last executing test programs:

2m18.573458366s ago: executing program 32 (id=211):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0xa00, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
socket$netlink(0x10, 0x3, 0xf)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0)

2m11.678760936s ago: executing program 33 (id=348):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
read(r0, &(0x7f00000018c0)=""/4115, 0x1013)

2m5.527587859s ago: executing program 34 (id=455):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0xb)

1m59.204424446s ago: executing program 35 (id=582):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000300)={{0x5, 0x0, 0x80cfaf, 0xe058, 0x11}, 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x388}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x8004)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040)

1m53.057812448s ago: executing program 36 (id=666):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==")
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)

1m43.469838466s ago: executing program 37 (id=752):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1cc4}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$eJzs3c9rXFsdAPDvnUx+mLYmgmDrKiBooGRiamwVXFRciGChoGvbYTINNZNMyUxKEwK1iOBG0OJC0E3XVevOrT+2+i/oRkRaqqbltbzFI487P5KZZCad9E1m3ms+H7jJOffHnPO9P849yT3cCeDUmkl/ZCIuRMTPk4ipxvwkIkZrqWzE1fp6r3a2C+mUxO7u9/6X1NZ5ubNdiJZtYnIyzjQy5yPiLz+JuJg5XG5lc2slXyoV1xv5+erqnfnK5tbc7dX8cnG5uHZ5YXHx0pWvXhnvX6zv/X3r7LNffPtLv7/6/o8/9+Rnf03iapxtLGuNo19mYqa+T2I03YVtvtXvwoYsGXYFeCvppTlSv8rjQkxlY6z3bbMnWTEA4MTcj4hdAOCUSdz/AeCUaf4f4OXOdiGddu8P9/8Rg/b8mxExUY+/+XyzviTbeGY3UXsOOvkyaXvekUTEdB/Kn4mI3/zxB79Npzih55AAnfzoQUTcnJ5ptv/77U9yaMxCXe8DMr7cTBwxOGDmQF77B4Pzp7T/87X9/t/+9ZfZ6/9Eh/7PeIdr923MRPuIk8PXf+ZpH4rpKu3/fWN0f2zbq5b4G6ZHGrlztT7faHLrdqmYtm2fjojZGB1P8wudP742vGz2xQcv2ua2RNza//v/wx8+TstPf++vkXmaPdDkLuWr+X7Ennr+IOLz2U7xJ3vHP+nS/73eYxnf+fpPf91tWRp/Gm9zao//5EeV7T6K+GJ0jr8paYxPbB6GtvGJl+drp8N886To4A//+tVkt/Jbj386peXX/xY4199Au0iP/+TR8U8nreM1K8cv42+Ppv4ce+NJ23WPv6nz+T+WfL+Wbl5K9/LV6vpCxFjy3cPzL+1v28w310/jn/1C5+v/qPM/jeVmj/Fnn/33d92W7cXfnHEo/oaJHgs7pjT+pWMd/46J9E/hLovypSevVka6ld/b8V9MEyOzjTm9tH9da5ovlcZa1nnrHQcAAAAAAAAAAAAAAAAAAAAAAAAAx5CpvaQ0yeT20plMLhe17/D+bExmSuVK9eKt8sbaUv1lptMxOh4RtVddTrW8D3Wh8T78Zv7SgfxXIuIzEfHL8U/V8rlCubQ07OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOFMl+//T/1nvP779VBrCACciIk3rvGiOJCKAAAD8+b7f0SMn3w9AIDB6en+DwC8U9z/AeD0mcgMuwYAwKBNRGSHXQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeadevXUun3dc724U0v3R3c2OlfHduqVhZya1uFHKF8vqd3HK5vFwq5grl1ZZN/9Hp80rl8p3FWNu4N18tVqrzlc2tG6vljbXqjdur+eXijeLowCIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN5VNrdW8qVScb2ReDwZ0T5nQImRRoX6+clzZwcdxSASu1P1PfVxqU/fExMH5/x77p/nj9rq4aHTWOIjJ4bZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnwYAAD//0ldFl4=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
pwrite64(r0, &(0x7f0000000300)='2', 0x1, 0x8080c60)
fallocate(r0, 0x0, 0x3f, 0x8000c62)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)

1m38.899004339s ago: executing program 38 (id=795):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
socket$inet(0x2, 0x2, 0x5)

1m31.235609389s ago: executing program 39 (id=875):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a})

1m29.98028321s ago: executing program 40 (id=891):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x3e8, 0x1, 0x64}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
sendto(r1, &(0x7f0000000200)="e80300000100000064000000ffffffff010000003132333435363738", 0x1c, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1m22.470168236s ago: executing program 41 (id=984):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4)
fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r3, 0x0)
setresuid(r1, 0x0, r3)

1m10.140567812s ago: executing program 42 (id=1175):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000440)={0x0, 0x170, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

1m7.406794159s ago: executing program 7 (id=1205):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

1m7.092969557s ago: executing program 7 (id=1208):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

1m6.927516472s ago: executing program 7 (id=1213):
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0003}]})
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
setfsgid(0xee01)

1m6.486588682s ago: executing program 7 (id=1217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x100)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1000)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41)

1m6.401525244s ago: executing program 7 (id=1218):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000000))

1m6.211261939s ago: executing program 7 (id=1222):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m6.18894581s ago: executing program 43 (id=1222):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

56.623942757s ago: executing program 9 (id=1390):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x6a57, &(0x7f0000000040)={0x0, 0x398c, 0x1c080, 0xd, 0x2a})
r1 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x1a9}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r1}}, 0x1)
io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0)

56.422333582s ago: executing program 9 (id=1394):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c000b0000400600000a0000010a0000020050005000000b0100000008601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0)

56.148979628s ago: executing program 9 (id=1400):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYRES64=0x0], 0x1, 0x2cb, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1bc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
syz_clone3(&(0x7f0000000100)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
unshare(0x22020600)
fsync(r0)

55.759408058s ago: executing program 9 (id=1412):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x81001)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)

55.586785693s ago: executing program 9 (id=1419):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x68}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)

55.423665226s ago: executing program 9 (id=1424):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x28020400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00')
sendfile(r0, r0, &(0x7f0000000100)=0x1000000, 0x102)

55.423418537s ago: executing program 44 (id=1424):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x28020400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00')
sendfile(r0, r0, &(0x7f0000000100)=0x1000000, 0x102)

52.822072351s ago: executing program 5 (id=1471):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
close(0x4)
close(r2)

52.727489064s ago: executing program 5 (id=1473):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x4000000)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0)

52.661789385s ago: executing program 5 (id=1474):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)=')(', 0x2}], 0x1}, 0x41)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

52.412812971s ago: executing program 5 (id=1480):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
chdir(&(0x7f0000000200)='./file0/file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0)
chdir(&(0x7f0000000100)='./file0/../file0\x00')

52.331645133s ago: executing program 5 (id=1481):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10)

52.157947527s ago: executing program 5 (id=1486):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x1}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffc, 0x0, 0x200000000006, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)

52.115787739s ago: executing program 45 (id=1486):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x1}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffc, 0x0, 0x200000000006, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)

35.52041606s ago: executing program 1 (id=1701):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa3786d37e20239b}, 0x1000c014)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

35.375947194s ago: executing program 1 (id=1706):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0xffffffffffffffb4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xbb}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

35.214211927s ago: executing program 1 (id=1708):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, 0x0}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

35.068718271s ago: executing program 1 (id=1712):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x242, &(0x7f0000000540)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)

34.779968258s ago: executing program 1 (id=1716):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9})
r2 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140))
close(r1)

34.427097737s ago: executing program 1 (id=1720):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

34.366158548s ago: executing program 46 (id=1720):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

30.095599214s ago: executing program 0 (id=1801):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0)
write(r0, &(0x7f0000000960)='1', 0x1)

29.914139789s ago: executing program 0 (id=1806):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
pread64(r0, 0x0, 0x0, 0x48)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)

26.819172125s ago: executing program 0 (id=1862):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

25.886291529s ago: executing program 0 (id=1879):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000000))

25.84421559s ago: executing program 0 (id=1880):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x189042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4)

25.80863384s ago: executing program 0 (id=1881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000040))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x685b}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20)

10.739710254s ago: executing program 47 (id=1881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000040))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x685b}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20)

2.779734131s ago: executing program 4 (id=2163):
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0)
io_destroy(r0)

2.365596121s ago: executing program 4 (id=2169):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
getrandom(0x0, 0x0, 0x2)

2.211157715s ago: executing program 4 (id=2172):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x4040)

1.60642462s ago: executing program 2 (id=2179):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5)
close(r0)

1.563701072s ago: executing program 3 (id=2180):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf)
write(r0, 0x0, 0x0)

1.553051862s ago: executing program 4 (id=2182):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d1c2", 0xfedc}, {&(0x7f0000000040)='`', 0x1}], 0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000001040)={0x2, 0x4e21, @multicast2}, 0x10)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

1.463241474s ago: executing program 4 (id=2183):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.415498065s ago: executing program 4 (id=2184):
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmmsg(r1, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e342", 0x2}], 0x1}}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)

1.410400775s ago: executing program 2 (id=2185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00010100ff01"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.333525817s ago: executing program 2 (id=2187):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

1.272772729s ago: executing program 2 (id=2188):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

995.723245ms ago: executing program 8 (id=2193):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002080)=@req3={0x80000000}, 0x1c)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804)

933.672147ms ago: executing program 8 (id=2195):
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

728.872752ms ago: executing program 6 (id=2202):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

641.463904ms ago: executing program 6 (id=2203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0)
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)

625.154415ms ago: executing program 3 (id=2204):
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

546.387507ms ago: executing program 3 (id=2205):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448df, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

483.989208ms ago: executing program 3 (id=2206):
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)

429.37937ms ago: executing program 6 (id=2207):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002080)=@req3={0x80000000}, 0x1c)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804)

410.04941ms ago: executing program 3 (id=2208):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

390.833401ms ago: executing program 6 (id=2209):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000280)=0x522, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

332.162002ms ago: executing program 2 (id=2210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x400}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)

330.871682ms ago: executing program 8 (id=2220):
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x37, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

173.644286ms ago: executing program 8 (id=2211):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100001040000c607bf9cfbed53d80000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280"], 0x44}, 0x1, 0x0, 0x0, 0x8008804}, 0x4040)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

173.470566ms ago: executing program 6 (id=2212):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

142.513577ms ago: executing program 2 (id=2213):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x75d, &(0x7f00000001c0)={[{@grpquota}, {@noblock_validity}, {@discard}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100000000}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_ordered}, {@test_dummy_encryption_v1}, {@nojournal_checksum}, {@bh}, {@dax_never}, {@dax_inode}], [], 0x2c}, 0x8, 0x525, &(0x7f00000007c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x1cd27e, 0x1f6)

106.866388ms ago: executing program 8 (id=2214):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8)
bind$can_raw(r0, &(0x7f0000000140), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
r2 = openat(r1, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0)
read(r2, &(0x7f0000000300), 0x1000)

103.322408ms ago: executing program 3 (id=2215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pi6   \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

62.943558ms ago: executing program 6 (id=2216):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

0s ago: executing program 8 (id=2217):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
rt_sigqueueinfo(0x0, 0xc, &(0x7f0000000400)={0x38, 0xadc, 0x4b6c010c})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000001000008000f0100811b01a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

kernel console output (not intermixed with test programs):

 R15: 00007ffff5ddbdf8
[  128.718270][ T9252]  </TASK>
[  128.937036][ T9264] netlink: 'syz.1.1372': attribute type 14 has an invalid length.
[  128.937061][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'.
[  128.957183][ T9264] netlink: 'syz.1.1372': attribute type 14 has an invalid length.
[  128.957218][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'.
[  128.957711][ T4580] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.958004][ T4580] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.958127][ T4580] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.958233][ T4580] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.991982][ T6131] Bluetooth: hci0: command 0x1003 tx timeout
[  128.992013][ T3750] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  129.224690][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.224834][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.225157][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.225506][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.232290][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.232653][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.232980][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.252534][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.253711][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.267114][ T9279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=9279 comm=syz.6.1377
[  129.580277][ T9303] device-mapper: table: 252:1: raid: unknown target type
[  129.580301][ T9303] device-mapper: ioctl: error adding target to table
[  129.671786][ T9315] loop1: detected capacity change from 0 to 1024
[  129.680013][ T9315] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  129.680068][ T9315] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  129.680176][ T9315] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  129.711234][ T9315] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.1387: iget: special inode unallocated
[  129.711279][ T9315] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  129.717967][ T9315] EXT4-fs (loop1): no journal found
[  129.718021][ T9315] EXT4-fs (loop1): can't get journal size
[  129.724062][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  129.724092][    C0] EXT4-fs (loop1): initial error at time 1788470806: ext4_get_journal_inode:5927: inode 32
[  129.724127][    C0] EXT4-fs (loop1): last error at time 1788470806: ext4_get_journal_inode:5927: inode 32
[  129.734991][ T9315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  129.853546][ T6570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.013679][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  130.013706][   T29] audit: type=1400 audit(1788470806.846:1242): avc:  denied  { write } for  pid=9339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.104954][   T29] audit: type=1400 audit(1788470806.936:1243): avc:  denied  { write } for  pid=9354 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.330375][   T29] audit: type=1400 audit(1788470807.166:1244): avc:  denied  { write } for  pid=9363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.368600][ T9381] loop9: detected capacity change from 0 to 256
[  130.378242][ T9381] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.413751][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1401'.
[  130.500556][ T9388] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  130.500623][ T9388] FAT-fs (loop9): Filesystem has been set read-only
[  130.500648][ T9388] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  130.548626][   T29] audit: type=1400 audit(1788470807.386:1245): avc:  denied  { write } for  pid=9390 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  130.598885][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1409'.
[  130.598933][ T9401] netlink: 'syz.1.1409': attribute type 3 has an invalid length.
[  130.618573][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'.
[  130.816403][ T9424] loop9: detected capacity change from 0 to 128
[  130.892299][ T5892] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  130.892541][ T5892] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  130.942607][   T29] audit: type=1400 audit(1788470807.776:1246): avc:  denied  { write } for  pid=9407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.004009][   T29] audit: type=1400 audit(1788470807.836:1247): avc:  denied  { write } for  pid=9442 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.107577][ T9452] loop6: detected capacity change from 0 to 512
[  131.134214][ T9452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.134379][ T9452] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.164749][   T29] audit: type=1400 audit(1788470807.996:1248): avc:  denied  { write } for  pid=9451 comm="syz.6.1428" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.187294][   T29] audit: type=1400 audit(1788470807.996:1249): avc:  denied  { write } for  pid=9451 comm="syz.6.1428" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.222573][ T9461] loop8: detected capacity change from 0 to 1024
[  131.257666][ T9461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.317775][ T4578] bridge_slave_1: left allmulticast mode
[  131.317809][ T4578] bridge_slave_1: left promiscuous mode
[  131.318033][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.347540][ T4578] bridge_slave_0: left allmulticast mode
[  131.347583][ T4578] bridge_slave_0: left promiscuous mode
[  131.347863][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.475431][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.475785][   T29] audit: type=1400 audit(1788470808.306:1250): avc:  denied  { write } for  pid=9450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.514021][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.515637][ T4578] bond0 (unregistering): Released all slaves
[  131.530832][ T4578] bond1 (unregistering): (slave veth3): Releasing backup interface
[  131.543094][ T4578] bond1 (unregistering): Released all slaves
[  131.561201][ T9475] loop1: detected capacity change from 0 to 256
[  131.581409][   T29] audit: type=1400 audit(1788470808.416:1251): avc:  denied  { write } for  pid=9487 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.662151][ T4578] hsr_slave_0: left promiscuous mode
[  131.668594][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.671323][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.729822][ T4578] team0 (unregistering): Port device team_slave_1 removed
[  131.737446][ T4578] team0 (unregistering): Port device team_slave_0 removed
[  131.746073][ T9494] 9pnet: p9_errstr2errno: server reported unknown error tun
[  131.931890][ T9507] loop1: detected capacity change from 0 to 1024
[  131.932934][ T9507] EXT4-fs: Ignoring removed bh option
[  132.276947][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.277002][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.277187][ T9453] bridge_slave_0: entered allmulticast mode
[  132.279893][ T9453] bridge_slave_0: entered promiscuous mode
[  132.282549][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.282654][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.282851][ T9453] bridge_slave_1: entered allmulticast mode
[  132.284339][ T9453] bridge_slave_1: entered promiscuous mode
[  132.344570][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.367454][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.413161][ T9453] team0: Port device team_slave_0 added
[  132.420106][ T9453] team0: Port device team_slave_1 added
[  132.438682][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.438710][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.438762][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.484110][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.484130][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.484270][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.546916][ T9453] hsr_slave_0: entered promiscuous mode
[  132.547437][ T9453] hsr_slave_1: entered promiscuous mode
[  132.547709][ T9453] debugfs: 'hsr0' already exists in 'hsr'
[  132.547729][ T9453] Cannot create hsr debugfs directory
[  133.066808][ T9619] loop6: detected capacity change from 0 to 1024
[  133.068699][ T9619] EXT4-fs: Ignoring removed bh option
[  133.095096][ T9619] EXT4-fs mount: 4 callbacks suppressed
[  133.095129][ T9619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  133.095396][ T9619] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.131457][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 3)
[  133.134527][ T9619] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  133.134603][ T9619] EXT4-fs (loop6): This should not happen!! Data will be lost
[  133.134603][ T9619] 
[  133.147459][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.148122][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.148729][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.149255][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.149706][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.150257][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.150811][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.151263][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.151823][ T9619] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.1464: lblock 3 mapped to illegal pblock 3 (length 1)
[  133.273676][ T9599] loop1: detected capacity change from 0 to 512
[  133.354583][ T9453] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  133.384785][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  133.396744][ T9453] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  133.398218][ T5710] kernel read not supported for file /input/event0 (pid: 5710 comm: kworker/1:6)
[  133.415418][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  133.423547][ T9453] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  133.447263][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  133.457506][ T9453] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  133.476821][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  133.479957][ T9599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.480420][ T9599] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.546870][ T6570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.591248][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.605452][ T9453] 8021q: adding VLAN 0 to HW filter on device team0
[  133.616126][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.616228][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.642221][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.642272][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.710925][ T9453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  133.972136][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  134.071370][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.101229][ T9707] netlink: 'syz.1.1479': attribute type 13 has an invalid length.
[  134.101804][ T9707] gretap0: refused to change device tx_queue_len
[  134.101848][ T9707] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  134.253547][ T9453] veth0_vlan: entered promiscuous mode
[  134.254073][ T9724] loop1: detected capacity change from 0 to 128
[  134.269230][ T9724] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  134.275496][ T9724] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  134.308482][ T9453] veth1_vlan: entered promiscuous mode
[  134.336939][ T4582] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.359412][ T9453] veth0_macvtap: entered promiscuous mode
[  134.383193][ T6570] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.393338][ T9453] veth1_macvtap: entered promiscuous mode
[  134.405607][ T4582] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.445230][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.498457][ T4582] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.517051][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.607642][ T4582] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.627256][ T4578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.629847][ T4580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.630050][ T4580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.630196][ T4580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.802186][ T4582] bridge_slave_1: left allmulticast mode
[  134.802224][ T4582] bridge_slave_1: left promiscuous mode
[  134.802359][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.840617][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.941673][ T9720] loop6: detected capacity change from 0 to 2048
[  135.001225][ T9766] loop8: detected capacity change from 0 to 4096
[  135.020103][ T9766] EXT4-fs (loop8): corrupt root inode, run e2fsck
[  135.020146][ T9766] EXT4-fs (loop8): mount failed
[  135.045686][   T29] kauditd_printk_skb: 51 callbacks suppressed
[  135.045719][   T29] audit: type=1400 audit(1788470811.876:1303): avc:  denied  { write } for  pid=9765 comm="syz.8.1493" path="socket:[27156]" dev="sockfs" ino=27156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  135.157017][ T9720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.233808][ T9720] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  135.282957][ T9720] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  135.311894][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.331405][ T4582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.345231][ T4582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.356459][ T4582] bond0 (unregistering): Released all slaves
[  135.377153][ T9777] lo: entered promiscuous mode
[  135.381140][ T9777] tunl0: entered promiscuous mode
[  135.388703][ T9777] gre0: entered promiscuous mode
[  135.406284][ T9777] gretap0: entered promiscuous mode
[  135.412433][ T9777] erspan0: entered promiscuous mode
[  135.416488][ T9777] ip_vti0: entered promiscuous mode
[  135.423989][ T9777] ip6_vti0: entered promiscuous mode
[  135.439249][ T9777] sit0: entered promiscuous mode
[  135.445210][ T9777] ip6tnl0: entered promiscuous mode
[  135.453732][ T9777] ip6gre0: entered promiscuous mode
[  135.461400][ T9777] syz_tun: entered promiscuous mode
[  135.464393][ T9777] ip6gretap0: entered promiscuous mode
[  135.468341][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.468741][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.470754][ T9777] bridge0: entered promiscuous mode
[  135.483671][ T9777] vcan0: entered promiscuous mode
[  135.499560][ T9777] bond0: entered promiscuous mode
[  135.499586][ T9777] bond_slave_0: entered promiscuous mode
[  135.499702][ T9777] bond_slave_1: entered promiscuous mode
[  135.505205][ T9777] team0: entered promiscuous mode
[  135.505249][ T9777] team_slave_0: entered promiscuous mode
[  135.505360][ T9777] team_slave_1: entered promiscuous mode
[  135.523753][ T9777] dummy0: entered promiscuous mode
[  135.539963][ T9777] nlmon0: entered promiscuous mode
[  135.540894][ T9777] batadv0: entered promiscuous mode
[  135.552435][ T9777] vxcan0: entered promiscuous mode
[  135.553043][ T9777] vxcan1: entered promiscuous mode
[  135.553531][ T9777] veth0: entered promiscuous mode
[  135.570330][ T9777] veth1: entered promiscuous mode
[  135.581532][ T9777] wg0: entered promiscuous mode
[  135.591388][ T9777] wg1: entered promiscuous mode
[  135.597805][ T9777] wg2: entered promiscuous mode
[  135.598719][ T9777] veth0_to_bridge: entered promiscuous mode
[  135.611943][ T9777] veth1_to_bridge: entered promiscuous mode
[  135.620140][ T9795] loop8: detected capacity change from 0 to 512
[  135.620159][ T9777] veth0_to_bond: entered promiscuous mode
[  135.634335][ T9777] veth1_to_bond: entered promiscuous mode
[  135.641880][ T9777] veth0_to_team: entered promiscuous mode
[  135.649752][ T9777] veth1_to_team: entered promiscuous mode
[  135.657755][ T9777] veth0_to_batadv: entered promiscuous mode
[  135.658542][ T9777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.658660][ T9777] batadv_slave_0: entered promiscuous mode
[  135.658612][ T9795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.658732][ T9795] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.703101][ T9777] veth1_to_batadv: entered promiscuous mode
[  135.709315][   T29] audit: type=1400 audit(1788470812.546:1304): avc:  denied  { write } for  pid=9794 comm="syz.8.1502" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  135.716865][   T29] audit: type=1400 audit(1788470812.546:1305): avc:  denied  { write } for  pid=9794 comm="syz.8.1502" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  135.749708][ T9777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.749842][ T9777] batadv_slave_1: entered promiscuous mode
[  135.763150][ T9777] xfrm0: entered promiscuous mode
[  135.773581][ T9777] veth0_to_hsr: entered promiscuous mode
[  135.781729][ T9777] veth1_to_hsr: entered promiscuous mode
[  135.789309][ T9777] hsr0: entered promiscuous mode
[  135.792629][ T9777] veth1_virt_wifi: entered promiscuous mode
[  135.798337][ T9777] veth0_virt_wifi: entered promiscuous mode
[  135.805388][ T9777] vlan0: entered promiscuous mode
[  135.812117][ T9777] vlan1: entered promiscuous mode
[  135.821967][ T9777] macvlan0: entered promiscuous mode
[  135.828287][ T9777] macvlan1: entered promiscuous mode
[  135.829153][ T9777] ipvlan0: entered promiscuous mode
[  135.829306][ T9777] ipvlan1: entered promiscuous mode
[  135.847690][ T9777] macvtap0: entered promiscuous mode
[  135.848416][ T9777] macsec0: entered promiscuous mode
[  135.860322][ T9777] geneve0: entered promiscuous mode
[  135.861326][ T9777] geneve1: entered promiscuous mode
[  135.875323][ T9777] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  135.884957][ T9777] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  135.897748][ T9777] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  135.913190][ T9777] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  135.918369][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.943587][ T4582] hsr_slave_0: left promiscuous mode
[  135.953989][ T4582] hsr_slave_1: left promiscuous mode
[  135.955193][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.955245][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.971020][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.971082][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.009774][ T4582] veth1_macvtap: left promiscuous mode
[  136.009816][ T4582] veth0_macvtap: left promiscuous mode
[  136.009927][ T4582] veth1_vlan: left promiscuous mode
[  136.010093][ T4582] veth0_vlan: left promiscuous mode
[  136.034825][   T29] audit: type=1326 audit(1788470812.866:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  136.034882][   T29] audit: type=1326 audit(1788470812.866:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  136.034924][   T29] audit: type=1326 audit(1788470812.866:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  136.035018][   T29] audit: type=1326 audit(1788470812.866:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  136.035126][   T29] audit: type=1326 audit(1788470812.866:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  136.097409][   T29] audit: type=1326 audit(1788470812.926:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  136.097545][   T29] audit: type=1326 audit(1788470812.926:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.8.1505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bee45dec2 code=0x7ffc0000
[  136.419046][ T4582] team0 (unregistering): Port device team_slave_1 removed
[  136.432916][ T4582] team0 (unregistering): Port device team_slave_0 removed
[  136.635760][   T69] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.635820][   T69] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.635932][   T69] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.635972][   T69] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.926517][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.926568][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.926645][ T9737] bridge_slave_0: entered allmulticast mode
[  136.931120][ T9737] bridge_slave_0: entered promiscuous mode
[  136.931918][ T9849] loop6: detected capacity change from 0 to 128
[  136.955058][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.955171][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.955582][ T9737] bridge_slave_1: entered allmulticast mode
[  136.963723][ T9849] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.968169][ T9737] bridge_slave_1: entered promiscuous mode
[  136.977459][ T9849] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.052012][ T9737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.062909][ T9737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.106392][ T4582] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.148976][ T9823] loop1: detected capacity change from 0 to 2048
[  137.150646][ T9737] team0: Port device team_slave_0 added
[  137.191470][ T9737] team0: Port device team_slave_1 added
[  137.257633][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.257666][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.259227][ T9737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.308027][ T9737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.308059][ T9737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.308167][ T9737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.310661][ T9823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.392803][ T9823] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  137.426099][ T9737] hsr_slave_0: entered promiscuous mode
[  137.426500][ T9737] hsr_slave_1: entered promiscuous mode
[  137.438243][ T9737] debugfs: 'hsr0' already exists in 'hsr'
[  137.438270][ T9737] Cannot create hsr debugfs directory
[  137.449146][ T9823] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  137.491229][ T6570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.114030][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6
[  138.280669][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8
[  138.505792][ T9972] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.1526'.
[  138.678479][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9
[  138.814808][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10
[  138.991136][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11
[  139.150356][T10048] loop1: detected capacity change from 0 to 512
[  139.168748][T10048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.187339][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12
[  139.209077][ T6570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.222885][ T9815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.228172][ T9737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  139.272499][ T9737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  139.274590][ T9737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  139.299955][ T9737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  139.307235][ T9737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  139.339745][ T9737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  139.348001][ T9737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  139.367922][ T9737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  139.433887][T10084] FAULT_INJECTION: forcing a failure.
[  139.433887][T10084] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  139.433952][T10084] CPU: 1 UID: 0 PID: 10084 Comm: syz.2.1539 Not tainted syzkaller #0 PREEMPT(lazy) 
[  139.434057][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  139.434071][T10084] Call Trace:
[  139.434078][T10084]  <TASK>
[  139.434085][T10084]  __dump_stack+0x1d/0x30
[  139.434112][T10084]  dump_stack_lvl+0x95/0xd0
[  139.434138][T10084]  dump_stack+0x15/0x1b
[  139.434196][T10084]  should_fail_ex+0x262/0x280
[  139.434226][T10084]  should_fail_alloc_page+0xf2/0x100
[  139.434382][T10084]  __alloc_frozen_pages_noprof+0x157/0x400
[  139.434583][T10084]  alloc_pages_mpol+0xaf/0x1d0
[  139.434659][T10084]  alloc_pages_noprof+0x94/0x140
[  139.434743][T10084]  anon_pipe_write+0x10a/0x1030
[  139.434897][T10084]  ? __file_has_perm+0x3d9/0x430
[  139.435099][T10084]  ? __pfx_anon_pipe_write+0x10/0x10
[  139.435269][T10084]  vfs_write+0x57f/0x9a0
[  139.435374][T10084]  ksys_write+0xdc/0x1a0
[  139.435546][T10084]  __x64_sys_write+0x40/0x50
[  139.435640][T10084]  x64_sys_call+0x154e/0x2550
[  139.435748][T10084]  do_syscall_64+0x112/0x360
[  139.435910][T10084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.436056][T10084] RIP: 0033:0x7fa5c1e6e159
[  139.436110][T10084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.436260][T10084] RSP: 002b:00007fa5c08c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.436333][T10084] RAX: ffffffffffffffda RBX: 00007fa5c20f5fa0 RCX: 00007fa5c1e6e159
[  139.436380][T10084] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004
[  139.436425][T10084] RBP: 00007fa5c1f05024 R08: 0000000000000000 R09: 0000000000000000
[  139.436470][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.436526][T10084] R13: 00007fa5c20f6038 R14: 00007fa5c20f5fa0 R15: 00007fff00c106d8
[  139.436594][T10084]  </TASK>
[  139.554433][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.642457][ T9737] 8021q: adding VLAN 0 to HW filter on device team0
[  139.659505][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.659561][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.711846][ T4582] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.711950][ T4582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.714910][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13
[  139.749201][T10089] syzkaller0: mtu greater than device maximum
[  139.864470][T10109] loop1: detected capacity change from 0 to 512
[  139.872893][T10109] EXT4-fs: Ignoring removed i_version option
[  139.880695][T10109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  139.896341][T10109] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  139.896381][T10109] loop1: lost filesystem error report for type 5 error -117
[  139.905667][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  139.905703][    C0] EXT4-fs (loop1): initial error at time 1788470816: ext4_process_orphan:346
[  139.905730][    C0] EXT4-fs (loop1): last error at time 1788470816: ext4_process_orphan:346
[  139.942066][T10109] EXT4-fs (loop1): 2 truncates cleaned up
[  139.942475][T10109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.999236][ T6570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.072823][   T29] kauditd_printk_skb: 63 callbacks suppressed
[  140.072854][   T29] audit: type=1400 audit(1788470816.906:1376): avc:  denied  { write } for  pid=10123 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.107801][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1550'.
[  140.125596][T10129] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.156383][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14
[  140.240848][ T9737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.276516][   T29] audit: type=1400 audit(1788470817.116:1377): avc:  denied  { execute } for  pid=10149 comm="syz.6.1554" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  140.406165][ T9737] veth0_vlan: entered promiscuous mode
[  140.417766][ T9737] veth1_vlan: entered promiscuous mode
[  140.434490][ T9737] veth0_macvtap: entered promiscuous mode
[  140.453218][   T29] audit: type=1400 audit(1788470817.286:1378): avc:  denied  { write } for  pid=10142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.479119][ T9737] veth1_macvtap: entered promiscuous mode
[  140.504482][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.533858][ T9737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.547044][   T29] audit: type=1400 audit(1788470817.386:1379): avc:  denied  { write } for  pid=10176 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.588992][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15
[  140.625860][ T4580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.646071][   T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.646166][   T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.646283][   T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.815025][T10195] loop2: detected capacity change from 0 to 1024
[  140.823768][T10195] EXT4-fs: Ignoring removed bh option
[  140.852251][T10195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.883025][   T29] audit: type=1400 audit(1788470817.716:1380): avc:  denied  { write } for  pid=10193 comm="syz.2.1561" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.025690][   T29] audit: type=1400 audit(1788470817.856:1381): avc:  denied  { write } for  pid=10182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.122167][   T29] audit: type=1400 audit(1788470817.956:1382): avc:  denied  { write } for  pid=10213 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.182429][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16
[  141.205567][T10211] loop8: detected capacity change from 0 to 256
[  141.314968][T10221] loop6: detected capacity change from 0 to 4096
[  141.326445][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.338515][T10221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.356357][   T29] audit: type=1400 audit(1788470818.196:1383): avc:  denied  { write } for  pid=10220 comm="syz.6.1567" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.571869][T10208] loop0: detected capacity change from 0 to 764
[  141.598189][T10238] loop8: detected capacity change from 0 to 256
[  141.672097][   T29] audit: type=1400 audit(1788470818.506:1384): avc:  denied  { getopt } for  pid=10234 comm="syz.1.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.796075][T10208] rock: corrupted directory entry. extent=32, offset=0, size=83886085
[  141.839962][   T29] audit: type=1400 audit(1788470818.676:1385): avc:  denied  { write } for  pid=10228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.982938][T10257] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1579'.
[  142.457755][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.544920][T10294] loop6: detected capacity change from 0 to 2048
[  142.604781][T10294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.706903][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.843133][T10304] loop8: detected capacity change from 0 to 764
[  142.909730][T10304] rock: corrupted directory entry. extent=32, offset=0, size=83886085
[  142.990267][T10333] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  142.999947][T10332] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  143.045087][T10339] loop6: detected capacity change from 0 to 512
[  143.053558][T10339] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  143.070837][T10339] EXT4-fs (loop6): 1 truncate cleaned up
[  143.071313][T10339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.092807][ T3391] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  143.093313][ T3391] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  143.093955][ T3391] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  143.094482][ T3391] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  143.094551][ T3391] rtc rtc0: __rtc_set_alarm: err=-22
[  143.157223][T10339] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.1600: corrupted xattr entries
[  143.681302][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.856702][T10413] loop6: detected capacity change from 0 to 512
[  143.881244][T10413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.881342][T10413] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.000701][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.183837][T10442] loop6: detected capacity change from 0 to 512
[  144.898468][T10435] rock: corrupted directory entry. extent=32, offset=0, size=83886085
[  145.102290][T10454]  loop6: p1 p3 < >
[  145.108678][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  145.108761][   T29] audit: type=1400 audit(1788470821.946:1409): avc:  denied  { write } for  pid=10497 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  145.234691][T10504] netlink: 'syz.6.1628': attribute type 20 has an invalid length.
[  145.234732][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'.
[  145.267466][T10504] netlink: 'syz.6.1628': attribute type 20 has an invalid length.
[  145.267506][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'.
[  145.276364][   T51] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.277306][   T51] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.277418][   T51] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.277583][   T51] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.600259][ T8715] udevd[8715]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  145.600486][ T7162] udevd[7162]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  145.651235][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1635'.
[  145.923464][T10547] set_capacity_and_notify: 2 callbacks suppressed
[  145.923500][T10547] loop6: detected capacity change from 0 to 256
[  145.996075][   T29] audit: type=1400 audit(1788470822.836:1410): avc:  denied  { write } for  pid=10535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  146.089504][   T29] audit: type=1400 audit(1788470822.926:1411): avc:  denied  { write } for  pid=10555 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  146.274549][   T29] audit: type=1400 audit(1788470823.106:1412): avc:  denied  { write } for  pid=10559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  146.335088][   T29] audit: type=1400 audit(1788470823.166:1413): avc:  denied  { write } for  pid=10582 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  146.861258][   T29] audit: type=1326 audit(1788470823.696:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.1651" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c1e6e159 code=0x7ffc0000
[  146.861312][   T29] audit: type=1326 audit(1788470823.696:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.1651" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c1e6e159 code=0x7ffc0000
[  146.861357][   T29] audit: type=1326 audit(1788470823.696:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.1651" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c1e6e159 code=0x7ffc0000
[  146.861457][   T29] audit: type=1326 audit(1788470823.696:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.1651" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c1e6e159 code=0x7ffc0000
[  146.965022][   T29] audit: type=1326 audit(1788470823.766:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.1651" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c1e6e159 code=0x7ffc0000
[  147.108617][T10626] loop8: detected capacity change from 0 to 512
[  147.133555][T10626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.133665][T10626] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.360694][T10635] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  147.360852][T10635] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  147.360925][T10635] EXT4-fs (loop8): This should not happen!! Data will be lost
[  147.360925][T10635] 
[  147.360944][T10635] EXT4-fs (loop8): Total free blocks count 0
[  147.360963][T10635] EXT4-fs (loop8): Free/Dirty block details
[  147.361006][T10635] EXT4-fs (loop8): free_blocks=65280
[  147.361021][T10635] EXT4-fs (loop8): dirty_blocks=3
[  147.361036][T10635] EXT4-fs (loop8): Block reservation details
[  147.361105][T10635] EXT4-fs (loop8): i_reserved_data_blocks=3
[  147.555071][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.783324][T10634] loop2: detected capacity change from 0 to 764
[  147.905179][T10634] rock: corrupted directory entry. extent=32, offset=0, size=83886085
[  148.145321][ T4580] Bluetooth: hci0: Frame reassembly failed (-84)
[  148.352065][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1
[  148.670637][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2
[  148.891021][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3
[  149.205118][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4
[  149.942424][T10852] loop8: detected capacity change from 0 to 2048
[  149.968803][T10852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.006276][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.104036][T10868] loop7: detected capacity change from 0 to 16384
[  150.180926][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  150.180956][   T29] audit: type=1400 audit(1788470826.996:1488): avc:  denied  { write } for  pid=10865 comm="syz.0.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.190517][ T6131] Bluetooth: hci0: command 0x1003 tx timeout
[  150.190549][ T3750] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  150.227145][   T29] audit: type=1400 audit(1788470827.066:1489): avc:  denied  { write } for  pid=10854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.298096][   T29] audit: type=1400 audit(1788470827.136:1490): avc:  denied  { write } for  pid=10878 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.330580][T10875] loop7: detected capacity change from 16384 to 0
[  150.332154][    C0] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  150.453610][T10896] FAULT_INJECTION: forcing a failure.
[  150.453610][T10896] name failslab, interval 1, probability 0, space 0, times 0
[  150.453656][T10896] CPU: 1 UID: 0 PID: 10896 Comm: syz.0.1690 Not tainted syzkaller #0 PREEMPT(lazy) 
[  150.453685][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.453721][T10896] Call Trace:
[  150.453759][T10896]  <TASK>
[  150.453770][T10896]  __dump_stack+0x1d/0x30
[  150.453805][T10896]  dump_stack_lvl+0x95/0xd0
[  150.453918][T10896]  dump_stack+0x15/0x1b
[  150.453947][T10896]  should_fail_ex+0x262/0x280
[  150.453977][T10896]  should_failslab+0x8c/0xb0
[  150.454040][T10896]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[  150.454081][T10896]  ? kstrdup_const+0x3e/0x50
[  150.454107][T10896]  ? kstrdup_const+0x3e/0x50
[  150.454149][T10896]  kstrdup+0x3e/0xd0
[  150.454229][T10896]  kstrdup_const+0x3e/0x50
[  150.454294][T10896]  alloc_vfsmnt+0xe2/0x2f0
[  150.454322][T10896]  clone_mnt+0x30/0x5d0
[  150.454355][T10896]  ? copy_tree+0xa3/0x890
[  150.454423][T10896]  copy_tree+0xb9/0x890
[  150.454456][T10896]  ? proc_alloc_inum+0x4f/0x70
[  150.454536][T10896]  ? __ns_common_init+0xd7/0x120
[  150.454562][T10896]  ? __ns_tree_gen_id+0x48/0x60
[  150.454606][T10896]  copy_mnt_ns+0x1d2/0x720
[  150.454641][T10896]  create_new_namespaces+0x7f/0x420
[  150.454734][T10896]  unshare_nsproxy_namespaces+0x115/0x150
[  150.454835][T10896]  ksys_unshare+0x42b/0x710
[  150.454873][T10896]  __x64_sys_unshare+0x1f/0x30
[  150.454902][T10896]  x64_sys_call+0x1e33/0x2550
[  150.454930][T10896]  do_syscall_64+0x112/0x360
[  150.455029][T10896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.455061][T10896] RIP: 0033:0x7f24fc86e159
[  150.455109][T10896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.455133][T10896] RSP: 002b:00007f24fb2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  150.455158][T10896] RAX: ffffffffffffffda RBX: 00007f24fcaf5fa0 RCX: 00007f24fc86e159
[  150.455252][T10896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400
[  150.455305][T10896] RBP: 00007f24fc905024 R08: 0000000000000000 R09: 0000000000000000
[  150.455374][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.455427][T10896] R13: 00007f24fcaf6038 R14: 00007f24fcaf5fa0 R15: 00007ffe7f1f0018
[  150.455454][T10896]  </TASK>
[  150.760600][T10909] loop0: detected capacity change from 0 to 128
[  150.809053][   T29] audit: type=1400 audit(1788470827.646:1491): avc:  denied  { write } for  pid=10888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.923332][   T29] audit: type=1400 audit(1788470827.756:1492): avc:  denied  { write } for  pid=10921 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.132211][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  151.132284][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'.
[  151.156619][T10938] geneve2: entered promiscuous mode
[  151.156648][T10938] geneve2: entered allmulticast mode
[  151.170213][T10941] batadv_slave_1: entered promiscuous mode
[  151.177313][ T4580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.178149][ T4580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.178520][ T4580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.178631][ T4580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.190376][T10939] batadv_slave_1: left promiscuous mode
[  151.290625][T10926] loop6: detected capacity change from 0 to 512
[  151.406036][T10958] loop1: detected capacity change from 0 to 512
[  151.453900][T10926] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1702: bg 0: block 5: invalid block bitmap
[  151.454574][T10926] loop6: lost filesystem error report for type 5 error -117
[  151.455718][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  151.455772][    C0] EXT4-fs (loop6): initial error at time 1788470828: ext4_validate_block_bitmap:436
[  151.455855][    C0] EXT4-fs (loop6): last error at time 1788470828: ext4_validate_block_bitmap:436
[  151.480698][T10926] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  151.480772][T10926] loop6: lost filesystem error report for type 5 error -117
[  151.480942][T10926] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1702: invalid indirect mapped block 3 (level 2)
[  151.481331][T10926] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  151.482269][T10926] EXT4-fs (loop6): 1 orphan inode deleted
[  151.482328][T10926] EXT4-fs (loop6): 1 truncate cleaned up
[  151.483854][T10926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.490623][T10958] loop1: detected capacity change from 512 to 0
[  151.518799][T10958] FAT-fs (loop1): Directory bread(block 34) failed
[  151.518894][T10958] FAT-fs (loop1): Directory bread(block 35) failed
[  151.518959][T10958] FAT-fs (loop1): Directory bread(block 36) failed
[  151.519023][T10958] FAT-fs (loop1): Directory bread(block 37) failed
[  151.519155][T10958] FAT-fs (loop1): Directory bread(block 38) failed
[  151.519211][T10958] FAT-fs (loop1): Directory bread(block 39) failed
[  151.519275][T10958] FAT-fs (loop1): Directory bread(block 40) failed
[  151.519339][T10958] FAT-fs (loop1): Directory bread(block 41) failed
[  151.519498][T10958] FAT-fs (loop1): Directory bread(block 34) failed
[  151.519747][T10958] FAT-fs (loop1): Directory bread(block 35) failed
[  151.550393][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.687518][   T29] audit: type=1400 audit(1788470828.526:1493): avc:  denied  { write } for  pid=10937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.770794][   T29] audit: type=1400 audit(1788470828.606:1494): avc:  denied  { write } for  pid=10971 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.821233][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5
[  152.013352][   T29] audit: type=1326 audit(1788470828.846:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.6.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  152.013459][   T29] audit: type=1326 audit(1788470828.846:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.6.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  152.065295][   T29] audit: type=1326 audit(1788470828.846:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.6.1719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  152.222569][T11003] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1722'.
[  152.429267][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7
[  152.848415][T11072] loop6: detected capacity change from 0 to 128
[  152.857181][T11072] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.857423][T11072] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  152.978362][   T51] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  153.019157][   T38] Bluetooth: hci0: Frame reassembly failed (-84)
[  153.248195][T11061] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1737'.
[  153.333492][T10992] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.333539][T10992] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.333668][T10992] bridge_slave_0: entered allmulticast mode
[  153.334287][T10992] bridge_slave_0: entered promiscuous mode
[  153.338624][T10992] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.340233][T10992] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.340490][T10992] bridge_slave_1: entered allmulticast mode
[  153.342068][T10992] bridge_slave_1: entered promiscuous mode
[  153.368833][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.371839][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.411430][T10992] team0: Port device team_slave_0 added
[  153.412519][T10992] team0: Port device team_slave_1 added
[  153.472398][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.472429][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.472505][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.477800][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.477850][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.477954][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.503947][T11118] syzkaller1: entered promiscuous mode
[  153.504017][T11118] syzkaller1: entered allmulticast mode
[  153.591753][T10992] hsr_slave_0: entered promiscuous mode
[  153.593748][T10992] hsr_slave_1: entered promiscuous mode
[  153.594586][T10992] debugfs: 'hsr0' already exists in 'hsr'
[  153.594629][T10992] Cannot create hsr debugfs directory
[  153.740055][T10992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.779471][T10992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.391314][T10992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.451279][T10992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.553797][T10992] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  154.558582][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  154.563571][T10992] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  154.578403][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  154.579098][T10992] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  154.599037][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  154.608373][T10992] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  154.618083][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  154.640996][T11233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1763'.
[  154.641076][T11233] bond_slave_0: entered allmulticast mode
[  154.683421][T10992] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.699046][T10992] 8021q: adding VLAN 0 to HW filter on device team0
[  154.709729][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.709772][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.732482][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.732528][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.809468][T11259] loop2: detected capacity change from 0 to 128
[  154.816535][T11259] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.830353][T11259] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  155.030773][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.057672][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1770'.
[  155.075764][ T3750] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  155.245565][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  155.245590][   T29] audit: type=1400 audit(1788470832.076:1568): avc:  denied  { write } for  pid=11297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.374884][   T29] audit: type=1400 audit(1788470832.206:1569): avc:  denied  { write } for  pid=11332 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.436788][T10992] veth0_vlan: entered promiscuous mode
[  155.444822][T10992] veth1_vlan: entered promiscuous mode
[  155.468859][T10992] veth0_macvtap: entered promiscuous mode
[  155.496227][T10992] veth1_macvtap: entered promiscuous mode
[  155.518032][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.528789][   T29] audit: type=1326 audit(1788470832.366:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  155.528830][   T29] audit: type=1326 audit(1788470832.366:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  155.542788][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.588506][   T29] audit: type=1326 audit(1788470832.426:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  155.588549][   T29] audit: type=1326 audit(1788470832.426:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  155.588644][   T29] audit: type=1326 audit(1788470832.426:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  155.623533][ T4580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.623716][ T4580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.623843][ T4580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.623949][ T4580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.677654][   T29] audit: type=1326 audit(1788470832.506:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee45e159 code=0x7ffc0000
[  155.677696][   T29] audit: type=1326 audit(1788470832.506:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bee45dec2 code=0x7ffc0000
[  155.677799][   T29] audit: type=1326 audit(1788470832.506:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.8.1779" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1bee45df57 code=0x7ffc0000
[  155.849944][T11347] loop4: detected capacity change from 0 to 128
[  155.871139][T11347] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.883753][T11347] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.960126][T10992] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.990373][T11358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1783'.
[  156.093252][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'.
[  156.145530][T11380] serio: Serial port ptm0
[  156.373750][T11405] hub 1-0:1.0: USB hub found
[  156.374983][T11405] hub 1-0:1.0: 8 ports detected
[  156.491236][T11413] loop2: detected capacity change from 0 to 736
[  156.713302][T11432] xt_hashlimit: size too large, truncated to 1048576
[  157.309969][T11464] loop2: detected capacity change from 0 to 32768
[  157.366340][T11464]  loop2: p1 p3 < >
[  157.635607][T11493] FAULT_INJECTION: forcing a failure.
[  157.635607][T11493] name failslab, interval 1, probability 0, space 0, times 0
[  157.635767][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.6.1828 Not tainted syzkaller #0 PREEMPT(lazy) 
[  157.635899][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.635946][T11493] Call Trace:
[  157.635964][T11493]  <TASK>
[  157.636004][T11493]  __dump_stack+0x1d/0x30
[  157.636087][T11493]  dump_stack_lvl+0x95/0xd0
[  157.636160][T11493]  dump_stack+0x15/0x1b
[  157.636265][T11493]  should_fail_ex+0x262/0x280
[  157.636347][T11493]  should_failslab+0x8c/0xb0
[  157.636507][T11493]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[  157.636612][T11493]  ? lookup_one_qstr_excl+0x160/0x240
[  157.636716][T11493]  ? debugfs_alloc_inode+0x34/0x40
[  157.636779][T11493]  ? debugfs_alloc_inode+0x34/0x40
[  157.636864][T11493]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  157.636934][T11493]  debugfs_alloc_inode+0x34/0x40
[  157.637122][T11493]  alloc_inode+0x40/0x170
[  157.637229][T11493]  new_inode+0x1d/0xe0
[  157.637294][T11493]  debugfs_create_symlink+0x7c/0x150
[  157.637404][T11493]  ref_tracker_dir_symlink+0x1ae/0x2d0
[  157.637495][T11493]  ? __xas_nomem+0x5c/0x290
[  157.637641][T11493]  net_ns_net_init+0x8f/0xa0
[  157.637814][T11493]  ops_init+0x22a/0x2e0
[  157.637931][T11493]  setup_net+0x9f/0x230
[  157.638014][T11493]  copy_net_ns+0x333/0x490
[  157.638083][T11493]  create_new_namespaces+0x1f6/0x420
[  157.638199][T11493]  unshare_nsproxy_namespaces+0x115/0x150
[  157.638324][T11493]  ksys_unshare+0x42b/0x710
[  157.638421][T11493]  __x64_sys_unshare+0x1f/0x30
[  157.638556][T11493]  x64_sys_call+0x1e33/0x2550
[  157.638796][T11493]  do_syscall_64+0x112/0x360
[  157.638972][T11493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.639048][T11493] RIP: 0033:0x7f907b5de159
[  157.639089][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.639112][T11493] RSP: 002b:00007f907a037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  157.639185][T11493] RAX: ffffffffffffffda RBX: 00007f907b865fa0 RCX: 00007f907b5de159
[  157.639263][T11493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[  157.639307][T11493] RBP: 00007f907b675024 R08: 0000000000000000 R09: 0000000000000000
[  157.639357][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.639468][T11493] R13: 00007f907b866038 R14: 00007f907b865fa0 R15: 00007fff88c3b0d8
[  157.639555][T11493]  </TASK>
[  157.654337][T11493] debugfs: out of free dentries, can not create symlink 'netns-15d-4026533602-notrefcnt'
[  157.789623][ T8715] udevd[8715]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  157.792847][ T7162] udevd[7162]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  158.168803][T11497] loop2: detected capacity change from 0 to 32768
[  158.199225][T11497]  loop2: p1 p3 < >
[  158.253538][T11523] FAULT_INJECTION: forcing a failure.
[  158.253538][T11523] name failslab, interval 1, probability 0, space 0, times 0
[  158.253584][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(lazy) 
[  158.253727][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  158.253797][T11523] Call Trace:
[  158.253826][T11523]  <TASK>
[  158.253857][T11523]  __dump_stack+0x1d/0x30
[  158.253921][T11523]  dump_stack_lvl+0x95/0xd0
[  158.254080][T11523]  dump_stack+0x15/0x1b
[  158.254225][T11523]  should_fail_ex+0x262/0x280
[  158.254304][T11523]  ? __kthread_create_on_node+0x80/0x240
[  158.254473][T11523]  should_failslab+0x8c/0xb0
[  158.254676][T11523]  __kmalloc_cache_noprof+0x7a/0x400
[  158.254863][T11523]  ? _raw_spin_unlock_irq+0x9/0x30
[  158.255020][T11523]  ? __kthread_create_on_node+0x80/0x240
[  158.255192][T11523]  ? __pfx_vhci_tx_loop+0x10/0x10
[  158.255225][T11523]  __kthread_create_on_node+0x80/0x240
[  158.255461][T11523]  ? __pfx_vhci_tx_loop+0x10/0x10
[  158.255636][T11523]  kthread_create_on_node+0x89/0xc0
[  158.255765][T11523]  ? __fget_files+0x184/0x1c0
[  158.255840][T11523]  ? __rcu_read_unlock+0x4e/0x70
[  158.256008][T11523]  ? fget+0x35/0x40
[  158.256072][T11523]  attach_store+0x2a7/0x670
[  158.256199][T11523]  ? __pfx_attach_store+0x10/0x10
[  158.256394][T11523]  dev_attr_store+0x4a/0x70
[  158.256580][T11523]  ? __pfx_dev_attr_store+0x10/0x10
[  158.256682][T11523]  sysfs_kf_write+0xfe/0x120
[  158.256856][T11523]  ? __pfx_sysfs_kf_write+0x10/0x10
[  158.256951][T11523]  kernfs_fop_write_iter+0x1d2/0x2e0
[  158.257022][T11523]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  158.257160][T11523]  vfs_write+0x57f/0x9a0
[  158.257264][T11523]  ksys_write+0xdc/0x1a0
[  158.257360][T11523]  __x64_sys_write+0x40/0x50
[  158.257521][T11523]  x64_sys_call+0x154e/0x2550
[  158.257609][T11523]  do_syscall_64+0x112/0x360
[  158.257783][T11523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.257866][T11523] RIP: 0033:0x7fa5c1e2e98e
[  158.257930][T11523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.258053][T11523] RSP: 002b:00007fa5c08c6a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  158.258127][T11523] RAX: ffffffffffffffda RBX: 00007fa5c08c76c0 RCX: 00007fa5c1e2e98e
[  158.258178][T11523] RDX: 0000000000000008 RSI: 00007fa5c08c6a90 RDI: 0000000000000006
[  158.258223][T11523] RBP: 00007fa5c1ed9070 R08: 0000000000000000 R09: 0000000000000000
[  158.258341][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  158.258386][T11523] R13: 00007fa5c08c6a90 R14: 00007fa5c20f5fa0 R15: 00007fff00c106d8
[  158.258522][T11523]  </TASK>
[  158.448424][T11527] hub 1-0:1.0: USB hub found
[  158.448990][T11527] hub 1-0:1.0: 8 ports detected
[  158.563240][ T7162] udevd[7162]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  158.570746][ T8715] udevd[8715]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  158.969400][T11587] syzkaller1: entered allmulticast mode
[  159.161260][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'.
[  159.161300][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1852'.
[  159.161365][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'.
[  159.161387][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1852'.
[  159.408752][T11623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1856'.
[  159.587819][T11425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.994562][T11668] hub 1-0:1.0: USB hub found
[  159.996621][T11668] hub 1-0:1.0: 8 ports detected
[  160.289983][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  160.290014][   T29] audit: type=1400 audit(1788470837.126:1639): avc:  denied  { write } for  pid=11676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.377131][   T29] audit: type=1400 audit(1788470837.216:1640): avc:  denied  { write } for  pid=11698 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.493270][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'.
[  160.668882][T11715] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1882'.
[  160.765329][T11721] loop2: detected capacity change from 0 to 1024
[  160.768470][T11721] EXT4-fs: Ignoring removed bh option
[  160.790023][T11721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.801230][   T29] audit: type=1400 audit(1788470837.626:1641): avc:  denied  { write } for  pid=11720 comm="syz.2.1885" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.806575][   T29] audit: type=1400 audit(1788470837.646:1642): avc:  denied  { write } for  pid=11720 comm="syz.2.1885" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.831249][   T29] audit: type=1400 audit(1788470837.666:1643): avc:  denied  { write } for  pid=11720 comm="syz.2.1885" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  160.901510][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.018800][T11732] loop8: detected capacity change from 0 to 1024
[  161.027685][T11732] EXT4-fs: Ignoring removed oldalloc option
[  161.027724][T11732] ext4: Unknown parameter 'dont_appraise'
[  161.457304][   T29] audit: type=1400 audit(1788470838.296:1644): avc:  denied  { bind } for  pid=11748 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  164.091507][T11736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  164.187492][T11760] hub 1-0:1.0: USB hub found
[  164.188687][T11760] hub 1-0:1.0: 8 ports detected
[  164.812563][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'.
[  165.215394][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1914'.
[  165.326906][T11789] veth1_to_bond: entered allmulticast mode
[  165.373295][T11795] veth1_to_bond (unregistering): left allmulticast mode
[  165.382972][T11795] bond0: (slave bond_slave_1): Releasing backup interface
[  165.420288][T11813] hsr_slave_1 (unregistering): left promiscuous mode
[  165.579366][T11824] loop6: detected capacity change from 0 to 512
[  165.586423][T11824] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  165.606232][T11824] EXT4-fs (loop6): 1 truncate cleaned up
[  165.606767][T11824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.628489][   T29] audit: type=1400 audit(1788470842.466:1645): avc:  denied  { write } for  pid=11823 comm="syz.6.1920" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  165.667658][   T29] audit: type=1326 audit(1788470842.506:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  165.693906][   T29] audit: type=1326 audit(1788470842.516:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  165.693956][   T29] audit: type=1326 audit(1788470842.516:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  165.693990][   T29] audit: type=1326 audit(1788470842.516:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  165.746557][   T29] audit: type=1326 audit(1788470842.566:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa966afe98e code=0x7ffc0000
[  165.746602][   T29] audit: type=1326 audit(1788470842.566:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa966afe98e code=0x7ffc0000
[  165.746660][   T29] audit: type=1326 audit(1788470842.566:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa966afe98e code=0x7ffc0000
[  165.746690][   T29] audit: type=1326 audit(1788470842.566:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa966afe98e code=0x7ffc0000
[  165.746745][   T29] audit: type=1326 audit(1788470842.576:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.4.1919" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa966afe98e code=0x7ffc0000
[  165.806303][T11822] loop8: detected capacity change from 0 to 4096
[  165.812568][T11822] EXT4-fs: test_dummy_encryption option not supported
[  166.161378][T11840] loop8: detected capacity change from 0 to 128
[  166.253648][T11843] pim6reg1: entered promiscuous mode
[  166.253681][T11843] pim6reg1: entered allmulticast mode
[  166.413973][T11840] syz.8.1924: attempt to access beyond end of device
[  166.413973][T11840] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128
[  166.534740][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1930'.
[  166.534819][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1930'.
[  166.663940][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.716642][T11858] loop6: detected capacity change from 0 to 256
[  166.719651][T11858] vfat: Unknown parameter 'git'
[  166.898247][T11876] netlink: 'syz.4.1937': attribute type 15 has an invalid length.
[  166.923697][T11876] netlink: 'syz.4.1937': attribute type 15 has an invalid length.
[  166.936033][   T38] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  166.936083][   T38] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  166.936204][   T38] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  166.936470][   T38] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  167.033295][T11885] FAULT_INJECTION: forcing a failure.
[  167.033295][T11885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.033337][T11885] CPU: 0 UID: 0 PID: 11885 Comm: syz.4.1941 Not tainted syzkaller #0 PREEMPT(lazy) 
[  167.033363][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.033381][T11885] Call Trace:
[  167.033391][T11885]  <TASK>
[  167.033401][T11885]  __dump_stack+0x1d/0x30
[  167.033519][T11885]  dump_stack_lvl+0x95/0xd0
[  167.033642][T11885]  dump_stack+0x15/0x1b
[  167.033735][T11885]  should_fail_ex+0x262/0x280
[  167.033820][T11885]  should_fail+0xb/0x20
[  167.033885][T11885]  should_fail_usercopy+0x1a/0x20
[  167.033961][T11885]  _copy_from_user+0x1c/0xb0
[  167.034107][T11885]  bpf_vlog_reverse_ubuf+0x9f/0x360
[  167.034323][T11885]  bpf_vlog_finalize+0x11a/0x200
[  167.034563][T11885]  bpf_log_attr_finalize+0x33/0x100
[  167.034645][T11885]  btf_new_fd+0x34a/0x670
[  167.034865][T11885]  bpf_btf_load+0x116/0x130
[  167.034968][T11885]  __sys_bpf+0xbce/0xc30
[  167.035061][T11885]  ? do_futex+0x350/0x460
[  167.035234][T11885]  __x64_sys_bpf+0x69/0x80
[  167.035380][T11885]  x64_sys_call+0xf26/0x2550
[  167.035469][T11885]  do_syscall_64+0x112/0x360
[  167.035577][T11885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.035697][T11885] RIP: 0033:0x7fa966b3e159
[  167.035751][T11885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.035817][T11885] RSP: 002b:00007fa965597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.035893][T11885] RAX: ffffffffffffffda RBX: 00007fa966dc5fa0 RCX: 00007fa966b3e159
[  167.035939][T11885] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012
[  167.035989][T11885] RBP: 00007fa966bd5024 R08: 0000000000000000 R09: 0000000000000000
[  167.036065][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.036107][T11885] R13: 00007fa966dc6038 R14: 00007fa966dc5fa0 R15: 00007ffc4d9149c8
[  167.036173][T11885]  </TASK>
[  167.266623][T11888] loop6: detected capacity change from 0 to 1024
[  167.274033][T11888] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  167.291489][T11891] IPv6: sit1: Disabled Multicast RS
[  167.298384][T11888] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.1942: lblock 2 mapped to illegal pblock 2 (length 1)
[  167.298535][T11888] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  167.312638][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  167.312675][    C1] EXT4-fs (loop6): initial error at time 1788470844: ext4_map_blocks:790: inode 3: block 2
[  167.312745][    C1] EXT4-fs (loop6): last error at time 1788470844: ext4_map_blocks:790: inode 3: block 2
[  167.318437][T11888] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.1942: lblock 0 mapped to illegal pblock 48 (length 1)
[  167.318640][T11888] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  167.329467][T11888] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1942: Failed to acquire dquot type 0
[  167.329554][T11888] loop6: lost filesystem error report for type 5 error -117
[  167.336815][T11888] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  167.336893][T11888] loop6: lost filesystem error report for type 5 error -117
[  167.342526][T11888] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.1942: mark_inode_dirty error
[  167.342627][T11888] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  167.346864][T11888] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  167.346979][T11888] EXT4-fs (loop6): 1 orphan inode deleted
[  167.348084][T11888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.356603][   T51] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.372871][   T51] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0
[  167.502123][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.502845][ T4582] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.502950][ T4582] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  167.503192][ T4582] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 0
[  167.503276][ T4582] loop6: lost filesystem error report for type 5 error -117
[  167.509209][ T8394] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  167.509364][ T8394] loop6: lost filesystem error report for type 5 error -117
[  167.509689][ T8394] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  167.509738][ T8394] loop6: lost filesystem error report for type 5 error -117
[  167.510081][ T8394] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  167.510155][ T8394] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  167.510465][ T8394] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  167.510542][ T8394] loop6: lost filesystem error report for type 5 error -117
[  167.655430][T11902] loop4: detected capacity change from 0 to 512
[  167.673725][T11902] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  167.693821][T11902] EXT4-fs (loop4): 1 truncate cleaned up
[  167.694776][T11902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.946435][T11937] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1946'.
[  168.821913][T10992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.136363][T11977] loop4: detected capacity change from 0 to 128
[  169.168928][T11977] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.184300][T11977] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.331199][T10992] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  169.399229][   T69] IPVS: starting estimator thread 0...
[  169.485814][T12003] IPVS: using max 2208 ests per chain, 110400 per kthread
[  169.670607][T12007] loop2: detected capacity change from 0 to 256
[  169.981058][T12037] loop6: detected capacity change from 0 to 1024
[  169.982030][T12037] EXT4-fs: Ignoring removed bh option
[  169.984690][T12037] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  170.006766][T12037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.039634][T12043] netlink: 'syz.4.1976': attribute type 19 has an invalid length.
[  170.039676][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'.
[  170.039888][T12043] netlink: 'syz.4.1976': attribute type 19 has an invalid length.
[  170.039920][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'.
[  170.196989][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.660205][T12081] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3
[  170.827568][T12062] loop6: detected capacity change from 0 to 32768
[  170.869366][T12062]  loop6: p1 p3 < >
[  171.012404][   T29] kauditd_printk_skb: 120 callbacks suppressed
[  171.012437][   T29] audit: type=1400 audit(1788470847.846:1771): avc:  denied  { write } for  pid=12082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.114379][   T29] audit: type=1400 audit(1788470847.946:1772): avc:  denied  { write } for  pid=12112 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.230032][ T7162] udevd[7162]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  171.235453][ T8715] udevd[8715]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  171.416027][T12128] loop4: detected capacity change from 0 to 512
[  171.678679][T12139] loop2: detected capacity change from 0 to 136
[  171.756743][T12145] selinux_netlink_send: 8 callbacks suppressed
[  171.756768][T12145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12145 comm=syz.6.2005
[  171.756797][T12145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12145 comm=syz.6.2005
[  171.871723][T12154] netlink: 'syz.8.2008': attribute type 1 has an invalid length.
[  171.937408][T12154] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.959890][T12162] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2012'.
[  172.087132][T12164] pim6reg1: entered promiscuous mode
[  172.087176][T12164] pim6reg1: entered allmulticast mode
[  172.107999][   T29] audit: type=1326 audit(1788470848.946:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  172.110253][   T29] audit: type=1326 audit(1788470848.946:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  172.168848][   T29] audit: type=1326 audit(1788470849.006:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  172.168941][   T29] audit: type=1326 audit(1788470849.006:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  172.170646][   T29] audit: type=1326 audit(1788470849.006:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  172.222929][   T29] audit: type=1326 audit(1788470849.056:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b5de159 code=0x7ffc0000
[  172.223124][   T29] audit: type=1326 audit(1788470849.056:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f907b5ddec2 code=0x7ffc0000
[  172.223343][   T29] audit: type=1326 audit(1788470849.056:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.6.2015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f907b5ddf57 code=0x7ffc0000
[  172.337704][T12174] loop8: detected capacity change from 0 to 512
[  172.354570][T12174] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  172.375930][T12174] EXT4-fs (loop8): 1 truncate cleaned up
[  172.376925][T12174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.404988][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'.
[  172.538264][T12185] FAULT_INJECTION: forcing a failure.
[  172.538264][T12185] name failslab, interval 1, probability 0, space 0, times 0
[  172.538318][T12185] CPU: 0 UID: 0 PID: 12185 Comm: syz.6.2020 Not tainted syzkaller #0 PREEMPT(lazy) 
[  172.538351][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.538371][T12185] Call Trace:
[  172.538381][T12185]  <TASK>
[  172.538392][T12185]  __dump_stack+0x1d/0x30
[  172.538427][T12185]  dump_stack_lvl+0x95/0xd0
[  172.538452][T12185]  dump_stack+0x15/0x1b
[  172.538481][T12185]  should_fail_ex+0x262/0x280
[  172.538508][T12185]  ? do_signalfd4+0xe5/0x320
[  172.538535][T12185]  should_failslab+0x8c/0xb0
[  172.538571][T12185]  __kmalloc_cache_noprof+0x7a/0x400
[  172.538641][T12185]  ? do_signalfd4+0xe5/0x320
[  172.538737][T12185]  do_signalfd4+0xe5/0x320
[  172.538763][T12185]  __x64_sys_signalfd+0xbe/0xf0
[  172.538791][T12185]  x64_sys_call+0x115b/0x2550
[  172.538901][T12185]  do_syscall_64+0x112/0x360
[  172.538944][T12185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.539051][T12185] RIP: 0033:0x7f907b5de159
[  172.539074][T12185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.539101][T12185] RSP: 002b:00007f907a037028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  172.539130][T12185] RAX: ffffffffffffffda RBX: 00007f907b865fa0 RCX: 00007f907b5de159
[  172.539209][T12185] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff
[  172.539226][T12185] RBP: 00007f907b675024 R08: 0000000000000000 R09: 0000000000000000
[  172.539245][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.539263][T12185] R13: 00007f907b866038 R14: 00007f907b865fa0 R15: 00007fff88c3b0d8
[  172.539295][T12185]  </TASK>
[  172.773720][T12188] netlink: 'syz.6.2021': attribute type 49 has an invalid length.
[  172.787090][T12188] bond0: (slave bond_slave_0): Releasing backup interface
[  172.876222][T12188] bond_slave_0: entered promiscuous mode
[  172.876301][T12188] bond_slave_0: entered allmulticast mode
[  173.057516][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2024'.
[  173.663217][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.229092][T12227] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  174.313931][T12230] loop8: detected capacity change from 0 to 512
[  174.333057][T12230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.333212][T12230] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.406136][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.494832][T12239] loop2: detected capacity change from 0 to 1024
[  174.498868][T12241] loop4: detected capacity change from 0 to 512
[  174.504862][T12241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  174.508646][T12241] EXT4-fs (loop4): 1 truncate cleaned up
[  174.509414][T12241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.543657][T12239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  174.543860][T12239] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.597946][T10992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.699912][T12239] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.2034: lblock 0 mapped to illegal pblock 0 (length 6)
[  174.700366][T12239] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  174.700464][T12239] EXT4-fs (loop2): This should not happen!! Data will be lost
[  174.700464][T12239] 
[  174.778211][ T4578] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  174.778897][ T4578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  174.778977][ T4578] EXT4-fs (loop2): This should not happen!! Data will be lost
[  174.778977][ T4578] 
[  174.790398][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  174.851170][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  174.851206][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'.
[  174.851244][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'.
[  174.882700][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  174.882725][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'.
[  174.886074][   T38] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  174.887564][ T4578] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  174.887762][ T4578] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  174.887909][ T4578] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  175.058784][   T38] IPVS: starting estimator thread 0...
[  175.145712][T12264] IPVS: using max 2208 ests per chain, 110400 per kthread
[  175.241578][T12272] FAULT_INJECTION: forcing a failure.
[  175.241578][T12272] name failslab, interval 1, probability 0, space 0, times 0
[  175.241651][T12272] CPU: 1 UID: 0 PID: 12272 Comm: syz.2.2048 Not tainted syzkaller #0 PREEMPT(lazy) 
[  175.241761][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.241821][T12272] Call Trace:
[  175.241838][T12272]  <TASK>
[  175.241922][T12272]  __dump_stack+0x1d/0x30
[  175.242074][T12272]  dump_stack_lvl+0x95/0xd0
[  175.242149][T12272]  dump_stack+0x15/0x1b
[  175.242223][T12272]  should_fail_ex+0x262/0x280
[  175.242297][T12272]  ? do_getname+0x2e/0x1c0
[  175.242503][T12272]  should_failslab+0x8c/0xb0
[  175.242659][T12272]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  175.242783][T12272]  ? do_getname+0x2e/0x1c0
[  175.242903][T12272]  do_getname+0x2e/0x1c0
[  175.243017][T12272]  __se_sys_renameat2+0x38/0x1c0
[  175.243146][T12272]  __x64_sys_renameat2+0x67/0x80
[  175.243225][T12272]  x64_sys_call+0x1f7d/0x2550
[  175.243363][T12272]  do_syscall_64+0x112/0x360
[  175.243468][T12272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.243603][T12272] RIP: 0033:0x7fa5c1e6e159
[  175.243662][T12272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.243810][T12272] RSP: 002b:00007fa5c08c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  175.243939][T12272] RAX: ffffffffffffffda RBX: 00007fa5c20f5fa0 RCX: 00007fa5c1e6e159
[  175.243991][T12272] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[  175.244036][T12272] RBP: 00007fa5c1f05024 R08: 0000000000000004 R09: 0000000000000000
[  175.244086][T12272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.244128][T12272] R13: 00007fa5c20f6038 R14: 00007fa5c20f5fa0 R15: 00007fff00c106d8
[  175.244240][T12272]  </TASK>
[  175.490106][T12274] bridge_slave_0: left allmulticast mode
[  175.490149][T12274] bridge_slave_0: left promiscuous mode
[  175.490264][T12274] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.512580][T12274] bridge_slave_1: left allmulticast mode
[  175.512610][T12274] bridge_slave_1: left promiscuous mode
[  175.512784][T12274] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.535260][T12274] bond0: (slave bond_slave_0): Releasing backup interface
[  175.547457][T12274] bond0: (slave bond_slave_1): Releasing backup interface
[  175.567680][T12274] team0: Port device team_slave_0 removed
[  175.577916][T12274] team0: Port device team_slave_1 removed
[  175.579009][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.579101][T12274] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.605175][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.605203][T12274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.624558][T12274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.870178][T12295] loop2: detected capacity change from 0 to 4096
[  175.884129][T12295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.915532][   T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.988759][   T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.043307][   T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.099898][   T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.196494][T12287] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.196549][T12287] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.196792][T12287] bridge_slave_0: entered allmulticast mode
[  176.197434][T12287] bridge_slave_0: entered promiscuous mode
[  176.231945][   T69] bridge_slave_1: left allmulticast mode
[  176.231982][   T69] bridge_slave_1: left promiscuous mode
[  176.232177][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.287536][   T69] bridge_slave_0: left allmulticast mode
[  176.287638][   T69] bridge_slave_0: left promiscuous mode
[  176.287816][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.684754][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.698231][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.713133][   T69] bond0 (unregistering): Released all slaves
[  176.722838][T12287] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.722902][T12287] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.723164][T12287] bridge_slave_1: entered allmulticast mode
[  176.723854][T12287] bridge_slave_1: entered promiscuous mode
[  176.820103][   T69] hsr_slave_0: left promiscuous mode
[  176.831626][   T69] hsr_slave_1: left promiscuous mode
[  176.832517][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.832553][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.856600][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.856627][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.874885][   T69] veth1_macvtap: left promiscuous mode
[  176.874932][   T69] veth0_macvtap: left promiscuous mode
[  176.875010][   T69] veth1_vlan: left promiscuous mode
[  176.875092][   T69] veth0_vlan: left promiscuous mode
[  176.912246][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.053705][   T69] team0 (unregistering): Port device team_slave_1 removed
[  177.073892][   T69] team0 (unregistering): Port device team_slave_0 removed
[  177.145451][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.159457][T12316] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  177.185084][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.307942][   T29] kauditd_printk_skb: 55 callbacks suppressed
[  177.307972][   T29] audit: type=1400 audit(1788470854.146:1836): avc:  denied  { write } for  pid=12336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.317502][T12287] team0: Port device team_slave_0 added
[  177.364698][   T29] audit: type=1400 audit(1788470854.196:1837): avc:  denied  { write } for  pid=12353 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  177.389783][T12287] team0: Port device team_slave_1 added
[  177.456757][T12359] loop4: detected capacity change from 0 to 4096
[  177.474582][T12359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.491359][   T29] audit: type=1400 audit(1788470854.326:1838): avc:  denied  { write } for  pid=12358 comm="syz.4.2070" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  177.520487][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19
[  177.533135][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.533165][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.533207][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.533898][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.533914][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.533950][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.648752][T12287] hsr_slave_0: entered promiscuous mode
[  177.649234][T12287] hsr_slave_1: entered promiscuous mode
[  177.649489][T12287] debugfs: 'hsr0' already exists in 'hsr'
[  177.649505][T12287] Cannot create hsr debugfs directory
[  178.015573][T12394] loop2: detected capacity change from 0 to 512
[  178.026843][T12394] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  178.053715][T12394] EXT4-fs (loop2): 1 truncate cleaned up
[  178.067991][T12394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.087142][   T29] audit: type=1400 audit(1788470854.926:1839): avc:  denied  { write } for  pid=12392 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.112980][   T29] audit: type=1400 audit(1788470854.946:1840): avc:  denied  { write } for  pid=12392 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.150729][   T29] audit: type=1400 audit(1788470854.986:1841): avc:  denied  { write } for  pid=12392 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.173196][   T29] audit: type=1400 audit(1788470854.986:1842): avc:  denied  { write } for  pid=12392 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.203329][   T29] audit: type=1400 audit(1788470855.016:1843): avc:  denied  { create } for  pid=12392 comm="syz.2.2078" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  178.247043][   T29] audit: type=1400 audit(1788470855.086:1844): avc:  denied  { write } for  pid=12392 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.247088][   T29] audit: type=1400 audit(1788470855.086:1845): avc:  denied  { write } for  pid=12392 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.305195][T12407] __nla_validate_parse: 1 callbacks suppressed
[  178.305231][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2081'.
[  178.355246][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.404016][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2081'.
[  178.470625][T10992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.523881][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18
[  178.764897][T12287] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  178.778037][T12287] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  178.788304][T12287] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  178.799440][T12287] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  178.807578][T12287] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  178.839863][T12287] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  178.848574][T12287] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  178.874660][T12287] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.960799][T12287] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.990454][T12287] 8021q: adding VLAN 0 to HW filter on device team0
[  179.273783][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17
[  179.290941][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.291015][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.333613][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.333865][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.420243][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'.
[  179.444554][T12469] team0 (unregistering): Port device team_slave_0 removed
[  179.459380][T12469] team0 (unregistering): Port device team_slave_1 removed
[  179.758950][T12505] ip_tables: iptables: counters copy to user failed while replacing table
[  179.807700][T12512] FAULT_INJECTION: forcing a failure.
[  179.807700][T12512] name failslab, interval 1, probability 0, space 0, times 0
[  179.807746][T12512] CPU: 0 UID: 0 PID: 12512 Comm: syz.2.2108 Not tainted syzkaller #0 PREEMPT(lazy) 
[  179.807781][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.807817][T12512] Call Trace:
[  179.807828][T12512]  <TASK>
[  179.807838][T12512]  __dump_stack+0x1d/0x30
[  179.807880][T12512]  dump_stack_lvl+0x95/0xd0
[  179.807970][T12512]  dump_stack+0x15/0x1b
[  179.807993][T12512]  should_fail_ex+0x262/0x280
[  179.808015][T12512]  ? percpu_ref_init+0x9c/0x250
[  179.808122][T12512]  should_failslab+0x8c/0xb0
[  179.808265][T12512]  __kmalloc_cache_noprof+0x7a/0x400
[  179.808360][T12512]  ? percpu_ref_init+0x33/0x250
[  179.808405][T12512]  ? percpu_ref_init+0x9c/0x250
[  179.808457][T12512]  ? __pfx_free_ioctx_users+0x10/0x10
[  179.808563][T12512]  percpu_ref_init+0x9c/0x250
[  179.808611][T12512]  ioctx_alloc+0x1a0/0x480
[  179.808645][T12512]  __se_sys_io_setup+0x6b/0x1b0
[  179.808673][T12512]  __x64_sys_io_setup+0x31/0x40
[  179.808765][T12512]  x64_sys_call+0x1a9f/0x2550
[  179.808803][T12512]  do_syscall_64+0x112/0x360
[  179.808873][T12512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.808900][T12512] RIP: 0033:0x7fa5c1e6e159
[  179.808917][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.809005][T12512] RSP: 002b:00007fa5c08c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  179.809034][T12512] RAX: ffffffffffffffda RBX: 00007fa5c20f5fa0 RCX: 00007fa5c1e6e159
[  179.809102][T12512] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001
[  179.809121][T12512] RBP: 00007fa5c1f05024 R08: 0000000000000000 R09: 0000000000000000
[  179.809139][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.809155][T12512] R13: 00007fa5c20f6038 R14: 00007fa5c20f5fa0 R15: 00007fff00c106d8
[  179.809213][T12512]  </TASK>
[  180.053463][T12519] loop8: detected capacity change from 0 to 128
[  180.074941][T12519] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.089706][T12519] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.110765][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.184725][ T8664] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.240327][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20
[  180.262749][T12287] veth0_vlan: entered promiscuous mode
[  180.271418][T12287] veth1_vlan: entered promiscuous mode
[  180.285863][T12287] veth0_macvtap: entered promiscuous mode
[  180.299589][T12287] veth1_macvtap: entered promiscuous mode
[  180.313902][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.327867][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.385725][ T4578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.404765][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2114'.
[  180.420807][T12546] netlink: 'syz.8.2114': attribute type 2 has an invalid length.
[  180.438870][   T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.465814][   T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.465944][ T4590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.570210][T12562] loop2: detected capacity change from 0 to 256
[  180.662759][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2120'.
[  180.679221][T12575] loop3: detected capacity change from 0 to 128
[  180.699197][T12575] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.708870][T12575] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.796471][T12287] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.875229][T12595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.888118][T12595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.899439][T12595] loop8: detected capacity change from 0 to 256
[  180.906609][T12595] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  180.924366][T12595] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  181.289119][T12636] loop4: detected capacity change from 0 to 1024
[  181.314650][T12636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.354837][T12638] loop2: detected capacity change from 0 to 512
[  181.362289][T12638] EXT4-fs: Ignoring removed i_version option
[  181.369893][T12638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  181.394704][T12638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.394817][T12638] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.456405][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.486824][T10992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.599999][T12654] loop3: detected capacity change from 0 to 512
[  181.619502][T12654] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  181.639492][   T69] FAT-fs (loop1): bread failed in fat_clusters_flush
[  181.646188][T12654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c856e02c, mo2=0002]
[  181.646879][T12654] EXT4-fs (loop3): orphan cleanup on readonly fs
[  181.647046][T12654] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2138: bad orphan inode 267
[  181.647270][T12654] loop3: lost filesystem error report for type 5 error -117
[  181.672961][T12654] EXT4-fs (loop3): Remounting filesystem read-only
[  181.673519][T12654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  181.674145][T12654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  181.813868][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2142'.
[  181.853009][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2142'.
[  182.508771][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  182.508800][   T29] audit: type=1400 audit(1788470859.346:1865): avc:  denied  { write } for  pid=12698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  182.625080][T12725] loop8: detected capacity change from 0 to 4096
[  182.639711][T12725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.663749][   T29] audit: type=1400 audit(1788470859.496:1866): avc:  denied  { write } for  pid=12728 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  182.692657][   T29] audit: type=1400 audit(1788470859.526:1867): avc:  denied  { write } for  pid=12723 comm="syz.8.2156" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  182.937805][T12737] netlink: 'syz.2.2158': attribute type 6 has an invalid length.
[  183.069267][T12742] FAULT_INJECTION: forcing a failure.
[  183.069267][T12742] name failslab, interval 1, probability 0, space 0, times 0
[  183.069367][T12742] CPU: 1 UID: 0 PID: 12742 Comm: syz.2.2159 Not tainted syzkaller #0 PREEMPT(lazy) 
[  183.069400][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.069418][T12742] Call Trace:
[  183.069427][T12742]  <TASK>
[  183.069436][T12742]  __dump_stack+0x1d/0x30
[  183.069468][T12742]  dump_stack_lvl+0x95/0xd0
[  183.069557][T12742]  dump_stack+0x15/0x1b
[  183.069584][T12742]  should_fail_ex+0x262/0x280
[  183.069620][T12742]  ? security_inode_alloc+0x37/0x100
[  183.069660][T12742]  should_failslab+0x8c/0xb0
[  183.069696][T12742]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  183.069735][T12742]  ? security_inode_alloc+0x37/0x100
[  183.069790][T12742]  security_inode_alloc+0x37/0x100
[  183.069836][T12742]  inode_init_always_gfp+0x495/0x4e0
[  183.069958][T12742]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  183.070066][T12742]  alloc_inode+0x58/0x170
[  183.070269][T12742]  new_inode+0x1d/0xe0
[  183.070334][T12742]  __debugfs_create_file+0x97/0x2b0
[  183.070411][T12742]  debugfs_create_file_full+0x3f/0x60
[  183.070486][T12742]  ? __pfx_br_dev_setup+0x10/0x10
[  183.070625][T12742]  ref_tracker_dir_debugfs+0x10e/0x220
[  183.070731][T12742]  alloc_netdev_mqs+0x1a9/0xa90
[  183.070837][T12742]  br_add_bridge+0x35/0xc0
[  183.070956][T12742]  br_ioctl_stub+0x3e3/0x8f0
[  183.071055][T12742]  ? ioctl_has_perm+0x273/0x2c0
[  183.071185][T12742]  ? __pfx_br_ioctl_stub+0x10/0x10
[  183.071358][T12742]  sock_ioctl+0x39a/0x610
[  183.071432][T12742]  ? __pfx_sock_ioctl+0x10/0x10
[  183.071581][T12742]  __se_sys_ioctl+0xce/0x140
[  183.071695][T12742]  __x64_sys_ioctl+0x43/0x50
[  183.071803][T12742]  x64_sys_call+0x239d/0x2550
[  183.071933][T12742]  do_syscall_64+0x112/0x360
[  183.072050][T12742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.072135][T12742] RIP: 0033:0x7fa5c1e6e159
[  183.072191][T12742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.072273][T12742] RSP: 002b:00007fa5c08c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.072369][T12742] RAX: ffffffffffffffda RBX: 00007fa5c20f5fa0 RCX: 00007fa5c1e6e159
[  183.072418][T12742] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004
[  183.072469][T12742] RBP: 00007fa5c1f05024 R08: 0000000000000000 R09: 0000000000000000
[  183.072515][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.072558][T12742] R13: 00007fa5c20f6038 R14: 00007fa5c20f5fa0 R15: 00007fff00c106d8
[  183.072629][T12742]  </TASK>
[  183.105750][T12742] debugfs: out of free dentries, can not create file 'netdev@ffff8881389ce5e0'
[  183.418260][   T29] audit: type=1400 audit(1788470860.256:1868): avc:  denied  { write } for  pid=12731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.512175][   T29] audit: type=1400 audit(1788470860.346:1869): avc:  denied  { write } for  pid=12751 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.569878][T12755] loop2: detected capacity change from 0 to 256
[  183.586461][T12755] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.765117][   T29] audit: type=1326 audit(1788470860.596:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12760 comm="syz.4.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  183.784586][T12584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.803075][   T29] audit: type=1326 audit(1788470860.596:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12760 comm="syz.4.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  183.823786][   T29] audit: type=1326 audit(1788470860.636:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12760 comm="syz.4.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  183.861538][   T29] audit: type=1326 audit(1788470860.696:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12760 comm="syz.4.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  183.861597][   T29] audit: type=1326 audit(1788470860.696:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12760 comm="syz.4.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa966b3e159 code=0x7ffc0000
[  184.141553][T12781] loop6: detected capacity change from 0 to 1024
[  184.153757][T12781] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  184.186384][T12781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.300637][T12795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2172'.
[  184.433915][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.444084][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.567687][T12804] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2174'.
[  184.703980][T12813] loop8: detected capacity change from 0 to 512
[  184.714011][T12813] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  184.728662][T12813] EXT4-fs (loop8): 1 truncate cleaned up
[  184.735084][T12813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.827346][ T4580] IPVS: starting estimator thread 0...
[  184.864950][ T8664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.917315][T12824] IPVS: using max 1728 ests per chain, 86400 per kthread
[  185.209509][T12862] loop2: detected capacity change from 0 to 512
[  185.224285][T12862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  185.247484][T12862] EXT4-fs (loop2): 1 truncate cleaned up
[  185.254509][T12862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.150672][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.323484][T12971] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2212'.
[  186.439949][T12979] loop6: detected capacity change from 0 to 512
[  186.450822][T12980] loop2: detected capacity change from 0 to 512
[  186.464375][T12979] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  186.480513][T12979] EXT4-fs (loop6): 1 truncate cleaned up
[  186.486779][T12979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.507373][T12980] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  186.517950][T12980] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c856e02c, mo2=0002]
[  186.518118][T12980] EXT4-fs (loop2): orphan cleanup on readonly fs
[  186.518136][T12980] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2213: bad orphan inode 267
[  186.518164][T12980] loop2: lost filesystem error report for type 5 error -117
[  186.526255][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  186.526286][    C0] EXT4-fs (loop2): initial error at time 1788470863: ext4_orphan_get:1429
[  186.526314][    C0] EXT4-fs (loop2): last error at time 1788470863: ext4_orphan_get:1429
[  186.575776][T12980] EXT4-fs (loop2): Remounting filesystem read-only
[  186.584839][T12980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  186.596827][T12980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  186.631318][T12983] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2217'.
[  186.695550][ T8394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.731359][ T8715] ==================================================================
[  186.731397][ T8715] BUG: KCSAN: data-race in dentry_kill / fast_dput
[  186.731439][ T8715] 
[  186.731447][ T8715] write to 0xffff888100564a90 of 8 bytes by task 2983 on cpu 0:
[  186.731470][ T8715]  dentry_kill+0x139/0x500
[  186.731504][ T8715]  finish_dput+0x16/0x1d0
[  186.731522][ T8715]  dput+0x48/0x50
[  186.731542][ T8715]  step_into_slowpath+0x38c/0x4c0
[  186.731571][ T8715]  path_lookupat+0x2eb/0x4c0
[  186.731596][ T8715]  filename_lookup+0x329/0x390
[  186.731619][ T8715]  do_readlinkat+0x74/0x2f0
[  186.731641][ T8715]  __x64_sys_readlink+0x47/0x60
[  186.731661][ T8715]  x64_sys_call+0x1d41/0x2550
[  186.731693][ T8715]  do_syscall_64+0x112/0x360
[  186.731723][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.731745][ T8715] 
[  186.731750][ T8715] read to 0xffff888100564a90 of 8 bytes by task 8715 on cpu 1:
[  186.731766][ T8715]  fast_dput+0x64/0x300
[  186.731786][ T8715]  dput+0x1f/0x50
[  186.731806][ T8715]  filename_unlinkat+0x217/0x410
[  186.731851][ T8715]  __se_sys_unlink+0x2b/0xe0
[  186.731880][ T8715]  __x64_sys_unlink+0x1f/0x30
[  186.731915][ T8715]  x64_sys_call+0x18ee/0x2550
[  186.731949][ T8715]  do_syscall_64+0x112/0x360
[  186.731983][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.732008][ T8715] 
[  186.732012][ T8715] value changed: 0xffff888237bd54a8 -> 0x0000000000000000
[  186.732024][ T8715] 
[  186.732027][ T8715] Reported by Kernel Concurrency Sanitizer on:
[  186.732038][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  186.732062][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  186.732075][ T8715] ==================================================================
[  191.644470][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  191.644521][   T29] audit: type=1400 audit(1788470868.476:1922): avc:  denied  { write } for  pid=13004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.690033][   T29] audit: type=1400 audit(1788470868.526:1923): avc:  denied  { write } for  pid=13015 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1