038 R14: 00007f27b6d35fa0 R15: 00007ffc474591f8
[  206.348002][ T6014]  </TASK>
[  206.669764][ T6019] netlink: 84 bytes leftover after parsing attributes in process `syz.0.558'.
[  206.682776][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  206.699226][ T6019] loop0: detected capacity change from 0 to 256
[  206.699636][ T6017] loop3: detected capacity change from 0 to 2048
[  206.720057][ T6019] vfat: Unknown parameter 'check.relaxed'
[  206.841806][ T6017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.878595][ T6014] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.556: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  206.913676][ T6014] EXT4-fs (loop3): Remounting filesystem read-only
[  206.938408][ T6024] tmpfs: Bad value for 'mpol'
[  207.374270][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.444655][   T28] audit: type=1400 audit(1782825442.949:870): avc:  denied  { bind } for  pid=6031 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  207.845193][ T6039] geneve2: entered promiscuous mode
[  207.881916][ T6047] loop1: detected capacity change from 0 to 2048
[  207.911210][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option
[  207.932509][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option
[  207.996248][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.632895][   T49] Bluetooth: hci0: Frame reassembly failed (-84)
[  208.816717][   T28] audit: type=1400 audit(1782825444.299:871): avc:  denied  { write } for  pid=6046 comm="syz.1.567" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  209.224207][ T6066] loop0: detected capacity change from 0 to 164
[  210.259031][ T6069] loop0: detected capacity change from 0 to 1024
[  210.312416][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.352440][ T6069] ext4: Bad value for 'debug_want_extra_isize'
[  210.424628][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  210.449938][   T28] audit: type=1400 audit(1782825445.969:872): avc:  denied  { lock } for  pid=6076 comm="syz.3.575" path="socket:[11892]" dev="sockfs" ino=11892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  210.581767][ T6082] syz.3.575 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  211.004210][ T6081] loop0: detected capacity change from 0 to 512
[  211.070193][ T6081] EXT4-fs (loop0): 1 truncate cleaned up
[  211.076304][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.171521][   T28] audit: type=1400 audit(1782825446.669:873): avc:  denied  { write } for  pid=6080 comm="syz.0.576" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  211.220304][ T6094] xt_connbytes: Forcing CT accounting to be enabled
[  211.234428][   T28] audit: type=1400 audit(1782825446.719:874): avc:  denied  { read write } for  pid=6080 comm="syz.0.576" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  211.303882][   T28] audit: type=1400 audit(1782825446.729:875): avc:  denied  { open } for  pid=6080 comm="syz.0.576" path="/128/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  211.500810][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.777768][ T6104] loop3: detected capacity change from 0 to 512
[  211.839974][ T6104] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  211.864575][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  211.871064][    C0] EXT4-fs (loop3): initial error at time 1782825447: ext4_mb_generate_buddy:1317
[  211.880262][    C0] EXT4-fs (loop3): last error at time 1782825447: ext4_mb_generate_buddy:1317
[  211.910833][ T6104] EXT4-fs (loop3): Remounting filesystem read-only
[  211.952787][ T6104] EXT4-fs (loop3): 1 truncate cleaned up
[  212.036297][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.058147][ T6108] loop1: detected capacity change from 0 to 2048
[  212.090372][ T6108] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.163820][ T6108] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.375918][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.447326][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.353948][ T6091] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  213.414012][   T28] audit: type=1400 audit(1782825448.849:876): avc:  denied  { write } for  pid=6107 comm="syz.1.584" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  213.495592][ T6091] EXT4-fs (loop1): Remounting filesystem read-only
[  213.696116][ T6153] loop3: detected capacity change from 0 to 2048
[  213.742506][ T6153] EXT4-fs: Ignoring removed mblk_io_submit option
[  213.784717][   T28] audit: type=1400 audit(1782825449.299:877): avc:  denied  { write } for  pid=6131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  213.816001][ T6153] EXT4-fs: Ignoring removed mblk_io_submit option
[  214.020280][ T6153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.936457][   T28] audit: type=1400 audit(1782825450.139:878): avc:  denied  { write } for  pid=6168 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  214.979781][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.435950][ T6167] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  216.367354][   T28] audit: type=1400 audit(1782825451.849:879): avc:  denied  { write } for  pid=6150 comm="syz.3.592" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  216.535013][ T6167] EXT4-fs (loop3): Remounting filesystem read-only
[  216.895797][ T6183] loop1: detected capacity change from 0 to 1024
[  216.919470][ T6183] EXT4-fs: Ignoring removed orlov option
[  217.342551][ T6183] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  217.903783][ T6172] 8021q: adding VLAN 0 to HW filter on device eth0
[  217.912889][ T6172] 8021q: adding VLAN 0 to HW filter on device eth1
[  218.179932][ T6172] 8021q: adding VLAN 0 to HW filter on device eth2
[  218.191296][ T6172] 8021q: adding VLAN 0 to HW filter on device eth3
[  218.205411][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.600'.
[  218.334148][ T6198] loop2: detected capacity change from 0 to 512
[  218.341350][ T6183] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  218.349917][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.360412][ T6183] EXT4-fs (loop1): orphan cleanup on readonly fs
[  218.382292][ T6183] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.597: Invalid inode table block 0 in block_group 0
[  218.425717][   T28] audit: type=1400 audit(1782825453.939:880): avc:  denied  { listen } for  pid=6197 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  218.472487][ T6183] loop1: lost filesystem error report for type 5 error -117
[  218.472637][ T6183] EXT4-fs (loop1): Remounting filesystem read-only
[  218.480194][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  218.480242][    C1] EXT4-fs (loop1): initial error at time 1782825453: __ext4_get_inode_loc:4886
[  218.480271][    C1] EXT4-fs (loop1): last error at time 1782825453: __ext4_get_inode_loc:4886
[  218.612212][ T6206] ipt_ECN: cannot use operation on non-tcp rule
[  218.742305][ T6183] Quota error (device loop1): write_blk: dquota write failed
[  218.758694][ T6183] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  218.778972][ T6183] EXT4-fs (loop1): 1 truncate cleaned up
[  219.149092][ T6211] xt_CT: No such helper "snmp_trap"
[  219.320651][   T28] audit: type=1400 audit(1782825454.839:881): avc:  denied  { write } for  pid=6201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  219.399313][ T6227] loop2: detected capacity change from 0 to 2048
[  219.412447][   T28] audit: type=1400 audit(1782825454.929:882): avc:  denied  { write } for  pid=6228 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  219.439042][ T6183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  219.452241][ T6227] EXT4-fs: Ignoring removed mblk_io_submit option
[  219.550865][ T6227] EXT4-fs: Ignoring removed mblk_io_submit option
[  219.615298][ T6242] netlink: 104 bytes leftover after parsing attributes in process `syz.0.611'.
[  219.615437][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.635505][ T6231] loop5: detected capacity change from 0 to 512
[  219.636818][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.669885][ T6231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  219.715680][ T6231] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.608: iget: bad i_size value: 38620345925642
[  219.764449][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[  219.777854][ T6231] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  219.778873][ T6231] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.608: couldn't read orphan inode 15 (err -117)
[  219.788280][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  219.788299][    C0] EXT4-fs (loop5): initial error at time 1782825455: ext4_orphan_get:1399: inode 15
[  219.788332][    C0] EXT4-fs (loop5): last error at time 1782825455: ext4_orphan_get:1399: inode 15
[  219.862611][ T6231] loop5: lost filesystem error report for type 5 error -117
[  219.865322][ T6231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.887897][   T28] audit: type=1400 audit(1782825455.409:883): avc:  denied  { write } for  pid=6230 comm="syz.5.608" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  220.077123][   T28] audit: type=1400 audit(1782825455.589:884): avc:  denied  { write } for  pid=6226 comm="syz.2.607" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  220.174925][ T6253] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.607: bg 0: block 234: padding at end of block bitmap is not set
[  220.190874][ T6253] EXT4-fs (loop2): Remounting filesystem read-only
[  220.233893][   T28] audit: type=1400 audit(1782825455.749:885): avc:  denied  { watch watch_reads } for  pid=6257 comm="syz.1.615" path="/proc/367" dev="proc" ino=12818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  220.400363][ T6254] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.608: bg 0: block 5: invalid block bitmap
[  220.612518][ T6254] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  220.625035][ T6254] EXT4-fs (loop5): This should not happen!! Data will be lost
[  220.625035][ T6254] 
[  220.634776][ T6254] EXT4-fs (loop5): Total free blocks count 0
[  220.640798][ T6254] EXT4-fs (loop5): Free/Dirty block details
[  220.646901][ T6254] EXT4-fs (loop5): free_blocks=0
[  220.651872][ T6254] EXT4-fs (loop5): dirty_blocks=2308
[  220.657232][ T6254] EXT4-fs (loop5): Block reservation details
[  220.663238][ T6254] EXT4-fs (loop5): i_reserved_data_blocks=2308
[  220.683288][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'.
[  220.721829][ T2324] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 256 with error 28
[  220.818271][   T28] audit: type=1400 audit(1782825456.339:886): avc:  denied  { write } for  pid=6263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.867997][   T28] audit: type=1400 audit(1782825456.389:887): avc:  denied  { write } for  pid=6274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.963101][ T4393] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  221.032613][ T6284] ipt_ECN: cannot use operation on non-tcp rule
[  221.208946][ T6291] loop1: detected capacity change from 0 to 512
[  222.261934][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'.
[  222.390967][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.415229][   T28] audit: type=1400 audit(1782825457.929:888): avc:  denied  { write } for  pid=6278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.490372][ T6312] netlink: 'syz.1.627': attribute type 2 has an invalid length.
[  222.542349][   T28] audit: type=1400 audit(1782825458.009:889): avc:  denied  { map } for  pid=6311 comm="syz.1.627" path="socket:[12048]" dev="sockfs" ino=12048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  222.606380][ T6312] 0: entered promiscuous mode
[  222.633481][ T6315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6315 comm=syz.0.628
[  222.658030][   T28] audit: type=1400 audit(1782825458.009:890): avc:  denied  { read } for  pid=6311 comm="syz.1.627" path="socket:[12048]" dev="sockfs" ino=12048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  222.691197][ T6313] loop5: detected capacity change from 0 to 8192
[  222.716394][ T6313] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.760066][   T28] audit: type=1400 audit(1782825458.109:891): avc:  denied  { write } for  pid=6316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.010244][ T6336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.635'.
[  223.030185][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.636'.
[  223.050753][ T6338] netlink: 108 bytes leftover after parsing attributes in process `syz.5.636'.
[  223.110170][ T6341] bridge2: entered promiscuous mode
[  223.117257][ T6327] loop0: detected capacity change from 0 to 512
[  223.132798][ T6341] bridge2: entered allmulticast mode
[  223.159555][ T6343] ipt_ECN: cannot use operation on non-tcp rule
[  223.167967][ T6327] msdos: Unknown parameter '‹‡eck'
[  223.387609][   T28] audit: type=1400 audit(1782825458.909:892): avc:  denied  { shutdown } for  pid=6356 comm="syz.1.640" laddr=::1 lport=255 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  223.450011][ T6361] netlink: 68 bytes leftover after parsing attributes in process `syz.2.642'.
[  223.650139][ T6369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.645'.
[  223.738742][ T6359] loop0: detected capacity change from 0 to 2048
[  223.789654][ T6376] Cannot find add_set index 0 as target
[  223.936586][ T6383] loop3: detected capacity change from 0 to 512
[  223.959480][ T6385] loop2: detected capacity change from 0 to 1024
[  223.966595][ T6385] EXT4-fs: Ignoring removed bh option
[  224.016498][ T6385] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  224.135169][ T6383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.155642][ T6359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.172096][ T6385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.185399][ T6383] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.206828][   T28] audit: type=1400 audit(1782825459.729:893): avc:  denied  { write } for  pid=6382 comm="syz.3.651" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  224.237583][ T6359] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.641: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  224.274198][ T6359] EXT4-fs (loop0): Remounting filesystem read-only
[  224.282942][ T6371] ext4: Unknown parameter ''
[  224.304737][ T6371] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.646'.
[  224.313977][ T6371] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.646'.
[  224.345022][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.044453][ T6397] FAULT_INJECTION: forcing a failure.
[  225.044453][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.076974][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT(lazy) 
[  225.077009][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.077027][ T6397] Call Trace:
[  225.077034][ T6397]  <TASK>
[  225.077043][ T6397]  __dump_stack+0x1d/0x30
[  225.077102][ T6397]  dump_stack_lvl+0x95/0xd0
[  225.077191][ T6397]  dump_stack+0x15/0x1b
[  225.077215][ T6397]  should_fail_ex+0x25e/0x270
[  225.077248][ T6397]  should_fail+0xb/0x20
[  225.077314][ T6397]  should_fail_usercopy+0x1a/0x20
[  225.077346][ T6397]  _copy_to_user+0x20/0xa0
[  225.077420][ T6397]  simple_read_from_buffer+0xb5/0x130
[  225.077453][ T6397]  proc_fail_nth_read+0x10e/0x150
[  225.077482][ T6397]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  225.077545][ T6397]  vfs_read+0x18e/0x7c0
[  225.077576][ T6397]  ? __rcu_read_unlock+0x4e/0x70
[  225.077600][ T6397]  ? __rcu_read_unlock+0x4e/0x70
[  225.077628][ T6397]  ? __fget_files+0x184/0x1c0
[  225.077736][ T6397]  ? mutex_lock+0x57/0x90
[  225.077765][ T6397]  ksys_read+0xdc/0x1a0
[  225.077833][ T6397]  __x64_sys_read+0x40/0x50
[  225.077851][ T6397]  x64_sys_call+0x2886/0x3020
[  225.077902][ T6397]  do_syscall_64+0x136/0x3c0
[  225.077942][ T6397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.077968][ T6397] RIP: 0033:0x7fbbc493d68e
[  225.077988][ T6397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  225.078012][ T6397] RSP: 002b:00007fbbc33cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  225.078063][ T6397] RAX: ffffffffffffffda RBX: 00007fbbc33cf6c0 RCX: 00007fbbc493d68e
[  225.078079][ T6397] RDX: 000000000000000f RSI: 00007fbbc33cf0a0 RDI: 0000000000000006
[  225.078096][ T6397] RBP: 00007fbbc33cf090 R08: 0000000000000000 R09: 0000000000000000
[  225.078147][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.078159][ T6397] R13: 00007fbbc4bf6038 R14: 00007fbbc4bf5fa0 R15: 00007ffd76328298
[  225.078184][ T6397]  </TASK>
[  225.353790][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  225.353809][   T28] audit: type=1400 audit(1782825460.869:895): avc:  denied  { ioctl } for  pid=6393 comm="syz.5.653" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  225.454083][   T28] audit: type=1400 audit(1782825460.919:896): avc:  denied  { ioctl } for  pid=6393 comm="syz.5.653" path="socket:[12267]" dev="sockfs" ino=12267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  225.582083][ T6403] loop0: detected capacity change from 0 to 4096
[  225.611893][ T6405] loop5: detected capacity change from 0 to 512
[  225.639972][ T6403] ext3: Unknown parameter 'fsmagic'
[  225.692084][ T6405] EXT4-fs: Ignoring removed nobh option
[  225.733240][ T6405] EXT4-fs (loop5): orphan cleanup on readonly fs
[  225.754658][ T6405] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.656: EA inode hash validation failed
[  225.773643][ T6405] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  225.815817][ T6405] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.656: corrupted inode contents
[  225.843667][ T6405] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  225.857941][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.877274][ T6405] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.656: mark_inode_dirty error
[  225.888572][ T6405] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  225.889951][ T6405] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.656: corrupted inode contents
[  225.923294][ T6405] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  225.925650][ T6405] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.656: mark_inode_dirty error
[  225.958218][    C1] EXT4-fs (loop5): error count since last fsck: 3
[  225.960531][ T6405] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  225.964710][    C1] EXT4-fs (loop5): initial error at time 1782825461: ext4_do_update_inode:5742: inode 15
[  225.964750][    C1] EXT4-fs (loop5): last error at time 1782825461: ext4_do_update_inode:5742: inode 15
[  226.002825][ T6405] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.656: mark inode dirty (error -117)
[  226.069316][ T6405] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  226.073181][ T6405] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117)
[  226.101168][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'.
[  226.123304][ T6405] EXT4-fs (loop5): 1 orphan inode deleted
[  226.163210][ T6405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  226.250101][ T6417] tmpfs: Bad value for 'mpol'
[  226.684407][ T6414] xt_CT: No such helper "snmp_trap"
[  226.996061][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.027073][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.286642][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.663'.
[  230.024462][ T6464] loop5: detected capacity change from 0 to 2048
[  230.099782][ T6464] GPT:first_usable_lbas don't match.
[  230.109334][ T6464] GPT:34 != 290
[  230.120642][ T6464] GPT: Use GNU Parted to correct GPT errors.
[  230.227247][ T6464]  loop5: p1 p2 p3
[  230.254195][ T6464] netlink: 36 bytes leftover after parsing attributes in process `syz.5.671'.
[  230.399165][ T6469] netlink: 132 bytes leftover after parsing attributes in process `syz.5.673'.
[  230.743391][ T6479] netlink: 284 bytes leftover after parsing attributes in process `syz.0.676'.
[  230.768070][ T6478] net_ratelimit: 167 callbacks suppressed
[  230.768205][ T6478] netlink: zone id is out of range
[  230.859030][ T6478] netlink: zone id is out of range
[  230.911769][ T6478] netlink: zone id is out of range
[  230.930436][ T6478] netlink: zone id is out of range
[  230.954226][ T6478] netlink: zone id is out of range
[  230.974938][ T6478] netlink: zone id is out of range
[  231.006078][ T6478] netlink: zone id is out of range
[  231.012546][ T6478] netlink: zone id is out of range
[  231.070191][ T6478] netlink: zone id is out of range
[  231.096801][ T6478] netlink: zone id is out of range
[  231.248841][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'.
[  231.287950][ T6481] loop0: detected capacity change from 0 to 512
[  231.296903][ T6481] EXT4-fs: Ignoring removed bh option
[  231.304238][ T6466] loop3: detected capacity change from 0 to 2048
[  231.935548][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.051757][ T6481] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.298496][ T6466] Alternate GPT is invalid, using primary GPT.
[  232.306413][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.329927][ T6466]  loop3: p1 p2 p3
[  232.454350][ T6494] loop2: detected capacity change from 0 to 512
[  232.504199][ T6494] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.682: corrupted inode contents
[  232.605730][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.605934][ T6494] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.682: mark_inode_dirty error
[  232.615235][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  232.615256][    C1] EXT4-fs (loop2): initial error at time 1782825468: ext4_do_update_inode:5742: inode 16
[  232.615284][    C1] EXT4-fs (loop2): last error at time 1782825468: ext4_do_update_inode:5742: inode 16
[  232.686081][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.686278][ T6494] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.682: corrupted inode contents
[  232.709185][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.709495][ T6494] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.682: mark_inode_dirty error
[  232.741456][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.741703][ T6494] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.682: corrupted inode contents
[  232.774468][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.774785][ T6494] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  232.805233][ T6494] loop2: lost filesystem error report for type 5 error -117
[  232.805444][ T6494] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.682: corrupted inode contents
[  232.847685][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.847851][ T6494] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.682: mark_inode_dirty error
[  232.890558][ T6494] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  232.890763][ T6494] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  232.931947][ T6494] loop2: lost filesystem error report for type 5 error -117
[  232.932433][ T6494] EXT4-fs (loop2): 1 truncate cleaned up
[  232.956564][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.976342][ T6494] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.010344][ T6494] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in;
[  233.010344][ T6494]    program syz.2.682 not setting count and/or reply_len properly
[  233.167004][ T6501] 8021q: adding VLAN 0 to HW filter on device macsec2
[  233.261001][ T2324] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  233.291118][ T2324] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1
[  233.320427][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.413074][ T6507] sd 0:0:1:0: device reset
[  233.422349][ T6510] xt_hashlimit: size too large, truncated to 1048576
[  233.429079][ T6510] xt_hashlimit: max too large, truncated to 1048576
[  233.535290][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'.
[  233.588641][   T28] audit: type=1400 audit(1782825469.109:897): avc:  denied  { ioctl } for  pid=6517 comm="syz.0.691" path="socket:[13502]" dev="sockfs" ino=13502 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  233.621377][ T6518] random: crng reseeded on system resumption
[  233.639361][   T28] audit: type=1400 audit(1782825469.139:898): avc:  denied  { getopt } for  pid=6517 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  233.659875][   T28] audit: type=1400 audit(1782825469.139:899): avc:  denied  { write } for  pid=6517 comm="syz.0.691" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  233.682840][   T28] audit: type=1400 audit(1782825469.139:900): avc:  denied  { open } for  pid=6517 comm="syz.0.691" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  234.061728][ T6526] loop3: detected capacity change from 0 to 128
[  234.160280][ T6526] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.297612][ T6526] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  234.484771][   T28] audit: type=1400 audit(1782825469.999:901): avc:  denied  { write } for  pid=6525 comm="syz.3.694" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  234.669365][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.755267][   T28] audit: type=1400 audit(1782825469.999:902): avc:  denied  { ioctl } for  pid=6525 comm="syz.3.694" path="/141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop3" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  235.773725][ T6549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6549 comm=syz.3.699
[  235.800759][ T6551] loop0: detected capacity change from 0 to 512
[  235.833022][ T6551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  235.875771][ T6551] EXT4-fs (loop0): 1 truncate cleaned up
[  235.882062][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.906995][   T28] audit: type=1400 audit(1782825471.429:903): avc:  denied  { ioctl } for  pid=6550 comm="syz.0.701" path="/152/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  235.933868][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.702'.
[  236.071230][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.270146][ T6559] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.703'.
[  236.334932][ T6568] loop5: detected capacity change from 0 to 512
[  236.376894][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'.
[  236.406549][ T6568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.430843][   T28] audit: type=1400 audit(1782825471.949:904): avc:  denied  { bind } for  pid=6569 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  236.481012][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.497575][   T28] audit: type=1400 audit(1782825471.969:905): avc:  denied  { setopt } for  pid=6569 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  237.326737][ T6578] bridge1: the hash_elasticity option has been deprecated and is always 16
[  237.591559][ T6591] ipt_ECN: cannot use operation on non-tcp rule
[  237.940470][ T6596] loop3: detected capacity change from 0 to 512
[  237.966732][ T6596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  238.684267][ T6594] xt_hashlimit: size too large, truncated to 1048576
[  239.046896][ T6596] EXT4-fs (loop3): 1 truncate cleaned up
[  239.063822][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'.
[  239.088554][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.187933][ T6603] loop1: detected capacity change from 0 to 8192
[  239.230804][ T6603] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  239.370112][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'.
[  239.403450][ T6613] netlink: 108 bytes leftover after parsing attributes in process `syz.0.719'.
[  239.559245][ T6617] tmpfs: Bad value for 'mpol'
[  239.591257][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  239.591275][   T28] audit: type=1400 audit(1782825475.109:907): avc:  denied  { write } for  pid=6577 comm="syz.3.711" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  240.387818][ T6623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.722'.
[  240.666958][ T6630] vlan2: entered promiscuous mode
[  240.674636][ T6630] team0: entered promiscuous mode
[  240.679769][ T6630] team_slave_0: entered promiscuous mode
[  240.685615][ T6630] team_slave_1: entered promiscuous mode
[  240.693075][ T6637] loop0: detected capacity change from 0 to 2048
[  240.711370][ T6637] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.728505][ T6637] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.749341][ T6637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.812282][ T6642] loop5: detected capacity change from 0 to 2048
[  240.842593][ T6642] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.849279][ T6642] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.977793][ T6642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.129583][   T28] audit: type=1400 audit(1782825476.599:908): avc:  denied  { write } for  pid=6636 comm="syz.0.728" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  241.544844][   T28] audit: type=1400 audit(1782825476.979:909): avc:  denied  { write } for  pid=6641 comm="syz.5.729" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  241.700499][ T6577] syz.3.711 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  241.849862][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.3.711 Not tainted syzkaller #0 PREEMPT(lazy) 
[  241.849892][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  241.849909][ T6577] Call Trace:
[  241.849918][ T6577]  <TASK>
[  241.849930][ T6577]  __dump_stack+0x1d/0x30
[  241.849957][ T6577]  dump_stack_lvl+0x95/0xd0
[  241.850020][ T6577]  dump_stack+0x15/0x1b
[  241.850086][ T6577]  dump_header+0x80/0x240
[  241.850114][ T6577]  oom_kill_process+0x295/0x350
[  241.850157][ T6577]  out_of_memory+0x981/0xbc0
[  241.850228][ T6577]  try_charge_memcg+0x621/0xa00
[  241.850330][ T6577]  charge_memcg+0x6d/0x120
[  241.850364][ T6577]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[  241.850445][ T6577]  swap_cache_alloc_folio+0x47b/0x5e0
[  241.850489][ T6577]  swap_cluster_readahead+0x2b1/0x460
[  241.850530][ T6577]  swapin_readahead+0xd8/0x8a0
[  241.850590][ T6577]  ? folio_add_file_rmap_ptes+0x1a8/0x1e0
[  241.850632][ T6577]  ? set_pte_range+0x325/0x4f0
[  241.850669][ T6577]  ? __rcu_read_unlock+0x4e/0x70
[  241.850697][ T6577]  ? swap_cache_get_folio+0x1f7/0x200
[  241.850798][ T6577]  do_swap_page+0x2a2/0x1ec0
[  241.850863][ T6577]  ? _raw_spin_unlock+0x9/0x30
[  241.850983][ T6577]  ? __css_rstat_updated+0xbb/0x280
[  241.851069][ T6577]  ? balance_dirty_pages_ratelimited_flags+0x41f/0x800
[  241.851105][ T6577]  ? __rcu_read_lock+0x36/0x50
[  241.851194][ T6577]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  241.851229][ T6577]  handle_mm_fault+0xb3c/0x2da0
[  241.851349][ T6577]  do_user_addr_fault+0x634/0x1060
[  241.851385][ T6577]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  241.851423][ T6577]  ? trace_page_fault_user+0x1f/0xa0
[  241.851492][ T6577]  exc_page_fault+0x62/0xa0
[  241.851596][ T6577]  asm_exc_page_fault+0x26/0x30
[  241.851616][ T6577] RIP: 0033:0x7f27b6991588
[  241.851704][ T6577] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00
[  241.851727][ T6577] RSP: 002b:00007ffc47459290 EFLAGS: 00010202
[  241.851748][ T6577] RAX: 0000001b32ffb000 RBX: ffffffff8154883a RCX: 0000001b32ffaff8
[  241.851763][ T6577] RDX: 0000001b32a24220 RSI: 0000000000000008 RDI: 00007f27b7865720
[  241.851829][ T6577] RBP: 00000000000000d9 R08: 00007f27b6d20000 R09: 00007f27b6d22000
[  241.851847][ T6577] R10: 000000008154883e R11: 0000000000000006 R12: 00007f27b6d36218
[  241.851865][ T6577] R13: 0000000000001f98 R14: ffffffff81548b0d R15: 00007f27b7865720
[  241.851885][ T6577]  ? css_set_move_task+0x17d/0x380
[  241.851976][ T6577]  ? cgroup_post_fork+0x3aa/0x4f0
[  241.852092][ T6577]  </TASK>
[  242.123867][ T6577] memory: usage 60920kB, limit 307200kB, failcnt 178
[  242.157313][ T6577] memory+swap: usage 63944kB, limit 9007199254740988kB, failcnt 0
[  242.182633][ T6577] kmem: usage 62944kB, limit 9007199254740988kB, failcnt 0
[  242.216108][ T6648] loop2: detected capacity change from 0 to 512
[  242.314668][ T6640] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  242.342718][ T6577] Memory cgroup stats for /syz3:
[  242.342932][ T6577] cache 528384
[  242.351294][ T6577] rss 4096
[  242.354445][ T6577] shmem 0
[  242.357454][ T6577] mapped_file 65536
[  242.361338][ T6577] dirty 0
[  242.364291][ T6577] writeback 0
[  242.367594][ T6577] workingset_refault_anon 203
[  242.372337][ T6577] workingset_refault_file 1881
[  242.377113][ T6577] swap 475136
[  242.380415][ T6577] swapcached 1323008
[  242.384331][ T6577] pgpgin 125286
[  242.387806][ T6577] pgpgout 125153
[  242.391398][ T6577] pgfault 157746
[  242.394965][ T6577] pgmajfault 71
[  242.398483][ T6577] inactive_anon 0
[  242.402226][ T6577] active_anon 16384
[  242.406110][ T6577] inactive_file 0
[  242.409803][ T6577] active_file 528384
[  242.413708][ T6577] unevictable 0
[  242.417210][ T6577] hierarchical_memory_limit 314572800
[  242.422609][ T6577] hierarchical_memsw_limit 9223372036854771712
[  242.428798][ T6577] total_cache 528384
[  242.432772][ T6577] total_rss 4096
[  242.436336][ T6577] total_shmem 0
[  242.439879][ T6577] total_mapped_file 65536
[  242.486989][ T6648] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  242.497331][ T6640] EXT4-fs (loop5): Remounting filesystem read-only
[  242.515360][ T6640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  242.535203][ T6577] total_dirty 0
[  242.538807][ T6577] total_writeback 0
[  242.548768][ T6577] total_workingset_refault_anon 203
[  242.564620][ T6577] total_workingset_refault_file 1881
[  242.653769][ T6577] total_swap 475136
[  242.659142][ T6640] EXT4-fs (loop0): Remounting filesystem read-only
[  242.665964][ T6577] total_swapcached 1323008
[  242.670564][ T6577] total_pgpgin 125286
[  242.687058][ T6577] total_pgpgout 125153
[  242.704178][ T6577] total_pgfault 157746
[  242.716803][ T6577] total_pgmajfault 71
[  242.728115][ T6577] total_inactive_anon 0
[  242.736823][ T6577] total_active_anon 16384
[  242.745508][ T6577] total_inactive_file 0
[  242.754121][ T6577] total_active_file 528384
[  242.765995][ T6577] total_unevictable 0
[  242.779282][ T6648] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  242.794951][ T6577] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.711,pid=6577,uid=0
[  242.809670][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  242.809707][    C1] EXT4-fs (loop2): initial error at time 1782825478: ext4_mb_generate_buddy:1317
[  242.809750][    C1] EXT4-fs (loop2): last error at time 1782825478: ext4_mb_generate_buddy:1317
[  242.854237][ T6648] Quota error (device loop2): write_blk: dquota write failed
[  242.883078][ T6648] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  242.913570][ T6648] Quota error (device loop2): write_blk: dquota write failed
[  242.938068][ T6648] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  242.954088][ T6577] Memory cgroup out of memory: Killed process 6577 (syz.3.711) total-vm:100584kB, anon-rss:1244kB, file-rss:26632kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  242.988565][ T6648] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.730: Failed to acquire dquot type 1
[  243.028943][ T6648] loop2: lost filesystem error report for type 5 error -28
[  243.036523][ T6648] EXT4-fs (loop2): 1 truncate cleaned up
[  243.087786][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.089002][ T6648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.133504][ T6648] EXT4-fs error (device loop2): __ext4_remount:6844: comm syz.2.730: Abort forced by user
[  243.190060][ T6648] EXT4-fs (loop2): Remounting filesystem read-only
[  243.203333][ T6660] loop0: detected capacity change from 0 to 2048
[  243.208429][ T6648] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  243.328114][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.399592][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.491996][ T6660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.570377][ T6660] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.731: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  243.628455][ T6664] loop2: detected capacity change from 0 to 4096
[  243.630819][ T6660] EXT4-fs (loop0): Remounting filesystem read-only
[  243.635242][ T6664] ext3: Unknown parameter 'fsmagic'
[  244.811444][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.362736][ T6685] loop0: detected capacity change from 0 to 2048
[  245.782127][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.899127][ T6685] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.738: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  245.956375][ T6685] EXT4-fs (loop0): Remounting filesystem read-only
[  246.074814][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.246967][   T28] audit: type=1400 audit(1782825481.769:910): avc:  denied  { setopt } for  pid=6700 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  246.308196][ T6701] vcan0 speed is unknown, defaulting to 1000
[  246.664424][ T6714] ip6gretap0: entered promiscuous mode
[  247.936991][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'.
[  248.071900][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'.
[  248.189867][   T28] audit: type=1400 audit(1782825483.709:911): avc:  denied  { lock } for  pid=6740 comm="syz.3.756" path="socket:[14688]" dev="sockfs" ino=14688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  248.277861][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.348075][ T6751] loop5: detected capacity change from 0 to 512
[  248.455848][ T6751] EXT4-fs: Mount option(s) incompatible with ext2
[  248.751965][ T6748] loop0: detected capacity change from 0 to 512
[  248.805515][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  248.816582][ T6756] loop1: detected capacity change from 0 to 512
[  248.824128][ T6748] EXT4-fs: Ignoring removed bh option
[  248.958728][ T6767] loop5: detected capacity change from 0 to 128
[  248.959703][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.977725][ T6748] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.086715][ T6767] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.132694][ T6767] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  249.255088][   T28] audit: type=1400 audit(1782825484.779:912): avc:  denied  { write } for  pid=6765 comm="syz.5.762" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  249.305881][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.418604][ T6767] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  249.464295][ T6773] loop1: detected capacity change from 0 to 512
[  249.471817][   T28] audit: type=1400 audit(1782825484.969:913): avc:  denied  { accept } for  pid=6765 comm="syz.5.762" lport=47799 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  249.559904][ T6773] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.761: corrupted inode contents
[  249.585238][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.594558][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  249.610299][    C0] EXT4-fs (loop1): initial error at time 1782825485: ext4_do_update_inode:5742: inode 16
[  249.620266][    C0] EXT4-fs (loop1): last error at time 1782825485: ext4_do_update_inode:5742: inode 16
[  249.641481][ T6779] xt_cgroup: xt_cgroup: no path or classid specified
[  249.665538][   T28] audit: type=1400 audit(1782825485.159:914): avc:  denied  { name_bind } for  pid=6769 comm="syz.0.763" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  249.756296][ T6779] hub 8-0:1.0: USB hub found
[  249.763054][ T6779] hub 8-0:1.0: 8 ports detected
[  249.841683][ T6773] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.761: mark_inode_dirty error
[  249.938436][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  249.939378][ T6773] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.761: corrupted inode contents
[  249.975290][   T28] audit: type=1400 audit(1782825485.159:915): avc:  denied  { name_connect } for  pid=6769 comm="syz.0.763" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  250.083825][ T4393] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  250.136246][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  250.136630][ T6773] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.761: mark_inode_dirty error
[  250.165787][   T28] audit: type=1400 audit(1782825485.159:916): avc:  denied  { read } for  pid=6769 comm="syz.0.763" laddr=172.20.20.187 lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  250.392816][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  250.393193][ T6773] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.761: corrupted inode contents
[  250.468792][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  250.468952][ T6773] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  250.520106][ T6773] loop1: lost filesystem error report for type 5 error -117
[  250.520300][ T6773] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.761: corrupted inode contents
[  250.629468][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  250.629629][ T6773] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.761: mark_inode_dirty error
[  250.693812][ T6785] loop5: detected capacity change from 0 to 128
[  250.735962][ T6773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  250.738941][ T6785] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  250.761094][ T6773] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  250.783200][ T6773] loop1: lost filesystem error report for type 5 error -117
[  250.786806][ T6773] EXT4-fs (loop1): 1 truncate cleaned up
[  250.804917][   T40] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  250.829001][   T40] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1
[  250.844366][ T6785] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  250.880363][ T6773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.912906][   T40] loop1: lost filesystem error report for type 5 error -117
[  250.924636][ T6773] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.992634][   T28] audit: type=1400 audit(1782825486.509:917): avc:  denied  { write } for  pid=6784 comm="syz.5.767" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  251.013235][ T6764] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in;
[  251.013235][ T6764]    program syz.1.761 not setting count and/or reply_len properly
[  251.080872][ T4393] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  251.237261][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.564342][ T6799] loop2: detected capacity change from 0 to 512
[  251.667973][ T6804] loop1: detected capacity change from 0 to 8192
[  251.708401][ T6804] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  251.724869][ T6799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  251.783917][ T6799] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.771: iget: bad i_size value: 38620345925642
[  251.799368][ T6799] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  251.799573][ T6799] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.771: couldn't read orphan inode 15 (err -117)
[  251.808843][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  251.808870][    C0] EXT4-fs (loop2): initial error at time 1782825487: ext4_orphan_get:1399: inode 15
[  251.808895][    C0] EXT4-fs (loop2): last error at time 1782825487: ext4_orphan_get:1399: inode 15
[  251.854188][ T6799] loop2: lost filesystem error report for type 5 error -117
[  251.855559][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.069273][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.076999][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.084230][   T28] audit: type=1400 audit(1782825487.599:918): avc:  denied  { write } for  pid=6793 comm="syz.2.771" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  252.361312][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.387319][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.417728][ T6798] veth0_vlan: left promiscuous mode
[  252.441359][ T6798] ipip0: left allmulticast mode
[  252.458568][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.547887][ T6817] syz2: Port: 1 Link DOWN
[  252.557160][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.612380][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.663504][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.685326][ T6854] loop1: detected capacity change from 0 to 512
[  252.701078][   T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.728604][ T6854] EXT4-fs: Ignoring removed bh option
[  252.762128][ T6854] EXT4-fs: inline encryption not supported
[  252.793113][ T6854] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  252.853358][   T28] audit: type=1400 audit(1782825488.359:919): avc:  denied  { write } for  pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.883971][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.897500][ T6854] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  252.932557][   T28] audit: type=1400 audit(1782825488.449:920): avc:  denied  { write } for  pid=6865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.954740][ T6862] loop0: detected capacity change from 0 to 256
[  252.962365][ T6862] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.962552][ T6854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.776: bg 0: block 248: padding at end of block bitmap is not set
[  252.989640][ T6854] loop1: lost filesystem error report for type 5 error -117
[  252.994540][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  253.008368][    C1] EXT4-fs (loop1): last error at time 1782825488: ext4_validate_block_bitmap:441
[  253.017846][ T6854] Quota error (device loop1): write_blk: dquota write failed
[  253.034559][ T6854] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  253.062083][ T6854] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.776: Failed to acquire dquot type 1
[  253.105633][ T6854] loop1: lost filesystem error report for type 5 error -28
[  253.111138][ T6854] EXT4-fs (loop1): 1 truncate cleaned up
[  253.161136][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  253.246982][   T28] audit: type=1400 audit(1782825488.759:921): avc:  denied  { name_bind } for  pid=6846 comm="syz.1.776" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  253.394123][   T28] audit: type=1400 audit(1782825488.909:922): avc:  denied  { write } for  pid=6867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.377616][   T28] audit: type=1400 audit(1782825489.299:923): avc:  denied  { write } for  pid=6888 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.399922][   T28] audit: type=1400 audit(1782825489.849:924): avc:  denied  { write } for  pid=6890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.435127][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  254.460719][   T28] audit: type=1400 audit(1782825489.889:925): avc:  denied  { write } for  pid=6906 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.622238][ T6914] Cannot find del_set index 65343 as target
[  254.985486][ T6923] loop2: detected capacity change from 0 to 2048
[  255.028525][ T6923] EXT4-fs: Ignoring removed mblk_io_submit option
[  255.040529][ T6924] loop3: detected capacity change from 0 to 2048
[  255.051435][ T6923] EXT4-fs: Ignoring removed mblk_io_submit option
[  255.061333][ T6924] EXT4-fs: Ignoring removed mblk_io_submit option
[  255.090502][ T6924] EXT4-fs: Ignoring removed mblk_io_submit option
[  255.098775][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.136593][ T6924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.407783][ T6934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.783'.
[  257.270521][ T6945] loop5: detected capacity change from 0 to 1764
[  257.301521][ T6688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  257.571047][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.792'.
[  258.280309][ T6688] EXT4-fs (loop2): Remounting filesystem read-only
[  258.300527][ T6688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  258.591928][ T6688] EXT4-fs (loop3): Remounting filesystem read-only
[  258.617909][ T6953] ipt_ECN: cannot use operation on non-tcp rule
[  258.629503][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.664203][ T6945] loop5: detected capacity change from 0 to 512
[  258.701863][ T6945] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  258.741429][ T6945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.795886][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.858617][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  258.858635][   T28] audit: type=1400 audit(1782825494.379:928): avc:  denied  { write } for  pid=6955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.925813][   T28] audit: type=1400 audit(1782825494.429:929): avc:  denied  { write } for  pid=6974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.981877][ T6981] netlink: 56 bytes leftover after parsing attributes in process `syz.3.797'.
[  259.008630][ T6984] tmpfs: Bad value for 'mpol'
[  260.019507][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.396907][   T28] audit: type=1400 audit(1782825495.909:930): avc:  denied  { write } for  pid=6976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  260.490231][ T7002] vlan2: entered promiscuous mode
[  260.511979][ T7002] team0: entered promiscuous mode
[  260.527651][   T28] audit: type=1400 audit(1782825496.049:931): avc:  denied  { write } for  pid=7008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  260.551483][ T7002] team_slave_0: entered promiscuous mode
[  260.565692][ T7002] team_slave_1: entered promiscuous mode
[  260.838307][ T7013] sctp: [Deprecated]: syz.0.804 (pid 7013) Use of int in max_burst socket option deprecated.
[  260.838307][ T7013] Use struct sctp_assoc_value instead
[  260.878459][   T28] audit: type=1326 audit(1782825496.399:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.0.804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc497ce59 code=0x0
[  261.010510][ T7014] loop0: detected capacity change from 0 to 1024
[  261.026731][ T7016] SELinux: syz.5.803 (7016) wrote to user. This is no longer supported.
[  261.055623][ T7014] EXT4-fs: quotafile must be on filesystem root
[  261.379092][ T7029] loop3: detected capacity change from 0 to 1024
[  261.426830][ T7029] EXT4-fs: Ignoring removed nomblk_io_submit option
[  261.450341][ T7029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  261.491745][ T7027] tmpfs: Bad value for 'mpol'
[  262.145943][ T7029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  262.154340][ T7029] System zones: 0-1, 3-36
[  262.167133][ T7032] loop1: detected capacity change from 0 to 2048
[  262.174187][ T7032] EXT4-fs: Ignoring removed mblk_io_submit option
[  262.180717][ T7032] EXT4-fs: Ignoring removed mblk_io_submit option
[  262.197936][ T7021] bond2: option ad_user_port_key: invalid value (2311)
[  262.204959][ T7021] bond2: option ad_user_port_key: allowed values 0 - 1023
[  262.214802][ T7021] bond2 (unregistering): Released all slaves
[  262.233930][ T7014] vcan0 speed is unknown, defaulting to 1000
[  262.277770][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.298219][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.383274][ T7039] geneve2: entered promiscuous mode
[  262.472331][ T7046] ipt_ECN: cannot use operation on non-tcp rule
[  262.508504][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.677389][   T28] audit: type=1400 audit(1782825498.139:933): avc:  denied  { write } for  pid=7031 comm="syz.1.808" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  262.702874][ T7054] netlink: 'syz.3.813': attribute type 10 has an invalid length.
[  262.889456][ T7058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.814'.
[  262.956643][ T7060] netlink: 'syz.3.815': attribute type 21 has an invalid length.
[  262.972007][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.987363][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.139938][   T28] audit: type=1400 audit(1782825498.559:934): avc:  denied  { name_bind } for  pid=7061 comm="syz.0.816" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  263.166532][ T7062] raw_sendmsg: syz.0.816 forgot to set AF_INET. Fix it!
[  263.175220][ T7063] loop0: detected capacity change from 0 to 764
[  263.182610][ T7063] iso9660: Unknown parameter ''
[  263.780177][ T7085] syzkaller0: entered promiscuous mode
[  263.809066][ T7085] syzkaller0: entered allmulticast mode
[  264.151478][ T7099] netlink: 'syz.0.829': attribute type 1 has an invalid length.
[  264.192365][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.203734][   T28] audit: type=1400 audit(1782825499.729:935): avc:  denied  { create } for  pid=7097 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  264.288559][   T28] audit: type=1400 audit(1782825499.749:936): avc:  denied  { write } for  pid=7097 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  264.322447][ T7099] 8021q: adding VLAN 0 to HW filter on device bond1
[  264.422135][ T7107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.831'.
[  264.435537][ T7109] ipt_ECN: cannot use operation on non-tcp rule
[  264.590232][ T7083] loop2: detected capacity change from 0 to 2048
[  264.614411][ T7113] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  264.623442][ T7113] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  264.632702][ T7113] bond2: entered allmulticast mode
[  264.882681][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'.
[  264.891992][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'.
[  265.039809][ T7122] loop1: detected capacity change from 0 to 512
[  265.453393][ T7122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.587170][ T7122] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.612005][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.628087][   T28] audit: type=1400 audit(1782825501.149:937): avc:  denied  { write } for  pid=7121 comm="syz.1.835" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  265.655086][ T7083] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.823: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  265.688630][   T28] audit: type=1400 audit(1782825501.189:938): avc:  denied  { write } for  pid=7121 comm="syz.1.835" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  265.724390][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.745142][ T7083] EXT4-fs (loop2): Remounting filesystem read-only
[  265.760131][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  265.800440][   T28] audit: type=1400 audit(1782825501.199:939): avc:  denied  { write } for  pid=7121 comm="syz.1.835" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  265.858881][   T28] audit: type=1400 audit(1782825501.199:940): avc:  denied  { unlink } for  pid=7121 comm="syz.1.835" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  265.887561][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.980008][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'.
[  265.993206][ T7141] loop1: detected capacity change from 0 to 2048
[  266.008109][ T7141] EXT4-fs: Ignoring removed mblk_io_submit option
[  266.022129][ T7141] EXT4-fs: Ignoring removed mblk_io_submit option
[  266.069349][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.317321][   T28] audit: type=1400 audit(1782825501.719:941): avc:  denied  { write } for  pid=7138 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  267.397328][   T28] audit: type=1400 audit(1782825502.819:942): avc:  denied  { write } for  pid=7140 comm="syz.1.841" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  268.485786][ T7156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.843'.
[  269.435462][ T7035] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  269.488188][ T7035] EXT4-fs (loop1): Remounting filesystem read-only
[  269.502461][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.524162][ T7158] loop2: detected capacity change from 0 to 512
[  269.644843][ T7158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.770187][ T7158] EXT4-fs (loop2): shut down requested (0)
[  269.778857][   T28] audit: type=1400 audit(1782825505.269:943): avc:  denied  { write } for  pid=7157 comm="syz.2.844" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  269.830037][   T28] audit: type=1400 audit(1782825505.339:944): avc:  denied  { read } for  pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  269.883850][   T28] audit: type=1400 audit(1782825505.339:945): avc:  denied  { search } for  pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  269.920686][ T7168] loop1: detected capacity change from 0 to 512
[  269.980066][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.990312][   T28] audit: type=1400 audit(1782825505.339:946): avc:  denied  { write search } for  pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  270.024963][ T7168] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #14: comm syz.1.847: invalid orphan symlink nlink 1
[  270.044641][ T7168] loop1: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  270.044921][ T7168] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.847: couldn't read orphan inode 14 (err -117)
[  270.066027][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  270.066055][    C0] EXT4-fs (loop1): initial error at time 1782825505: ext4_orphan_get:1399: inode 14
[  270.066094][    C0] EXT4-fs (loop1): last error at time 1782825505: ext4_orphan_get:1399: inode 14
[  270.097216][   T28] audit: type=1400 audit(1782825505.339:947): avc:  denied  { add_name } for  pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  270.118052][   T28] audit: type=1400 audit(1782825505.339:948): avc:  denied  { create } for  pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  270.138844][   T28] audit: type=1400 audit(1782825505.339:949): avc:  denied  { append open } for  pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  270.164313][   T28] audit: type=1400 audit(1782825505.339:950): avc:  denied  { getattr } for  pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  270.215263][ T7168] loop1: lost filesystem error report for type 5 error -117
[  270.244917][ T7171] xt_hashlimit: size too large, truncated to 1048576
[  270.257366][ T7168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.259997][ T7171] xt_hashlimit: max too large, truncated to 1048576
[  270.293641][ T7168] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.390829][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.434145][ T7187] loop0: detected capacity change from 0 to 2048
[  270.441912][ T7187] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.451768][ T7184] loop3: detected capacity change from 0 to 128
[  270.462242][ T7187] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.578297][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.594326][ T7184] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.612052][ T7184] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.631985][   T28] audit: type=1400 audit(1782825506.149:951): avc:  denied  { write } for  pid=7182 comm="syz.3.855" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  270.781510][ T7184] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups)
[  271.826305][   T28] audit: type=1400 audit(1782825507.259:952): avc:  denied  { write } for  pid=7183 comm="syz.0.856" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  271.859934][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  272.019568][ T7200] loop2: detected capacity change from 0 to 8192
[  273.246923][ T7214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7214 comm=syz.1.863
[  273.260758][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.579096][ T7212] loop3: detected capacity change from 0 to 128
[  275.521080][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  275.521100][   T28] audit: type=1400 audit(1782825510.409:957): avc:  denied  { write } for  pid=7232 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  275.633183][ T7212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  276.580860][ T7242] loop5: detected capacity change from 0 to 512
[  276.618130][ T7212] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.988145][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.264222][ T7246] loop0: detected capacity change from 0 to 2048
[  277.560037][ T7252] --map-set only usable from mangle table
[  277.583576][ T7246] EXT4-fs: Ignoring removed mblk_io_submit option
[  277.592619][ T7253] loop3: detected capacity change from 0 to 256
[  277.630719][ T7246] EXT4-fs: Ignoring removed mblk_io_submit option
[  277.642712][   T28] audit: type=1400 audit(1782825513.159:958): avc:  denied  { sys_module } for  pid=7251 comm="syz.1.876" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  277.749024][   T28] audit: type=1400 audit(1782825513.269:959): avc:  denied  { create } for  pid=7247 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  277.887296][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'.
[  277.930306][ T7246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.201132][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'.
[  279.037345][   T28] audit: type=1400 audit(1782825514.559:960): avc:  denied  { write } for  pid=7245 comm="syz.0.874" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  279.310159][ T7279] loop5: detected capacity change from 0 to 512
[  279.332802][ T7279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  279.361177][ T7279] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.883: iget: bad i_size value: 38620345925642
[  279.378874][ T7279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  279.379195][ T7279] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.883: couldn't read orphan inode 15 (err -117)
[  279.388484][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  279.388501][    C1] EXT4-fs (loop5): initial error at time 1782825514: ext4_orphan_get:1399: inode 15
[  279.388540][    C1] EXT4-fs (loop5): last error at time 1782825514: ext4_orphan_get:1399: inode 15
[  279.425996][ T7279] loop5: lost filesystem error report for type 5 error -117
[  279.426572][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.449541][   T28] audit: type=1400 audit(1782825514.969:961): avc:  denied  { write } for  pid=7276 comm="syz.5.883" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  279.472784][ T7279] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.883: bg 0: block 5: invalid block bitmap
[  279.488328][ T7279] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 1 with error 28
[  279.500787][   T28] audit: type=1400 audit(1782825514.989:962): avc:  denied  { setattr } for  pid=7276 comm="syz.5.883" name="net_prio.prioidx" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  279.524127][ T7279] EXT4-fs (loop5): This should not happen!! Data will be lost
[  279.524127][ T7279] 
[  279.534103][ T7279] EXT4-fs (loop5): Total free blocks count 0
[  279.540384][ T7279] EXT4-fs (loop5): Free/Dirty block details
[  279.546973][   T28] audit: type=1400 audit(1782825514.989:963): avc:  denied  { write } for  pid=7276 comm="syz.5.883" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  279.568769][ T7279] EXT4-fs (loop5): free_blocks=0
[  279.573873][ T7279] EXT4-fs (loop5): dirty_blocks=1
[  279.579302][ T7279] EXT4-fs (loop5): Block reservation details
[  279.585505][ T7279] EXT4-fs (loop5): i_reserved_data_blocks=1
[  279.635263][ T7263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  279.650078][ T7263] EXT4-fs (loop0): Remounting filesystem read-only
[  279.759592][   T28] audit: type=1400 audit(1782825515.279:964): avc:  denied  { tracepoint } for  pid=7276 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  279.971169][ T4393] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost
[  280.003504][ T7288] loop1: detected capacity change from 0 to 4096
[  280.029350][ T7288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.044690][   T28] audit: type=1400 audit(1782858289.567:965): avc:  denied  { write } for  pid=7282 comm="syz.1.884" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  280.073383][ T7285] bond2: entered promiscuous mode
[  280.078684][ T7285] 8021q: adding VLAN 0 to HW filter on device bond2
[  280.130984][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.198812][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.230421][ T7295] FAULT_INJECTION: forcing a failure.
[  280.230421][ T7295] name failslab, interval 1, probability 0, space 0, times 0
[  280.267971][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.5.887 Not tainted syzkaller #0 PREEMPT(lazy) 
[  280.267999][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  280.268077][ T7295] Call Trace:
[  280.268086][ T7295]  <TASK>
[  280.268096][ T7295]  __dump_stack+0x1d/0x30
[  280.268126][ T7295]  dump_stack_lvl+0x95/0xd0
[  280.268148][ T7295]  dump_stack+0x15/0x1b
[  280.268210][ T7295]  should_fail_ex+0x25e/0x270
[  280.268268][ T7295]  ? rtnl_newlink+0x5c/0x1400
[  280.268291][ T7295]  should_failslab+0x8c/0xb0
[  280.268316][ T7295]  __kmalloc_cache_noprof+0x7b/0x3d0
[  280.268347][ T7295]  ? rtnl_newlink+0x5c/0x1400
[  280.268371][ T7295]  ? __pfx_rtnl_newlink+0x10/0x10
[  280.268462][ T7295]  rtnl_newlink+0x5c/0x1400
[  280.268485][ T7295]  ? ktime_expiry_to_cycles+0x1f1/0x210
[  280.268515][ T7295]  ? clockevents_program_event+0x109/0x340
[  280.268549][ T7295]  ? tick_program_event+0x79/0xc0
[  280.268590][ T7295]  ? _raw_spin_unlock+0x9/0x30
[  280.268739][ T7295]  ? __hrtimer_rearm_deferred+0x571/0x650
[  280.268776][ T7295]  ? __memcg_slab_free_hook+0x10f/0x2c0
[  280.268815][ T7295]  ? __rcu_read_unlock+0x4e/0x70
[  280.268847][ T7295]  ? avc_has_perm_noaudit+0xa3/0x120
[  280.268892][ T7295]  ? cred_has_capability+0x224/0x2a0
[  280.268934][ T7295]  ? selinux_capable+0x31/0x40
[  280.268958][ T7295]  ? security_capable+0x7b/0x90
[  280.269022][ T7295]  ? ns_capable+0x80/0xb0
[  280.269062][ T7295]  ? __pfx_rtnl_newlink+0x10/0x10
[  280.269082][ T7295]  rtnetlink_rcv_msg+0x64b/0x720
[  280.269121][ T7295]  netlink_rcv_skb+0x11e/0x220
[  280.269168][ T7295]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.269209][ T7295]  rtnetlink_rcv+0x1c/0x30
[  280.269243][ T7295]  netlink_unicast+0x5a7/0x680
[  280.269288][ T7295]  netlink_sendmsg+0x5be/0x6f0
[  280.269313][ T7295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.269335][ T7295]  ____sys_sendmsg+0x532/0x580
[  280.269367][ T7295]  ___sys_sendmsg+0x195/0x1e0
[  280.269479][ T7295]  __x64_sys_sendmsg+0xd4/0x160
[  280.269549][ T7295]  x64_sys_call+0x194c/0x3020
[  280.269616][ T7295]  do_syscall_64+0x136/0x3c0
[  280.269649][ T7295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.269672][ T7295] RIP: 0033:0x7fec6c20ce59
[  280.269689][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.269756][ T7295] RSP: 002b:00007fec6ac5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.269777][ T7295] RAX: ffffffffffffffda RBX: 00007fec6c485fa0 RCX: 00007fec6c20ce59
[  280.269791][ T7295] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000003
[  280.269804][ T7295] RBP: 00007fec6ac5f090 R08: 0000000000000000 R09: 0000000000000000
[  280.269896][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.269909][ T7295] R13: 00007fec6c486038 R14: 00007fec6c485fa0 R15: 00007fffd42710e8
[  280.269929][ T7295]  </TASK>
[  280.280746][ T7296] loop2: detected capacity change from 0 to 512
[  280.579815][ T7298] loop1: detected capacity change from 0 to 512
[  280.586703][ T7298] EXT4-fs: Ignoring removed bh option
[  280.599775][ T7298] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  280.632097][ T7298] EXT4-fs (loop1): 1 truncate cleaned up
[  280.641663][ T7298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.698489][ T7301] loop5: detected capacity change from 0 to 8192
[  280.757783][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.888'.
[  280.778308][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.802734][ T7296] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  280.823358][ T7296] EXT4-fs (loop2): orphan cleanup on readonly fs
[  280.834153][ T7296] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  280.844624][ T7296] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  280.864029][ T7296] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  280.870955][ T7296] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.885: inode has both inline data and extents flags
[  280.884134][ T7296] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  280.884360][ T7296] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.885: couldn't read orphan inode 16 (err -117)
[  280.893555][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  280.893582][    C0] EXT4-fs (loop2): initial error at time 1782858290: ext4_orphan_get:1399: inode 16
[  280.893623][    C0] EXT4-fs (loop2): last error at time 1782858290: ext4_orphan_get:1399: inode 16
[  280.985005][ T7296] loop2: lost filesystem error report for type 5 error -117
[  280.987042][ T7296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  281.046822][ T7285] vcan0 speed is unknown, defaulting to 1000
[  281.053383][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.337423][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'.
[  281.477054][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.781455][ T7319] bond1: option ad_user_port_key: invalid value (2311)
[  281.788407][ T7319] bond1: option ad_user_port_key: allowed values 0 - 1023
[  281.796746][ T7319] bond1 (unregistering): Released all slaves
[  281.904040][ T7322] tmpfs: Bad value for 'mpol'
[  283.075319][ T7339] geneve2: entered promiscuous mode
[  283.082253][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.107069][ T7340] xt_hashlimit: size too large, truncated to 1048576
[  283.393739][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.605582][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.703714][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.858751][ T7331] loop5: detected capacity change from 0 to 512
[  284.728611][ T7346] loop0: detected capacity change from 0 to 2048
[  285.017845][ T7346] EXT4-fs: Ignoring removed mblk_io_submit option
[  285.729192][ T7346] EXT4-fs: Ignoring removed mblk_io_submit option
[  285.760560][ T7346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.350955][ T7331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.897: bg 0: block 393: padding at end of block bitmap is not set
[  286.386205][ T7331] loop5: lost filesystem error report for type 5 error -117
[  286.392162][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  286.405971][    C1] EXT4-fs (loop5): initial error at time 1782858296: ext4_validate_block_bitmap:441
[  286.415428][    C1] EXT4-fs (loop5): last error at time 1782858296: ext4_validate_block_bitmap:441
[  286.445692][ T7331] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  286.455522][ T7331] loop5: lost filesystem error report for type 5 error -117
[  286.459516][ T7331] EXT4-fs (loop5): 2 truncates cleaned up
[  286.483658][ T7331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.514429][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.526170][ T7363] usb usb7: usbfs: process 7363 (syz.1.905) did not claim interface 0 before use
[  286.563876][ T7363] sctp: [Deprecated]: syz.1.905 (pid 7363) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.563876][ T7363] Use struct sctp_sack_info instead
[  286.564218][   T28] audit: type=1400 audit(1782858296.423:966): avc:  denied  { getopt } for  pid=7362 comm="syz.1.905" lport=60885 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  286.935323][   T28] audit: type=1400 audit(1782858296.476:967): avc:  denied  { read } for  pid=7362 comm="syz.1.905" lport=60885 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  286.959416][   T28] audit: type=1400 audit(1782858296.518:968): avc:  denied  { write } for  pid=7345 comm="syz.0.901" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  287.893885][   T28] audit: type=1400 audit(1782858297.809:969): avc:  denied  { create } for  pid=7381 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  288.566552][ T7386] loop5: detected capacity change from 0 to 512
[  288.575895][ T7386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  288.585395][ T7356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  288.617198][   T28] audit: type=1400 audit(1782858298.534:970): avc:  denied  { write } for  pid=7381 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  288.646986][ T7386] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.911: iget: bad i_size value: 38620345925642
[  288.660345][ T7386] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.660591][ T7386] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.911: couldn't read orphan inode 15 (err -117)
[  288.669888][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  288.669928][    C0] EXT4-fs (loop5): initial error at time 1782858298: ext4_orphan_get:1399: inode 15
[  288.669979][    C0] EXT4-fs (loop5): last error at time 1782858298: ext4_orphan_get:1399: inode 15
[  288.710549][ T7386] loop5: lost filesystem error report for type 5 error -117
[  288.713406][ T7386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.832901][   T28] audit: type=1400 audit(1782858298.796:971): avc:  denied  { write } for  pid=7383 comm="syz.5.911" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  288.897323][ T4393] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.014236][   T28] audit: type=1400 audit(1782858298.975:972): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  289.586605][ T7356] EXT4-fs (loop0): Remounting filesystem read-only
[  289.614975][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.966016][ T7403] loop2: detected capacity change from 0 to 128
[  290.055013][ T7403] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  290.077248][ T7398] loop5: detected capacity change from 0 to 4096
[  290.121305][ T7398] ext3: Unknown parameter 'fsmagic'
[  290.157798][ T7408] netlink: 27 bytes leftover after parsing attributes in process `syz.0.918'.
[  290.217666][ T7403] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  290.323840][ T7419] 9p: Bad value for 'rfdno'
[  290.472197][   T28] audit: type=1400 audit(1782858300.518:973): avc:  denied  { write } for  pid=7401 comm="syz.2.917" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  290.558733][   T28] audit: type=1400 audit(1782858300.560:974): avc:  denied  { ioctl } for  pid=7424 comm="syz.1.921" path="socket:[15600]" dev="sockfs" ino=15600 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  290.694941][ T7428] loop1: detected capacity change from 0 to 512
[  290.785583][ T7429] vcan0 speed is unknown, defaulting to 1000
[  290.891026][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.314241][ T7435] loop0: detected capacity change from 0 to 8192
[  291.417825][ T7442] loop3: detected capacity change from 0 to 128
[  291.554220][ T7442] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.585852][ T7442] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  292.424422][   T28] audit: type=1400 audit(1782858302.555:975): avc:  denied  { write } for  pid=7440 comm="syz.3.926" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  292.511896][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.876292][ T7455] vcan0 speed is unknown, defaulting to 1000
[  292.932426][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'.
[  292.997638][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.931'.
[  293.287212][ T7466] loop3: detected capacity change from 0 to 2048
[  293.321295][ T7466] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.368135][ T7466] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.435243][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.475937][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  293.575985][ T7480] sit0: entered allmulticast mode
[  293.608016][ T7478] loop1: detected capacity change from 0 to 512
[  293.625917][ T7480] sit0: entered promiscuous mode
[  293.702303][ T7478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.718196][ T7478] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.731432][ T7483] loop2: detected capacity change from 0 to 2048
[  293.738386][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.744945][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.751958][ T7476] loop5: detected capacity change from 0 to 1024
[  293.848143][ T7476] netlink: 'syz.5.937': attribute type 15 has an invalid length.
[  293.867359][   T28] audit: type=1400 audit(1782858304.056:976): avc:  denied  { write } for  pid=7465 comm="syz.3.934" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  293.875646][ T7483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.947882][ T7466] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.934: bg 0: block 234: padding at end of block bitmap is not set
[  293.970331][ T7466] EXT4-fs (loop3): Remounting filesystem read-only
[  294.092630][ T7500] netlink: 76 bytes leftover after parsing attributes in process `syz.1.938'.
[  295.010417][ T7508] loop0: detected capacity change from 0 to 512
[  296.222083][   T28] audit: type=1400 audit(1782858305.526:977): avc:  denied  { write } for  pid=7481 comm="syz.2.940" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  296.766579][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.729207][ T7412] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  297.894425][ T7412] EXT4-fs (loop2): Remounting filesystem read-only
[  298.565188][ T7528] Cannot find del_set index 65343 as target
[  298.602202][ T7530] loop1: detected capacity change from 0 to 512
[  298.624226][ T7530] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  298.648253][ T7530] EXT4-fs (loop1): mount failed
[  298.655553][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'.
[  298.664986][ T7533] netlink: 108 bytes leftover after parsing attributes in process `syz.0.955'.
[  298.712535][   T28] audit: type=1400 audit(1782858309.169:978): avc:  denied  { listen } for  pid=7534 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  298.735160][ T7535] netlink: 1211 bytes leftover after parsing attributes in process `syz.0.956'.
[  298.763584][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.782638][ T7537] loop1: detected capacity change from 0 to 128
[  298.796609][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.979487][ T7545] ==================================================================
[  298.987753][ T7545] BUG: KCSAN: data-race in hrtimer_interrupt / print_tickdevice
[  298.995690][ T7545] 
[  298.998119][ T7545] write to 0xffff888237c179e0 of 8 bytes by interrupt on cpu 0:
[  299.005870][ T7545]  hrtimer_interrupt+0x6b/0x810
[  299.010908][ T7545]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  299.017074][ T7545]  sysvec_apic_timer_interrupt+0x32/0x80
[  299.022873][ T7545]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  299.029046][ T7545]  __tsan_read8+0xc6/0x190
[  299.033689][ T7545]  pie_calculate_probability+0x45/0x4c0
[  299.039432][ T7545]  fq_pie_timer+0xf6/0x1d0
[  299.044019][ T7545]  call_timer_fn+0x3b/0x240
[  299.048708][ T7545]  __run_timer_base+0x40c/0x5f0
[  299.053710][ T7545]  run_timer_softirq+0x31/0x70
[  299.058619][ T7545]  handle_softirqs+0xb9/0x280
[  299.063492][ T7545]  __irq_exit_rcu+0x42/0xd0
[  299.068145][ T7545]  sysvec_apic_timer_interrupt+0x74/0x80
[  299.073907][ T7545]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  299.080092][ T7545]  __tsan_unaligned_write8+0x134/0x180
[  299.085848][ T7545]  filemap_map_pages+0x2c1/0xef0
[  299.090988][ T7545]  handle_mm_fault+0x14c5/0x2da0
[  299.096129][ T7545]  __get_user_pages+0x129c/0x1f10
[  299.101346][ T7545]  __mm_populate+0x242/0x390
[  299.106141][ T7545]  vm_mmap_pgoff+0x23b/0x2d0
[  299.110990][ T7545]  ksys_mmap_pgoff+0xc1/0x310
[  299.115769][ T7545]  x64_sys_call+0x14df/0x3020
[  299.120625][ T7545]  do_syscall_64+0x136/0x3c0
[  299.125388][ T7545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.131431][ T7545] 
[  299.133888][ T7545] read to 0xffff888237c179e0 of 8 bytes by task 7545 on cpu 1:
[  299.141575][ T7545]  print_tickdevice+0x144/0x340
[  299.146665][ T7545]  timer_list_show+0x6c/0x170
[  299.151425][ T7545]  seq_read_iter+0x5f6/0x8f0
[  299.156226][ T7545]  proc_reg_read_iter+0x110/0x180
[  299.161447][ T7545]  copy_splice_read+0x47a/0x6b0
[  299.166415][ T7545]  splice_direct_to_actor+0x261/0x680
[  299.171835][ T7545]  do_splice_direct+0x119/0x1a0
[  299.176727][ T7545]  do_sendfile+0x37d/0x640
[  299.181200][ T7545]  __x64_sys_sendfile64+0x105/0x150
[  299.186492][ T7545]  x64_sys_call+0x2dc4/0x3020
[  299.191216][ T7545]  do_syscall_64+0x136/0x3c0
[  299.195904][ T7545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.201834][ T7545] 
[  299.204221][ T7545] value changed: 0x00000045d3291b56 -> 0x00000045d32d3a06
[  299.211362][ T7545] 
[  299.213711][ T7545] Reported by Kernel Concurrency Sanitizer on:
[  299.219916][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.2.954 Not tainted syzkaller #0 PREEMPT(lazy) 
[  299.229236][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  299.239333][ T7545] ==================================================================
[  299.721677][ T7554] vcan0 speed is unknown, defaulting to 1000