last executing test programs:

6m24.422970822s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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")
io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
flock(r0, 0x6)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpgrp(0x0)
syz_pidfd_open(r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000003, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0xa, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0)
inotify_init()
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000040), 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
memfd_create(&(0x7f00000002c0)='\x103q}2\xa18/\xd5\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7R\x00\x00\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\xf2!\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\x02\xeaQy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xdaxO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xf0P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

6m23.492569645s ago: executing program 0 (id=11):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x40020005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
unshare(0x600)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000ffeffff030700000000000000020000000200000002000003ffff"], 0x0, 0x45, 0x0, 0x1, 0x2213}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000ffde000000009d00009500400000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7})
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
bind$tipc(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4932, 0x4)
io_uring_enter(r1, 0x4c08, 0x57b7, 0x14, 0x0, 0x0)

6m23.380330118s ago: executing program 0 (id=12):
r0 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r0, 0x10000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0x1006)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r4, 0xa, 0x13)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x8003)
fcntl$setlease(r4, 0x400, 0x2)

6m21.759138998s ago: executing program 0 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

6m21.747087308s ago: executing program 32 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

27.430938456s ago: executing program 4 (id=3641):
r0 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r0, 0x10000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0x1006)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x8003)
fcntl$setlease(r4, 0x400, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840)
write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7105b80203028202ae7816a54a80000601b9c2bba10122"], 0xcf)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)

26.569136787s ago: executing program 4 (id=3648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x8000)
ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
r5 = socket$packet(0x11, 0x3, 0x300)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x5a2e}, 0x0, 0x0, 0x2, 0x8, 0xb0, 0x2, 0xffff, 0x3, 0x5, 0x5bfb, r0, r3})
ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000000)={0x1, 0xfff, 0x2, 0x3})
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nomblk_io_submit}, {@errors_remount}, {@nodelalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x1, 0x3d0, &(0x7f00000023c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000680)='./bus\x00', 0x0, 0x4c800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000017c0)=0x7fffffff, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0)

26.120039808s ago: executing program 4 (id=3654):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000c, 0x110, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet(0x2, 0x5, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
fsopen(&(0x7f0000000340)='gadgetfs\x00', 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003500)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}, {&(0x7f0000000780)="72d5", 0x2}], 0x3, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x100)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x5ca3, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x1003}, {0x3, 0x6, 0x80}, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@mcast2, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in6=@empty, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800, 0xffffffff}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8, 0x0, 0xfffffffd}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x800)
unshare(0x8000000)
r3 = semget$private(0x0, 0x1, 0x3)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x7])
semtimedop(r3, &(0x7f00000002c0)=[{0x0, 0x1, 0x1800}, {0x3, 0x9, 0x800}], 0x2, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@empty, @in6=@loopback}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f00000008c0)=0xe8)
unshare(0x8000000)
socket$inet6_mptcp(0xa, 0x1, 0x106)

25.984888091s ago: executing program 4 (id=3658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1142b1, 0x0, 0xfffffffe, 0x9, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./proc\x00', 0x409, &(0x7f0000000100)={[{@nogrpid}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7, r2}, 0x38)
socket$kcm(0x2, 0x5, 0x84)
r3 = semget$private(0x0, 0x6, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180)=0x4, 0x4)
semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x8}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x200404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfdfffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=ANY=[@ANYBLOB="fc000000160033060000000000000080fff6d4192007cdbab6f60100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d2320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000c10000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c07350001000000"], 0xfc}}, 0x0)
unshare(0x480)

25.552784952s ago: executing program 4 (id=3666):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2403, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x27, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000002f80)=""/54)

25.496978773s ago: executing program 4 (id=3670):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x12, &(0x7f0000001340)={0x21, 0x0, 0x7})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0})
clock_getres(0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x2, 0x8}, 0x116078, 0xfffffffffffffffe, 0x4, 0x3, 0x6, 0xfff, 0xf}, 0x0, 0x1, r3, 0x1)
r4 = io_uring_setup(0x1551, &(0x7f0000000240)={0x0, 0x651f, 0x2, 0x1, 0x19e})
mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r4, 0xffffffff80000000)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x14c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x729, 0xff, 0x1, 0x13, 0x20, 0x2}}]}}]}, 0x14c}}, 0x4008000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffffffffffffffc9, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socket$kcm(0x1e, 0x4, 0x0)

16.464399091s ago: executing program 5 (id=3757):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

16.390263903s ago: executing program 5 (id=3758):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x86)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x25405, 0x0, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)=[0x0, 0xc])
pwrite64(r1, &(0x7f0000000140)='2', 0xfe63, 0xe7c)
socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

16.086772711s ago: executing program 5 (id=3760):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1142b1, 0x0, 0xfffffffe, 0x9, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./proc\x00', 0x409, &(0x7f0000000100)={[{@nogrpid}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$eJzs3c1rXGsZAPDnzCRpk8amrSJtBVuoUD9oJh9IExXElboIiAU3CjUm01gzyYTMpDaxYKq7LlyIoiAu3PsXuLEriyCuFbfiQnq5tzcX7r1wYS5zZqbNx0yS25vOpDm/H0zmfOU87zvD886Z9z1nTgCZdbX+J4kYjoh/RsRIY3bnBlcbT1vPHszVH0nUarfeTNLt6vOtTVv/dyYiNiPidER895sRP0r2xq2sbyzOlkrF1eZ8obq0Uqisb9y4uzS7UFwoLo9P3ZyenhqbnJg+sro++tVPHs385dsDf373l0+f/Ppvf60Xa7i5bns9jlKy7W9LX0R87VUE64F8sz6DvS4IL6X+/n0yIq6l+T8S+fTdfNjrYgFdUKvVah/UTnVavVkDTqxcegyc5EYjojGdy42ONo7hPxVDuVK5Uv3SnfLa8nzjWPlc9Ofu3C0Vx5rfFc5Ff1KfH0+nX8xP7JqfjIjzEfGb/GA6PzpXLs13t6kDdjmzK//fyTfyH8iIvl4XAOgZ+Q/ZJf8hu/bJ/9PdLAfQfT7/IbvkP2SX/Ifskv+QXS+V/z8/+nIA3efzH7Jrv/wf6GI5gK76zsxM/VFrXf8+f299bbF878Z8sbI4urQ2NzpXXl0ZXSiXF9JrdpYO2l+pXF4Z/3Ks3S9Ui5VqobK+cXupvLZcvZ1e13+72N+VWgGHcf7K438nEbH5lcH0Eds+8uUqnGy1WhK9vgYZ6I18rxsgoGd0/UN2fYTv+B1/JAx4vbX5id4dOlwH+PVYeSXhgC7I9boAQM9cv2T8D7JK/z9kl/5/yC7H+MBL9v/HQf3/2hc4vvT/Q3YNd7j/1ye23btrLCLORsS/8v2nWvf6Ak6C3P+T5vH/9ZHPDe9eO5C8lw4RDETET/9w63f3Z6vV1fH68reeL6/+vrl8ohflBw6rlaetPAYAsmvr2YO51qObcd/4RuMkhL3x+5p9k6fTMYShrWTHuQrJEZ27sPkwIi62i58073feGPkY2srviX+h+Zw0dpGWty+9b3p34l/aFv+z2+Jf/tivCmTD43r7M9Yu/3JpTrdGPod2DZAOH9HYZuf2L/e8/ct3aP+u7NjTZscYP/7jL/7XMf7DiMt74p9NI/Q14ydt4tfLdv2QdXz6g+99utO62p8a+2nX/rXUpwrVpZVCZX3jRvo7cgvF5fGpm9PTU2OTE9OFtI+60Oqp3uurF//xZL/6D3WI36jvf9rWv77sC4es//uf+fv3r+4T//PX2r//F9Ln9q//YER88ZDx35747w87ravHn+9Q/9w+8evLJg8Zv/Lbb7l2GACOkcr6xuJsqVRc7cHErV4E7d7EzEitdrR7HjwW9TJx9BNzP2uk43Epz+Js6aCWo/P3TeD18CLpD7P14KsvEAAAAAAAAAAAAHCgbpxO3Os6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcBB8GAAD//89H1kA=")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7, r2}, 0x38)
socket$kcm(0x2, 0x5, 0x84)
r3 = semget$private(0x0, 0x6, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180)=0x4, 0x4)
semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x8}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x200404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfdfffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=ANY=[@ANYBLOB="fc000000160033060000000000000080fff6d4192007cdbab6f60100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d2320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000c10000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c07350001000000"], 0xfc}}, 0x0)
unshare(0x480)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000084000000160a0101000b000000000000010000000900020073797a31000000000900010073797a3000000000580003805400038014000100"], 0x124}}, 0x0)

15.381673407s ago: executing program 5 (id=3762):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)

15.26677763s ago: executing program 5 (id=3764):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2403, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x27, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000002f80)=""/54)

15.181009512s ago: executing program 5 (id=3765):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', 0x0})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e25, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x5dc, 0x0, 0x30, 0x2, 0x3}, 0x9c)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0)

9.969286108s ago: executing program 33 (id=3670):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x12, &(0x7f0000001340)={0x21, 0x0, 0x7})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0})
clock_getres(0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x2, 0x8}, 0x116078, 0xfffffffffffffffe, 0x4, 0x3, 0x6, 0xfff, 0xf}, 0x0, 0x1, r3, 0x1)
r4 = io_uring_setup(0x1551, &(0x7f0000000240)={0x0, 0x651f, 0x2, 0x1, 0x19e})
mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r4, 0xffffffff80000000)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x14c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x729, 0xff, 0x1, 0x13, 0x20, 0x2}}]}}]}, 0x14c}}, 0x4008000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffffffffffffffc9, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socket$kcm(0x1e, 0x4, 0x0)

9.947762459s ago: executing program 3 (id=3801):
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xffffff78, 0x3, 0xfffc0000, 0x8, 0xf3, "0c41920887e8d2b791f800000000000000006b", 0x4a1, 0x1ff})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3)

9.849478051s ago: executing program 3 (id=3802):
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000b40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
sendmsg$kcm(r4, 0x0, 0x331e5c6805043cda)
r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3)
fsetxattr$security_evm(r5, &(0x7f0000000280), &(0x7f0000000340)=@v2={0x3, 0x1, 0x11, 0xcc8}, 0x9, 0x3)
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

9.168621838s ago: executing program 3 (id=3806):
r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
readv(r0, 0x0, 0x0)

9.057550771s ago: executing program 3 (id=3807):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaeaaaaaaaaaaaa86dd606410a600080001fe80000000000000000000000000001200000000000000000000000000000001"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

8.136453723s ago: executing program 3 (id=3810):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2403, 0x0)
setns(0xc9, 0x0)
socket(0x27, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/54)

8.071550134s ago: executing program 3 (id=3812):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x5)
r0 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r0, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0x40)

2.45736112s ago: executing program 2 (id=3837):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)

2.333428633s ago: executing program 2 (id=3839):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2403, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002f80)=""/54)

2.277568695s ago: executing program 2 (id=3840):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0xe5d7)
r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12a)
close(r1)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x59, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1"}]}], {0x14}}, 0xc4}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0)

2.212843096s ago: executing program 1 (id=3841):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r1, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r0, r1, 0x10, 0x9, r1, @void, @value=r1, @void, @void, r2}, 0x20)
readv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x13c, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELSET={0x160, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0xc8, 0xd, 0x1, 0x0, "e686b96257d34b8771732f21bc64ac36450576a2a0ae618e6c8297df87d4b8247ea3edc876cec85ed007eda5f34ec85452dd621452a17a9ac2cb8938df09b0317f73dc59ba391d08c54a4f6815686889dd6b0a44b6f0a9b6fa450b39e88bc41b04e2fa6d1ee67557fb677e8d22f983c40b3bd512ee1b5412d824075e63f5c47d4f0d9da47b610ea45b26b87e0a75b6a9370a372b2ccca40d998eed4b449a96df488fa4249e11e227d2ad0d6bdd6f7f94243f90d5875ab9cf80c165a3ff2b273e37c3c734"}, @NFTA_SET_USERDATA={0x56, 0xd, 0x1, 0x0, "16291f25f6126ad4f9d8f1c3f0aca4f2918a6af03678c605aba4be2a2790ce8f288aea16e66842d07539806250dd335b4d424ee675151c031b7b2a73adca729814b7bfc957c8bce45e07b48c766d08a8a585"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x118, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xa6, 0x7, 0x1, 0x0, "c698394b3a6e392216c2cb4b419563f86e9b60701911b19b10ca8ae2c4f03d2b9a936788e7e5da06c289e976ede63a2947e7283c67ce68aebb3cd8fdce1bc492f09ab9809838876c99a2a4d740846731b19c0a8d81e2b4c5772feeb732b4e69a787de4f87aa93d579cb2477de8c2566caf78a8473c4e3644f3f599ed01439ef45b57fb7f7b696b0da450f738e8b737cd131cf76c29991d97893bcd70a84164b74cd0"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x13c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "27a7baa12ed4d84b3ab580d9214b2a4617921fac876c8214bf3398ee09aadd5b750ed5e1c9f7e788118ac496d95995816c8608a0f8116d1e9d71b4011171e189bee194c635b97e1cf6b75238be8f68d7331ee532b9e8ccbd794587c8d05ad31c4b3a749daf512f8c7c6553f73a8765b07acc50627948f802911da7b1c7e216117955abdb03e2196dbea517342e463bc5cb5b7920411ae336505aa847d070a7252820f987514f0157a5bb03c6f9dad391bc436c5a573139ffc2ce863101da7ddb314be21b4b75ae02399325d1ba81d399381d7e389e57d689609b49dd4e2a4aa0c091f4c62a88868521ab996be808ee4ca8646961b556e6363e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x50c, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4ec, 0x3, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x190, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xb7, 0x1, "e2f4c44ab9fa1795a50b2a370fd4dbf2aaf6f72425db13796381116b7f0a01119c951da2bc84e199ab4d2763e4feb62283213ce2b2f4c317e9bfd403fbdba0182c0254fd02f8c2c405e7c33178ef7f96719fab9dbc65d5fbf21305e0c614169587c18eba2a470d642f1219293ece97c4826ae5aa61a719a38f2e32215d6a9e01f0a36f025bc09408bfc97c7643d2eb6c8588106c75219f67207ac2e93e0a766ffdaab3eaf2fcdb009196075cbf1cb61aed194a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "c0a6166564b09df027eeae3968126559b35ae1cf74f2b547843aa794756c7012e39f710f50a3840e98331057858c789990ae5d40eb650a21d87ff75688cac5873e5820ca16230b867fc5720ec54d451b4525359bf1c767cc4a043473ead3606dd7afbd14638ef7764d40240606a5589ce3c085a8b423165f8e260ffa050b49b1fe15333dfdbcd6d19c31e0423e861b0702501bdf4fedd6e75c2567efb83e8d674b35c12ff3aa97a876f071ce91c76f0f750cd75ebc47d04db864ffd30f"}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8}]}}}]}, {0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "79d571301828e7684d249de288c215759c879c3941655b2bcb75c5540585b08b25c528bbe9b624081b9519158b0e88931b3940efe5fa4e0015a20c22e22cb4d48de36be592e8e1ebdda0f66458fd31745d3308aa66b8c76e75e6508412d89e73c516d3fbcb8b524426b78dd158f6662f56396bdcf192ce29837a920826120c76afbb54633736a73375dc7cfb23d1bfe91c0239d3d6dd73dce42c"}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "4a4a44d2eb268d86f7c57036318f5b03bddc9ffdb6e14add16f125acc42d4836ac9f6213910416bf3ff97b90f73ad186ec570e1dcbbcf93b2ca4ae87023e47390d8aaa68df19101c65"}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "d2852f1bfcb6e8c2768e"}, @NFTA_DATA_VALUE={0xe2, 0x1, "f0acf780985c454aabaeb491e1ff515d02e10c22eba158ca961b0fe2ccace9c3af40c32339bce789dce1c19cfa905ca1a2fb1b3c4c7b0d4c0dcef5965b3f9c39b391dc141890ecda3e405eb62f4973bb61929647267135e6430cb35caf17a1644d908f2f4b40451bb1fe88eb20cb53caf1c455d5a379df6b9621f594b8e1f463161f7f8e8b6920370cbc2d59ff1893eb414dafc41b3ccd56af93b071f8fa93d5d5f7c85e0a47cc3bb01678a7934c0fba2f1868879992e1dd62db4be626c742070bcb935d616b82f1e5b453955ddc4cd327e3da657c8d47d079724362f287"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xaf8}}, 0x80)

2.160245397s ago: executing program 2 (id=3842):
r0 = socket$netlink(0x10, 0x3, 0x5)
r1 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r1, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0x40)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)

2.077598139s ago: executing program 1 (id=3844):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)

2.06881257s ago: executing program 2 (id=3845):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', 0x0}) (fail_nth: 1)

1.854776675s ago: executing program 6 (id=3847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x3, 0x4}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
rt_sigqueueinfo(r1, 0x12, &(0x7f0000001340)={0x21, 0x0, 0x7})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0})
clock_getres(0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x2, 0x8}, 0x116078, 0xfffffffffffffffe, 0x4, 0x3, 0x6, 0xfff, 0xf}, 0x0, 0x1, r3, 0x1)
r4 = io_uring_setup(0x1551, &(0x7f0000000240)={0x0, 0x651f, 0x2, 0x1, 0x19e})
mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r4, 0xffffffff80000000)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x14c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x729, 0xff, 0x1, 0x13, 0x20, 0x2}}]}}]}, 0x14c}}, 0x4008000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffffffffffffffc9, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)

1.816264156s ago: executing program 1 (id=3848):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff850000001300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x6d2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010023bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a0dd030000720100140003006272696467655f736c6176654f30000008000400080000000a000100aaaaaaaa3b01c42c"], 0x48}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.816019856s ago: executing program 2 (id=3849):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x8)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
splice(r3, 0x0, r5, 0x0, 0x6, 0x0)
vmsplice(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)="16", 0x1}], 0x1, 0xd)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xc)
ioctl$FIONREAD(r5, 0x541b, &(0x7f00000002c0))
r6 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000000000007501acb60000000408000a"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4044)
r8 = openat$cgroup_ro(r6, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3})

1.317513858s ago: executing program 6 (id=3850):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)

1.300476378s ago: executing program 1 (id=3851):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpid()
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0)
epoll_create(0x1)
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, 0x0, 0x0, 0x0)
semctl$GETZCNT(r1, 0x0, 0xf, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x208205, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@stripe={'stripe', 0x3d, 0x86}}, {@nojournal_checksum}, {@acl}]}, 0x81, 0x63d, &(0x7f0000000600)="$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")
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r2, 0x89f0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x200000)
ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000300)=""/155)

1.266723919s ago: executing program 6 (id=3852):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1142b1, 0x0, 0xfffffffe, 0x9, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./proc\x00', 0x409, &(0x7f0000000100)={[{@nogrpid}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7, r2}, 0x38)
socket$kcm(0x2, 0x5, 0x84)
r3 = semget$private(0x0, 0x6, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180)=0x4, 0x4)
semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x8}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x200404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=ANY=[@ANYBLOB="fc000000160033060000000000000080fff6d4192007cdbab6f60100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d2320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000c10000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c07350001000000"], 0xfc}}, 0x0)
unshare(0x480)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000084000000160a0101000b000000000000010000000900020073797a31000000000900010073797a3000000000580003805400038014000100"], 0x124}}, 0x0)

562.942476ms ago: executing program 1 (id=3853):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0xe5d7)
r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12a)
close(r1)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x59, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1"}]}], {0x14}}, 0xc4}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0)

384.14312ms ago: executing program 1 (id=3854):
socket$xdp(0x2c, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8P7Uv7h/al/UNbWvov8fnjVrJrQuv/8j+14+hqnhhw+xNz/a0vHvVnza58hR3NFS6eftH0mpsrnEQU4aQN4qqRiLQy5a/8aZKlKZ3lMl3N7+raJ9JlyzyxXG10ruiZGD01amNfnuiOiGbXc2nNarW4QiSeMgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxo/wQAAP//HfHjTg==")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x2, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r0 = socket(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x4044805)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc)
write(r1, &(0x7f00000004c0)='\n', 0x1)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000059c0)}}, {{&(0x7f0000005a40)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @bcast]}, 0x80, &(0x7f0000007ec0), 0x0, &(0x7f0000007f80)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd69}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x99}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000009480)=[{0x0}, {&(0x7f0000008080)}, {&(0x7f0000008100)}, {&(0x7f0000008140)="057f343d952aee2ae1b16181f2b6a98b95390511b29a1076bec41a477d23621cce2a977e93beb7c391e1a91f80deef5c29778fd90a5f1d1385135f79d7d73864a9857b577a9b86356e03b26ba6e470489da756ee183b58ee305b01b60f0ac6ece392becba8cea9a6ce77ec79bf18c4f0e4ea3f36d99fad74b80e7801edf0cdffbced5948637ede810062c3a2fd0612ca1efa517c947966b67f7c9ae105ecc8a1c129791313609868a5ab40e75cfa2722d6f752dc47fa71299a4af9de1062c2645816931af5c6fe1369718d30cbdcb89d9d1fb5a4451df9b4f60b88d4eea3b7ece11cfad95f000a9bd3d3d1a3811c16c9a9da9be6382b", 0xf6}, {&(0x7f0000008240)="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", 0x1000}, {&(0x7f0000009240)="c28ce3f191d096595bcd0543e585af0a7afad09ccc36a0c5a50922e258ed204710edc960cb61948a72d6b9f8437a020aca96f571ab4416f600de7d6b00a43ebd4d246a14b89f0bf0f3a0ffa486f6dbb2ebe2f4ace54a7f5a2b35eb834c8cf00ad79eb167aacfe9f8", 0x68}, {0x0}, {&(0x7f0000009340)}, {&(0x7f0000009380)="b7ca7da1452cde09b843a355aece5e20e7a33ad17e1b4bed9daa761b877d729ed884b7882b3f6b702afda8c36945b8ebec44554a80249014ff99c70b50bacdd6be36c22bc63492dc130f23ec16822cc3f9e522ca7b84b1da51890928d4d3f77b5ed560b25a848b116733c48482191a68328ae5f39e64c0f5bc078f8736af802dc0a269f16e6fd19f5687723838e8f491b00007db2658d6e294fa3856f283169a6a244e5743f324ec1b7ecd1e5bbe0f43c83e2aa8935ccb604a4372d148b5f37a60bb1a8b4f0002e72f1a30a7b6a0ee", 0xcf}], 0x9, &(0x7f0000009540)=[@mark={{0x14, 0x1, 0x24, 0x6e63}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}}, {{&(0x7f00000095c0)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000097c0)=[{0x0}, {&(0x7f0000009740)="cb79d5a6", 0x4}, {&(0x7f0000009780)="956c379e66490e664a072f4eb5022061af9b824a01510e82b75ded91fcef", 0x1e}], 0x3, &(0x7f0000009800)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xa8}}], 0x6, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x78, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x8c9b, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x44)

318.420812ms ago: executing program 6 (id=3855):
r0 = socket$netlink(0x10, 0x3, 0x5)
r1 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r1, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0x40)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)

151.243076ms ago: executing program 34 (id=3765):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', 0x0})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e25, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x5dc, 0x0, 0x30, 0x2, 0x3}, 0x9c)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0)

147.223396ms ago: executing program 6 (id=3857):
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x4, 0x3, 0x800000, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write$P9_RREAD(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000019100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250f0000000500380001000000050029000000cc6a2af02c000000000005002d00010000002d5db39239b23217020dcf6195ed720f8e9cdd15fc7d1487782081d322acb4252e4e4a4aa8cef70d1c25f93863759a3fdee2637ffc897c5b"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x45)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000019240)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000019200)={&(0x7f0000019380)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYBLOB="00042abd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000900070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090004000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000900040000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000900060000000800010070636900110002003030307bf530303a31302e300000000008000300010000000800090004000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
bind$rds(0xffffffffffffffff, &(0x7f00000191c0)={0x2, 0x5e23, @private=0xa010101}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x4000054)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001280)={{0x2, 0x4e22, @remote}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x16, {0x2, 0x4e24, @empty}, 'bridge0\x00'})
r6 = syz_open_procfs(0x0, &(0x7f0000019280)='net/kcm\x00')
pread64(r6, &(0x7f0000000080)=""/102339, 0x18fc3, 0xc2a)
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000000))
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x110, 0xffffffffffffffff, 0x80000000)

0s ago: executing program 6 (id=3858):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x200000000006}, 0x100800, 0x10003, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

T21402] netlink: 'syz.2.3345': attribute type 3 has an invalid length.
[  366.196781][T21402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3345'.
[  366.212944][T21397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3345'.
[  366.224312][T21397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3345'.
[  366.241465][T21269] hsr_slave_0: entered promiscuous mode
[  366.247870][T21269] hsr_slave_1: entered promiscuous mode
[  366.253883][T21269] debugfs: 'hsr0' already exists in 'hsr'
[  366.269650][T21269] Cannot create hsr debugfs directory
[  366.344893][T21412] loop2: detected capacity change from 0 to 512
[  366.358951][   T69] IPVS: stop unused estimator thread 0...
[  366.406122][T21412] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3348: Directory hole found for htree index block 0
[  366.437242][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6
[  366.440160][T21412] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  366.445571][T21412] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  366.454665][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  366.454686][    C0] EXT4-fs (loop2): initial error at time 1787321276: dx_probe:791: inode 2
[  366.454715][    C0] EXT4-fs (loop2): last error at time 1787321276: dx_probe:791: inode 2
[  366.518901][T21412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.555382][T21439] msdos: Unknown parameter 'noexec'
[  366.561519][T21412] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3348: Directory hole found for htree index block 0
[  366.607486][T21412] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3348: Directory hole found for htree index block 0
[  366.629502][T21444] journal_path: Lookup failure for './file1'
[  366.635520][T21444] EXT4-fs: error: could not find journal device path
[  366.647260][T21412] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3348: Directory hole found for htree index block 0
[  366.674653][T21439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3352: bg 0: block 393: padding at end of block bitmap is not set
[  366.723834][T21453] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3348: Directory hole found for htree index block 0
[  366.740427][T21439] loop1: lost filesystem error report for type 5 error -117
[  366.740574][T21439] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  366.748028][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  366.748050][    C0] EXT4-fs (loop1): initial error at time 1787321276: ext4_validate_block_bitmap:445
[  366.748076][    C0] EXT4-fs (loop1): last error at time 1787321276: ext4_validate_block_bitmap:445
[  366.782894][T21439] loop1: lost filesystem error report for type 5 error -117
[  366.785019][T18511] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  366.802157][T21439] EXT4-fs (loop1): 2 truncates cleaned up
[  366.802792][T21269] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  366.818340][T21269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  366.820318][T21412] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3348: Directory hole found for htree index block 0
[  366.826299][T21269] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  366.826948][T21439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.847431][T21444] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  366.870265][T21444] System zones: 0-1, 3-36
[  366.885540][T21269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  366.904240][T21269] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  366.926319][T21269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  366.935503][T21444] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3353: bad orphan inode 134217728
[  366.939087][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.947585][T21269] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  366.962337][T21444] loop4: lost filesystem error report for type 5 error -117
[  366.966477][T21444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.993183][T21269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  367.010294][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.050340][T20503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.103464][T21269] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.142259][T21269] 8021q: adding VLAN 0 to HW filter on device team0
[  367.151210][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.158304][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.177201][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  367.177216][   T28] audit: type=1400 audit(1787321277.200:5860): avc:  denied  { map } for  pid=21485 comm="syz.4.3357" path="socket:[44188]" dev="sockfs" ino=44188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  367.179603][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.193608][   T28] audit: type=1400 audit(1787321277.200:5861): avc:  denied  { read } for  pid=21485 comm="syz.4.3357" path="socket:[44188]" dev="sockfs" ino=44188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  367.206850][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.236747][   T28] audit: type=1400 audit(1787321277.240:5862): avc:  denied  { write } for  pid=21482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.353452][   T28] audit: type=1400 audit(1787321277.380:5863): avc:  denied  { write } for  pid=21499 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.535423][T21269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.578025][   T28] audit: type=1400 audit(1787321277.600:5864): avc:  denied  { write } for  pid=21513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.639767][   T28] audit: type=1400 audit(1787321277.650:5865): avc:  denied  { write } for  pid=21539 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.750079][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'.
[  367.805417][   T28] audit: type=1400 audit(1787321277.830:5866): avc:  denied  { write } for  pid=21543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.852711][T21269] veth0_vlan: entered promiscuous mode
[  367.866298][   T28] audit: type=1400 audit(1787321277.860:5867): avc:  denied  { write } for  pid=21566 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  367.889468][T21269] veth1_vlan: entered promiscuous mode
[  367.918299][T21269] veth0_macvtap: entered promiscuous mode
[  367.933641][T21269] veth1_macvtap: entered promiscuous mode
[  367.949099][T21269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.970210][T21269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.982682][   T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.991586][   T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.113223][ T4021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.130256][ T4021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.397737][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3375'.
[  368.417172][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3375'.
[  368.540618][T21598] bridge_slave_0: left allmulticast mode
[  368.546515][T21598] bridge_slave_0: left promiscuous mode
[  368.553721][T21598] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.581100][T21598] bridge_slave_1: left allmulticast mode
[  368.611373][T21598] bridge_slave_1: left promiscuous mode
[  368.640593][T21598] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.669451][T21598] bond0: (slave bond_slave_0): Releasing backup interface
[  368.718174][T21598] bond0: (slave bond_slave_1): Releasing backup interface
[  368.785749][T21598] team0: Port device team_slave_0 removed
[  368.823844][T21598] team0: Port device team_slave_1 removed
[  368.833225][   T28] audit: type=1326 audit(1787321278.850:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.3385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  368.840478][T21598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.880075][T21598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.883311][   T28] audit: type=1326 audit(1787321278.890:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.3385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  368.916411][T21598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.927233][T21598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.939196][T21598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  368.965424][T21612] bridge0: port 1(syz_tun) entered blocking state
[  368.986315][T21612] bridge0: port 1(syz_tun) entered disabled state
[  368.997282][T21612] syz_tun: entered allmulticast mode
[  369.003584][T21612] syz_tun: entered promiscuous mode
[  369.026578][T21612] bridge0: port 1(syz_tun) entered blocking state
[  369.033527][T21612] bridge0: port 1(syz_tun) entered forwarding state
[  369.055277][T21618] set_capacity_and_notify: 4 callbacks suppressed
[  369.055293][T21618] loop1: detected capacity change from 0 to 1024
[  369.085957][T21618] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  369.096869][T21618] EXT4-fs (loop1): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  369.112614][T21618] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  369.122179][T21618] EXT4-fs (loop1): orphan cleanup on readonly fs
[  369.132456][T21618] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.3387: Inode bitmap for bg 0 marked uninitialized
[  369.145915][T21618] loop1: lost filesystem error report for type 5 error -117
[  369.150586][T21618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  369.205819][T21627] loop4: detected capacity change from 0 to 732
[  369.488894][T21656] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  369.505616][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.525082][T21656] loop4: detected capacity change from 0 to 512
[  369.552329][T21656] EXT4-fs (loop4): invalid #clusters per group: 95
[  369.724724][T21692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3403'.
[  369.790323][T21695] loop1: detected capacity change from 0 to 8192
[  369.892313][T21694] loop2: detected capacity change from 0 to 8192
[  370.017485][T21708] loop5: detected capacity change from 0 to 512
[  370.032139][T21708] EXT4-fs: inline encryption not supported
[  370.106500][T21708] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  370.153257][T21708] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  370.184198][T21708] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.3408: bg 0: block 248: padding at end of block bitmap is not set
[  370.198786][T21708] loop5: lost filesystem error report for type 5 error -117
[  370.199059][T21708] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.3408: Failed to acquire dquot type 1
[  370.206491][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  370.206531][    C0] EXT4-fs (loop5): last error at time 1787321280: ext4_validate_block_bitmap:445
[  370.234150][T21715] syz_tun: left allmulticast mode
[  370.237192][T21708] loop5: lost filesystem error report for type 5 error -28
[  370.242355][T21715] syz_tun: left promiscuous mode
[  370.256170][T21708] EXT4-fs (loop5): 1 truncate cleaned up
[  370.257867][T21715] bridge0: port 1(syz_tun) entered disabled state
[  370.262413][T21708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  370.282635][T21708] FAULT_INJECTION: forcing a failure.
[  370.282635][T21708] name failslab, interval 1, probability 0, space 0, times 0
[  370.303952][T21708] CPU: 0 UID: 0 PID: 21708 Comm: syz.5.3408 Not tainted syzkaller #0 PREEMPT(lazy) 
[  370.304020][T21708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  370.304034][T21708] Call Trace:
[  370.304040][T21708]  <TASK>
[  370.304048][T21708]  __dump_stack+0x1d/0x30
[  370.304072][T21708]  dump_stack_lvl+0x95/0xd0
[  370.304095][T21708]  dump_stack+0x15/0x1b
[  370.304141][T21708]  should_fail_ex+0x262/0x280
[  370.304228][T21708]  should_failslab+0x8c/0xb0
[  370.304254][T21708]  kmem_cache_alloc_lru_noprof+0x81/0x3e0
[  370.304352][T21708]  ? __d_alloc+0x34/0x320
[  370.304369][T21708]  ? __d_alloc+0x34/0x320
[  370.304389][T21708]  __d_alloc+0x34/0x320
[  370.304412][T21708]  d_alloc+0x2e/0x100
[  370.304433][T21708]  lookup_one_qstr_excl+0x95/0x240
[  370.304476][T21708]  filename_create+0x155/0x220
[  370.304538][T21708]  filename_mkdirat+0x81/0x300
[  370.304565][T21708]  __se_sys_mkdirat+0x32/0xf0
[  370.304590][T21708]  __x64_sys_mkdirat+0x43/0x50
[  370.304650][T21708]  x64_sys_call+0x368/0x2550
[  370.304740][T21708]  do_syscall_64+0x112/0x360
[  370.304762][T21708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.304784][T21708] RIP: 0033:0x7f34e24acf47
[  370.304876][T21708] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.304895][T21708] RSP: 002b:00007f34e0f06e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  370.304941][T21708] RAX: ffffffffffffffda RBX: 00007f34e0f06ee0 RCX: 00007f34e24acf47
[  370.304960][T21708] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c
[  370.304976][T21708] RBP: 0000200000000340 R08: 0000200000000080 R09: 0000000000000000
[  370.305033][T21708] R10: 0000200000000340 R11: 0000000000000246 R12: 0000200000000100
[  370.305049][T21708] R13: 00007f34e0f06ea0 R14: 0000000000000000 R15: 0000000000000000
[  370.305070][T21708]  </TASK>
[  370.532569][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  370.542512][T21715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  370.562624][T21728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3416'.
[  370.824060][T21750] loop2: detected capacity change from 0 to 512
[  370.834069][T21750] journal_path: Lookup failure for './file1'
[  370.840337][T21750] EXT4-fs: error: could not find journal device path
[  371.007887][T21750] loop2: detected capacity change from 0 to 1024
[  371.021906][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3431'.
[  371.042788][T21750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  371.051481][T21750] System zones: 0-1, 3-36
[  371.064349][T21750] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3424: bad orphan inode 134217728
[  371.077069][T21750] loop2: lost filesystem error report for type 5 error -117
[  371.081749][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  371.095487][    C0] EXT4-fs (loop2): initial error at time 1787321281: ext4_orphan_get:1429
[  371.104042][    C0] EXT4-fs (loop2): last error at time 1787321281: ext4_orphan_get:1429
[  371.127621][T21750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.255823][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.281135][T21780] loop3: detected capacity change from 0 to 2048
[  371.323413][T21780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  371.639245][ T4021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  371.658084][ T4021] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2040 with error 28
[  371.707328][ T4021] EXT4-fs (loop3): This should not happen!! Data will be lost
[  371.707328][ T4021] 
[  371.723746][ T4021] EXT4-fs (loop3): Total free blocks count 0
[  371.731260][ T4021] EXT4-fs (loop3): Free/Dirty block details
[  371.753169][ T4021] EXT4-fs (loop3): free_blocks=2415919104
[  371.763956][ T4021] EXT4-fs (loop3): dirty_blocks=2656
[  371.772359][ T4021] EXT4-fs (loop3): Block reservation details
[  371.791501][ T4021] EXT4-fs (loop3): i_reserved_data_blocks=194
[  371.837946][ T4021] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2040 with max blocks 1618 with error 28
[  372.357258][T21802] loop3: detected capacity change from 0 to 128
[  372.638602][   T28] kauditd_printk_skb: 96 callbacks suppressed
[  372.638616][   T28] audit: type=1326 audit(1787321282.660:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21806 comm="syz.4.3448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f955df4e0d9 code=0x0
[  372.680795][T21819] EXT4-fs: quotafile must be on filesystem root
[  373.512848][T21837] netlink: 'syz.3.3457': attribute type 39 has an invalid length.
[  373.616823][T21838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.681999][   T28] audit: type=1400 audit(1787321283.700:5965): avc:  denied  { write } for  pid=21818 comm="syz.5.3453" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  373.748500][   T28] audit: type=1400 audit(1787321283.760:5966): avc:  denied  { ioctl } for  pid=21818 comm="syz.5.3453" path="/20/file0/file1" dev="loop5" ino=15 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  373.819159][T21836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3457'.
[  373.984336][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.097040][T21844] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3462'.
[  374.497081][T21855] set_capacity_and_notify: 2 callbacks suppressed
[  374.497221][T21855] loop4: detected capacity change from 0 to 1024
[  374.632452][T21855] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  374.856184][T21855] System zones: 0-1, 3-36
[  374.889007][T21863] loop5: detected capacity change from 0 to 1024
[  374.907403][T21855] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3461: bad orphan inode 134217728
[  374.931951][T21863] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  374.947866][T21855] loop4: lost filesystem error report for type 5 error -117
[  374.948484][T21855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.971118][T21863] EXT4-fs (loop5): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  374.987639][T21863] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  375.005457][T21863] EXT4-fs (loop5): orphan cleanup on readonly fs
[  375.039901][T21863] EXT4-fs error (device loop5): ext4_read_inode_bitmap:169: comm syz.5.3466: Inode bitmap for bg 0 marked uninitialized
[  375.060658][T20503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.094340][T21863] loop5: lost filesystem error report for type 5 error -117
[  375.094813][T21863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.171206][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3470'.
[  375.239977][T21874] netlink: 'syz.4.3470': attribute type 39 has an invalid length.
[  375.295125][T21878] loop3: detected capacity change from 0 to 512
[  375.327544][T21878] journal_path: Lookup failure for './file1'
[  375.343322][T21878] EXT4-fs: error: could not find journal device path
[  375.533475][   T28] audit: type=1400 audit(1787321285.470:5967): avc:  denied  { write } for  pid=21886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.627236][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.647717][   T28] audit: type=1400 audit(1787321285.500:5968): avc:  denied  { write } for  pid=21898 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.701387][T21909] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3475'.
[  375.720464][T21878] loop3: detected capacity change from 0 to 1024
[  375.766852][   T28] audit: type=1400 audit(1787321285.790:5969): avc:  denied  { write } for  pid=21901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.800895][T21878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  375.824436][T21878] System zones: 0-1, 3-36
[  375.858797][T21932] loop1: detected capacity change from 0 to 512
[  375.860315][T21925] loop4: detected capacity change from 0 to 8192
[  375.866242][   T28] audit: type=1400 audit(1787321285.840:5970): avc:  denied  { write } for  pid=21926 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.907563][T21878] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3473: bad orphan inode 134217728
[  375.930282][T21878] loop3: lost filesystem error report for type 5 error -117
[  375.935887][T21932] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3479: Directory hole found for htree index block 0
[  375.970683][T21932] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  375.972474][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  375.972533][T21932] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  375.973144][T21932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.981844][    C1] EXT4-fs (loop1): initial error at time 1787321285: dx_probe:791
[  375.996046][T21878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.996536][    C1] : inode 2
[  375.996796][    C1] EXT4-fs (loop1): last error at time 1787321285: dx_probe:791: inode 2
[  376.059559][T21928] loop5: detected capacity change from 0 to 512
[  376.077395][T21928] journal_path: Lookup failure for './file1'
[  376.084281][T21928] EXT4-fs: error: could not find journal device path
[  376.113508][T21878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3473'.
[  376.118588][T21932] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3479: Directory hole found for htree index block 0
[  376.132425][T21928] loop5: detected capacity change from 0 to 1024
[  376.154125][T21928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  376.154507][T21932] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3479: Directory hole found for htree index block 0
[  376.187925][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.192074][T21928] System zones: 0-1, 3-36
[  376.204520][T21932] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3479: Directory hole found for htree index block 0
[  376.205218][T21928] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3478: bad orphan inode 134217728
[  376.229108][T21928] loop5: lost filesystem error report for type 5 error -117
[  376.236067][T21928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.299330][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.322161][T21939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  376.360878][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3478'.
[  376.411423][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.504596][T21951] loop1: detected capacity change from 0 to 8192
[  376.536225][T21945] loop4: detected capacity change from 0 to 512
[  376.579107][T21945] journal_path: Lookup failure for './file1'
[  376.579150][T21945] EXT4-fs: error: could not find journal device path
[  376.637469][T21962] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  376.637612][T21962] EXT4-fs (loop2): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  376.639377][T21962] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  376.639455][T21962] EXT4-fs (loop2): orphan cleanup on readonly fs
[  376.643374][T21962] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.3489: Inode bitmap for bg 0 marked uninitialized
[  376.643468][T21962] loop2: lost filesystem error report for type 5 error -117
[  376.643993][T21962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  376.805509][T21945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  376.805670][T21945] System zones: 0-1, 3-36
[  376.807853][T21945] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3482: bad orphan inode 134217728
[  376.807901][T21945] loop4: lost filesystem error report for type 5 error -117
[  376.810256][T21945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.839941][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'.
[  376.884336][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.884763][T20503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.886122][T21980] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  376.886263][T21980] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.009270][   T28] audit: type=1400 audit(1787321287.030:5971): avc:  denied  { write } for  pid=21972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.081199][   T28] audit: type=1400 audit(1787321287.110:5972): avc:  denied  { write } for  pid=21994 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.335637][   T28] audit: type=1400 audit(1787321287.360:5973): avc:  denied  { write } for  pid=22002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.478407][T22015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  377.708207][T18511] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  377.766532][T22041] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  377.783390][T22041] EXT4-fs (loop3): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  377.835951][T22041] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  377.853050][T22041] EXT4-fs (loop3): orphan cleanup on readonly fs
[  377.872461][T22041] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.3502: Inode bitmap for bg 0 marked uninitialized
[  377.886909][T22041] loop3: lost filesystem error report for type 5 error -117
[  377.888828][T22041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  377.912383][T22044] journal_path: Lookup failure for './file1'
[  377.918763][T22044] EXT4-fs: error: could not find journal device path
[  378.126074][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  378.126154][   T28] audit: type=1400 audit(1787321288.150:5976): avc:  denied  { write } for  pid=22054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.204453][   T28] audit: type=1400 audit(1787321288.230:5977): avc:  denied  { write } for  pid=22068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.361523][T22044] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  378.383643][T22044] System zones: 0-1
[  378.383927][   T28] audit: type=1400 audit(1787321288.410:5978): avc:  denied  { write } for  pid=22070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.412515][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.420915][T22044] , 3-36
[  378.433996][T22044] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3503: bad orphan inode 134217728
[  378.444803][   T28] audit: type=1400 audit(1787321288.460:5979): avc:  denied  { write } for  pid=22085 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.474257][T22044] loop5: lost filesystem error report for type 5 error -117
[  378.479689][T22044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.530411][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3503'.
[  378.583537][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.729921][T22092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  378.844883][T22103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  379.005633][T22119] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  379.015287][T22117] journal_path: Lookup failure for './file1'
[  379.031563][T22119] EXT4-fs (loop1): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  379.031968][T22117] EXT4-fs: error: could not find journal device path
[  379.061307][T22101] bridge_slave_0: left allmulticast mode
[  379.076581][T22119] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  379.091212][T22101] bridge_slave_0: left promiscuous mode
[  379.101035][T22119] EXT4-fs (loop1): orphan cleanup on readonly fs
[  379.113138][T22101] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.123770][T22119] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.3516: Inode bitmap for bg 0 marked uninitialized
[  379.187661][T22119] loop1: lost filesystem error report for type 5 error -117
[  379.190714][T22119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  379.271257][T22117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  379.287925][T22117] System zones: 0-1, 3-36
[  379.306449][T22117] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3515: bad orphan inode 134217728
[  379.321935][T22117] loop3: lost filesystem error report for type 5 error -117
[  379.336066][T22117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.394535][T22117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'.
[  379.581477][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.590786][T22101] bridge_slave_1: left allmulticast mode
[  379.596563][T22101] bridge_slave_1: left promiscuous mode
[  379.604624][T22101] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.660844][T22101] bond0: (slave bond_slave_0): Releasing backup interface
[  379.669427][T22135] set_capacity_and_notify: 10 callbacks suppressed
[  379.669441][T22135] loop2: detected capacity change from 0 to 512
[  379.692384][T22101] bond0: (slave bond_slave_1): Releasing backup interface
[  379.719435][T22135] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3518: Directory hole found for htree index block 0
[  379.732135][T22135] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  379.732248][T22135] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  379.749534][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  379.749563][    C0] EXT4-fs (loop2): initial error at time 1787321289: dx_probe:791: inode 2
[  379.749607][    C0] EXT4-fs (loop2): last error at time 1787321289: dx_probe:791: inode 2
[  379.764441][T22101] team0: Port device team_slave_0 removed
[  379.766116][T22135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.793913][T22101] team0: Port device team_slave_1 removed
[  379.811786][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.819422][T22101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.829409][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.839130][T22135] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3518: Directory hole found for htree index block 0
[  379.853368][T22101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.864817][T22101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  379.887144][T22135] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3518: Directory hole found for htree index block 0
[  379.936751][T22135] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3518: Directory hole found for htree index block 0
[  379.959821][T22151] loop4: detected capacity change from 0 to 512
[  379.982342][T22151] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.3522: corrupted in-inode xattr: e_name out of bounds
[  380.001431][T22141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  380.008761][T22151] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  380.027005][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.031333][T22151] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3522: couldn't read orphan inode 15 (err -117)
[  380.045181][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  380.045203][    C0] EXT4-fs (loop4): initial error at time 1787321290: ext4_iget_extra_inode:5210: inode 15
[  380.045246][    C0] EXT4-fs (loop4): last error at time 1787321290: ext4_iget_extra_inode:5210: inode 15
[  380.083425][T22151] loop4: lost filesystem error report for type 5 error -117
[  380.085270][T22151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.118453][   T28] audit: type=1400 audit(1787321290.140:5980): avc:  denied  { write } for  pid=22148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.180335][   T28] audit: type=1400 audit(1787321290.200:5981): avc:  denied  { write } for  pid=22169 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.208623][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.230571][T22168] loop5: detected capacity change from 0 to 512
[  380.254190][T22168] journal_path: Lookup failure for './file1'
[  380.278262][T22168] EXT4-fs: error: could not find journal device path
[  380.359675][T22168] loop5: detected capacity change from 0 to 1024
[  380.385482][   T28] audit: type=1400 audit(1787321290.410:5982): avc:  denied  { write } for  pid=22171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.454882][   T28] audit: type=1400 audit(1787321290.480:5983): avc:  denied  { write } for  pid=22193 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  380.485344][T22168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  380.523646][T22168] System zones: 0-1, 3-36
[  380.557131][T22168] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3525: bad orphan inode 134217728
[  380.569950][T22168] loop5: lost filesystem error report for type 5 error -117
[  380.577055][T22168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.610067][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3525'.
[  380.612124][T22187] loop3: detected capacity change from 0 to 512
[  380.641992][T20503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.649621][T22187] journal_path: Lookup failure for './file1'
[  380.659047][T22187] EXT4-fs: error: could not find journal device path
[  380.718555][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.731175][T22187] loop3: detected capacity change from 0 to 1024
[  380.763734][T22204] loop5: detected capacity change from 0 to 1024
[  380.770565][T22204] EXT4-fs: quotafile must be on filesystem root
[  380.818345][T22187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  380.860686][T22187] System zones: 0-1, 3-36
[  380.895651][T22187] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3528: bad orphan inode 134217728
[  380.909736][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'.
[  380.920318][T22187] loop3: lost filesystem error report for type 5 error -117
[  380.921823][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  380.935582][    C0] EXT4-fs (loop3): initial error at time 1787321290: ext4_orphan_get:1429
[  380.944113][    C0] EXT4-fs (loop3): last error at time 1787321290: ext4_orphan_get:1429
[  380.972396][T22187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.046281][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3528'.
[  381.079750][T22215] loop4: detected capacity change from 0 to 512
[  381.107424][T22215] journal_path: Lookup failure for './file1'
[  381.119902][T22215] EXT4-fs: error: could not find journal device path
[  381.141604][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.315094][T22215] loop4: detected capacity change from 0 to 1024
[  381.342176][T22215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  381.378822][T22215] System zones: 0-1, 3-36
[  381.436606][T22215] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3536: bad orphan inode 134217728
[  381.484519][T22215] loop4: lost filesystem error report for type 5 error -117
[  381.509364][T22215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.534298][T22236] loop3: detected capacity change from 0 to 512
[  381.596782][T22236] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.3543: corrupted in-inode xattr: e_name out of bounds
[  381.631127][T22236] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  381.631331][T22236] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3543: couldn't read orphan inode 15 (err -117)
[  381.640566][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  381.640586][    C1] EXT4-fs (loop3): initial error at time 1787321291: ext4_iget_extra_inode:5210: inode 15
[  381.640620][    C1] EXT4-fs (loop3): last error at time 1787321291: ext4_iget_extra_inode:5210: inode 15
[  381.681562][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'.
[  381.723106][T22236] loop3: lost filesystem error report for type 5 error -117
[  381.724905][T22236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.753736][T20503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.778347][T22245] FAULT_INJECTION: forcing a failure.
[  381.778347][T22245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.816356][T22245] CPU: 1 UID: 0 PID: 22245 Comm: syz.1.3547 Not tainted syzkaller #0 PREEMPT(lazy) 
[  381.816388][T22245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  381.816403][T22245] Call Trace:
[  381.816411][T22245]  <TASK>
[  381.816420][T22245]  __dump_stack+0x1d/0x30
[  381.816471][T22245]  dump_stack_lvl+0x95/0xd0
[  381.816491][T22245]  dump_stack+0x15/0x1b
[  381.816511][T22245]  should_fail_ex+0x262/0x280
[  381.816600][T22245]  should_fail+0xb/0x20
[  381.816636][T22245]  should_fail_usercopy+0x1a/0x20
[  381.816671][T22245]  _copy_from_user+0x1c/0xb0
[  381.816690][T22245]  ___sys_sendmsg+0xc1/0x1e0
[  381.816744][T22245]  __x64_sys_sendmsg+0xd4/0x160
[  381.816794][T22245]  x64_sys_call+0x22ab/0x2550
[  381.816819][T22245]  do_syscall_64+0x112/0x360
[  381.816846][T22245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.816903][T22245] RIP: 0033:0x7faeb8b7e0d9
[  381.816933][T22245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.816955][T22245] RSP: 002b:00007faeb75d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.817003][T22245] RAX: ffffffffffffffda RBX: 00007faeb8e05fa0 RCX: 00007faeb8b7e0d9
[  381.817017][T22245] RDX: 00000000040400d4 RSI: 0000200000000940 RDI: 0000000000000004
[  381.817030][T22245] RBP: 00007faeb75d7090 R08: 0000000000000000 R09: 0000000000000000
[  381.817043][T22245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.817098][T22245] R13: 00007faeb8e06038 R14: 00007faeb8e05fa0 R15: 00007ffc97f33ed8
[  381.817119][T22245]  </TASK>
[  381.998741][T22248] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  382.057746][   T28] audit: type=1400 audit(1787321292.070:5984): avc:  denied  { write } for  pid=22203 comm="syz.5.3532" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  382.087502][T22248] EXT4-fs (loop4): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  382.099712][T22248] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  382.119840][T22256] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.130708][T22248] EXT4-fs (loop4): orphan cleanup on readonly fs
[  382.138552][T22248] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.3546: Inode bitmap for bg 0 marked uninitialized
[  382.158179][T22248] loop4: lost filesystem error report for type 5 error -117
[  382.355693][   T28] audit: type=1400 audit(1787321292.380:5985): avc:  denied  { write } for  pid=22275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  382.654908][T22310] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3554'.
[  383.221198][T22312] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3556: Directory hole found for htree index block 0
[  383.398164][T22312] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  383.398311][T22312] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  383.407418][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  383.407441][    C0] EXT4-fs (loop5): initial error at time 1787321293: dx_probe:791: inode 2
[  383.407467][    C0] EXT4-fs (loop5): last error at time 1787321293: dx_probe:791: inode 2
[  383.443064][T22312] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3556: Directory hole found for htree index block 0
[  383.460170][T22312] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3556: Directory hole found for htree index block 0
[  383.477147][T22312] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3556: Directory hole found for htree index block 0
[  383.538754][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  383.538769][   T28] audit: type=1400 audit(1787321293.560:5988): avc:  denied  { write } for  pid=22309 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  384.006203][T22336] journal_path: Lookup failure for './file1'
[  384.034779][T22336] EXT4-fs: error: could not find journal device path
[  384.062458][   T28] audit: type=1400 audit(1787321294.000:5989): avc:  denied  { write } for  pid=22337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  384.101413][   T28] audit: type=1400 audit(1787321294.080:5990): avc:  denied  { write } for  pid=22360 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  384.151040][T22364] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3569: Directory hole found for htree index block 0
[  384.187656][T22364] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  384.187837][T22364] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  384.191282][   T28] audit: type=1400 audit(1787321294.210:5991): avc:  denied  { write } for  pid=22363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  384.196933][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  384.196961][    C0] EXT4-fs (loop2): initial error at time 1787321294: dx_probe:791: inode 2
[  384.243189][    C0] EXT4-fs (loop2): last error at time 1787321294: dx_probe:791: inode 2
[  384.259894][T22364] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3569: Directory hole found for htree index block 0
[  384.264195][   T28] audit: type=1400 audit(1787321294.290:5992): avc:  denied  { write } for  pid=22376 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  384.322435][T22364] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3569: Directory hole found for htree index block 0
[  384.375922][T22364] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3569: Directory hole found for htree index block 0
[  384.530114][   T28] audit: type=1326 audit(1787321294.550:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.2.3573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965bb7e0d9 code=0x7ffc0000
[  384.599231][T22336] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  384.611097][T22336] System zones: 0-1, 3-36
[  384.613079][T22385] journal_path: Lookup failure for './file1'
[  384.621969][T22336] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3565: bad orphan inode 134217728
[  384.633969][   T28] audit: type=1326 audit(1787321294.550:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.2.3573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965bb7e0d9 code=0x7ffc0000
[  384.643481][T22336] loop5: lost filesystem error report for type 5 error -117
[  384.662630][T22385] EXT4-fs: error: could not find journal device path
[  384.676932][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  384.676970][    C0] EXT4-fs (loop5): initial error at time 1787321294: ext4_orphan_get:1429
[  384.677022][    C0] EXT4-fs (loop5): last error at time 1787321294: ext4_orphan_get:1429
[  384.701558][   T28] audit: type=1326 audit(1787321294.550:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.2.3573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965bb7e0d9 code=0x7ffc0000
[  384.735965][T22390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  384.754039][   T28] audit: type=1326 audit(1787321294.550:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.2.3573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965bb7e0d9 code=0x7ffc0000
[  384.793712][   T28] audit: type=1326 audit(1787321294.550:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.2.3573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f965bb7e0d9 code=0x7ffc0000
[  384.880750][T22336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3565'.
[  384.902201][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'.
[  384.966798][T22422] set_capacity_and_notify: 8 callbacks suppressed
[  384.966846][T22422] loop2: detected capacity change from 0 to 512
[  385.020286][T22422] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.3575: invalid block
[  385.031887][T22422] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  385.033414][T22422] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3575: invalid indirect mapped block 1024 (level 0)
[  385.042612][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  385.042633][    C0] EXT4-fs (loop2): initial error at time 1787321295: ext4_get_branch:178: inode 13: block 1024
[  385.042671][    C0] EXT4-fs (loop2): last error at time 1787321295: ext4_get_branch:178: inode 13: block 1024
[  385.102074][T22422] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  385.102212][T22422] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3575: bg 0: block 35: padding at end of block bitmap is not set
[  385.102246][T22422] loop2: lost filesystem error report for type 5 error -117
[  385.102327][T22422] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  385.102389][T22422] loop2: lost filesystem error report for type 5 error -117
[  385.102599][T22422] EXT4-fs (loop2): 1 truncate cleaned up
[  385.111422][T22385] loop3: detected capacity change from 0 to 1024
[  385.135293][T22433] FAULT_INJECTION: forcing a failure.
[  385.135293][T22433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.135360][T22433] CPU: 0 UID: 0 PID: 22433 Comm: syz.5.3578 Not tainted syzkaller #0 PREEMPT(lazy) 
[  385.135392][T22433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  385.135407][T22433] Call Trace:
[  385.135414][T22433]  <TASK>
[  385.135424][T22433]  __dump_stack+0x1d/0x30
[  385.135515][T22433]  dump_stack_lvl+0x95/0xd0
[  385.135539][T22433]  dump_stack+0x15/0x1b
[  385.135580][T22433]  should_fail_ex+0x262/0x280
[  385.135614][T22433]  should_fail+0xb/0x20
[  385.135644][T22433]  should_fail_usercopy+0x1a/0x20
[  385.135695][T22433]  _copy_to_user+0x20/0xa0
[  385.135717][T22433]  simple_read_from_buffer+0xb5/0x130
[  385.135813][T22433]  proc_fail_nth_read+0x10e/0x150
[  385.135847][T22433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  385.135879][T22433]  vfs_read+0x18e/0x7c0
[  385.135931][T22433]  ? lapic_next_event+0x11/0x20
[  385.135955][T22433]  ? clockevents_program_event+0x2fd/0x340
[  385.135988][T22433]  ? tick_program_event+0x79/0xc0
[  385.136086][T22433]  ksys_read+0xdc/0x1a0
[  385.136238][T22433]  __x64_sys_read+0x40/0x50
[  385.136263][T22433]  x64_sys_call+0x2135/0x2550
[  385.136291][T22433]  do_syscall_64+0x112/0x360
[  385.136367][T22433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.136393][T22433] RIP: 0033:0x7f34e246e90e
[  385.136410][T22433] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  385.136431][T22433] RSP: 002b:00007f34e0f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  385.136487][T22433] RAX: ffffffffffffffda RBX: 00007f34e0f076c0 RCX: 00007f34e246e90e
[  385.136503][T22433] RDX: 000000000000000f RSI: 00007f34e0f070a0 RDI: 0000000000000005
[  385.136524][T22433] RBP: 00007f34e0f07090 R08: 0000000000000000 R09: 0000000000000000
[  385.136539][T22433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.136553][T22433] R13: 00007f34e2736038 R14: 00007f34e2735fa0 R15: 00007ffd1bd4aaa8
[  385.136574][T22433]  </TASK>
[  385.450795][T22385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  385.459737][T22385] System zones: 0-1, 3-36
[  385.474672][T22385] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3571: bad orphan inode 134217728
[  385.490196][T22385] loop3: lost filesystem error report for type 5 error -117
[  385.505220][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'.
[  385.608206][T22444] loop4: detected capacity change from 0 to 1024
[  385.661172][T22448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.692481][T22448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.897137][T22444] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3580'.
[  385.925006][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3580'.
[  387.120296][T22465] loop3: detected capacity change from 0 to 512
[  387.139115][T22465] journal_path: Lookup failure for './file1'
[  387.147434][T22465] EXT4-fs: error: could not find journal device path
[  387.291652][T22465] loop3: detected capacity change from 0 to 1024
[  387.339145][T22465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  387.350261][T22465] System zones: 0-1, 3-36
[  387.364783][T22465] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3584: bad orphan inode 134217728
[  387.369216][T22479] FAULT_INJECTION: forcing a failure.
[  387.369216][T22479] name failslab, interval 1, probability 0, space 0, times 0
[  387.376534][T22465] loop3: lost filesystem error report for type 5 error -117
[  387.388354][T22479] CPU: 0 UID: 0 PID: 22479 Comm: syz.4.3590 Not tainted syzkaller #0 PREEMPT(lazy) 
[  387.388388][T22479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  387.388402][T22479] Call Trace:
[  387.388411][T22479]  <TASK>
[  387.388421][T22479]  __dump_stack+0x1d/0x30
[  387.388527][T22479]  dump_stack_lvl+0x95/0xd0
[  387.388552][T22479]  dump_stack+0x15/0x1b
[  387.388602][T22479]  should_fail_ex+0x262/0x280
[  387.388635][T22479]  should_failslab+0x8c/0xb0
[  387.388720][T22479]  kmem_cache_alloc_noprof+0x7f/0x3e0
[  387.388818][T22479]  ? do_getname+0x2e/0x1c0
[  387.388848][T22479]  ? do_getname+0x2e/0x1c0
[  387.388879][T22479]  ? vfs_write+0x850/0x9a0
[  387.388904][T22479]  do_getname+0x2e/0x1c0
[  387.389005][T22479]  getname_flags+0x1d/0x30
[  387.389035][T22479]  do_sys_openat2+0x6c/0x130
[  387.389072][T22479]  __x64_sys_openat+0xf2/0x120
[  387.389108][T22479]  x64_sys_call+0x1f72/0x2550
[  387.389205][T22479]  do_syscall_64+0x112/0x360
[  387.389229][T22479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.389259][T22479] RIP: 0033:0x7f955df4e0d9
[  387.389277][T22479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.389363][T22479] RSP: 002b:00007f955c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  387.389385][T22479] RAX: ffffffffffffffda RBX: 00007f955e1d5fa0 RCX: 00007f955df4e0d9
[  387.389401][T22479] RDX: 0000000000000601 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  387.389495][T22479] RBP: 00007f955c9a7090 R08: 0000000000000000 R09: 0000000000000000
[  387.389509][T22479] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001
[  387.389524][T22479] R13: 00007f955e1d6038 R14: 00007f955e1d5fa0 R15: 00007ffeeceafa28
[  387.389608][T22479]  </TASK>
[  387.662175][T22493] netlink: 'syz.1.3594': attribute type 39 has an invalid length.
[  387.683410][T22488] loop3: detected capacity change from 0 to 8192
[  387.877806][T22498] loop2: detected capacity change from 0 to 1024
[  387.885041][T22498] EXT4-fs: quotafile must be on filesystem root
[  388.159542][T22501] loop3: detected capacity change from 0 to 512
[  388.187626][T22501] journal_path: Lookup failure for './file1'
[  388.204171][T22501] EXT4-fs: error: could not find journal device path
[  388.264662][T22509] loop1: detected capacity change from 0 to 8192
[  388.405974][T22501] loop3: detected capacity change from 0 to 1024
[  388.453529][T22501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  388.479901][T22501] System zones: 0-1, 3-36
[  388.520466][T22501] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3595: bad orphan inode 134217728
[  388.562081][T22501] loop3: lost filesystem error report for type 5 error -117
[  388.584376][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3595'.
[  388.709702][T18511] EXT4-fs unmount: 22 callbacks suppressed
[  388.709720][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.037491][T22498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.128439][   T28] kauditd_printk_skb: 129 callbacks suppressed
[  389.128453][   T28] audit: type=1400 audit(1787321299.150:6127): avc:  denied  { write } for  pid=22497 comm="syz.2.3597" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  389.278516][T22529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  389.516910][T22550] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3614: Directory hole found for htree index block 0
[  389.523096][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.544325][T22550] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  389.544426][T22550] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  389.553577][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  389.553594][    C0] EXT4-fs (loop3): initial error at time 1787321299: dx_probe:791: inode 2
[  389.553623][    C0] EXT4-fs (loop3): last error at time 1787321299: dx_probe:791: inode 2
[  389.587886][T22550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.603800][T22550] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3614: Directory hole found for htree index block 0
[  389.619124][T22550] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3614: Directory hole found for htree index block 0
[  389.641593][T22550] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3614: Directory hole found for htree index block 0
[  389.666244][T22559] EXT4-fs: quotafile must be on filesystem root
[  389.683179][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.699066][T22560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.712481][T22560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.907333][   T28] audit: type=1400 audit(1787321299.930:6128): avc:  denied  { getopt } for  pid=22562 comm="syz.3.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  389.947898][   T28] audit: type=1400 audit(1787321299.930:6129): avc:  denied  { mount } for  pid=22562 comm="syz.3.3617" name="/" dev="autofs" ino=47721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  390.170973][T22568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3619'.
[  390.647483][T22599] set_capacity_and_notify: 3 callbacks suppressed
[  390.647567][T22599] loop2: detected capacity change from 0 to 164
[  390.660379][T22597] loop5: detected capacity change from 0 to 4096
[  390.661560][T22589] loop3: detected capacity change from 0 to 512
[  390.681582][T22599] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  390.695913][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'.
[  390.705603][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'.
[  390.714946][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'.
[  390.714951][T22597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.724466][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'.
[  390.740180][T22589] journal_path: Lookup failure for './file1'
[  390.752257][T22589] EXT4-fs: error: could not find journal device path
[  390.771678][T22603] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  390.787508][T22603] iso9660: Corrupted directory entry in block 4 of inode 1792
[  390.800896][T22599] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  390.801011][T22599] iso9660: Corrupted directory entry in block 4 of inode 1792
[  390.902792][T22607] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  390.934026][   T28] audit: type=1400 audit(1787321300.950:6130): avc:  denied  { write } for  pid=22558 comm="syz.5.3616" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  390.957886][T22589] loop3: detected capacity change from 0 to 1024
[  390.999908][T22589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  391.021639][T22589] System zones: 0-1, 3-36
[  391.037423][T22589] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3628: bad orphan inode 134217728
[  391.061899][T22589] loop3: lost filesystem error report for type 5 error -117
[  391.070760][T22589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.155395][T22589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3628'.
[  391.185367][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.212173][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.305710][T22626] loop2: detected capacity change from 0 to 1024
[  391.324553][T22626] EXT4-fs: quotafile must be on filesystem root
[  391.391133][T22632] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  391.499710][   T28] audit: type=1326 audit(1787321301.520:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22627 comm="syz.4.3641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f955df4e0d9 code=0x0
[  391.543650][T22636] veth1_macvtap: left promiscuous mode
[  391.760095][   T28] audit: type=1400 audit(1787321301.780:6132): avc:  denied  { write } for  pid=22643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  391.814888][   T28] audit: type=1400 audit(1787321301.840:6133): avc:  denied  { write } for  pid=22657 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  391.840132][ T3018] veth1_macvtap: entered promiscuous mode
[  391.852701][T22646] loop5: detected capacity change from 0 to 8192
[  391.952493][   T28] audit: type=1400 audit(1787321301.980:6134): avc:  denied  { write } for  pid=22661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  391.994762][T22671] loop2: detected capacity change from 0 to 4096
[  392.003578][   T28] audit: type=1400 audit(1787321302.020:6135): avc:  denied  { write } for  pid=22674 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.035264][T22671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.081150][T22680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3647'.
[  392.094154][T22680] netlink: 'syz.5.3647': attribute type 39 has an invalid length.
[  392.120091][   T28] audit: type=1400 audit(1787321302.140:6136): avc:  denied  { write } for  pid=22624 comm="syz.2.3639" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  392.186411][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.262761][T22686] loop4: detected capacity change from 0 to 512
[  392.269949][T22686] EXT4-fs: Ignoring removed nomblk_io_submit option
[  392.283001][T22686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.601411][T20503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.728259][T22702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.746266][T22694] loop5: detected capacity change from 0 to 8192
[  392.854442][T22708] loop2: detected capacity change from 0 to 512
[  392.873534][T22708] journal_path: Lookup failure for './file1'
[  392.880133][T22708] EXT4-fs: error: could not find journal device path
[  392.950035][T22708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  392.961134][T22708] System zones: 0-1, 3-36
[  392.975984][T22708] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3657: bad orphan inode 134217728
[  392.997855][T22708] loop2: lost filesystem error report for type 5 error -117
[  393.006553][T22708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.083826][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.179275][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'.
[  393.319164][T22744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.368200][T22744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.405961][T22746] netlink: 'syz.5.3671': attribute type 11 has an invalid length.
[  393.537046][T22748] journal_path: Lookup failure for './file1'
[  393.545996][T22748] EXT4-fs: error: could not find journal device path
[  393.703521][T22748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  393.732382][T22748] System zones: 0-1, 3-36
[  393.745007][T22748] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3672: bad orphan inode 134217728
[  393.770862][T22748] loop5: lost filesystem error report for type 5 error -117
[  393.775024][T22748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.860598][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.890180][T22756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  393.954590][T22762] journal_path: Lookup failure for './file1'
[  393.964482][T22762] EXT4-fs: error: could not find journal device path
[  394.100898][T22762] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  394.121037][T22762] System zones: 0-1, 3-36
[  394.128478][T22762] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3677: bad orphan inode 134217728
[  394.139995][T22762] loop5: lost filesystem error report for type 5 error -117
[  394.148082][T22762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.211476][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3677'.
[  394.236489][T22770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.256455][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.479012][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  394.479052][   T28] audit: type=1326 audit(1787321304.500:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22776 comm="syz.2.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f965bb7e0d9 code=0x0
[  394.934079][T22807] journal_path: Lookup failure for './file1'
[  394.940442][T22807] EXT4-fs: error: could not find journal device path
[  395.133399][T22807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  395.141774][T22807] System zones: 0-1, 3-36
[  395.146760][T22807] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.3692: bad orphan inode 134217728
[  395.162708][T22807] loop3: lost filesystem error report for type 5 error -117
[  395.166419][T22807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.194258][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'.
[  395.216984][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.248362][T22816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  395.438754][T22821] FAULT_INJECTION: forcing a failure.
[  395.438754][T22821] name failslab, interval 1, probability 0, space 0, times 0
[  395.451395][T22821] CPU: 0 UID: 0 PID: 22821 Comm: syz.3.3695 Not tainted syzkaller #0 PREEMPT(lazy) 
[  395.451422][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.451435][T22821] Call Trace:
[  395.451443][T22821]  <TASK>
[  395.451451][T22821]  __dump_stack+0x1d/0x30
[  395.451478][T22821]  dump_stack_lvl+0x95/0xd0
[  395.451502][T22821]  dump_stack+0x15/0x1b
[  395.451524][T22821]  should_fail_ex+0x262/0x280
[  395.451555][T22821]  should_failslab+0x8c/0xb0
[  395.451585][T22821]  kmem_cache_alloc_noprof+0x7f/0x3e0
[  395.451609][T22821]  ? mas_alloc_nodes+0x1a2/0x210
[  395.451630][T22821]  ? mas_alloc_nodes+0x1a2/0x210
[  395.451653][T22821]  mas_alloc_nodes+0x1a2/0x210
[  395.451676][T22821]  mas_preallocate+0x2ca/0x500
[  395.451703][T22821]  mmap_region+0x149c/0x2090
[  395.451749][T22821]  do_mmap+0xa20/0xc70
[  395.451776][T22821]  vm_mmap_pgoff+0x183/0x2d0
[  395.451798][T22821]  ksys_mmap_pgoff+0xc1/0x310
[  395.451827][T22821]  ? __x64_sys_mmap+0x49/0x70
[  395.451858][T22821]  x64_sys_call+0x23b3/0x2550
[  395.451882][T22821]  do_syscall_64+0x112/0x360
[  395.451905][T22821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.451930][T22821] RIP: 0033:0x7f1dc835de42
[  395.451949][T22821] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  395.451972][T22821] RSP: 002b:00007f1dc6d74df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  395.451993][T22821] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1dc835de42
[  395.452009][T22821] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  395.452023][T22821] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  395.452038][T22821] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007
[  395.452053][T22821] R13: 00007f1dc6d74ee0 R14: 00007f1dc6d74ea0 R15: 00002000000005c0
[  395.452073][T22821]  </TASK>
[  396.488534][T22844] set_capacity_and_notify: 8 callbacks suppressed
[  396.488608][T22844] loop3: detected capacity change from 0 to 512
[  396.505713][T22844] journal_path: Lookup failure for './file1'
[  396.512262][T22844] EXT4-fs: error: could not find journal device path
[  396.596318][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3705'.
[  396.803501][T22851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.812544][T22851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.322884][T22778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  397.350046][   T28] audit: type=1400 audit(1787321307.370:6143): avc:  denied  { setattr } for  pid=22852 comm="syz.1.3707" name="SCTP" dev="sockfs" ino=48341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  397.576941][T22865] FAULT_INJECTION: forcing a failure.
[  397.576941][T22865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.608310][T22867] loop5: detected capacity change from 0 to 1024
[  397.615696][T22867] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  397.640524][T22867] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.3708: lblock 2 mapped to illegal pblock 2 (length 1)
[  397.654555][T22867] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  397.655099][T22867] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  397.664242][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  397.664275][    C1] EXT4-fs (loop5): initial error at time 1787321307: ext4_map_blocks:790: inode 3: block 2
[  397.664335][    C1] EXT4-fs (loop5): last error at time 1787321307: ext4_map_blocks:790: inode 3: block 2
[  397.698652][T22867] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.3708: lblock 0 mapped to illegal pblock 48 (length 1)
[  397.713260][T22867] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  397.715742][T22867] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  397.733783][T22867] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.3708: Failed to acquire dquot type 0
[  397.745014][T22867] loop5: lost filesystem error report for type 5 error -117
[  397.745237][T22867] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  397.761999][T22867] loop5: lost filesystem error report for type 5 error -117
[  397.762554][T22867] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.3708: mark_inode_dirty error
[  397.781185][T22867] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  397.781352][T22867] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  397.800700][T22867] EXT4-fs (loop5): 1 orphan inode deleted
[  397.806989][T22867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.825540][   T47] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  397.841812][T22865] CPU: 1 UID: 0 PID: 22865 Comm: syz.2.3712 Not tainted syzkaller #0 PREEMPT(lazy) 
[  397.841846][T22865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  397.841861][T22865] Call Trace:
[  397.841868][T22865]  <TASK>
[  397.841876][T22865]  __dump_stack+0x1d/0x30
[  397.841901][T22865]  dump_stack_lvl+0x95/0xd0
[  397.842002][T22865]  dump_stack+0x15/0x1b
[  397.842026][T22865]  should_fail_ex+0x262/0x280
[  397.842090][T22865]  should_fail+0xb/0x20
[  397.842123][T22865]  should_fail_usercopy+0x1a/0x20
[  397.842202][T22865]  _copy_from_user+0x1c/0xb0
[  397.842232][T22865]  __se_sys_mount+0x10d/0x2e0
[  397.842332][T22865]  ? fput+0x91/0xc0
[  397.842365][T22865]  ? ksys_write+0x194/0x1a0
[  397.842444][T22865]  __x64_sys_mount+0x67/0x80
[  397.842476][T22865]  x64_sys_call+0xc3b/0x2550
[  397.842506][T22865]  do_syscall_64+0x112/0x360
[  397.842561][T22865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.842587][T22865] RIP: 0033:0x7f965bb7e0d9
[  397.842606][T22865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.842628][T22865] RSP: 002b:00007f965a5d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  397.842653][T22865] RAX: ffffffffffffffda RBX: 00007f965be05fa0 RCX: 00007f965bb7e0d9
[  397.842684][T22865] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000
[  397.842700][T22865] RBP: 00007f965a5d7090 R08: 00002000000006c0 R09: 0000000000000000
[  397.842714][T22865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.842728][T22865] R13: 00007f965be06038 R14: 00007f965be05fa0 R15: 00007ffca45a1138
[  397.842747][T22865]  </TASK>
[  397.884481][   T47] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  398.225136][   T47] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0
[  398.440076][T22890] loop2: detected capacity change from 0 to 8192
[  398.642251][   T28] audit: type=1400 audit(1787321308.670:6144): avc:  denied  { create } for  pid=22892 comm="syz.2.3719" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  398.681477][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.693306][T21269] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  398.706400][   T28] audit: type=1400 audit(1787321308.700:6145): avc:  denied  { read write } for  pid=22892 comm="syz.2.3719" name="file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  398.732910][T21269] loop5: lost filesystem error report for type 5 error -117
[  398.733001][T21269] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  398.734675][   T28] audit: type=1400 audit(1787321308.700:6146): avc:  denied  { open } for  pid=22892 comm="syz.2.3719" path="/175/file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  398.742442][T21269] loop5: lost filesystem error report for type 5 error -117
[  398.774474][   T28] audit: type=1400 audit(1787321308.730:6147): avc:  denied  { unlink } for  pid=19495 comm="syz-executor" name="file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  398.801910][T21269] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  398.833175][T21269] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  398.833305][T21269] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  398.873252][T21269] loop5: lost filesystem error report for type 5 error -117
[  398.890570][   T28] audit: type=1400 audit(1787321308.910:6148): avc:  denied  { accept } for  pid=22900 comm="syz.5.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  399.067420][T22914] loop5: detected capacity change from 0 to 164
[  399.207743][T22919] loop1: detected capacity change from 0 to 512
[  399.223296][T22919] journal_path: Lookup failure for './file1'
[  399.229733][T22919] EXT4-fs: error: could not find journal device path
[  399.332225][T22919] loop1: detected capacity change from 0 to 1024
[  399.355358][T22919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  399.364367][T22919] System zones: 0-1, 3-36
[  399.373431][T22919] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3729: bad orphan inode 134217728
[  399.384532][T22919] loop1: lost filesystem error report for type 5 error -117
[  399.387661][T22919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.419135][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'.
[  399.443029][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.473087][T22925] loop1: detected capacity change from 0 to 1024
[  399.484216][T22925] EXT4-fs: quotafile must be on filesystem root
[  400.027415][T22933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3734'.
[  400.055396][T22934] loop1: detected capacity change from 0 to 4096
[  400.095509][T22934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.342396][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.372368][T22953] loop5: detected capacity change from 0 to 8192
[  400.385345][T22953] FAULT_INJECTION: forcing a failure.
[  400.385345][T22953] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  400.398833][T22953] CPU: 0 UID: 0 PID: 22953 Comm: syz.5.3739 Not tainted syzkaller #0 PREEMPT(lazy) 
[  400.398988][T22953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  400.399011][T22953] Call Trace:
[  400.399019][T22953]  <TASK>
[  400.399046][T22953]  __dump_stack+0x1d/0x30
[  400.399071][T22953]  dump_stack_lvl+0x95/0xd0
[  400.399092][T22953]  dump_stack+0x15/0x1b
[  400.399113][T22953]  should_fail_ex+0x262/0x280
[  400.399195][T22953]  should_fail_alloc_page+0xf2/0x100
[  400.399224][T22953]  __alloc_frozen_pages_noprof+0x157/0x400
[  400.399264][T22953]  alloc_pages_mpol+0xaf/0x1d0
[  400.399378][T22953]  folio_alloc_noprof+0xa2/0x160
[  400.399418][T22953]  filemap_alloc_folio_noprof+0x92/0x220
[  400.399530][T22953]  __filemap_get_folio_mpol+0x2a0/0x840
[  400.399569][T22953]  ? __folio_mark_dirty+0x44a/0x520
[  400.399600][T22953]  cont_write_begin+0x58b/0x920
[  400.399636][T22953]  fat_write_begin+0x52/0xe0
[  400.399685][T22953]  ? __pfx_fat_get_block+0x10/0x10
[  400.399768][T22953]  cont_write_begin+0x18d/0x920
[  400.399796][T22953]  fat_write_begin+0x52/0xe0
[  400.399830][T22953]  ? __pfx_fat_get_block+0x10/0x10
[  400.399860][T22953]  generic_cont_expand_simple+0xb0/0x150
[  400.399890][T22953]  fat_cont_expand+0x3e/0x170
[  400.399920][T22953]  fat_fallocate+0x177/0x1c0
[  400.399980][T22953]  vfs_fallocate+0x3ac/0x400
[  400.400013][T22953]  __x64_sys_fallocate+0x7a/0xd0
[  400.400044][T22953]  x64_sys_call+0x1e1d/0x2550
[  400.400105][T22953]  do_syscall_64+0x112/0x360
[  400.400135][T22953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.400160][T22953] RIP: 0033:0x7f34e24ae0d9
[  400.400205][T22953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.400224][T22953] RSP: 002b:00007f34e0f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  400.400249][T22953] RAX: ffffffffffffffda RBX: 00007f34e2735fa0 RCX: 00007f34e24ae0d9
[  400.400265][T22953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  400.400279][T22953] RBP: 00007f34e0f07090 R08: 0000000000000000 R09: 0000000000000000
[  400.400295][T22953] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000002
[  400.400337][T22953] R13: 00007f34e2736038 R14: 00007f34e2735fa0 R15: 00007ffd1bd4aaa8
[  400.400356][T22953]  </TASK>
[  400.867294][T22973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.877253][T22973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.114585][T22980] loop2: detected capacity change from 0 to 256
[  401.324853][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  401.324869][   T28] audit: type=1326 audit(1787321311.350:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22983 comm="syz.5.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34e24ae0d9 code=0x0
[  402.168159][T23006] loop5: detected capacity change from 0 to 8192
[  402.509579][T23010] loop5: detected capacity change from 0 to 8192
[  402.821882][T23017] loop5: detected capacity change from 0 to 512
[  402.851147][T23017] journal_path: Lookup failure for './file1'
[  402.860106][T23017] EXT4-fs: error: could not find journal device path
[  402.866807][T23019] loop1: detected capacity change from 0 to 512
[  402.892151][T23019] journal_path: Lookup failure for './file1'
[  402.898255][T23019] EXT4-fs: error: could not find journal device path
[  403.048571][T23017] loop5: detected capacity change from 0 to 1024
[  403.089359][T23017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  403.102263][T23019] loop1: detected capacity change from 0 to 1024
[  403.116050][T23017] System zones: 0-1, 3-36
[  403.139750][T23017] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3760: bad orphan inode 134217728
[  403.160396][T23019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  403.179348][T23017] loop5: lost filesystem error report for type 5 error -117
[  403.182919][T23019] System zones: 
[  403.193600][   T28] audit: type=1400 audit(1787321313.210:6151): avc:  denied  { write } for  pid=23021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  403.221663][T23017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.243687][T23019] 0-1, 3-36
[  403.257095][T23019] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3761: bad orphan inode 134217728
[  403.274724][   T28] audit: type=1400 audit(1787321313.220:6152): avc:  denied  { write } for  pid=23034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  403.297601][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3760'.
[  403.308583][T23019] loop1: lost filesystem error report for type 5 error -117
[  403.320948][T23019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.371665][T21269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.394598][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'.
[  403.455816][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.565543][T23045] loop1: detected capacity change from 0 to 1024
[  403.599354][T23045] EXT4-fs: quotafile must be on filesystem root
[  404.118295][T23053] loop2: detected capacity change from 0 to 8192
[  404.125042][T23049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  404.401098][T23056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  404.564719][T23071] loop3: detected capacity change from 0 to 512
[  404.597268][   T28] audit: type=1400 audit(1787321314.620:6153): avc:  denied  { write } for  pid=23063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.622461][T23071] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3772: Directory hole found for htree index block 0
[  404.647533][T23071] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  404.647722][T23071] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  404.656810][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  404.656829][    C0] EXT4-fs (loop3): initial error at time 1787321314: dx_probe:791: inode 2
[  404.656861][    C0] EXT4-fs (loop3): last error at time 1787321314: dx_probe:791: inode 2
[  404.689911][T23071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.705003][   T28] audit: type=1400 audit(1787321314.670:6154): avc:  denied  { write } for  pid=23079 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.758112][T23074] loop2: detected capacity change from 0 to 512
[  404.761263][T23071] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3772: Directory hole found for htree index block 0
[  404.768623][T23074] journal_path: Lookup failure for './file1'
[  404.785493][T23074] EXT4-fs: error: could not find journal device path
[  404.867649][T23083] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3772: Directory hole found for htree index block 0
[  404.913305][T23071] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3772: Directory hole found for htree index block 0
[  404.978161][T23074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  405.002148][T23074] System zones: 0-1, 3-36
[  405.009980][T23074] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3773: bad orphan inode 134217728
[  405.028291][T18511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.042020][T23074] loop2: lost filesystem error report for type 5 error -117
[  405.045007][T23074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.094740][   T28] audit: type=1326 audit(1787321315.120:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23086 comm="syz.3.3774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  405.183282][   T28] audit: type=1326 audit(1787321315.120:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23086 comm="syz.3.3774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  405.221967][   T28] audit: type=1326 audit(1787321315.120:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23086 comm="syz.3.3774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  405.224409][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'.
[  405.273307][   T28] audit: type=1326 audit(1787321315.120:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23086 comm="syz.3.3774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  405.321054][   T28] audit: type=1326 audit(1787321315.150:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23086 comm="syz.3.3774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  405.370176][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.428909][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'.
[  405.484391][T23091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.701568][T23099] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3777: Directory hole found for htree index block 0
[  405.731825][T23099] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  405.732283][T23099] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  405.749576][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  405.749617][    C1] EXT4-fs (loop2): initial error at time 1787321315: dx_probe:791: inode 2
[  405.749648][    C1] EXT4-fs (loop2): last error at time 1787321315: dx_probe:791: inode 2
[  405.792303][T23099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.823794][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.827338][T23099] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3777: Directory hole found for htree index block 0
[  405.864176][T23099] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3777: Directory hole found for htree index block 0
[  405.883833][T23099] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3777: Directory hole found for htree index block 0
[  406.285628][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.345885][T23108] netlink: 'syz.3.3781': attribute type 39 has an invalid length.
[  406.553320][   T28] kauditd_printk_skb: 253 callbacks suppressed
[  406.553338][   T28] audit: type=1326 audit(1787321316.580:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz.3.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dc835e0d9 code=0x0
[  406.650504][T23121] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3784: Directory hole found for htree index block 0
[  406.682669][T23121] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  406.682791][T23121] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  406.691862][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  406.691880][    C0] EXT4-fs (loop1): initial error at time 1787321316: dx_probe:791: inode 2
[  406.691905][    C0] EXT4-fs (loop1): last error at time 1787321316: dx_probe:791: inode 2
[  406.744387][T23121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.773870][T23121] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3784: Directory hole found for htree index block 0
[  406.804810][T23121] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3784: Directory hole found for htree index block 0
[  406.862973][T23121] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3784: Directory hole found for htree index block 0
[  406.902406][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.997789][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3786'.
[  407.169440][   T28] audit: type=1400 audit(1787321317.190:6414): avc:  granted  { setsecparam } for  pid=23133 comm="syz.1.3789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  407.195058][T23134] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3789'.
[  407.350505][T23141] netlink: 'syz.3.3792': attribute type 39 has an invalid length.
[  407.418278][T23143] set_capacity_and_notify: 4 callbacks suppressed
[  407.418294][T23143] loop2: detected capacity change from 0 to 1764
[  407.485808][T23143] netlink: 'syz.2.3793': attribute type 5 has an invalid length.
[  408.142810][T23154] loop1: detected capacity change from 0 to 1024
[  408.173274][T23154] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  408.190940][T23154] EXT4-fs (loop1): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  408.215354][T23154] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  408.243760][T23154] EXT4-fs (loop1): orphan cleanup on readonly fs
[  408.259455][T23154] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.3797: Inode bitmap for bg 0 marked uninitialized
[  408.298583][T23154] loop1: lost filesystem error report for type 5 error -117
[  408.306988][T23154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  408.704132][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.706027][T23163] loop2: detected capacity change from 0 to 512
[  408.735596][T23163] EXT4-fs: Ignoring removed nobh option
[  408.770081][T23163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.828701][T23163] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.875066][   T28] audit: type=1400 audit(1787321318.900:6415): avc:  denied  { write } for  pid=23162 comm="syz.2.3798" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  408.946856][   T28] audit: type=1400 audit(1787321318.960:6416): avc:  denied  { map } for  pid=23162 comm="syz.2.3798" path="/196/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  408.985310][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.997594][   T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.007879][   T28] audit: type=1400 audit(1787321318.960:6417): avc:  denied  { execute } for  pid=23162 comm="syz.2.3798" path="/196/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  409.218479][   T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.307551][   T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.439831][T23195] netlink: 'syz.1.3805': attribute type 39 has an invalid length.
[  409.592245][   T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.602740][   T28] audit: type=1326 audit(1787321319.610:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23196 comm="syz.3.3806" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  409.644084][   T28] audit: type=1326 audit(1787321319.610:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23196 comm="syz.3.3806" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  409.763740][   T28] audit: type=1326 audit(1787321319.620:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23196 comm="syz.3.3806" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  409.828660][   T28] audit: type=1326 audit(1787321319.620:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23196 comm="syz.3.3806" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  409.870184][   T28] audit: type=1326 audit(1787321319.620:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23196 comm="syz.3.3806" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1dc835e0d9 code=0x7ffc0000
[  410.100391][T23206] loop2: detected capacity change from 0 to 1024
[  410.152817][T23206] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  410.163274][T23206] EXT4-fs (loop2): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  410.184838][T23206] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  410.200578][T23206] EXT4-fs (loop2): orphan cleanup on readonly fs
[  410.220633][T23206] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.3809: Inode bitmap for bg 0 marked uninitialized
[  410.246696][T23206] loop2: lost filesystem error report for type 5 error -117
[  410.253780][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  410.267841][    C1] EXT4-fs (loop2): initial error at time 1787321320: ext4_read_inode_bitmap:169
[  410.277233][    C1] EXT4-fs (loop2): last error at time 1787321320: ext4_read_inode_bitmap:169
[  410.289941][T23206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  410.675081][   T47] bond0 (unregistering): Released all slaves
[  410.730439][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.768247][   T47] hsr_slave_0: left promiscuous mode
[  410.786767][   T47] hsr_slave_1: left promiscuous mode
[  410.798275][   T47] veth1_macvtap: left promiscuous mode
[  410.806383][T23231] loop2: detected capacity change from 0 to 512
[  410.811761][   T47] veth0_macvtap: left promiscuous mode
[  410.822761][   T47] veth1_vlan: left promiscuous mode
[  410.833600][   T47] veth0_vlan: left promiscuous mode
[  410.906533][T23237] FAULT_INJECTION: forcing a failure.
[  410.906533][T23237] name failslab, interval 1, probability 0, space 0, times 0
[  410.951767][T23237] CPU: 1 UID: 0 PID: 23237 Comm: syz.1.3815 Not tainted syzkaller #0 PREEMPT(lazy) 
[  410.951798][T23237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  410.951825][T23237] Call Trace:
[  410.951833][T23237]  <TASK>
[  410.951841][T23237]  __dump_stack+0x1d/0x30
[  410.951936][T23237]  dump_stack_lvl+0x95/0xd0
[  410.951960][T23237]  dump_stack+0x15/0x1b
[  410.951983][T23237]  should_fail_ex+0x262/0x280
[  410.952019][T23237]  should_failslab+0x8c/0xb0
[  410.952149][T23237]  __kmalloc_node_track_caller_noprof+0xd6/0x4e0
[  410.952183][T23237]  ? sidtab_sid2str_get+0xa0/0x130
[  410.952216][T23237]  ? sidtab_sid2str_get+0xa0/0x130
[  410.952250][T23237]  kmemdup_noprof+0x2b/0x70
[  410.952338][T23237]  sidtab_sid2str_get+0xa0/0x130
[  410.952370][T23237]  security_sid_to_context_core+0x179/0x2d0
[  410.952402][T23237]  security_sid_to_context+0x27/0x40
[  410.952441][T23237]  selinux_lsmprop_to_secctx+0x67/0xf0
[  410.952562][T23237]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  410.952603][T23237]  audit_log_subj_ctx+0xa4/0x3e0
[  410.952684][T23237]  audit_log_task_context+0x48/0x70
[  410.952708][T23237]  audit_log_task+0xf3/0x240
[  410.952757][T23237]  audit_seccomp+0x6a/0x110
[  410.952855][T23237]  __seccomp_filter+0x909/0x1360
[  410.952885][T23237]  ? __fget_files+0x184/0x1c0
[  410.952932][T23237]  __seccomp_permit_syscall+0x7d/0x150
[  410.953043][T23237]  do_syscall_64+0xca/0x360
[  410.953072][T23237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.953098][T23237] RIP: 0033:0x7faeb8b7e0d9
[  410.953117][T23237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.953225][T23237] RSP: 002b:00007faeb75d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  410.953249][T23237] RAX: ffffffffffffffda RBX: 00007faeb8e05fa0 RCX: 00007faeb8b7e0d9
[  410.953266][T23237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  410.953282][T23237] RBP: 00007faeb75d7090 R08: 0000000000000000 R09: 0000000000000000
[  410.953298][T23237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.953313][T23237] R13: 00007faeb8e06038 R14: 00007faeb8e05fa0 R15: 00007ffc97f33ed8
[  410.953405][T23237]  </TASK>
[  411.609990][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6
[  411.628392][T23174] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.636339][T23174] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.636382][   T28] kauditd_printk_skb: 51 callbacks suppressed
[  411.636395][   T28] audit: type=1326 audit(1787321321.660:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.3815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faeb8b7e0d9 code=0x7ffc0000
[  411.651819][T23174] bridge_slave_0: entered allmulticast mode
[  411.738567][T23174] bridge_slave_0: entered promiscuous mode
[  411.755409][T23249] loop2: detected capacity change from 0 to 512
[  411.768994][T23174] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.793631][T23174] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.837765][T23174] bridge_slave_1: entered allmulticast mode
[  411.872640][T23174] bridge_slave_1: entered promiscuous mode
[  411.978236][T23174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.038194][T23174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.142754][T23174] team0: Port device team_slave_0 added
[  412.178766][T23174] team0: Port device team_slave_1 added
[  412.258121][T23249] journal_path: Lookup failure for './file1'
[  412.258894][T23174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.272049][T23249] EXT4-fs: error: could not find journal device path
[  412.285891][   T28] audit: type=1400 audit(1787321322.310:6474): avc:  denied  { write } for  pid=23254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.295177][T23174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.387528][   T28] audit: type=1400 audit(1787321322.410:6475): avc:  denied  { write } for  pid=23265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.409814][T23174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.432589][T23174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.446874][T23174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.499981][T23174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.521977][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5
[  412.554286][T23249] loop2: detected capacity change from 0 to 1024
[  412.571940][T23174] hsr_slave_0: entered promiscuous mode
[  412.582269][T23174] hsr_slave_1: entered promiscuous mode
[  412.600971][T23174] debugfs: 'hsr0' already exists in 'hsr'
[  412.615060][T23249] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  412.626393][T23249] System zones: 0-1, 3-36
[  412.634148][T23174] Cannot create hsr debugfs directory
[  412.644923][T23249] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3817: bad orphan inode 134217728
[  412.664967][   T47] IPVS: stop unused estimator thread 0...
[  412.671234][T23249] loop2: lost filesystem error report for type 5 error -117
[  412.679400][T23249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.729519][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3817'.
[  412.789545][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.871120][T23174] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  412.904760][   T28] audit: type=1400 audit(1787321322.930:6476): avc:  denied  { write } for  pid=23276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.946655][   T28] audit: type=1400 audit(1787321322.960:6477): avc:  denied  { write } for  pid=23292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.081296][T23296] loop2: detected capacity change from 0 to 1024
[  413.100403][T23296] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  413.116076][T23296] EXT4-fs (loop2): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  413.148679][T23296] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  413.158456][T23296] EXT4-fs (loop2): orphan cleanup on readonly fs
[  413.167241][T23296] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.3823: Inode bitmap for bg 0 marked uninitialized
[  413.197063][T23296] loop2: lost filesystem error report for type 5 error -117
[  413.208154][T23296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  413.648443][T23174] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  413.663964][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7
[  413.677741][T23174] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  413.699383][T23174] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  413.730236][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.742518][T23174] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  413.759182][T23174] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  413.775011][T23174] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  413.795911][T23174] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  413.884816][T23307] syzkaller0: entered promiscuous mode
[  413.902097][T23307] syzkaller0: entered allmulticast mode
[  414.044654][T23174] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.059629][T23331] loop1: detected capacity change from 0 to 128
[  414.077189][T23331] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  414.096414][T23174] 8021q: adding VLAN 0 to HW filter on device team0
[  414.097257][T23331] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  414.138452][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.145573][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.155062][T23331] ext2 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  414.216573][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.224385][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.246962][   T28] audit: type=1400 audit(1787321324.260:6478): avc:  denied  { write } for  pid=23326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.315870][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8
[  414.327703][   T28] audit: type=1400 audit(1787321324.320:6479): avc:  denied  { write } for  pid=23342 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.355315][T23174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  414.420680][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'.
[  414.435825][   T28] audit: type=1400 audit(1787321324.380:6480): avc:  denied  { write } for  pid=23330 comm="syz.1.3826" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  414.505882][T18858] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  414.635506][T23174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.645574][T23351] loop2: detected capacity change from 0 to 512
[  414.673445][T23359] loop1: detected capacity change from 0 to 512
[  414.686629][T23351] journal_path: Lookup failure for './file1'
[  414.692937][T23351] EXT4-fs: error: could not find journal device path
[  414.708185][T23359] journal_path: Lookup failure for './file1'
[  414.732853][T23359] EXT4-fs: error: could not find journal device path
[  414.857599][T23359] loop1: detected capacity change from 0 to 1024
[  414.923166][T23174] veth0_vlan: entered promiscuous mode
[  414.942384][T23359] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  414.962537][T23174] veth1_vlan: entered promiscuous mode
[  414.980527][T23359] System zones: 0-1, 3-36
[  414.997393][T23351] loop2: detected capacity change from 0 to 1024
[  415.011312][T23359] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3830: bad orphan inode 134217728
[  415.026127][T23351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  415.035358][T23174] veth0_macvtap: entered promiscuous mode
[  415.041261][T23351] System zones: 0-1, 3-36
[  415.047884][T23359] loop1: lost filesystem error report for type 5 error -117
[  415.048701][T23174] veth1_macvtap: entered promiscuous mode
[  415.061765][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  415.068189][    C0] EXT4-fs (loop1): initial error at time 1787321325: ext4_orphan_get:1429
[  415.076713][    C0] EXT4-fs (loop1): last error at time 1787321325: ext4_orphan_get:1429
[  415.090057][T23359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.107329][T23351] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3829: bad orphan inode 134217728
[  415.119988][T23351] loop2: lost filesystem error report for type 5 error -117
[  415.123693][T23351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.149969][T23174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.164970][T23174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.184231][ T4021] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.186488][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'.
[  415.204608][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.214973][ T4021] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.248246][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.262181][ T4014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.292002][ T4014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.331122][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3831'.
[  415.540468][T23388] loop2: detected capacity change from 0 to 512
[  415.573727][T23388] journal_path: Lookup failure for './file1'
[  415.597130][T23388] EXT4-fs: error: could not find journal device path
[  415.709340][T23396] bridge_slave_0: left allmulticast mode
[  415.727608][T23396] bridge_slave_0: left promiscuous mode
[  415.750291][T23396] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.789086][T23396] bridge_slave_1: left allmulticast mode
[  415.799282][T23390] loop1: detected capacity change from 0 to 1024
[  415.806637][T23396] bridge_slave_1: left promiscuous mode
[  415.846967][T23396] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.856044][T23390] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  415.892037][T23396] bond0: (slave bond_slave_0): Releasing backup interface
[  415.904763][T23390] EXT4-fs (loop1): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  415.939877][T23388] loop2: detected capacity change from 0 to 1024
[  415.947604][T23396] bond0: (slave bond_slave_1): Releasing backup interface
[  415.957595][T23390] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  415.993729][T23390] EXT4-fs (loop1): orphan cleanup on readonly fs
[  416.009330][T23388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  416.025988][T23390] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.3834: Inode bitmap for bg 0 marked uninitialized
[  416.043412][T23388] System zones: 0-1, 3-36
[  416.049579][T23396] team0: Port device team_slave_0 removed
[  416.055310][T23388] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3833: bad orphan inode 134217728
[  416.069979][T23390] loop1: lost filesystem error report for type 5 error -117
[  416.091613][T23390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  416.111660][T23388] loop2: lost filesystem error report for type 5 error -117
[  416.115876][T23396] team0: Port device team_slave_1 removed
[  416.123178][T23388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.154170][T23396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.161669][T23396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.176283][T23396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.200058][T23396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  416.209683][T23388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3833'.
[  416.225710][T23396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  416.296719][T19495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.488794][   T28] audit: type=1400 audit(1787321326.510:6481): avc:  denied  { write } for  pid=23411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.541158][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.566504][   T28] audit: type=1400 audit(1787321326.540:6482): avc:  denied  { write } for  pid=23428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.698602][T23446] FAULT_INJECTION: forcing a failure.
[  416.698602][T23446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.730295][T23446] CPU: 0 UID: 0 PID: 23446 Comm: syz.2.3845 Not tainted syzkaller #0 PREEMPT(lazy) 
[  416.730330][T23446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  416.730345][T23446] Call Trace:
[  416.730353][T23446]  <TASK>
[  416.730362][T23446]  __dump_stack+0x1d/0x30
[  416.730398][T23446]  dump_stack_lvl+0x95/0xd0
[  416.730423][T23446]  dump_stack+0x15/0x1b
[  416.730525][T23446]  should_fail_ex+0x262/0x280
[  416.730556][T23446]  should_fail+0xb/0x20
[  416.730591][T23446]  should_fail_usercopy+0x1a/0x20
[  416.730693][T23446]  _copy_from_user+0x1c/0xb0
[  416.730715][T23446]  get_user_ifreq+0x52/0x110
[  416.730795][T23446]  sock_ioctl+0x54a/0x610
[  416.730825][T23446]  ? __pfx_sock_ioctl+0x10/0x10
[  416.730884][T23446]  __se_sys_ioctl+0xce/0x140
[  416.730909][T23446]  __x64_sys_ioctl+0x43/0x50
[  416.730978][T23446]  x64_sys_call+0x239d/0x2550
[  416.731008][T23446]  do_syscall_64+0x112/0x360
[  416.731032][T23446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.731060][T23446] RIP: 0033:0x7f965bb7e0d9
[  416.731080][T23446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.731177][T23446] RSP: 002b:00007f965a5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  416.731238][T23446] RAX: ffffffffffffffda RBX: 00007f965be05fa0 RCX: 00007f965bb7e0d9
[  416.731254][T23446] RDX: 00002000000002c0 RSI: 00000000000089f0 RDI: 0000000000000003
[  416.731271][T23446] RBP: 00007f965a5d7090 R08: 0000000000000000 R09: 0000000000000000
[  416.731285][T23446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.731298][T23446] R13: 00007f965be06038 R14: 00007f965be05fa0 R15: 00007ffca45a1138
[  416.731343][T23446]  </TASK>
[  416.911776][   T28] audit: type=1400 audit(1787321326.930:6483): avc:  denied  { write } for  pid=23430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.964582][T23459] EXT4-fs: quotafile must be on filesystem root
[  416.996799][   T28] audit: type=1400 audit(1787321327.020:6484): avc:  denied  { write } for  pid=23461 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  417.164583][T23469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.179279][T23468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.184508][T23469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.364955][T23460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  417.451642][T18858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.662348][T23477] set_capacity_and_notify: 2 callbacks suppressed
[  417.662364][T23477] loop6: detected capacity change from 0 to 512
[  417.733710][T23477] journal_path: Lookup failure for './file1'
[  417.737146][T23474] loop1: detected capacity change from 0 to 1024
[  417.750822][T23477] EXT4-fs: error: could not find journal device path
[  417.771014][T23474] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  417.805399][T23474] EXT4-fs (loop1): stripe (134) is not aligned with cluster size (4096), stripe is disabled
[  417.832925][T23474] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  417.852849][T23474] EXT4-fs (loop1): orphan cleanup on readonly fs
[  417.872880][T23474] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.3851: Inode bitmap for bg 0 marked uninitialized
[  417.901685][T23474] loop1: lost filesystem error report for type 5 error -117
[  417.915250][T23474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  418.024806][T23477] loop6: detected capacity change from 0 to 1024
[  418.152757][T23477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  418.171812][T23477] System zones: 0-1, 3-36
[  418.197504][   T28] audit: type=1400 audit(1787321328.220:6485): avc:  denied  { write } for  pid=23484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.221876][T23477] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.3852: bad orphan inode 134217728
[  418.261902][T23477] loop6: lost filesystem error report for type 5 error -117
[  418.272491][   T28] audit: type=1400 audit(1787321328.300:6486): avc:  denied  { write } for  pid=23500 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.332762][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'.
[  418.380950][T23505] loop1: detected capacity change from 0 to 512
[  418.402773][T23505] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3854: Directory hole found for htree index block 0
[  418.429542][T23505] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  418.431732][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  418.441657][T23505] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  418.447232][    C0] EXT4-fs (loop1): initial error at time 1787321328: dx_probe:791: inode 2
[  418.447263][    C0] EXT4-fs (loop1): last error at time 1787321328: dx_probe:791: inode 2
[  418.551803][   T28] audit: type=1400 audit(1787321328.570:6487): avc:  denied  { write } for  pid=23502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.584545][T23505] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3854: Directory hole found for htree index block 0
[  418.630857][   T28] audit: type=1400 audit(1787321328.650:6488): avc:  denied  { write } for  pid=23521 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.641466][T23524] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3854: Directory hole found for htree index block 0
[  418.726207][T23505] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3854: Directory hole found for htree index block 0
[  418.759621][ T2979] ==================================================================
[  418.767744][ T2979] BUG: KCSAN: data-race in d_delete / step_into_slowpath
[  418.774816][ T2979] 
[  418.777150][ T2979] read-write to 0xffff88811b0379c0 of 4 bytes by task 19477 on cpu 1:
[  418.785321][ T2979]  d_delete+0x15a/0x180
[  418.789490][ T2979]  d_delete_notify+0x32/0x100
[  418.794172][ T2979]  vfs_unlink+0x287/0x490
[  418.798519][ T2979]  filename_unlinkat+0x1dc/0x410
[  418.803466][ T2979]  __se_sys_unlink+0x2b/0xe0
[  418.808071][ T2979]  __x64_sys_unlink+0x1f/0x30
[  418.812763][ T2979]  x64_sys_call+0x18ee/0x2550
[  418.817471][ T2979]  do_syscall_64+0x112/0x360
[  418.822054][ T2979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.827944][ T2979] 
[  418.830348][ T2979] read to 0xffff88811b0379c0 of 4 bytes by task 2979 on cpu 0:
[  418.837964][ T2979]  step_into_slowpath+0x139/0x4c0
[  418.842992][ T2979]  path_lookupat+0x2eb/0x4c0
[  418.847584][ T2979]  filename_lookup+0x18f/0x390
[  418.853571][ T2979]  do_readlinkat+0x74/0x2f0
[  418.858078][ T2979]  __x64_sys_readlink+0x47/0x60
[  418.862945][ T2979]  x64_sys_call+0x1d41/0x2550
[  418.867619][ T2979]  do_syscall_64+0x112/0x360
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  418.872196][ T2979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.878083][ T2979] 
[  418.880403][ T2979] value changed: 0x00300180 -> 0x00004080
[  418.886106][ T2979] 
[  418.888415][ T2979] Reported by Kernel Concurrency Sanitizer on:
[  418.894548][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  418.903389][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  418.913434][ T2979] ==================================================================
[  419.020402][T20814] syz_tun (unregistering): left allmulticast mode
[  419.029664][ T5217] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.165070][ T5217] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.175311][T20814] EXT4-fs unmount: 4 callbacks suppressed
[  419.175327][T20814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.214155][ T5217] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.264484][ T5217] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.371198][ T5217] bond0 (unregistering): Released all slaves
[  419.409458][ T5217] hsr_slave_0: left promiscuous mode
[  419.415368][ T5217] hsr_slave_1: left promiscuous mode
[  419.423750][ T5217] veth0_macvtap: left promiscuous mode
[  419.429386][ T5217] veth1_vlan: left promiscuous mode
[  419.434916][ T5217] veth0_vlan: left promiscuous mode
[  419.452177][   T28] audit: type=1400 audit(1787321329.470:6489): avc:  denied  { write } for  pid=23538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  419.483671][   T28] audit: type=1400 audit(1787321329.490:6490): avc:  denied  { write } for  pid=23549 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  419.554866][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9
[  419.623284][   T28] audit: type=1400 audit(1787321329.650:6491): avc:  denied  { write } for  pid=23553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  419.659019][   T28] audit: type=1400 audit(1787321329.680:6492): avc:  denied  { write } for  pid=23564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  419.690564][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10
[  419.779940][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11
[  419.867462][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12
[  420.255637][ T5217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.315840][ T5217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.364875][ T5217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.434430][ T5217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.501672][ T5217] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.554965][ T5217] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.601927][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13
[  420.611596][ T5217] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.665005][ T5217] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.712938][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14
[  420.792658][ T5217] bond0 (unregistering): Released all slaves
[  420.815023][ T5217] bond0 (unregistering): Released all slaves
[  420.848764][ T5217] hsr_slave_0: left promiscuous mode
[  420.855461][ T5217] hsr_slave_1: left promiscuous mode
[  420.863351][ T5217] hsr_slave_0: left promiscuous mode
[  420.869084][ T5217] hsr_slave_1: left promiscuous mode
[  420.879797][ T5217] veth1_macvtap: left promiscuous mode
[  420.885803][ T5217] veth0_macvtap: left promiscuous mode
[  420.891312][ T5217] veth1_vlan: left promiscuous mode
[  420.896827][ T5217] veth0_vlan: left promiscuous mode
[  420.902615][ T5217] veth1_macvtap: left promiscuous mode
[  420.908187][ T5217] veth0_macvtap: left promiscuous mode
[  420.914098][ T5217] veth1_vlan: left promiscuous mode
[  420.919473][ T5217] veth0_vlan: left promiscuous mode
[  421.058068][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15
[  421.146173][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16
[  421.248631][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17
[  421.338305][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18
[  421.438574][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19
[  421.532025][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20
[  424.746544][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  424.746560][   T28] audit: type=1400 audit(1787321334.770:6529): avc:  denied  { write } for  pid=23838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.776256][   T28] audit: type=1400 audit(1787321334.780:6530): avc:  denied  { write } for  pid=23849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.028679][   T28] audit: type=1400 audit(1787321335.050:6531): avc:  denied  { write } for  pid=23852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.052546][   T28] audit: type=1400 audit(1787321335.050:6532): avc:  denied  { write } for  pid=23863 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.572527][   T28] audit: type=1400 audit(1787321335.600:6533): avc:  denied  { write } for  pid=23866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.595669][   T28] audit: type=1400 audit(1787321335.600:6534): avc:  denied  { write } for  pid=23877 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  426.363276][   T28] audit: type=1400 audit(1787321336.390:6535): avc:  denied  { write } for  pid=23881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  426.386487][   T28] audit: type=1400 audit(1787321336.390:6536): avc:  denied  { write } for  pid=23892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1