last executing test programs:

7.05254555s ago: executing program 3 (id=1207):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@empty, @empty, 0x0, "614afa85791a63abd0f9120000000000000000000000003fdc3fd440829c98ae", 0x3, 0xffffffff, 0x0, 0xf1c}, 0x3c)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0xff, 0x8, 0x4, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000020000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000240)=0x2000000000000000, 0x12)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

7.006818601s ago: executing program 3 (id=1209):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x2, 0x7ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r4, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getpeername$inet(r3, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
getpid()
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xe1, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r5, 0x1)
setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
close(0xffffffffffffffff)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002160300000000ffffffff00797a3000000000050004000100000005000100070000000508fabe05f702000051eb850011000300686173683a69702c6d610000000080000000000000000000008a4801fa2f15d47395b312801546d8658b5e240944"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

6.355512845s ago: executing program 0 (id=1214):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x16560c01)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x2001, 0x0, @loopback}, 0x1c)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
read(r1, 0x0, 0x0)
write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x0, 0x1, 0x1}}, 0x14)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
listns(&(0x7f0000000180)={0x20, 0x0, 0x4, 0x2000000}, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000)

6.090677521s ago: executing program 3 (id=1215):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$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")
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x2, 0x1ff, 0x8})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000380)={&(0x7f0000000300)=[{&(0x7f00000000c0)}, {&(0x7f0000000280)="be3a7a24bf83dfcbcecf8007640fc2f56635b968f1ead1812870f400930da4c788d3827f18dee5cdce19d441f4ced09eec706cea70afbf9f15e1c6a80edc", 0x3e}, {&(0x7f00000002c0)="abbab01cf29b5c9e21893edf5300d9a070b3f4a765d2b0976d611e66e3c3c82fd1f29ca765ab7893b6ff5f2f40a37dc056737f00c5", 0x35}], 0x3, 0x1, 0x0, 0xfffffffffffffffe, 0x6eaafaf3, 0x10000, 0x1, 0x80000001})

5.420677245s ago: executing program 3 (id=1218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001300010029bd7000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="17310000000400fffff1ff"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0xfff, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x403, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0xb, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x8, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x8, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0x0, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x2, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x8100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x6, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x6, 0x100, 0x7, 0x7a, 0x3, 0x8, 0x9, 0x2, 0x6, 0x1000, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x7fff, 0x2, 0x17, 0x88, 0x8, 0x7fff, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0xfffffffe, 0x4e30, 0x10001, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x5, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xd, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33b, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x5, 0x6, 0x9, 0x233, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x400006, 0x2, 0x2, 0x2, 0x1, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x11, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

3.466927916s ago: executing program 0 (id=1229):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r1=>0x0, 0x7e12f76a}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={<r2=>r1, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x2, 0xb, 0x6, 0x4}, &(0x7f0000000140)=0x98) (async, rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xe, 0x7, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x4, 0x4, 0x2}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async, rerun: 32)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x12200, 0x0) (async)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000580)={0x1000}, 0x4) (async)
r6 = memfd_secret(0x80000)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000005c0)={<r7=>r4, 0x7, 0x1, 0x1})
bind$unix(r7, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', <r8=>0x0, 0x29, 0x0, 0xff, 0x0, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x700, 0x5, 0x4}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r6, r8, 0x25, 0x9, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f0000000840)=[&(0x7f0000000740)='/dev/nvram\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='$}{-\\#\xed[[+{)[(\x00'], 0x0, 0x8}}, 0x30)
openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x502, 0x0) (async)
lremovexattr(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@random={'user.', '\x00'}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000980)={'syztnl2\x00', <r9=>r8, 0x20, 0x2e, 0x2, 0x4, {{0x7, 0x4, 0x1, 0x3a, 0x1c, 0x67, 0x0, 0x75, 0x29, 0x0, @multicast2, @private=0x6, {[@ssrr={0x89, 0x7, 0xc0, [@rand_addr=0x64010102]}]}}}}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x0, 0x4, 0x1, 0xa393, 0xa2, r7, 0xfffffffa, '\x00', r9, r6, 0x1, 0x3, 0x2}, 0x50) (async)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002040)=<r11=>0x0, &(0x7f0000002080)=0x4)
sendmmsg$inet6(r7, &(0x7f0000002240)=[{{&(0x7f0000000a80)={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)="1ab553842cd25b6d48e8b84838f37fa901effb8d160090615089cfd63784ada40d2cca6a132073733dac1008df3432780431137a534895d54b7eaea46e2920a5dc686811386af0a7", 0x48}, {&(0x7f0000000b40)="24d49647e238012d26f86274dfa29e056e66fe84c062e46a85508f211ec87f34de89362b60410955565f1938772c905de8303b297fdb6219a253ab99194358efe704e3916204fd8db9ad85016cc952ea3c7d2aa121f0a9b7bb194c3d65a2fe66f226d7f652d6b34d92ca100418ee1ee9bf79fc294acf07760be6a19d124bc3ece18cc9e6942c41684efcf587fd7a7e5e247fe15de967ea1c07fae5008b1391c21545fd135e43cd8ad985b306bfbc68ea87b529cd910019802843b4", 0xbb}, {&(0x7f0000000c00)="8a142ea39fd0a1d197041ee5248cca165183af286245b69fd5678d39c11db32629981101cdecd88e3155cbc890bd7bd8a34fc42c1256f122e1720f1098285ce7a08dffe02389ab9d02b44395e9bde4f69b719a7041a18739689a32b7811eeb16654e94d098c99c381b1c1b7e318798391105d244cdf5b1afcdb02dbb1703919c2c144990c7faec45ec703559e96bc3bfd620d3299b5c122d7f1e41ed99f5a067447ff70bc8f2f36c8ca66faaf186ae5b0acb40aad441da22ef2632c24767418d804a6d8e17f28dc9b4ea94eb865945d55ab1390c8b35c22c0b61e048b20e859acd9d908996be83d2678c8251234878ec9968f3eaec6106fd06dfd0857a", 0xfd}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="18c6fb08741117af5aaba8530ca3c43b40ea3cc605651db0f5836bcdb4ad1fa9f7715754a36bfdc545255ff1c28891e89ef0bf5c113ed04a12d182ae80a4a95dd75853973bee6e268ea0474eaddc7ddedaf79bcdc1b13a88c87f5c0f0fab3280da02baad01bf448cb78ccae9a1f5ab7b55943b4ebfcbe6d78985c77d49d107c42efe2f86c1", 0x85}, {&(0x7f0000001dc0)="21a293923db5d8dc62856c95830530e86409044d0c1cba6ba5b8ccfe08444e42380651cc27d493217b96fb7b9ac773555dccd48aa4605bd4111c7060acd4552eb85f2aff48e6a762f567be6849077dee73ee68c4adef4acbc94834ec75b16d23fb6278e73014faf276ba90fb0627782edb2d4de6dbed1343f8e7cbc54186d425b1875d6d85cd1954ab2427dbc61bb48caa93004e9ef1dd053c7a6ee08bd38ab14ffe6606238f1a3739e1850137f27cfb7d4033a5ec4cbfe320359ac47eff57684c32dc70206a5f3a1b52c20409a6090646a4164788f10fe4a779083a", 0xdc}, {&(0x7f0000001ec0)="6115597db4178f4a4b520fe1db2f9bedc8840cef51acf954a6b21d65ee3f596e099e6110eec66148aecfc3a286f3ed1f3e19200ed97da13aeea21ce057b4279ddac0c6f1cef24f2452b454fdbb28dcd818d46703c22b150aedad492613f27c8040a8d4ea12c338b5c26cbedd28f92c5821b23ed656a03a4a58b06ec763936144b14bf6384c2b40c74e7e83c5b68b8b599ea4e92923ed7bfe05843d9888bb0d04d7176c4887673e79401e16f9efe845fd36fce1e1301c73b1ae1d3e915a7dd5594d368338", 0xc4}], 0x7, &(0x7f00000020c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}, @flowinfo={{0x14}}, @dstopts={{0xb0, 0x29, 0x37, {0x33, 0x12, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x401}, @ra={0x5, 0x2, 0x2}, @generic={0x5, 0x77, "01165a3616205663b2eff723eb4d2d4fcee43f0e9f34e6b9e580263161373942bdaa6384472c6033ede3feb2d93ee1f397727a772c10a381da200f909370be2007235bde746213adde606fbbb5fa8015e53eeaa109efb0665a1cd5017925d0ff556e01fe7b6c688fa59e51a5b8d6906082e997e6ded854"}, @pad1]}}}, @dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@ra]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x8d36}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r11}}}], 0x170}}], 0x1, 0x4000) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000002440)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x10c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7fffffffffffffff}, {0xc, 0x90, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x400800d) (async, rerun: 64)
add_key$keyring(&(0x7f0000002480), &(0x7f00000024c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r3)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000002740)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002700)={&(0x7f0000002580)={0x164, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) (async)
r13 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r13, &(0x7f0000002a40)={&(0x7f0000002780)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/53, 0x35}, {&(0x7f0000002900)=""/193, 0xc1}], 0x3}, 0x12140) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002a80)=0x2) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002ac0)={r2, 0x2, 0x2, [0x2, 0x8]}, &(0x7f0000002b00)=0xc)
r14 = openat$cgroup_procs(r4, &(0x7f0000002b40)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32)
fcntl$getownex(r10, 0x10, &(0x7f0000002b80)={0x0, <r15=>0x0}) (rerun: 32)
write$cgroup_pid(r14, &(0x7f0000002bc0)=r15, 0x12)

3.446383057s ago: executing program 3 (id=1230):
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f00000000c0))

3.415527308s ago: executing program 0 (id=1231):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x16560c01)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x2001, 0x0, @loopback}, 0x1c)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
read(r1, 0x0, 0x0)
write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x0, 0x1, 0x1}}, 0x14)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
listns(&(0x7f0000000180)={0x20, 0x0, 0x4, 0x2000000}, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000)

3.414594658s ago: executing program 3 (id=1232):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
connect$qrtr(r2, 0x0, 0x0)
syz_clone(0x44063100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ff9000/0x5000)=nil, &(0x7f00005b1000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00004b7000/0x1000)=nil, &(0x7f00006c8000/0x2000)=nil, &(0x7f0000655000/0x4000)=nil, &(0x7f00004a5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f7c000/0x1000)=nil, &(0x7f0000e56000/0x4000)=nil, &(0x7f0000580000/0x1000)=nil, &(0x7f0000000300)="4c3c8fe1a75617b4b0625d66bee6669af778acadbf61034a83b6d451d3a38b2e5fa655eb8bd59aeb8cb2b211afdd7121114d2df2b9e5c1471f89062d255c9b08dea6032a046ce6ea2a40a82465ed5481a350b384094c49d5cdf1d0fe4ae91df1420d2bb5c8f5085caa96dfe05f7470e8b3be319abcae63fab134a2363dc289ddd7c7f2c4584dfb7eb70bb4d19ba27ce4452ba09c1d9dcb8a77d80fe59e0292f4449bc56a4e187e05100a085615a452a31cdb67a49383b5bc0d93df7a7b243da818119c4d1bb9fc3415c3ec65d09b8af53c2670bf6d6a6655b8b84c2e4e88d556d0a70c6ac925170c8188ff93adde2ab5c6f02176", 0xf4}, 0x68)
socket$xdp(0x2c, 0x3, 0x0)

2.487966127s ago: executing program 4 (id=1239):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x30, 0x48, 0x201, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1e422676b95b5a3b, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2c}, 0x48, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
shutdown(r4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1)
write$char_usb(r6, &(0x7f00000001c0)='d', 0x1)
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000140)=""/104)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)

1.86473695s ago: executing program 4 (id=1241):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x12, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe4c, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)

1.391962281s ago: executing program 1 (id=1247):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc)

1.234046664s ago: executing program 0 (id=1248):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@errors_remount}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@datasec={0xd, 0x5, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x9}, {0x2, 0x9, 0x1}, {0x3, 0x9, 0x4}, {0x5, 0x0, 0x3}, {0x3, 0x8, 0xff}], "bb66"}, @datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x40, 0x2}, {0x5, 0x400, 0x5}], '\x00\x00'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0xd, 0x5}]}]}, {0x0, [0x5f]}}, 0x0, 0xbf, 0x0, 0x0, 0x11c0}, 0x28)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
io_setup(0x3, &(0x7f0000008240))
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
mount$nfs(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000000)={[{'\x02\x00\x00\x00)%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x02\x00\x00\x00)%'}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, r2}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102f)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x200488c0)
socket$inet6(0xa, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4)
sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0)
recvfrom$inet6(r6, 0x0, 0x0, 0x2023, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc809)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x10)
pipe2$9p(&(0x7f00000001c0), 0x80800)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xc0a419, 0x0)

1.006468519s ago: executing program 2 (id=1250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x20040084)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

993.241749ms ago: executing program 4 (id=1251):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x1000000, @mcast1, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80000001}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x46, "4b721b782a17bf50a642712c19040000000000000096a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8ac2e3bdbb1f53ff2cd3ef11583d0f34deee"}})
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r9 = fcntl$dupfd(r7, 0x406, r7)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4105, 0x1009})
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0xffffffffffffff34, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f0000000100)='\x00', 0x0}, 0x48)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f00000000c0)=0x2400, 0x4)
quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0)

960.86535ms ago: executing program 0 (id=1252):
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000200000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006010000000044000500ff020000000000000000000000000001000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_bp={&(0x7f0000000340), 0xa}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24008040)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f00000004c0)="149ee6583c756f63aa25a82eb751b1e58d2ec5b39e107c2b59f0108441e13231f993c6a019ab171c79434ca43b5a5733b0ee673eba99d37036780dc439bd65e250b7ae6062ed3484cf023733dd66503b81dd5093f7a267382a54fe47f18d34ebd4f44fe35941efe412369cf41130ceed45b16f601b3a157549a02b84754914cd81ef05e9fa2eccc3436e60674e7eedcdb5efd49e0e68f5"}}, &(0x7f0000000300))
r3 = socket$inet6(0xa, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet6(r3, 0x0, 0x0, 0x2000c800, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x4, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f00000030c0)=[{{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f0000000880)=""/49, 0x31}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/59, 0x3b}, {&(0x7f0000000980)=""/192, 0xc0}, {&(0x7f0000000a40)=""/135, 0x87}, {&(0x7f0000000b00)=""/18, 0x12}], 0x8, &(0x7f0000000bc0)=""/207, 0xcf}, 0x1}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/93, 0x5d}], 0x1, &(0x7f0000000d80)=""/59, 0x3b}, 0x9}, {{&(0x7f0000000dc0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000e40)=""/238, 0xee}, {&(0x7f0000000f40)=""/183, 0xb7}, {&(0x7f0000001000)=""/242, 0xf2}, {&(0x7f0000001100)=""/88, 0x58}, {&(0x7f0000001180)=""/224, 0xe0}], 0x5, &(0x7f00000013c0)=""/221, 0xdd}, 0x401}, {{&(0x7f00000014c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001540)=""/28, 0x1c}, {&(0x7f0000001580)=""/123, 0x7b}, {&(0x7f0000001600)=""/148, 0x94}, {&(0x7f00000016c0)=""/35, 0x23}, {&(0x7f0000001700)=""/240, 0xf0}, {&(0x7f00000018c0)=""/187, 0xbb}], 0x6, &(0x7f0000001a00)=""/247, 0xf7}, 0x3c}, {{&(0x7f0000001b00)=@nfc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)=""/231, 0xe7}], 0x1, &(0x7f0000001cc0)=""/251, 0xfb}, 0x80000000}, {{&(0x7f0000001dc0)=@can, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001e40)=""/135, 0x87}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x2, &(0x7f0000002fc0)=""/226, 0xe2}}], 0x6, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8, "4fa44f", "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"}}, 0x110)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000011000080001000000000000", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6059c3, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

933.26111ms ago: executing program 2 (id=1253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010e8000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

804.459133ms ago: executing program 2 (id=1254):
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00')
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x49)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
unlink(&(0x7f00000001c0)='./file0\x00')
setxattr$security_selinux(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x2)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000580)=ANY=[], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x1041, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x75c8, &(0x7f00000004c0)={0x0, 0xa52e, 0x4000, 0x3, 0xa5, 0x0, r1})
r5 = socket(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466382c68696465009e2d2ba14c07726a241ce3757466382c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d6170303030303030303030013030303033372c756e686964652c756e686964652c6f76657272696465726f636b7005000000000000006f66662c6d61703d6e6f726d00"/133, @ANYRESHEX=r5, @ANYRES8=r0, @ANYRES8=r2], 0x3, 0x6b5, &(0x7f0000000840)="$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")
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
name_to_handle_at(r6, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000008200000000000000004040007425d41a29f4f903fdff0200000000ab05000000"], &(0x7f0000000140), 0x200)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe2$9p(&(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {<r8=>r7}}, './file0\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))

698.577595ms ago: executing program 4 (id=1255):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x9}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000440))
rename(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020400)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000600)={0x4, 0xef4d, 0x4, 0x1})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000001f0000626f6e640000000014000280050015040000002005000000000500cc8238e6c818"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

555.173468ms ago: executing program 2 (id=1256):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1808042, &(0x7f0000000040)=ANY=[], 0x0, 0x2db, &(0x7f0000000440)="$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")
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f00000000c0)="ff0204a400ffffffffffffe4ff0100ec2d94af0000940000", 0x18)

446.590251ms ago: executing program 1 (id=1257):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") (fail_nth: 8)

291.244004ms ago: executing program 1 (id=1258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0xef, r5, {0xe, 0xfff2}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800)

281.210584ms ago: executing program 2 (id=1259):
r0 = syz_open_dev$usbfs(0x0, 0xffffffffffffffff, 0x1781)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x1c, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0})

157.184747ms ago: executing program 2 (id=1260):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

148.373427ms ago: executing program 1 (id=1261):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r0, &(0x7f0000000040)=ANY=[], 0x2a)

108.534488ms ago: executing program 1 (id=1262):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000002c0))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x7512, 0xfffa, 0x8201, 0x1, 0x5, "ab0c113f55008b37"})
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="01000400aaaaaaaaaabb30f18c830c48e3880000000011cbff0300ff45fc55d5e45e87e29906ffb90ec4ec32b6c568869143ab74c2817601ce5a60b30be8c530c74bfcc632d158b7445cc45cdc38c8a9c400ce8b0193ea6d1fd6680a1a64d05c6ec6edf0378838c59bd6ed7e74969a0bf7debba5f54f24174b5132939d8f6ec251d6f83116b8f3ac9f06c64b676f2ee476cbc5bd3dfccd3b1d336160b3d5747e0d1acdac282d3d58e3e859a9bab9c751766b4a24c2a1488fcd93d1eb76159160881268ae00"/208])
connect$llc(0xffffffffffffffff, &(0x7f0000000780)={0x1a, 0x310, 0x7f, 0x4, 0x7, 0x4, @broadcast}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x73a0, 0x10001, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x2)

84.945648ms ago: executing program 0 (id=1263):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x20040084)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

36.697899ms ago: executing program 4 (id=1264):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000)

378.73µs ago: executing program 1 (id=1265):
socket$kcm(0x2, 0x0, 0x106)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xcc, r1, 0x204, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x81)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

0s ago: executing program 4 (id=1266):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd30, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x8000000000000001, 0x759480)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"/12, @ANYBLOB="fa"], 0x20)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2a064110d47ba592f49585d4657820d29a01b283dd62ac0e105d908bfa792a1a3b76ef3a06fb882d36615434d2c77d9d", @ANYRES64=r2, @ANYRESOCT=r2, @ANYBLOB="89809b9f672163b77cb6f3cc5e5ce0d414482288", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESOCT=r2], 0x2a)

kernel console output (not intermixed with test programs):

id=4723 comm="syz.4.317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[   76.774118][ T4745] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   76.786766][ T4745] EXT4-fs (loop4): This should not happen!! Data will be lost
[   76.786766][ T4745] 
[   76.796616][ T4745] EXT4-fs (loop4): Total free blocks count 0
[   76.814925][   T28] audit: type=1400 audit(1783170169.896:944): avc:  denied  { write } for  pid=4723 comm="syz.4.317" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.837197][ T4745] EXT4-fs (loop4): Free/Dirty block details
[   76.843419][ T4745] EXT4-fs (loop4): free_blocks=0
[   76.847133][ T4751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4751 comm=syz.0.323
[   76.848394][ T4745] EXT4-fs (loop4): dirty_blocks=2900
[   76.848412][ T4745] EXT4-fs (loop4): Block reservation details
[   76.872181][ T4745] EXT4-fs (loop4): i_reserved_data_blocks=2900
[   76.886670][ T4755] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   76.892119][  T327] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 844 with error 28
[   77.005684][ T4748] netlink: 'syz.3.322': attribute type 58 has an invalid length.
[   77.036745][ T4748] syzkaller1: entered promiscuous mode
[   77.050238][ T4748] syzkaller1: entered allmulticast mode
[   77.098535][ T4763] loop0: detected capacity change from 0 to 512
[   77.105823][ T4763] EXT4-fs: Ignoring removed nobh option
[   77.113749][ T4763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   77.130099][ T4763] EXT4-fs (loop0): 1 truncate cleaned up
[   77.137090][ T4763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.190016][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.248245][ T4771] loop3: detected capacity change from 0 to 512
[   77.265770][ T4771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.274522][ T4773] netlink: 'syz.0.330': attribute type 5 has an invalid length.
[   77.295934][ T4771] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.329: iget: bad i_size value: 38620345925642
[   77.298869][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[   77.323005][ T4771] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   77.323194][ T4771] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.329: couldn't read orphan inode 15 (err -117)
[   77.332423][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   77.332447][    C1] EXT4-fs (loop3): initial error at time 1783170170: ext4_orphan_get:1399: inode 15
[   77.332482][    C1] EXT4-fs (loop3): last error at time 1783170170: ext4_orphan_get:1399: inode 15
[   77.389826][ T4773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4773 comm=syz.0.330
[   77.412341][ T4771] loop3: lost filesystem error report for type 5 error -117
[   77.412927][ T4771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.573509][ T4769] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.329: bg 0: block 5: invalid block bitmap
[   77.602825][ T4769] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 520 with error 28
[   77.628914][ T4769] EXT4-fs (loop3): This should not happen!! Data will be lost
[   77.628914][ T4769] 
[   77.649066][ T4769] EXT4-fs (loop3): Total free blocks count 0
[   77.674616][ T4769] EXT4-fs (loop3): Free/Dirty block details
[   77.694102][ T4769] EXT4-fs (loop3): free_blocks=0
[   77.707372][ T4769] EXT4-fs (loop3): dirty_blocks=524
[   77.732935][ T4769] EXT4-fs (loop3): Block reservation details
[   77.753661][ T4769] EXT4-fs (loop3): i_reserved_data_blocks=524
[   77.796450][ T4771] EXT4-fs (loop3): shut down requested (0)
[   78.684847][ T4817] loop2: detected capacity change from 0 to 512
[   78.699780][ T4817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.710755][ T4817] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.341: iget: bad i_size value: 38620345925642
[   78.724333][ T4817] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   78.724682][ T4817] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.341: couldn't read orphan inode 15 (err -117)
[   78.733974][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   78.734007][    C0] EXT4-fs (loop2): initial error at time 1783170172: ext4_orphan_get:1399: inode 15
[   78.734121][    C0] EXT4-fs (loop2): last error at time 1783170172: ext4_orphan_get:1399: inode 15
[   78.771481][ T4817] loop2: lost filesystem error report for type 5 error -117
[   78.773890][ T4817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.844758][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'.
[   78.945269][ T4833] loop3: detected capacity change from 0 to 2048
[   78.986416][ T4817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.341: bg 0: block 5: invalid block bitmap
[   79.020317][ T4817] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 768 with error 28
[   79.049481][ T4817] EXT4-fs (loop2): This should not happen!! Data will be lost
[   79.049481][ T4817] 
[   79.065274][ T4840] vxcan1: entered promiscuous mode
[   79.074135][ T4817] EXT4-fs (loop2): Total free blocks count 0
[   79.080358][ T4817] EXT4-fs (loop2): Free/Dirty block details
[   79.089162][ T4817] EXT4-fs (loop2): free_blocks=0
[   79.094610][ T4817] EXT4-fs (loop2): dirty_blocks=772
[   79.100088][ T4817] EXT4-fs (loop2): Block reservation details
[   79.106734][ T4817] EXT4-fs (loop2): i_reserved_data_blocks=772
[   79.153488][ T4817] EXT4-fs (loop2): shut down requested (0)
[   79.276377][ T4856] tipc: Started in network mode
[   79.281316][ T4856] tipc: Node identity , cluster identity 4711
[   79.287380][ T4856] tipc: Failed to set node id, please configure manually
[   79.294477][ T4856] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   79.878504][ T4868] bridge0: port 4(gretap0) entered blocking state
[   79.885879][ T4868] bridge0: port 4(gretap0) entered disabled state
[   79.894695][ T4868] gretap0: entered allmulticast mode
[   79.908708][ T4868] gretap0: entered promiscuous mode
[   79.931551][ T4868] bridge0: port 4(gretap0) entered blocking state
[   79.938759][ T4868] bridge0: port 4(gretap0) entered forwarding state
[   79.974827][ T4870] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   80.023502][ T4887] loop2: detected capacity change from 0 to 128
[   80.140939][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.149500][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.160146][ T4895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'.
[   80.169217][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'.
[   80.217953][ T4897] loop4: detected capacity change from 0 to 512
[   80.237097][ T4897] EXT4-fs: Ignoring removed nobh option
[   80.243279][ T4897] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   80.269822][ T4897] EXT4-fs (loop4): 1 truncate cleaned up
[   80.276217][ T4897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.321293][ T4902] loop3: detected capacity change from 0 to 512
[   80.330292][ T4902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   80.348153][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.364116][ T4902] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.365: iget: bad i_size value: 38620345925642
[   80.444353][ T4910] __vm_enough_memory: pid: 4910, comm: syz.2.363, bytes: 4503599627366400 not enough memory for the allocation
[   80.522577][ T4902] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.523687][ T4902] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.365: couldn't read orphan inode 15 (err -117)
[   80.533072][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   80.533136][    C1] EXT4-fs (loop3): initial error at time 1783170173: ext4_orphan_get:1399: inode 15
[   80.533200][    C1] EXT4-fs (loop3): last error at time 1783170173: ext4_orphan_get:1399: inode 15
[   80.575844][ T4912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.368'.
[   80.849561][ T4902] loop3: lost filesystem error report for type 5 error -117
[   80.854249][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.293951][   T28] kauditd_printk_skb: 459 callbacks suppressed
[   81.293967][   T28] audit: type=1326 audit(1783170174.386:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[   81.335036][ T4916] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.365: bg 0: block 5: invalid block bitmap
[   82.310549][   T28] audit: type=1326 audit(1783170174.386:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcee55fdbc2 code=0x7ffc0000
[   82.339650][ T4916] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1244 with error 28
[   82.362137][   T28] audit: type=1326 audit(1783170174.386:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcee55fdc57 code=0x7ffc0000
[   82.387973][ T4916] EXT4-fs (loop3): This should not happen!! Data will be lost
[   82.387973][ T4916] 
[   82.402544][   T28] audit: type=1326 audit(1783170174.386:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcee55bab51 code=0x7ffc0000
[   82.482644][ T4916] EXT4-fs (loop3): Total free blocks count 0
[   82.511026][ T4916] EXT4-fs (loop3): Free/Dirty block details
[   82.518626][   T28] audit: type=1326 audit(1783170174.386:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcee55fec49 code=0x7ffc0000
[   82.527947][ T4916] EXT4-fs (loop3): free_blocks=0
[   82.545914][   T28] audit: type=1326 audit(1783170174.386:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcee55babbb code=0x7ffc0000
[   82.551792][ T4916] EXT4-fs (loop3): dirty_blocks=1248
[   82.578329][   T28] audit: type=1326 audit(1783170174.386:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[   82.606464][ T4916] EXT4-fs (loop3): Block reservation details
[   82.612899][ T4916] EXT4-fs (loop3): i_reserved_data_blocks=1248
[   82.619485][   T28] audit: type=1326 audit(1783170174.386:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[   82.654388][   T28] audit: type=1326 audit(1783170174.386:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fcee55ba2ac code=0x7ffc0000
[   82.680283][   T28] audit: type=1326 audit(1783170174.386:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcee55ba30e code=0x7ffc0000
[   82.713236][ T4902] EXT4-fs (loop3): shut down requested (0)
[   82.732657][ T4938] netlink: 'syz.1.375': attribute type 5 has an invalid length.
[   82.740643][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'.
[   82.751984][ T4938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4938 comm=syz.1.375
[   82.949736][ T4943] loop4: detected capacity change from 0 to 164
[   82.968756][ T4943] rock: directory entry would overflow storage
[   82.974974][ T4943] rock: sig=0x5252, size=5, remaining=3
[   83.509814][ T4950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.378'.
[   83.572620][ T4950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48416 sclass=netlink_route_socket pid=4950 comm=syz.2.378
[   83.793614][ T4954] loop0: detected capacity change from 0 to 512
[   83.810124][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[   83.860191][ T4954] EXT4-fs: Ignoring removed nobh option
[   83.907674][ T4954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   83.918887][ T4950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'.
[   83.941360][ T4950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'.
[   83.982425][ T4954] EXT4-fs (loop0): 1 truncate cleaned up
[   83.998821][ T4954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.076382][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.106891][ T4971] netlink: 'syz.0.384': attribute type 5 has an invalid length.
[   84.115043][ T4971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'.
[   84.126871][ T4971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4971 comm=syz.0.384
[   84.162145][ T4974] loop0: detected capacity change from 0 to 512
[   84.181177][ T4974] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   87.351389][ T4998] netlink: 'syz.0.396': attribute type 5 has an invalid length.
[   87.363396][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'.
[   87.374177][ T4998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4998 comm=syz.0.396
[   87.387549][ T5002] loop2: detected capacity change from 0 to 512
[   87.404956][ T5002] EXT4-fs: Ignoring removed nobh option
[   87.420084][ T5002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.560013][ T5002] EXT4-fs (loop2): 1 truncate cleaned up
[   87.570061][ T5002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.482926][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.944460][ T5029] loop0: detected capacity change from 0 to 512
[   90.228619][ T5029] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   90.411974][ T5022] loop2: detected capacity change from 0 to 1024
[   90.484280][ T5022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   90.508857][ T5022] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   90.613951][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   90.614225][ T5047] loop4: detected capacity change from 0 to 512
[   90.678702][ T5047] EXT4-fs: Ignoring removed nobh option
[   90.690411][ T5049] loop2: detected capacity change from 0 to 1024
[   90.702762][ T5049] EXT4-fs: Ignoring removed i_version option
[   90.724741][ T5047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   90.745067][ T5049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.760503][ T5049] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.769857][ T5043] FAULT_INJECTION: forcing a failure.
[   90.769857][ T5043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.774223][ T5054] vlan2: entered promiscuous mode
[   90.783068][ T5043] CPU: 1 UID: 0 PID: 5043 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(lazy) 
[   90.783176][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   90.783190][ T5043] Call Trace:
[   90.783197][ T5043]  <TASK>
[   90.783206][ T5043]  __dump_stack+0x1d/0x30
[   90.783232][ T5043]  dump_stack_lvl+0x95/0xd0
[   90.783255][ T5043]  dump_stack+0x15/0x1b
[   90.783321][ T5043]  should_fail_ex+0x25e/0x270
[   90.783352][ T5043]  should_fail+0xb/0x20
[   90.783379][ T5043]  should_fail_usercopy+0x1a/0x20
[   90.783410][ T5043]  _copy_to_user+0x20/0xa0
[   90.783507][ T5043]  simple_read_from_buffer+0xb5/0x130
[   90.783535][ T5043]  proc_fail_nth_read+0x10e/0x150
[   90.783560][ T5043]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   90.783591][ T5043]  vfs_read+0x18e/0x7c0
[   90.783609][ T5043]  ? __rcu_read_unlock+0x4e/0x70
[   90.783636][ T5043]  ? __fget_files+0x184/0x1c0
[   90.783662][ T5043]  ? _raw_spin_lock+0x52/0xa0
[   90.783694][ T5043]  ? mutex_lock+0x57/0x90
[   90.783721][ T5043]  ksys_read+0xdc/0x1a0
[   90.783745][ T5043]  __x64_sys_read+0x40/0x50
[   90.783765][ T5043]  x64_sys_call+0x2886/0x3020
[   90.783796][ T5043]  do_syscall_64+0x136/0x3c0
[   90.783831][ T5043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.783855][ T5043] RIP: 0033:0x7f2b840ce68e
[   90.783875][ T5043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   90.783895][ T5043] RSP: 002b:00007f2b82b66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   90.783917][ T5043] RAX: ffffffffffffffda RBX: 00007f2b82b676c0 RCX: 00007f2b840ce68e
[   90.783932][ T5043] RDX: 000000000000000f RSI: 00007f2b82b670a0 RDI: 0000000000000003
[   90.783995][ T5043] RBP: 00007f2b82b67090 R08: 0000000000000000 R09: 0000000000000000
[   90.784009][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.784023][ T5043] R13: 00007f2b84396038 R14: 00007f2b84395fa0 R15: 00007fff844ba428
[   90.784043][ T5043]  </TASK>
[   90.917177][ T5047] EXT4-fs (loop4): 1 truncate cleaned up
[   90.990779][ T5047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.042840][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.091341][ T5058] vlan2: entered promiscuous mode
[   91.102009][ T5058] macvlan0: entered promiscuous mode
[   91.125718][ T5065] loop3: detected capacity change from 0 to 512
[   91.142993][ T5065] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   91.166897][   T28] kauditd_printk_skb: 197 callbacks suppressed
[   91.166914][   T28] audit: type=1400 audit(1783170184.576:1611): avc:  denied  { name_connect } for  pid=5059 comm="syz.4.415" dest=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   91.218059][ T5070] netlink: 'syz.3.420': attribute type 5 has an invalid length.
[   91.261760][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'.
[   91.445318][ T5077] xfrm1: entered allmulticast mode
[   92.135962][   T28] audit: type=1400 audit(1783170185.546:1612): avc:  denied  { setopt } for  pid=5093 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   92.301194][   T28] audit: type=1400 audit(1783170185.706:1613): avc:  denied  { shutdown } for  pid=5098 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   92.351779][ T5101] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.404345][ T5111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.432'.
[   92.404774][ T5107] loop0: detected capacity change from 0 to 512
[   92.487686][ T5107] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   92.549043][ T5118] netlink: 'syz.0.435': attribute type 5 has an invalid length.
[   92.556466][ T5116] vlan2: entered promiscuous mode
[   92.564410][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'.
[   93.031414][ T5135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.043455][ T5135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.064925][ T5135] syzkaller0: entered promiscuous mode
[   93.070485][ T5135] syzkaller0: entered allmulticast mode
[   93.142961][ T5138] netlink: 'syz.2.440': attribute type 10 has an invalid length.
[   93.159215][ T5138] vxcan0: entered promiscuous mode
[   93.165762][ T5138] vxcan0: entered allmulticast mode
[   93.171119][ T5138] team0: Device vxcan0 is of different type
[   93.499283][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.443'.
[   93.538405][ T5147] loop0: detected capacity change from 0 to 512
[   93.546912][ T5147] EXT4-fs: Ignoring removed i_version option
[   93.561617][ T5147] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   93.576743][ T5147] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   93.591396][ T5147] Quota error (device loop0): write_blk: dquota write failed
[   93.598789][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   93.598807][    C1] EXT4-fs (loop0): initial error at time 1783170186: ext4_mb_generate_buddy:1317
[   93.598828][    C1] EXT4-fs (loop0): last error at time 1783170186: ext4_mb_generate_buddy:1317
[   93.623634][ T5147] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[   93.632727][ T5147] Quota error (device loop0): write_blk: dquota write failed
[   93.640142][ T5147] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   93.647383][ T5154] loop3: detected capacity change from 0 to 512
[   93.650384][ T5147] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.444: Failed to acquire dquot type 1
[   93.678293][ T5154] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   93.702263][ T5147] loop0: lost filesystem error report for type 5 error -28
[   93.702653][ T5147] EXT4-fs (loop0): 1 truncate cleaned up
[   93.719939][ T5147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.739553][ T5156] netlink: 'syz.4.446': attribute type 5 has an invalid length.
[   93.747435][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'.
[   93.778359][   T28] audit: type=1400 audit(1783170187.186:1614): avc:  denied  { create } for  pid=5159 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   93.802250][ T5162] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[   93.823031][   T28] audit: type=1400 audit(1783170187.206:1615): avc:  denied  { bind } for  pid=5159 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   93.850850][   T28] audit: type=1400 audit(1783170187.206:1616): avc:  denied  { create } for  pid=5146 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   93.935796][ T5169] loop3: detected capacity change from 0 to 512
[   93.943997][ T5169] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   94.006411][ T5175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.454'.
[   94.042155][ T5177] loop2: detected capacity change from 0 to 512
[   94.120067][ T5177] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   94.139782][ T5177] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   94.149006][ T5177] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   94.158798][ T5177] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   94.167104][ T5177] System zones: 0-2, 18-18, 34-35
[   94.173455][ T5177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.399782][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.640660][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.653319][ T5189] loop0: detected capacity change from 0 to 512
[   94.668974][ T5189] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   94.734743][ T5197] loop2: detected capacity change from 0 to 128
[   94.753758][ T5197] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.768840][ T5197] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.790696][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5191 comm=syz.1.460
[   94.838546][ T5204] loop0: detected capacity change from 0 to 512
[   94.904497][ T5210] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   95.182026][ T5212] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in;
[   95.182026][ T5212]    program syz.2.462 not setting count and/or reply_len properly
[   95.601446][ T5218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.467'.
[   95.684047][ T5221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'.
[   95.964203][ T5226] loop3: detected capacity change from 0 to 512
[   96.018837][ T5226] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   96.031374][ T5228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.472'.
[   96.311588][ T5238] loop3: detected capacity change from 0 to 8192
[   96.425767][ T5251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'.
[   96.507602][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.667713][ T5262] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   96.954682][ T5279] EXT4-fs (loop2): invalid journal inode
[   97.448828][ T5279] EXT4-fs (loop2): can't get journal size
[   97.461486][ T5288] set_capacity_and_notify: 1 callbacks suppressed
[   97.461505][ T5288] loop0: detected capacity change from 0 to 512
[   97.481172][ T5279] EXT4-fs (loop2): 1 truncate cleaned up
[   97.487426][ T5279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.519503][ T5288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   97.540245][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   97.540261][   T28] audit: type=1400 audit(1783170190.946:1621): avc:  denied  { write } for  pid=5265 comm="syz.2.481" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.570372][   T28] audit: type=1400 audit(1783170190.946:1622): avc:  denied  { write } for  pid=5265 comm="syz.2.481" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.592123][   T28] audit: type=1400 audit(1783170190.946:1623): avc:  denied  { write } for  pid=5265 comm="syz.2.481" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.613941][   T28] audit: type=1400 audit(1783170190.946:1624): avc:  denied  { write } for  pid=5265 comm="syz.2.481" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.675678][ T5288] EXT4-fs (loop0): 1 truncate cleaned up
[   97.692292][ T5288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.709996][ T5296] netlink: 'syz.1.484': attribute type 5 has an invalid length.
[   97.721722][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'.
[   97.757084][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.766465][   T28] audit: type=1400 audit(1783170191.146:1625): avc:  denied  { write } for  pid=5287 comm="syz.0.483" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.850526][ T5288] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.927006][   T28] audit: type=1400 audit(1783170191.296:1626): avc:  denied  { write } for  pid=5256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.955964][ T5315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'.
[   98.298430][   T28] audit: type=1400 audit(1783170191.696:1627): avc:  denied  { write } for  pid=5311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.354764][ T5334] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   98.379784][ T5329] loop2: detected capacity change from 0 to 8192
[   98.552117][   T28] audit: type=1400 audit(1783170191.956:1628): avc:  denied  { write } for  pid=5333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.620113][   T28] audit: type=1400 audit(1783170192.026:1629): avc:  denied  { write } for  pid=5348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.680327][ T5352] loop4: detected capacity change from 0 to 2048
[   98.791343][ T5364] netlink: 'syz.3.499': attribute type 5 has an invalid length.
[   98.841135][   T28] audit: type=1400 audit(1783170192.246:1630): avc:  denied  { write } for  pid=5353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.864727][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[   99.837766][ T5352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   99.851114][ T5352] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.498: inline data xattr refers to an external xattr inode
[   99.866561][ T5352] EXT4-fs (loop4): Remounting filesystem read-only
[   99.964059][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  100.050293][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.504'.
[  100.066918][ T5403] FAULT_INJECTION: forcing a failure.
[  100.066918][ T5403] name failslab, interval 1, probability 0, space 0, times 0
[  100.112017][ T5403] CPU: 1 UID: 0 PID: 5403 Comm: syz.0.506 Not tainted syzkaller #0 PREEMPT(lazy) 
[  100.112079][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  100.112097][ T5403] Call Trace:
[  100.112105][ T5403]  <TASK>
[  100.112114][ T5403]  __dump_stack+0x1d/0x30
[  100.112156][ T5403]  dump_stack_lvl+0x95/0xd0
[  100.112198][ T5403]  dump_stack+0x15/0x1b
[  100.112243][ T5403]  should_fail_ex+0x25e/0x270
[  100.112317][ T5403]  should_failslab+0x8c/0xb0
[  100.112437][ T5403]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  100.112467][ T5403]  ? security_file_alloc+0x32/0xf0
[  100.112597][ T5403]  ? security_file_alloc+0x32/0xf0
[  100.112645][ T5403]  security_file_alloc+0x32/0xf0
[  100.112674][ T5403]  init_file+0x5b/0x1b0
[  100.112712][ T5403]  alloc_empty_file+0x85/0x1e0
[  100.112744][ T5403]  alloc_file_pseudo+0x92/0x120
[  100.112774][ T5403]  __shmem_file_setup+0x226/0x260
[  100.112822][ T5403]  shmem_file_setup+0x3b/0x50
[  100.112844][ T5403]  memfd_alloc_file+0x4e/0x300
[  100.112905][ T5403]  __se_sys_memfd_create+0x2e1/0x3b0
[  100.112945][ T5403]  __x64_sys_memfd_create+0x31/0x40
[  100.112978][ T5403]  x64_sys_call+0x1f22/0x3020
[  100.113051][ T5403]  do_syscall_64+0x136/0x3c0
[  100.113086][ T5403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.113127][ T5403] RIP: 0033:0x7fcee55fde59
[  100.113143][ T5403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.113165][ T5403] RSP: 002b:00007fcee4056e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  100.113188][ T5403] RAX: ffffffffffffffda RBX: 0000000000000782 RCX: 00007fcee55fde59
[  100.113259][ T5403] RDX: 00007fcee4056ee0 RSI: 0000000000000000 RDI: 00007fcee569404f
[  100.113275][ T5403] RBP: 0000200000000880 R08: 00000000ffffffff R09: 0000000000000000
[  100.113321][ T5403] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000800
[  100.113334][ T5403] R13: 00007fcee4056ee0 R14: 00007fcee4056ea0 R15: 0000200000000840
[  100.113357][ T5403]  </TASK>
[  100.377470][ T5405] loop4: detected capacity change from 0 to 512
[  100.845412][ T5418] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  100.891982][ T5422] netlink: 'syz.2.512': attribute type 5 has an invalid length.
[  101.001162][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'.
[  101.248665][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'.
[  101.278348][ T5460] FAULT_INJECTION: forcing a failure.
[  101.278348][ T5460] name failslab, interval 1, probability 0, space 0, times 0
[  101.312605][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.0.519 Not tainted syzkaller #0 PREEMPT(lazy) 
[  101.312644][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  101.312656][ T5460] Call Trace:
[  101.312663][ T5460]  <TASK>
[  101.312670][ T5460]  __dump_stack+0x1d/0x30
[  101.312695][ T5460]  dump_stack_lvl+0x95/0xd0
[  101.312720][ T5460]  dump_stack+0x15/0x1b
[  101.312790][ T5460]  should_fail_ex+0x25e/0x270
[  101.312820][ T5460]  should_failslab+0x8c/0xb0
[  101.312847][ T5460]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  101.312874][ T5460]  ? skb_clone+0x151/0x1f0
[  101.312971][ T5460]  ? skb_clone+0x151/0x1f0
[  101.313031][ T5460]  skb_clone+0x151/0x1f0
[  101.313119][ T5460]  __netlink_deliver_tap+0x2be/0x510
[  101.313145][ T5460]  netlink_sendskb+0x126/0x150
[  101.313191][ T5460]  netlink_unicast+0x285/0x680
[  101.313236][ T5460]  netlink_ack+0x4fe/0x530
[  101.313284][ T5460]  netlink_rcv_skb+0x18d/0x220
[  101.313308][ T5460]  ? __pfx_genl_rcv_msg+0x10/0x10
[  101.313416][ T5460]  genl_rcv+0x28/0x40
[  101.313440][ T5460]  netlink_unicast+0x5a7/0x680
[  101.313478][ T5460]  netlink_sendmsg+0x5be/0x6f0
[  101.313505][ T5460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  101.313564][ T5460]  ____sys_sendmsg+0x532/0x580
[  101.313629][ T5460]  ___sys_sendmsg+0x195/0x1e0
[  101.313673][ T5460]  __x64_sys_sendmsg+0xd4/0x160
[  101.313709][ T5460]  x64_sys_call+0x194c/0x3020
[  101.313748][ T5460]  do_syscall_64+0x136/0x3c0
[  101.313784][ T5460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.313809][ T5460] RIP: 0033:0x7fcee55fde59
[  101.313828][ T5460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.313906][ T5460] RSP: 002b:00007fcee4057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  101.313930][ T5460] RAX: ffffffffffffffda RBX: 00007fcee5885fa0 RCX: 00007fcee55fde59
[  101.313946][ T5460] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  101.313962][ T5460] RBP: 00007fcee4057090 R08: 0000000000000000 R09: 0000000000000000
[  101.314088][ T5460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.314102][ T5460] R13: 00007fcee5886038 R14: 00007fcee5885fa0 R15: 00007fff119ee238
[  101.314123][ T5460]  </TASK>
[  101.635414][ T5477] netlink: 'syz.1.524': attribute type 5 has an invalid length.
[  101.647160][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[  101.703346][ T5479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'.
[  101.746413][ T5492] loop0: detected capacity change from 0 to 2048
[  101.786810][ T5501] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  101.793854][ T5479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.520'.
[  101.908805][ T5509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'.
[  102.202401][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'.
[  102.217246][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'.
[  102.674843][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'.
[  103.162776][ T5557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.212470][ T5557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.653544][ T5564] loop0: detected capacity change from 0 to 512
[  103.660414][ T5564] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  103.683410][ T5564] EXT4-fs (loop0): 1 truncate cleaned up
[  103.695573][ T5564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.723146][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  103.723226][   T28] audit: type=1400 audit(1783170197.136:1653): avc:  denied  { write } for  pid=5561 comm="syz.0.551" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  103.779692][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.810333][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.819073][ T5564] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.551: invalid indirect mapped block 4294901760 (level 0)
[  103.870371][ T5564] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.551: invalid indirect mapped block 4294967295 (level 1)
[  104.399687][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'.
[  105.131496][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'.
[  105.145399][   T28] audit: type=1400 audit(1783170198.556:1654): avc:  denied  { getopt } for  pid=5596 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  105.171550][ T5595] loop4: detected capacity change from 0 to 2048
[  105.190475][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'.
[  105.199361][ T3663] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.213253][ T3663] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.229000][ T3663] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.240172][ T5604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.248743][ T3663] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.258535][ T5604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.277263][ T5595]  loop4: p1 < > p3 p4 < >
[  105.286206][ T5595] loop4: p3 start 4284289 is beyond EOD, truncated
[  105.286352][ T5606] loop2: detected capacity change from 0 to 512
[  105.301348][ T5606] EXT4-fs: inline encryption not supported
[  105.309778][ T5606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.329912][ T5606] EXT4-fs (loop2): 1 truncate cleaned up
[  105.336211][ T5606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.363936][   T28] audit: type=1400 audit(1783170198.766:1655): avc:  denied  { write } for  pid=5605 comm="syz.2.564" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  105.413576][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.185663][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.288194][ T5634] Timeout policy `syz1' can only be used by L3 protocol number 33011
[  106.700146][ T5642] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  106.744734][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.759674][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.788226][   T28] audit: type=1400 audit(1783170200.196:1656): avc:  denied  { getopt } for  pid=5649 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  106.791947][ T5654] tipc: Started in network mode
[  106.812727][ T5654] tipc: Node identity ea39a77281d1, cluster identity 4711
[  106.820138][ T5654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.873175][ T5654] syzkaller0: entered promiscuous mode
[  106.881579][ T5654] syzkaller0: entered allmulticast mode
[  106.899206][ T5654] tipc: Resetting bearer <eth:syzkaller0>
[  106.913140][ T5653] tipc: Resetting bearer <eth:syzkaller0>
[  106.922050][ T5653] tipc: Disabling bearer <eth:syzkaller0>
[  107.056848][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.072709][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.095893][   T28] audit: type=1400 audit(1783170200.496:1657): avc:  denied  { listen } for  pid=5657 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  107.148515][   T28] audit: type=1400 audit(1783170200.506:1658): avc:  denied  { shutdown } for  pid=5657 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  107.194992][   T28] audit: type=1400 audit(1783170200.506:1659): avc:  denied  { wake_alarm } for  pid=5657 comm="syz.4.583" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  107.461847][ T5673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.485591][ T5673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.551617][ T5680] ip6gretap0: entered promiscuous mode
[  107.604182][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  107.646760][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'.
[  107.705039][ T5673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.789701][ T5673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.833589][ T5686] hub 8-0:1.0: USB hub found
[  107.838554][ T5686] hub 8-0:1.0: 8 ports detected
[  107.853952][ T5686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5686 comm=syz.2.594
[  108.690769][ T5699] loop2: detected capacity change from 0 to 512
[  108.697624][   T28] audit: type=1400 audit(1783170202.106:1660): avc:  denied  { remount } for  pid=5698 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  108.851320][   T28] audit: type=1400 audit(1783170202.256:1661): avc:  denied  { mount } for  pid=5704 comm="syz.4.599" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  108.877292][   T28] audit: type=1400 audit(1783170202.256:1662): avc:  denied  { search } for  pid=5704 comm="syz.4.599" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  108.921965][   T28] audit: type=1400 audit(1783170202.256:1663): avc:  denied  { search } for  pid=5704 comm="syz.4.599" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  109.002892][   T28] audit: type=1400 audit(1783170202.256:1664): avc:  denied  { search } for  pid=5704 comm="syz.4.599" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  109.031424][   T28] audit: type=1400 audit(1783170202.256:1665): avc:  denied  { write search } for  pid=5704 comm="syz.4.599" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  109.217169][   T28] audit: type=1400 audit(1783170202.616:1666): avc:  denied  { write } for  pid=5724 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  109.483430][ T5733] netlink: 'syz.0.608': attribute type 3 has an invalid length.
[  109.547938][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.574450][ T5733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.600415][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.625263][ T5733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.771381][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.780280][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.832091][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.840754][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.047170][ T5747] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  110.324144][ T5764] vlan2: entered promiscuous mode
[  110.329268][ T5764] bond0: entered promiscuous mode
[  110.334636][ T5764] bond_slave_0: entered promiscuous mode
[  110.340422][ T5764] bond_slave_1: entered promiscuous mode
[  110.397122][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'.
[  110.408099][ T5769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'.
[  110.435851][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.445238][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.842740][ T5783] loop0: detected capacity change from 0 to 2048
[  110.893304][ T5783]  loop0: p1 < > p4
[  110.897895][ T5783] loop0: p4 size 722688 extends beyond EOD, truncated
[  110.907452][   T28] audit: type=1400 audit(1783170204.316:1667): avc:  denied  { read write } for  pid=5782 comm="syz.0.630" name="loop0p1" dev="devtmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  110.930954][   T28] audit: type=1400 audit(1783170204.316:1668): avc:  denied  { open } for  pid=5782 comm="syz.0.630" path="/dev/loop0p1" dev="devtmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  111.060075][   T28] audit: type=1400 audit(1783170204.466:1669): avc:  denied  { execute } for  pid=5790 comm="syz.1.634" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  111.243552][   T28] audit: type=1400 audit(1783170204.656:1670): avc:  denied  { bind } for  pid=5794 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.352275][ T5815] syzkaller0: entered promiscuous mode
[  111.363269][ T5815] syzkaller0: entered allmulticast mode
[  111.380228][ T5815] tipc: Started in network mode
[  111.386117][ T5815] tipc: Node identity 32cdd351a7c6, cluster identity 4711
[  111.393939][ T5815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.402731][ T5819] vcan0: tx drop: invalid da for name 0x0000000000000002
[  111.405318][ T5815] tipc: Resetting bearer <eth:syzkaller0>
[  111.422699][ T5814] tipc: Resetting bearer <eth:syzkaller0>
[  111.434617][ T5814] tipc: Disabling bearer <eth:syzkaller0>
[  111.514310][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'.
[  112.471973][ T5853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.505235][ T5853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.704253][ T5853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.743230][ T5853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.153270][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.189876][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.359259][ T5853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.374862][ T5853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.435965][ T5853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.446809][ T5853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.535439][ T3444] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.543971][ T3444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.562199][ T3444] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.575265][ T3444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.588707][ T3444] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.608785][ T3444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.641352][ T3444] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.670647][ T3444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.348612][ T5926] hub 8-0:1.0: USB hub found
[  114.353759][ T5926] hub 8-0:1.0: 8 ports detected
[  115.032522][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  115.032549][   T28] audit: type=1400 audit(1783170208.446:1688): avc:  denied  { write } for  pid=5935 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  115.262699][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'.
[  115.369505][ T5948] loop2: detected capacity change from 0 to 256
[  115.515920][ T5948] FAT-fs (loop2): codepage cp1251 not found
[  116.060990][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.072820][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.179729][ T5964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.188864][ T5964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.270222][   T28] audit: type=1400 audit(1783170209.676:1689): avc:  denied  { write } for  pid=5965 comm="syz.3.679" name="file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.381871][ T5971] ipip0: entered promiscuous mode
[  116.392248][ T5971] ipip0: entered allmulticast mode
[  116.454341][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.463109][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.878829][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.897100][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.961031][   T28] audit: type=1400 audit(1783170210.366:1690): avc:  denied  { create } for  pid=5994 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  117.130537][   T28] audit: type=1400 audit(1783170210.536:1691): avc:  denied  { bind } for  pid=5994 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  117.150405][   T28] audit: type=1400 audit(1783170210.536:1692): avc:  denied  { connect } for  pid=5994 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  117.172491][   T28] audit: type=1400 audit(1783170210.566:1693): avc:  denied  { write } for  pid=5994 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  117.642882][   T28] audit: type=1326 audit(1783170211.046:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  117.668952][   T28] audit: type=1326 audit(1783170211.046:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  117.701882][   T28] audit: type=1326 audit(1783170211.056:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  117.733544][   T28] audit: type=1326 audit(1783170211.056:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  117.883659][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.910906][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.025583][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.045340][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.141717][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.150681][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.647879][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.656967][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.318958][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'.
[  119.867426][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.721'.
[  120.035083][ T6094] syz.2.724 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  120.135228][   T28] kauditd_printk_skb: 108 callbacks suppressed
[  120.135258][   T28] audit: type=1400 audit(1783170213.546:1806): avc:  denied  { connect } for  pid=6101 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  120.168959][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'.
[  120.232281][ T6097] random: crng reseeded on system resumption
[  120.240030][   T28] audit: type=1400 audit(1783170213.636:1807): avc:  denied  { write } for  pid=6096 comm="syz.3.725" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  120.270230][   T28] audit: type=1400 audit(1783170213.646:1808): avc:  denied  { open } for  pid=6096 comm="syz.3.725" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  120.319375][   T28] audit: type=1400 audit(1783170213.726:1809): avc:  denied  { write } for  pid=6111 comm="syz.1.731" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  120.379481][   T28] audit: type=1400 audit(1783170213.726:1810): avc:  denied  { open } for  pid=6111 comm="syz.1.731" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  120.569540][   T28] audit: type=1400 audit(1783170213.756:1811): avc:  denied  { ioctl } for  pid=6111 comm="syz.1.731" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  120.729021][   T28] audit: type=1400 audit(1783170213.946:1812): avc:  denied  { listen } for  pid=6120 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  120.792140][ T6132] syzkaller0: entered promiscuous mode
[  120.797720][ T6132] syzkaller0: entered allmulticast mode
[  120.805625][ T6132] tipc: Started in network mode
[  120.810583][ T6132] tipc: Node identity 5ef7432a33ce, cluster identity 4711
[  120.820714][ T6132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.829167][ T6132] tipc: Resetting bearer <eth:syzkaller0>
[  120.835994][ T6129] tipc: Resetting bearer <eth:syzkaller0>
[  120.845857][ T6129] tipc: Disabling bearer <eth:syzkaller0>
[  120.857345][ T6136] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  120.965741][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[  120.990285][ T6148] loop4: detected capacity change from 0 to 512
[  121.045176][ T6151] loop3: detected capacity change from 0 to 128
[  121.055876][ T6151] EXT4-fs: test_dummy_encryption option not supported
[  121.152500][ T6148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.166612][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.175764][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.689012][ T6170] loop2: detected capacity change from 0 to 512
[  121.700196][ T6170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  121.714954][ T6170] EXT4-fs (loop2): 1 truncate cleaned up
[  121.724229][ T6170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.748803][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.751943][   T28] audit: type=1400 audit(1783170215.156:1813): avc:  denied  { write } for  pid=6167 comm="syz.2.749" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  121.785217][ T6170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.032775][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'.
[  122.354108][   T28] audit: type=1400 audit(1783170215.766:1814): avc:  denied  { read } for  pid=6204 comm="syz.3.762" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  123.287717][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.318959][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.370743][ T6224] netdevsim netdevsim4 ªªªªª»: renamed from netdevsim0 (while UP)
[  123.499863][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.509624][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.013797][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.067783][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.115821][   T28] audit: type=1400 audit(1783170217.516:1815): avc:  denied  { relabelfrom } for  pid=6242 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  124.704190][ T6266] loop4: detected capacity change from 0 to 4096
[  124.717086][ T6266] EXT4-fs: inline encryption not supported
[  124.790809][ T6266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  124.821228][ T6266] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002]
[  124.831684][ T6266] System zones: 0-5
[  124.845755][ T6266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.874299][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'.
[  125.652601][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.751352][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  125.751365][   T28] audit: type=1400 audit(1783170219.156:1820): avc:  denied  { write } for  pid=6281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.907762][   T28] audit: type=1400 audit(1783170220.316:1821): avc:  denied  { write } for  pid=6303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.241551][   T28] audit: type=1326 audit(1783170220.646:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  127.761593][ T6326] tmpfs: Unknown parameter 'usrquota'
[  127.781307][   T28] audit: type=1326 audit(1783170221.176:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.014870][   T28] audit: type=1326 audit(1783170221.176:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.101466][   T28] audit: type=1326 audit(1783170221.176:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.181361][   T28] audit: type=1326 audit(1783170221.246:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.259804][   T28] audit: type=1326 audit(1783170221.246:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.337422][   T28] audit: type=1326 audit(1783170221.246:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.416540][   T28] audit: type=1326 audit(1783170221.246:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.1.796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed810de59 code=0x7ffc0000
[  128.927414][ T6343] No such timeout policy "syz1"
[  129.314529][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.350415][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.819859][ T6397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.835355][ T6397] syzkaller0: entered promiscuous mode
[  131.846625][ T6397] syzkaller0: entered allmulticast mode
[  131.864032][ T6397] tipc: Resetting bearer <eth:syzkaller0>
[  131.889480][ T6396] tipc: Resetting bearer <eth:syzkaller0>
[  131.911427][ T6396] tipc: Disabling bearer <eth:syzkaller0>
[  132.113473][ T6405] loop3: detected capacity change from 0 to 8192
[  133.236499][ T6418] netlink: 'syz.1.821': attribute type 5 has an invalid length.
[  133.271341][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'.
[  133.421102][   T28] kauditd_printk_skb: 47 callbacks suppressed
[  133.421119][   T28] audit: type=1400 audit(1783170226.826:1877): avc:  denied  { write } for  pid=6411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.131129][ T6438] SET target dimension over the limit!
[  134.353624][   T28] audit: type=1326 audit(1783170227.766:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.427190][   T28] audit: type=1326 audit(1783170227.766:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.458954][ T6449] loop3: detected capacity change from 0 to 512
[  134.470816][ T6449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  134.500230][   T28] audit: type=1326 audit(1783170227.766:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.560568][   T28] audit: type=1326 audit(1783170227.766:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.600153][ T6449] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.826: iget: bad i_size value: 38620345925642
[  134.623392][   T28] audit: type=1326 audit(1783170227.766:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.685232][ T6449] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  134.686813][ T6449] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.826: couldn't read orphan inode 15 (err -117)
[  134.696021][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  134.696041][    C1] EXT4-fs (loop3): initial error at time 1783170228: ext4_orphan_get:1399: inode 15
[  134.696066][    C1] EXT4-fs (loop3): last error at time 1783170228: ext4_orphan_get:1399: inode 15
[  134.742120][ T6449] loop3: lost filesystem error report for type 5 error -117
[  134.742854][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.746465][   T28] audit: type=1400 audit(1783170227.786:1883): avc:  denied  { write } for  pid=6442 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.784723][   T28] audit: type=1326 audit(1783170227.786:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.794069][ T6462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.810174][   T28] audit: type=1326 audit(1783170227.786:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8410de59 code=0x7ffc0000
[  134.846977][ T6447] audit: audit_backlog=65 > audit_backlog_limit=64
[  134.883475][ T6462] syzkaller0: entered promiscuous mode
[  134.889052][ T6462] syzkaller0: entered allmulticast mode
[  134.907118][ T6462] tipc: Resetting bearer <eth:syzkaller0>
[  134.962994][ T6461] tipc: Resetting bearer <eth:syzkaller0>
[  134.980983][ T6441] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.826: bg 0: block 5: invalid block bitmap
[  135.002768][ T6461] tipc: Disabling bearer <eth:syzkaller0>
[  135.016283][ T6441] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 432 with error 28
[  135.042088][ T6441] EXT4-fs (loop3): This should not happen!! Data will be lost
[  135.042088][ T6441] 
[  135.065269][ T6441] EXT4-fs (loop3): Total free blocks count 0
[  135.085506][ T6441] EXT4-fs (loop3): Free/Dirty block details
[  135.097705][ T6441] EXT4-fs (loop3): free_blocks=0
[  135.104193][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'.
[  135.146606][ T6441] EXT4-fs (loop3): dirty_blocks=436
[  135.152874][ T6441] EXT4-fs (loop3): Block reservation details
[  135.167968][ T6441] EXT4-fs (loop3): i_reserved_data_blocks=436
[  135.181508][ T6449] EXT4-fs (loop3): shut down requested (0)
[  135.291185][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'.
[  135.963712][ T6494] vcan0: tx drop: invalid da for name 0x0000000000000002
[  136.044767][ T6498] loop2: detected capacity change from 0 to 512
[  136.064971][ T6498] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  136.078036][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'.
[  136.228398][ T6507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.246931][ T6507] syzkaller0: entered promiscuous mode
[  136.266916][ T6507] syzkaller0: entered allmulticast mode
[  136.297287][ T6507] tipc: Resetting bearer <eth:syzkaller0>
[  136.310224][ T6506] tipc: Resetting bearer <eth:syzkaller0>
[  136.339658][ T6506] tipc: Disabling bearer <eth:syzkaller0>
[  136.367946][ T6502] loop2: detected capacity change from 0 to 2048
[  136.395439][ T6502] ext4: Bad value for 'init_itable'
[  137.703295][ T6563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.740185][ T6563] syzkaller0: entered promiscuous mode
[  137.765366][ T6563] syzkaller0: entered allmulticast mode
[  137.804751][ T6576] tipc: Resetting bearer <eth:syzkaller0>
[  137.829462][ T6560] tipc: Resetting bearer <eth:syzkaller0>
[  137.847260][ T6560] tipc: Disabling bearer <eth:syzkaller0>
[  137.918101][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'.
[  137.985202][ T6592] loop2: detected capacity change from 0 to 2048
[  138.014214][ T6592] ext4: Unknown parameter 'obj_user'
[  138.428368][   T28] kauditd_printk_skb: 119 callbacks suppressed
[  138.428385][   T28] audit: type=1400 audit(1783170231.836:2000): avc:  denied  { write } for  pid=6630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  138.486535][   T28] audit: type=1400 audit(1783170231.896:2001): avc:  denied  { write } for  pid=6645 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  138.660489][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'.
[  138.699959][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'.
[  138.836279][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'.
[  139.653444][ T6705] syzkaller0: entered promiscuous mode
[  139.659080][ T6705] syzkaller0: entered allmulticast mode
[  139.776276][ T6726] loop4: detected capacity change from 0 to 512
[  139.783395][ T6726] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  139.792597][ T6728] syzkaller0: entered promiscuous mode
[  139.817218][ T6728] syzkaller0: entered allmulticast mode
[  139.843745][ T6728] tipc: Started in network mode
[  139.854435][ T6728] tipc: Node identity 6a2cba51d2ed, cluster identity 4711
[  139.861699][ T6728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.870736][ T6728] tipc: Resetting bearer <eth:syzkaller0>
[  139.892140][ T6727] tipc: Resetting bearer <eth:syzkaller0>
[  139.905667][ T6727] tipc: Disabling bearer <eth:syzkaller0>
[  139.914666][ T6741] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  139.937188][ T6745] syzkaller0: entered promiscuous mode
[  139.942972][ T6745] syzkaller0: entered allmulticast mode
[  139.975478][   T28] audit: type=1326 audit(1783170233.386:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.014699][ T6750] loop4: detected capacity change from 0 to 512
[  140.023878][   T28] audit: type=1326 audit(1783170233.416:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.049705][ T6750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  140.076670][   T28] audit: type=1326 audit(1783170233.416:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.113587][ T6750] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.907: iget: bad i_size value: 38620345925642
[  140.142211][ T6750] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  140.148464][ T6750] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.907: couldn't read orphan inode 15 (err -117)
[  140.157771][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  140.157823][    C1] EXT4-fs (loop4): initial error at time 1783170233: ext4_orphan_get:1399: inode 15
[  140.157903][    C1] EXT4-fs (loop4): last error at time 1783170233: ext4_orphan_get:1399: inode 15
[  140.206934][   T28] audit: type=1326 audit(1783170233.416:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.232459][ T6750] loop4: lost filesystem error report for type 5 error -117
[  140.232672][   T28] audit: type=1326 audit(1783170233.416:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.266332][ T6750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.268358][   T28] audit: type=1326 audit(1783170233.416:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.304620][   T28] audit: type=1326 audit(1783170233.416:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.330234][   T28] audit: type=1326 audit(1783170233.416:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.4.907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2f64de59 code=0x7ffc0000
[  140.400036][ T6778] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  140.446706][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.524926][ T6790] syzkaller0: entered promiscuous mode
[  140.530545][ T6790] syzkaller0: entered allmulticast mode
[  140.572662][ T6796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.579783][ T6796] syzkaller0: entered promiscuous mode
[  140.585585][ T6796] syzkaller0: entered allmulticast mode
[  140.595548][ T6796] tipc: Resetting bearer <eth:syzkaller0>
[  140.605248][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[  140.627986][ T6795] tipc: Disabling bearer <eth:syzkaller0>
[  140.998057][ T6813] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  141.225164][ T6815] loop2: detected capacity change from 0 to 8192
[  141.744470][ T6857] syzkaller0: entered promiscuous mode
[  141.758421][ T6857] syzkaller0: entered allmulticast mode
[  141.996997][ T6859] loop4: detected capacity change from 0 to 512
[  142.270397][ T6859] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  143.522444][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.534265][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.551540][ T6929] syzkaller0: entered promiscuous mode
[  143.563260][ T6929] syzkaller0: entered allmulticast mode
[  143.590528][ T6929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.600861][   T28] kauditd_printk_skb: 199 callbacks suppressed
[  143.600877][   T28] audit: type=1400 audit(1783170237.006:2209): avc:  denied  { write } for  pid=6930 comm="syz.3.962" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  143.902734][ T6931] netlink: 80 bytes leftover after parsing attributes in process `syz.3.962'.
[  143.971004][ T6936] tipc: Resetting bearer <eth:syzkaller0>
[  144.028105][   T28] audit: type=1326 audit(1783170237.436:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.070779][ T6928] tipc: Resetting bearer <eth:syzkaller0>
[  144.108036][   T28] audit: type=1326 audit(1783170237.436:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.133511][   T28] audit: type=1326 audit(1783170237.466:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.166512][ T6928] tipc: Disabling bearer <eth:syzkaller0>
[  144.180193][   T28] audit: type=1326 audit(1783170237.466:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.215183][   T28] audit: type=1326 audit(1783170237.466:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.240820][   T28] audit: type=1326 audit(1783170237.466:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.266844][   T28] audit: type=1326 audit(1783170237.466:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.292710][   T28] audit: type=1326 audit(1783170237.466:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  144.318173][   T28] audit: type=1326 audit(1783170237.476:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee55fde59 code=0x7ffc0000
[  146.105724][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  147.639100][ T7039] loop4: detected capacity change from 0 to 8192
[  149.840433][ T7089] syzkaller0: entered promiscuous mode
[  149.859934][   T28] kauditd_printk_skb: 197 callbacks suppressed
[  149.859947][   T28] audit: type=1400 audit(1783170243.266:2416): avc:  denied  { write } for  pid=7067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.904790][ T7089] syzkaller0: entered allmulticast mode
[  150.119853][ T7103] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  150.143151][   T28] audit: type=1400 audit(1783170243.546:2417): avc:  denied  { write } for  pid=7113 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.247090][ T7124] syzkaller0: entered promiscuous mode
[  150.286919][ T7124] syzkaller0: entered allmulticast mode
[  150.316881][ T7129] netlink: 52 bytes leftover after parsing attributes in process `syz.3.998'.
[  150.344285][   T28] audit: type=1400 audit(1783170243.756:2418): avc:  denied  { write } for  pid=7116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.429407][   T28] audit: type=1400 audit(1783170243.816:2419): avc:  denied  { write } for  pid=7132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.598244][ T7139] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1001'.
[  150.600672][ T7146] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1004'.
[  150.679708][ T7153] loop4: detected capacity change from 0 to 512
[  150.687031][ T7153] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  150.822232][ T7172] syzkaller0: entered promiscuous mode
[  150.827885][ T7172] syzkaller0: entered allmulticast mode
[  150.844381][ T7157] loop2: detected capacity change from 0 to 512
[  150.862659][ T7157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  150.875988][ T7157] EXT4-fs (loop2): 1 truncate cleaned up
[  150.883677][ T7157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.898701][   T28] audit: type=1400 audit(1783170244.306:2420): avc:  denied  { write } for  pid=7156 comm="syz.2.1009" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.944713][ T7178] loop4: detected capacity change from 0 to 512
[  150.953673][ T7157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.958478][ T7180] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  150.979135][ T7178] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  151.026599][   T28] audit: type=1400 audit(1783170244.436:2421): avc:  denied  { read } for  pid=7185 comm="syz.1.1019" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  151.068008][   T28] audit: type=1400 audit(1783170244.476:2422): avc:  denied  { listen } for  pid=7183 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  151.089597][   T28] audit: type=1400 audit(1783170244.476:2423): avc:  denied  { accept } for  pid=7183 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  151.197691][ T7197] loop2: detected capacity change from 0 to 128
[  151.220367][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'.
[  151.233344][ T7197] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.262605][ T7197] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.269976][ T7207] syzkaller0: entered promiscuous mode
[  151.279208][ T7207] syzkaller0: entered allmulticast mode
[  151.296736][   T28] audit: type=1400 audit(1783170244.686:2424): avc:  denied  { write } for  pid=7196 comm="syz.2.1023" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.344597][   T28] audit: type=1400 audit(1783170244.746:2425): avc:  denied  { write } for  pid=7196 comm="syz.2.1023" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.381860][ T7211] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  151.399963][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  151.533382][ T7213] loop3: detected capacity change from 0 to 512
[  151.551912][ T7213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  151.562929][ T7233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1037'.
[  151.584427][ T7213] EXT4-fs (loop3): 1 truncate cleaned up
[  151.600194][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[  151.605768][ T7213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.647129][ T7213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.648186][ T7242] SELinux:  policydb string  does not match my string SE Linux
[  151.658755][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'.
[  151.663914][ T7242] SELinux: failed to load policy
[  151.718772][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'.
[  151.984051][ T7269] syzkaller0: entered promiscuous mode
[  151.989681][ T7269] syzkaller0: entered allmulticast mode
[  151.998861][ T7269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.011347][ T7269] tipc: Resetting bearer <eth:syzkaller0>
[  152.107533][ T7268] tipc: Resetting bearer <eth:syzkaller0>
[  152.158261][ T7268] tipc: Disabling bearer <eth:syzkaller0>
[  152.297879][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'.
[  152.643788][ T7299] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1058'.
[  152.880832][ T7308] loop3: detected capacity change from 0 to 512
[  152.893323][ T7308] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  152.935750][ T7308] EXT4-fs (loop3): 1 truncate cleaned up
[  152.945263][ T7308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.018597][ T7308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.299651][ T7382] syzkaller0: entered promiscuous mode
[  154.320902][ T7382] syzkaller0: entered allmulticast mode
[  154.468714][ T7394] FAULT_INJECTION: forcing a failure.
[  154.468714][ T7394] name failslab, interval 1, probability 0, space 0, times 0
[  154.508197][ T7381] loop3: detected capacity change from 0 to 512
[  154.526040][ T7394] CPU: 0 UID: 0 PID: 7394 Comm: syz.2.1089 Not tainted syzkaller #0 PREEMPT(lazy) 
[  154.526072][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  154.526084][ T7394] Call Trace:
[  154.526101][ T7394]  <TASK>
[  154.526109][ T7394]  __dump_stack+0x1d/0x30
[  154.526137][ T7394]  dump_stack_lvl+0x95/0xd0
[  154.526162][ T7394]  dump_stack+0x15/0x1b
[  154.526203][ T7394]  should_fail_ex+0x25e/0x270
[  154.526296][ T7394]  should_failslab+0x8c/0xb0
[  154.526321][ T7394]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  154.526343][ T7394]  ? do_getname_kernel+0x53/0x190
[  154.526382][ T7394]  ? do_getname_kernel+0x53/0x190
[  154.526408][ T7394]  do_getname_kernel+0x53/0x190
[  154.526433][ T7394]  kern_path+0x23/0xf0
[  154.526458][ T7394]  create_local_trace_uprobe+0x51/0x2c0
[  154.526498][ T7394]  perf_uprobe_init+0xc0/0x150
[  154.526522][ T7394]  perf_uprobe_event_init+0xbf/0x130
[  154.526560][ T7394]  perf_try_init_event+0x254/0x6e0
[  154.526633][ T7394]  perf_event_alloc+0xb13/0x19e0
[  154.526690][ T7394]  __se_sys_perf_event_open+0x648/0x1250
[  154.526725][ T7394]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  154.526752][ T7394]  ? vfs_write+0x848/0x990
[  154.526820][ T7394]  __x64_sys_perf_event_open+0x67/0x80
[  154.526851][ T7394]  x64_sys_call+0x2789/0x3020
[  154.526950][ T7394]  do_syscall_64+0x136/0x3c0
[  154.526991][ T7394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.527049][ T7394] RIP: 0033:0x7f59a8e7de59
[  154.527069][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.527107][ T7394] RSP: 002b:00007f59a78d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  154.527127][ T7394] RAX: ffffffffffffffda RBX: 00007f59a9105fa0 RCX: 00007f59a8e7de59
[  154.527144][ T7394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  154.527159][ T7394] RBP: 00007f59a78d7090 R08: 0000000000000000 R09: 0000000000000000
[  154.527176][ T7394] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  154.527239][ T7394] R13: 00007f59a9106038 R14: 00007f59a9105fa0 R15: 00007ffc46a00548
[  154.527261][ T7394]  </TASK>
[  154.759608][ T7381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  154.776120][ T7381] EXT4-fs (loop3): 1 truncate cleaned up
[  154.784409][ T7381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.816961][ T7381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.086236][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  155.086251][   T28] audit: type=1400 audit(1783170248.496:2433): avc:  denied  { write } for  pid=7391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.136724][   T28] audit: type=1400 audit(1783170248.546:2434): avc:  denied  { write } for  pid=7422 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.477391][ T7439] loop2: detected capacity change from 0 to 512
[  155.510089][ T7439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  155.571076][ T7439] EXT4-fs (loop2): 1 truncate cleaned up
[  155.603422][ T7439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.750811][   T28] audit: type=1400 audit(1783170249.156:2435): avc:  denied  { write } for  pid=7438 comm="syz.2.1102" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  155.806569][ T7439] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.834442][ T7467] loop4: detected capacity change from 0 to 8192
[  156.327618][ T7481] loop2: detected capacity change from 0 to 8192
[  156.779047][   T28] audit: type=1400 audit(1783170250.186:2436): avc:  denied  { ioctl } for  pid=7500 comm="syz.3.1118" path="socket:[17703]" dev="sockfs" ino=17703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  156.814061][ T7504] netlink: 'syz.1.1119': attribute type 1 has an invalid length.
[  158.836781][   T28] audit: type=1400 audit(1783170252.236:2437): avc:  denied  { write } for  pid=7485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.940545][   T28] audit: type=1400 audit(1783170252.346:2438): avc:  denied  { write } for  pid=7518 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.132183][   T28] audit: type=1400 audit(1783170253.516:2439): avc:  denied  { write } for  pid=7539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.175529][ T7538] loop3: detected capacity change from 0 to 512
[  160.229680][   T28] audit: type=1400 audit(1783170253.566:2440): avc:  denied  { write } for  pid=7554 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.290189][ T7538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.347627][ T7538] EXT4-fs (loop3): 1 truncate cleaned up
[  160.436061][ T7538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.454075][   T28] audit: type=1400 audit(1783170253.856:2441): avc:  denied  { write } for  pid=7537 comm="syz.3.1127" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.475942][ T7564] loop2: detected capacity change from 0 to 8192
[  160.498258][ T7538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.714352][ T7572] loop3: detected capacity change from 0 to 8192
[  160.801205][   T28] audit: type=1400 audit(1783170254.206:2442): avc:  denied  { write } for  pid=7576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.125662][   T28] audit: type=1400 audit(1783170254.256:2443): avc:  denied  { write } for  pid=7591 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.862139][   T28] audit: type=1400 audit(1783170258.146:2444): avc:  denied  { write } for  pid=7617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.946558][   T28] audit: type=1400 audit(1783170258.196:2445): avc:  denied  { write } for  pid=7634 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.067098][   T28] audit: type=1400 audit(1783170258.476:2446): avc:  denied  { write } for  pid=7637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.164173][   T28] audit: type=1400 audit(1783170258.536:2447): avc:  denied  { write } for  pid=7648 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.322558][ T7654] __nla_validate_parse: 12 callbacks suppressed
[  165.322577][ T7654] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1141'.
[  165.919538][   T28] audit: type=1400 audit(1783170259.326:2448): avc:  denied  { write } for  pid=7652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.980173][   T28] audit: type=1400 audit(1783170259.386:2449): avc:  denied  { write } for  pid=7678 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.096504][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'.
[  166.110123][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'.
[  166.265420][   T28] audit: type=1400 audit(1783170259.676:2450): avc:  denied  { write } for  pid=7682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.335559][   T28] audit: type=1400 audit(1783170259.746:2451): avc:  denied  { write } for  pid=7697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.561809][   T28] audit: type=1400 audit(1783170259.966:2452): avc:  denied  { write } for  pid=7699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.617314][ T7720] loop2: detected capacity change from 0 to 128
[  166.645444][ T7720] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.659060][ T7716] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[  166.660556][   T28] audit: type=1400 audit(1783170260.066:2453): avc:  denied  { write } for  pid=7721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.671179][ T7720] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  166.827256][ T7716] loop4: detected capacity change from 0 to 8192
[  166.835693][ T7716] vfat: Unknown parameter ' «uÇ'
[  166.841917][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.990545][ T7728] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1153'.
[  167.114236][ T7734] loop2: detected capacity change from 0 to 256
[  167.130916][ T7734] msdos: Bad value for 'uid'
[  167.146167][ T7734] msdos: Bad value for 'uid'
[  167.165170][   T28] audit: type=1400 audit(1783170260.576:2454): avc:  denied  { write } for  pid=7733 comm="syz.2.1152" lport=36625 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  167.980597][   T28] audit: type=1400 audit(1783170261.386:2455): avc:  denied  { bind } for  pid=7750 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  168.007256][ T7752] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1160'.
[  168.253289][ T7765] loop2: detected capacity change from 0 to 8192
[  169.278969][   T28] audit: type=1400 audit(1783170262.686:2456): avc:  denied  { write } for  pid=7777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.394793][ T7846] loop3: detected capacity change from 0 to 128
[  170.401370][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  170.401384][   T28] audit: type=1400 audit(1783170263.806:2458): avc:  denied  { write } for  pid=7804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.458684][ T7846] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  170.492307][   T28] audit: type=1400 audit(1783170263.826:2459): avc:  denied  { write } for  pid=7849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.501351][ T7858] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1183'.
[  170.556185][ T7846] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  170.634565][ T7858] loop4: detected capacity change from 0 to 2048
[  170.659620][ T7858] EXT4-fs: Ignoring removed nobh option
[  170.674215][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.699347][ T7858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.714378][ T7858] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.784945][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.125772][ T7874] can0: slcan on ptm0.
[  171.199652][   T28] audit: type=1400 audit(1783170264.606:2460): avc:  denied  { create } for  pid=7873 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  171.224841][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1189'.
[  171.243160][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'.
[  171.283219][ T7873] can0 (unregistered): slcan off ptm0.
[  171.340397][   T28] audit: type=1400 audit(1783170264.746:2461): avc:  denied  { write } for  pid=7876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.396750][   T28] audit: type=1400 audit(1783170264.806:2462): avc:  denied  { write } for  pid=7897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.566966][   T28] audit: type=1400 audit(1783170264.976:2463): avc:  denied  { write } for  pid=7905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.619376][   T28] audit: type=1400 audit(1783170265.026:2464): avc:  denied  { write } for  pid=7925 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.698552][ T7921] loop4: detected capacity change from 0 to 512
[  171.730875][ T7921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  171.747131][ T7921] EXT4-fs (loop4): 1 truncate cleaned up
[  171.755795][ T7921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.774198][   T28] audit: type=1400 audit(1783170265.186:2465): avc:  denied  { write } for  pid=7919 comm="syz.4.1196" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  171.808238][ T7921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.261894][   T28] audit: type=1326 audit(1783170266.666:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1203" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8e7de59 code=0x7ffc0000
[  173.264355][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'.
[  173.289290][ T7946] FAULT_INJECTION: forcing a failure.
[  173.289290][ T7946] name failslab, interval 1, probability 0, space 0, times 0
[  173.311494][   T28] audit: type=1326 audit(1783170266.666:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1203" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8e7de59 code=0x7ffc0000
[  173.322132][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.2.1203 Not tainted syzkaller #0 PREEMPT(lazy) 
[  173.322163][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  173.322222][ T7946] Call Trace:
[  173.322229][ T7946]  <TASK>
[  173.322237][ T7946]  __dump_stack+0x1d/0x30
[  173.322267][ T7946]  dump_stack_lvl+0x95/0xd0
[  173.322290][ T7946]  dump_stack+0x15/0x1b
[  173.322312][ T7946]  should_fail_ex+0x25e/0x270
[  173.322393][ T7946]  should_failslab+0x8c/0xb0
[  173.322414][ T7946]  __kmalloc_node_track_caller_noprof+0xd5/0x4c0
[  173.322439][ T7946]  ? sidtab_sid2str_get+0xa0/0x130
[  173.322474][ T7946]  ? sidtab_sid2str_get+0xa0/0x130
[  173.322602][ T7946]  kmemdup_noprof+0x2b/0x70
[  173.322690][ T7946]  sidtab_sid2str_get+0xa0/0x130
[  173.322726][ T7946]  security_sid_to_context_core+0x1eb/0x2e0
[  173.322764][ T7946]  security_sid_to_context+0x27/0x40
[  173.322858][ T7946]  selinux_lsmprop_to_secctx+0x67/0xf0
[  173.322928][ T7946]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  173.322996][ T7946]  audit_log_subj_ctx+0xa4/0x3e0
[  173.323031][ T7946]  audit_log_task_context+0x48/0x70
[  173.323110][ T7946]  audit_log_task+0xf3/0x240
[  173.323140][ T7946]  audit_seccomp+0x6a/0x110
[  173.323168][ T7946]  __seccomp_filter+0x905/0x1370
[  173.323229][ T7946]  ? __fget_files+0x184/0x1c0
[  173.323256][ T7946]  ? mutex_lock+0x57/0x90
[  173.323281][ T7946]  ? mutex_unlock+0x4e/0x90
[  173.323310][ T7946]  __secure_computing+0x7d/0x150
[  173.323405][ T7946]  do_syscall_64+0xd4/0x3c0
[  173.323442][ T7946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.323503][ T7946] RIP: 0033:0x7f59a8e3e68e
[  173.323521][ T7946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  173.323546][ T7946] RSP: 002b:00007f59a78d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.323565][ T7946] RAX: ffffffffffffffda RBX: 00007f59a78d76c0 RCX: 00007f59a8e3e68e
[  173.323579][ T7946] RDX: 000000000000000f RSI: 00007f59a78d70a0 RDI: 0000000000000003
[  173.323620][ T7946] RBP: 00007f59a78d7090 R08: 0000000000000000 R09: 0000000000000000
[  173.323635][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.323682][ T7946] R13: 00007f59a9106038 R14: 00007f59a9105fa0 R15: 00007ffc46a00548
[  173.323702][ T7946]  </TASK>
[  173.340434][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1204'.
[  175.108389][ T7965] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1209'.
[  175.188259][ T7973] loop4: detected capacity change from 0 to 8192
[  175.457920][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  175.457935][   T28] audit: type=1400 audit(1783170268.866:2490): avc:  denied  { write } for  pid=7996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.066109][ T8016] loop3: detected capacity change from 0 to 512
[  176.124188][ T8016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  176.281649][ T8016] System zones: 1-12
[  176.303338][ T8016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1215: error while reading EA inode 32 err=-116
[  176.360142][ T8016] loop3: lost filesystem error report for type 5 error -117
[  176.361839][ T8016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1215: error while reading EA inode 32 err=-116
[  176.369312][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  176.369336][    C1] EXT4-fs (loop3): initial error at time 1783170269: ext4_xattr_inode_iget:446
[  176.369365][    C1] EXT4-fs (loop3): last error at time 1783170269: ext4_xattr_inode_iget:446
[  176.438091][   T28] audit: type=1400 audit(1783170269.076:2491): avc:  denied  { write } for  pid=8008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.465995][ T8016] loop3: lost filesystem error report for type 5 error -117
[  176.466235][ T8016] EXT4-fs (loop3): 1 orphan inode deleted
[  176.480392][ T8016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.497175][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1215'.
[  176.507361][ T8016] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1215'.
[  176.521991][   T28] audit: type=1400 audit(1783170269.916:2492): avc:  denied  { write } for  pid=8022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.585969][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.745414][   T28] audit: type=1400 audit(1783170270.146:2493): avc:  denied  { write } for  pid=8040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.232728][ T8050] FAULT_INJECTION: forcing a failure.
[  177.232728][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.524116][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  177.546901][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.2.1220 Not tainted syzkaller #0 PREEMPT(lazy) 
[  177.546936][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  177.546951][ T8050] Call Trace:
[  177.546959][ T8050]  <TASK>
[  177.546969][ T8050]  __dump_stack+0x1d/0x30
[  177.546997][ T8050]  dump_stack_lvl+0x95/0xd0
[  177.547074][ T8050]  dump_stack+0x15/0x1b
[  177.547093][ T8050]  should_fail_ex+0x25e/0x270
[  177.547182][ T8050]  should_fail+0xb/0x20
[  177.547210][ T8050]  should_fail_usercopy+0x1a/0x20
[  177.547246][ T8050]  strncpy_from_user+0x27/0x250
[  177.547274][ T8050]  __x64_sys_lgetxattr+0xa5/0x150
[  177.547431][ T8050]  x64_sys_call+0x2ecc/0x3020
[  177.547533][ T8050]  do_syscall_64+0x136/0x3c0
[  177.547571][ T8050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.547598][ T8050] RIP: 0033:0x7f59a8e7de59
[  177.547633][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.547652][ T8050] RSP: 002b:00007f59a78d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  177.547672][ T8050] RAX: ffffffffffffffda RBX: 00007f59a9105fa0 RCX: 00007f59a8e7de59
[  177.547728][ T8050] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000300
[  177.547741][ T8050] RBP: 00007f59a78d7090 R08: 0000000000000000 R09: 0000000000000000
[  177.547754][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.547766][ T8050] R13: 00007f59a9106038 R14: 00007f59a9105fa0 R15: 00007ffc46a00548
[  177.547783][ T8050]  </TASK>
[  177.580575][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1218'.
[  177.808287][   T28] audit: type=1400 audit(1783170271.176:2494): avc:  denied  { write } for  pid=8054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.849518][   T28] audit: type=1400 audit(1783170271.236:2495): avc:  denied  { write } for  pid=8075 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.937014][   T28] audit: type=1400 audit(1783170271.286:2496): avc:  denied  { map } for  pid=8066 comm="syz.4.1222" path="socket:[18234]" dev="sockfs" ino=18234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  178.005297][ T8083] netlink: 'syz.4.1224': attribute type 1 has an invalid length.
[  178.087305][   T28] audit: type=1400 audit(1783170271.496:2497): avc:  denied  { write } for  pid=8078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.156711][   T28] audit: type=1400 audit(1783170271.566:2498): avc:  denied  { write } for  pid=8099 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.186291][ T8083] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.340938][ T8102] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1227'.
[  178.743655][ T8122] syzkaller0: entered promiscuous mode
[  178.749401][ T8122] syzkaller0: entered allmulticast mode
[  178.757357][ T8122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.766348][ T8122] tipc: Resetting bearer <eth:syzkaller0>
[  178.772972][ T8121] tipc: Resetting bearer <eth:syzkaller0>
[  178.780275][ T8121] tipc: Disabling bearer <eth:syzkaller0>
[  178.953431][   T28] audit: type=1400 audit(1783170272.296:2499): avc:  denied  { write } for  pid=8125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.624364][ T8215] syzkaller0: entered promiscuous mode
[  180.645219][ T8215] syzkaller0: entered allmulticast mode
[  180.670263][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  180.670282][   T28] audit: type=1400 audit(1783170274.076:2505): avc:  denied  { write } for  pid=8204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.702664][ T8215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.730131][ T8215] tipc: Resetting bearer <eth:syzkaller0>
[  180.754662][ T8214] tipc: Resetting bearer <eth:syzkaller0>
[  180.778441][   T28] audit: type=1400 audit(1783170274.186:2506): avc:  denied  { write } for  pid=8225 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.805982][ T8214] tipc: Disabling bearer <eth:syzkaller0>
[  180.919595][ T8237] Driver unsupported XDP return value 0 on prog  (id 179) dev N/A, expect packet loss!
[  180.951993][   T28] audit: type=1400 audit(1783170274.356:2507): avc:  denied  { write } for  pid=8227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.997460][   T28] audit: type=1400 audit(1783170274.406:2508): avc:  denied  { write } for  pid=8242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.049816][ T8247] loop4: detected capacity change from 0 to 512
[  181.071548][ T8247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  181.089870][ T8247] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1251: corrupted xattr entries
[  181.101910][ T8247] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  181.102083][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  181.117650][    C1] EXT4-fs (loop4): initial error at time 1783170274: xattr_find_entry:337: inode 15
[  181.127089][    C1] EXT4-fs (loop4): last error at time 1783170274: xattr_find_entry:337: inode 15
[  181.137105][ T8247] EXT4-fs (loop4): Remounting filesystem read-only
[  181.143957][ T8247] EXT4-fs (loop4): 1 truncate cleaned up
[  181.150273][ T8247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.153206][ T8255] SELinux:  Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped).
[  181.171885][   T28] audit: type=1400 audit(1783170274.556:2509): avc:  denied  { mac_admin } for  pid=8254 comm="syz.2.1254" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  181.201161][   T28] audit: type=1400 audit(1783170274.606:2510): avc:  denied  { relabelto } for  pid=8254 comm="syz.2.1254" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0"
[  181.249760][ T8255] random: crng reseeded on system resumption
[  181.291215][ T8255] loop2: detected capacity change from 0 to 164
[  181.299359][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.310987][ T8255] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  181.320973][ T8255] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  181.338203][   T28] audit: type=1400 audit(1783170274.606:2511): avc:  denied  { associate } for  pid=8254 comm="syz.2.1254" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1326 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0"
[  181.450637][   T28] audit: type=1400 audit(1783170274.856:2512): avc:  denied  { unlink } for  pid=3302 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0"
[  181.512318][ T8264] loop2: detected capacity change from 0 to 256
[  181.518990][ T8264] vfat: Unknown parameter '/dev/ppp'
[  181.534952][ T8266] FAULT_INJECTION: forcing a failure.
[  181.534952][ T8266] name failslab, interval 1, probability 0, space 0, times 0
[  181.562208][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.1.1257 Not tainted syzkaller #0 PREEMPT(lazy) 
[  181.562238][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  181.562252][ T8266] Call Trace:
[  181.562259][ T8266]  <TASK>
[  181.562268][ T8266]  __dump_stack+0x1d/0x30
[  181.562295][ T8266]  dump_stack_lvl+0x95/0xd0
[  181.562315][ T8266]  dump_stack+0x15/0x1b
[  181.562334][ T8266]  should_fail_ex+0x25e/0x270
[  181.562360][ T8266]  should_failslab+0x8c/0xb0
[  181.562382][ T8266]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  181.562404][ T8266]  ? vm_area_alloc+0x2c/0xb0
[  181.562426][ T8266]  ? vm_area_alloc+0x2c/0xb0
[  181.562449][ T8266]  vm_area_alloc+0x2c/0xb0
[  181.562472][ T8266]  mmap_region+0x112b/0x20c0
[  181.562510][ T8266]  ? context_to_sid+0x291/0x2c0
[  181.562557][ T8266]  do_mmap+0x970/0xbc0
[  181.562584][ T8266]  ? selinux_mmap_file+0x5d/0x70
[  181.562615][ T8266]  vm_mmap_pgoff+0x183/0x2d0
[  181.562650][ T8266]  ksys_mmap_pgoff+0xc1/0x310
[  181.562678][ T8266]  ? __x64_sys_mmap+0x49/0x70
[  181.562713][ T8266]  x64_sys_call+0x14df/0x3020
[  181.562737][ T8266]  do_syscall_64+0x136/0x3c0
[  181.562767][ T8266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.562791][ T8266] RIP: 0033:0x7f2ed810dbc2
[  181.562809][ T8266] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  181.562828][ T8266] RSP: 002b:00007f2ed6b66df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  181.562847][ T8266] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed810dbc2
[  181.562861][ T8266] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  181.562875][ T8266] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  181.562890][ T8266] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  181.562905][ T8266] R13: 00007f2ed6b66ee0 R14: 00007f2ed6b66ea0 R15: 0000200000000840
[  181.562923][ T8266]  </TASK>
[  181.563852][ T8261] loop4: detected capacity change from 0 to 512
[  181.786926][ T8261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  181.807656][ T8261] EXT4-fs (loop4): 1 truncate cleaned up
[  181.814500][ T8272] syzkaller0: entered promiscuous mode
[  181.821492][ T8272] syzkaller0: entered allmulticast mode
[  181.827504][ T8261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.853875][ T8272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.865998][   T28] audit: type=1400 audit(1783170275.276:2513): avc:  denied  { write } for  pid=8260 comm="syz.4.1255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  181.906442][ T8272] tipc: Resetting bearer <eth:syzkaller0>
[  181.921722][ T8271] tipc: Resetting bearer <eth:syzkaller0>
[  181.938940][ T8271] tipc: Disabling bearer <eth:syzkaller0>
[  181.946182][ T8261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.001059][ T2979] ==================================================================
[  182.009206][ T2979] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat
[  182.016694][ T2979] 
[  182.019016][ T2979] write to 0xffff88811b52a6c0 of 4 bytes by task 3571 on cpu 0:
[  182.026650][ T2979]  d_make_discardable+0x4f/0x90
[  182.031513][ T2979]  simple_unlink+0x68/0x80
[  182.035939][ T2979]  shmem_unlink+0x12d/0x140
[  182.040465][ T2979]  vfs_unlink+0x1c3/0x490
[  182.044805][ T2979]  filename_unlinkat+0x1dc/0x410
[  182.047254][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'.
[  182.049757][ T2979]  __se_sys_unlink+0x2b/0xe0
[  182.063258][ T2979]  __x64_sys_unlink+0x1f/0x30
[  182.067937][ T2979]  x64_sys_call+0x2eb6/0x3020
[  182.072618][ T2979]  do_syscall_64+0x136/0x3c0
[  182.077223][ T2979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.083110][ T2979] 
[  182.085440][ T2979] read to 0xffff88811b52a6c0 of 4 bytes by task 2979 on cpu 1:
[  182.092983][ T2979]  do_readlinkat+0xa0/0x2f0
[  182.097493][ T2979]  __x64_sys_readlink+0x47/0x60
[  182.102338][ T2979]  x64_sys_call+0x2b51/0x3020
[  182.107013][ T2979]  do_syscall_64+0x136/0x3c0
[  182.111616][ T2979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.117504][ T2979] 
[  182.119821][ T2979] value changed: 0x08300080 -> 0x00300180
[  182.125522][ T2979] 
[  182.127832][ T2979] Reported by Kernel Concurrency Sanitizer on:
[  182.133997][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  182.142846][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  182.152901][ T2979] ==================================================================