last executing test programs:

2m18.230846866s ago: executing program 32 (id=636):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1m46.713827924s ago: executing program 3 (id=999):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10)

1m46.670159113s ago: executing program 3 (id=1000):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
io_uring_setup(0x5755, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m46.530272081s ago: executing program 3 (id=1004):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m46.384803891s ago: executing program 3 (id=1008):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
open(&(0x7f0000000100)='./file0\x00', 0x1419c2, 0x1cf)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)

1m46.276820033s ago: executing program 3 (id=1010):
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
munlockall()

1m45.980319703s ago: executing program 3 (id=1017):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r2}, &(0x7f0000000040)=0x8)

1m45.803449079s ago: executing program 33 (id=1017):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r2}, &(0x7f0000000040)=0x8)

1m36.284160561s ago: executing program 5 (id=1113):
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x4, &(0x7f0000000080)={0x0, 0x1c}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68)

1m36.075638133s ago: executing program 5 (id=1117):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f00000001c0), 0x3, 0x4bf, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaaavGY3ajjSt1JE6DzVPjZrMzGZWwKISohIbkEpI3FDixFHsFBJ1kcCuCxYIBBJiwZ6/gA1dUSEh1rBHLFARlCABEpLRvbbbxImDgRK3ub+fdJtzH/Z3Tq3v6Nzje30DyKwzyT+5iMGI+DgijtRXtx5wpv5n48716WTJRa126atcelyy3jy0+bpDEbEWEX0R8cQjEc/mtsetrKzOTZVKxaXG+nB1fnG4srJ6/ur81GxxtrgwOnFhcnJiZHxs8r619cYrz9+4+N5jve9+9/LtW69+8H5SrcHGvs3t6MR6h8fVm94TxzZtOxAR//slwR5ghUZ7+rtdEX6V5PP7Y0ScTfP/SBTSTxPIglqtVvuxdrDd7rUasG/l0zFwLj8UEfVyPj80VB/D/ykG8qVypfqvK+XlhZn6WPlo9OSvXC0VRxrnCkejJ5esj6ble+tjLevjEekY+LVCf7o+NF0uzextVwe0ONSS/98W6vkPZIRTfsgu+Q/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/yGTHr94MVlqzfvfZ66tLM+Vr52fKVbmhuaXp4f6YmlxaLZcnk3v2Zn/ufcrlcuLo/+O5b6oFivV4crK6uX58vJC9XJ6X//lYs+etAroxLHTNz/NRcTaf/rTJdHb2CdXYX+r1XLR7XuQge4odLsDArrG1B9kl3N8oPUnelvHBX3tXrh4b74QeLjku10BoGvOnfT9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DhZP4fsmtwp+d/HY74w6Znd41ExOGI+KTQc7D5rC9gP8h/kWuM/88d+dtg697e3PfpVwS9EfHCW5feeHGqWl0aTbZ/fXd79c3G9rFNL2x7wgB0SzNPm3kMAGTXxp3r081lL+N++f/6RQjb4x9ozE32pd9RDmzktlyrkLtP1y6srUfEiZ3i5xrPO6+fyAxsFLbFP974m6u/RVrfA+lz0/cm/slN8f+6Kf6p3/y/AtlwM+l/RnbKv3ya03E3/7b2P4P36dqJ9v1f/m7/V2jT/53uMMZzb7/0edv46xGndozfjNeXxmqNn9TtXIfxbz/95J/b7au9U3+fneI3JaXh6vzicGVl9Xz6O3KzxYXRiQuTkxMj42OTw+kc9XBzpnq7/5746NZu7R9oE3+39ifb/tFh+3/4y4dPndkl/t/P7vz5H98lfn9E/LPD+N+MffZMu31J/Jk27c/vEj/ZNt5h/Mrrjx7s8FAAYA9UVlbnpkql4pKCgkJXCusPRjVaCt3umYDfW2UlOTVPkr7bNQEAAAAAAAAAAAA6tReXE3e7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+8FPAQAA//8mrNPI")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

1m35.758327418s ago: executing program 5 (id=1119):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m34.565914651s ago: executing program 5 (id=1130):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50e, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41)
write(r0, &(0x7f0000000400)='0', 0x18)

1m34.039554329s ago: executing program 5 (id=1136):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
dup3(r0, r1, 0x0)

1m33.827846982s ago: executing program 5 (id=1140):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc)

1m33.645630459s ago: executing program 34 (id=1140):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc)

50.339563192s ago: executing program 7 (id=1795):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)

50.146305942s ago: executing program 7 (id=1796):
socket$packet(0x11, 0xa, 0x300)
syz_io_uring_setup(0x100636d, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50)

49.622242559s ago: executing program 7 (id=1806):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0xd, 0x0, 0x2, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg(r1, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811)

49.334260567s ago: executing program 7 (id=1809):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)

49.283553168s ago: executing program 7 (id=1810):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0x8b25714e)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10)

49.135736158s ago: executing program 7 (id=1813):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fchown(r0, r1, 0xffffffffffffffff)

49.046808496s ago: executing program 35 (id=1813):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fchown(r0, r1, 0xffffffffffffffff)

27.875274394s ago: executing program 0 (id=2084):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

26.862034491s ago: executing program 0 (id=2105):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)

26.663920331s ago: executing program 0 (id=2112):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x7fffffff}, 0x11ece8, 0x1224, 0x5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0))

26.519467881s ago: executing program 0 (id=2114):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)

26.47412542s ago: executing program 0 (id=2116):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9f"], 0x0, 0x56}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))

26.434725518s ago: executing program 0 (id=2117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='44100,48000,88200,96', 0x14)

26.296570996s ago: executing program 36 (id=2117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='44100,48000,88200,96', 0x14)

19.697679872s ago: executing program 6 (id=2191):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1}, 0x10020)

19.385688605s ago: executing program 6 (id=2194):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001)
r2 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
fcntl$setsig(r1, 0xa, 0x1c)
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015)

19.225645898s ago: executing program 6 (id=2197):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

19.112455321s ago: executing program 6 (id=2201):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000003c0)='./dev\x00', &(0x7f00000001c0)='./file0/../file0\x00')

18.898249275s ago: executing program 6 (id=2204):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x11)

18.639753078s ago: executing program 6 (id=2208):
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x9, 0x2, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

18.28392548s ago: executing program 37 (id=2208):
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x9, 0x2, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

4.80255895s ago: executing program 2 (id=2332):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c)

4.689308153s ago: executing program 1 (id=2335):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="116f4742", 0x4}], 0x1}}], 0x1, 0x4404c880)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b12, 0x0, 0xfffffffffffffdfd)

4.551425112s ago: executing program 1 (id=2336):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x40)

4.485690415s ago: executing program 1 (id=2337):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x208)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x239, 0xfffff8b9}, 0x10)

4.420687678s ago: executing program 1 (id=2338):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, "d92984bd1c8411e88509de050000000000f2170e65e3f50327e42200000004e7ed000000000a0000000000190000000000000000000400", 0x3f}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x5, 0x0, 0x87, "750538d1ee2c6680718336d9bd3517076db9ad1f6a120d8be6d7f81cd80669b740a5418d69d00000000000000400", 0x35}, 0x60)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)

4.287657445s ago: executing program 1 (id=2340):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

3.248014657s ago: executing program 2 (id=2343):
mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3.035504211s ago: executing program 2 (id=2348):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0)

2.99068126s ago: executing program 8 (id=2349):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551, 0x9}})

2.864257215s ago: executing program 1 (id=2351):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.777910703s ago: executing program 8 (id=2353):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef)

2.739879281s ago: executing program 9 (id=2354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a)

2.379216874s ago: executing program 8 (id=2356):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
write$P9_RREAD(r1, &(0x7f0000002480)=ANY=[], 0x9000)

2.373317606s ago: executing program 9 (id=2357):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="2e1221b21ab601c494d3ffff0000963d86dd9d90491c0026060004dbb8a13d6d2183499c3a0a9070ec1245", 0x2b}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60d0981edf3b6733fc75059ac8f1efa749c1", 0x23}], 0x2)

2.312971218s ago: executing program 4 (id=2358):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x208)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x9}, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8)

2.162528989s ago: executing program 4 (id=2359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

2.042720053s ago: executing program 9 (id=2360):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.766936879s ago: executing program 8 (id=2361):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x2000000000006)
lseek(r0, 0x8, 0x4)

1.749814533s ago: executing program 4 (id=2362):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001aca80c0000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064"], 0xfc}}, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0)

1.698969213s ago: executing program 2 (id=2363):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, 0xffffffffffffffff)

1.525715688s ago: executing program 4 (id=2364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xffff}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0xc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1.266355182s ago: executing program 9 (id=2365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.197941635s ago: executing program 2 (id=2366):
unshare(0x6020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xfe, 0x0}, 0x10)

1.116493332s ago: executing program 4 (id=2367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xe41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xda8d}, r1, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)

889.982558ms ago: executing program 8 (id=2368):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x2020600)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)

831.4821ms ago: executing program 9 (id=2369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
poll(&(0x7f0000000180)=[{r0, 0xa086}], 0x1, 0x9)

787.892599ms ago: executing program 4 (id=2370):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

692.978378ms ago: executing program 2 (id=2371):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000240)={[{@errors_remount}, {@grpquota}, {@abort}, {@journal_async_commit}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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")
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x182)
creat(&(0x7f0000000080)='./bus\x00', 0x27)
socket(0x10, 0x0, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

431.211152ms ago: executing program 9 (id=2372):
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002c00)={{0x107, 0x5, 0x7, 0x25, 0x353, 0x8001, 0x353, 0x8}, "578d0bfdc73cf3e993"}, 0x29)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0x6}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, &(0x7f0000000600)=[{&(0x7f0000000c00)=""/4096}, {&(0x7f0000001c00)=""/4096}], 0x0, &(0x7f0000000640)=""/48}, 0x9}, {{&(0x7f0000000680)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/216}, {&(0x7f0000000800)=""/78}], 0x0, &(0x7f00000008c0)=""/229}, 0x4}], 0x800000000000151, 0x1022, 0x0)

0s ago: executing program 8 (id=2373):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf60", 0x33)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r1, &(0x7f00000091c0)=""/16384, 0x4000)

kernel console output (not intermixed with test programs):

82][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  128.002298][   T29] audit: type=1326 audit(1790398999.623:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.0.1461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  128.002691][   T29] audit: type=1326 audit(1790398999.623:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.0.1461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  128.004577][   T29] audit: type=1326 audit(1790398999.623:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.0.1461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  128.126582][ T7714] netlink: 'syz.1.1475': attribute type 4 has an invalid length.
[  128.142447][   T29] audit: type=1326 audit(1790398999.763:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.0.1461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  128.318623][   T29] audit: type=1400 audit(1790398999.933:1314): avc:  denied  { bind } for  pid=7722 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  128.466000][ T7735] loop0: detected capacity change from 0 to 128
[  128.490960][ T7735] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.492291][ T7735] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.529360][   T29] audit: type=1400 audit(1790399000.153:1315): avc:  denied  { write } for  pid=7733 comm="syz.0.1473" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.582513][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.734225][ T7736] loop1: detected capacity change from 0 to 4096
[  128.755671][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.772555][   T29] audit: type=1400 audit(1790399000.383:1316): avc:  denied  { write } for  pid=7734 comm="syz.1.1474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.843981][   T29] audit: type=1400 audit(1790399000.463:1317): avc:  denied  { write } for  pid=7734 comm="syz.1.1474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.889926][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.982317][   T29] audit: type=1400 audit(1790399000.603:1318): avc:  denied  { create } for  pid=7756 comm="syz.0.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.008601][   T29] audit: type=1400 audit(1790399000.613:1319): avc:  denied  { setopt } for  pid=7756 comm="syz.0.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.130235][ T7761] loop2: detected capacity change from 0 to 4096
[  129.161366][ T7761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.364739][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.381299][ T7773] ieee802154 phy0 wpan0: encryption failed: -22
[  129.665635][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.665878][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.042096][ T7824] loop7: detected capacity change from 0 to 1024
[  130.043877][ T7824] EXT4-fs: Ignoring removed bh option
[  130.047547][ T7824] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  130.073988][ T7821] loop1: detected capacity change from 0 to 512
[  130.084303][ T7824] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.126030][ T7821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.409444][ T7842] loop2: detected capacity change from 0 to 512
[  130.444925][ T7842] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.629680][ T7851] EXT4-fs mount: 4 callbacks suppressed
[  130.629704][ T7851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  130.629814][ T7851] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.828722][ T7859] EXT4-fs: Ignoring removed nobh option
[  130.840237][ T7859] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  130.878921][ T7859] EXT4-fs (loop7): 1 truncate cleaned up
[  130.879566][ T7859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.915406][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  131.098050][ T6705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.286027][ T7868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.286178][ T7868] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.455858][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.625973][ T7880] FAULT_INJECTION: forcing a failure.
[  131.625973][ T7880] name failslab, interval 1, probability 0, space 0, times 0
[  131.626064][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.2.1534 Not tainted syzkaller #0 PREEMPT(lazy) 
[  131.626093][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  131.626108][ T7880] Call Trace:
[  131.626116][ T7880]  <TASK>
[  131.626124][ T7880]  __dump_stack+0x1d/0x30
[  131.626152][ T7880]  dump_stack_lvl+0x95/0xd0
[  131.626298][ T7880]  dump_stack+0x15/0x1b
[  131.626370][ T7880]  should_fail_ex+0x262/0x280
[  131.626394][ T7880]  ? dup_task_struct+0x5a/0x750
[  131.626423][ T7880]  should_failslab+0x8c/0xb0
[  131.626462][ T7880]  kmem_cache_alloc_node_noprof+0x82/0x400
[  131.626529][ T7880]  ? dup_task_struct+0x5a/0x750
[  131.626559][ T7880]  ? pv_queued_spin_unlock_traced+0x2d/0xb0
[  131.626666][ T7880]  dup_task_struct+0x5a/0x750
[  131.626696][ T7880]  copy_process+0x5a3/0x2350
[  131.626782][ T7880]  ? ring_buffer_lock_reserve+0x71e/0x860
[  131.626819][ T7880]  kernel_clone+0x1c0/0x5f0
[  131.626852][ T7880]  __x64_sys_clone+0x143/0x180
[  131.626893][ T7880]  x64_sys_call+0x2479/0x2550
[  131.626981][ T7880]  do_syscall_64+0x112/0x360
[  131.627006][ T7880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.627030][ T7880] RIP: 0033:0x7f9b2c03e159
[  131.627050][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.627127][ T7880] RSP: 002b:00007f9b2aa96fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  131.627158][ T7880] RAX: ffffffffffffffda RBX: 00007f9b2c2c5fa0 RCX: 00007f9b2c03e159
[  131.627221][ T7880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  131.627236][ T7880] RBP: 00007f9b2c0d506b R08: 0000000000000000 R09: 0000000000000000
[  131.627249][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.627268][ T7880] R13: 00007f9b2c2c6038 R14: 00007f9b2c2c5fa0 R15: 00007fff4cec14e8
[  131.627355][ T7880]  </TASK>
[  131.988869][ T7887] sctp: [Deprecated]: syz.2.1536 (pid 7887) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.988869][ T7887] Use struct sctp_sack_info instead
[  132.018953][ T7893] set_capacity_and_notify: 4 callbacks suppressed
[  132.018968][ T7893] loop0: detected capacity change from 0 to 512
[  132.021064][ T7893] EXT4-fs: Ignoring removed nobh option
[  132.025498][ T7893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  132.063561][ T7893] EXT4-fs (loop0): 1 truncate cleaned up
[  132.064267][ T7893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.276965][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.458249][ T7920] loop0: detected capacity change from 0 to 256
[  132.554452][ T7924] syz.0.1560: attempt to access beyond end of device
[  132.554452][ T7924] loop0: rw=1, sector=1800, nr_sectors = 2048 limit=256
[  132.594292][ T7924] syz.0.1560: attempt to access beyond end of device
[  132.594292][ T7924] loop0: rw=1, sector=3848, nr_sectors = 8 limit=256
[  132.644769][ T7925] loop6: detected capacity change from 0 to 1024
[  132.645493][ T7925] EXT4-fs: Ignoring removed bh option
[  132.667922][ T7925] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  132.714509][ T7925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.915142][ T7932] syzkaller1: entered promiscuous mode
[  132.915167][ T7932] syzkaller1: entered allmulticast mode
[  133.019094][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.140206][ T7940] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64
[  133.478757][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.478757][ T6404] loop0: rw=1, sector=3856, nr_sectors = 3064 limit=256
[  133.539688][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.539688][ T6404] loop0: rw=1, sector=6920, nr_sectors = 2048 limit=256
[  133.576855][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.576855][ T6404] loop0: rw=1, sector=8968, nr_sectors = 2072 limit=256
[  133.607294][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.607294][ T6404] loop0: rw=1, sector=11040, nr_sectors = 2080 limit=256
[  133.665858][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.665858][ T6404] loop0: rw=1, sector=13120, nr_sectors = 2096 limit=256
[  133.739742][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.739742][ T6404] loop0: rw=1, sector=15216, nr_sectors = 2296 limit=256
[  133.748176][ T6404] kworker/u8:17: attempt to access beyond end of device
[  133.748176][ T6404] loop0: rw=1, sector=17512, nr_sectors = 1608 limit=256
[  133.881771][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1570'.
[  134.012030][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  134.012047][   T29] audit: type=1326 audit(1790399005.633:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f440687e159 code=0x0
[  134.023034][ T3411] wiimote 0005:057E:0330.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  134.027494][ T3411] wiimote 0005:057E:0330.0005: New device registered
[  134.035390][ T3411] wiimote 0005:057E:0330.0005: detected device: Nintendo Wii Remote Plus (Gen 2)
[  134.056789][ T7968] wiimote 0005:057E:0330.0005: Device removed
[  134.067106][ T3411] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input15
[  134.091291][ T3411] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input16
[  134.112875][ T3411] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input14
[  134.147379][ T7976] udevd[7976]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error
[  134.727844][ T7999] FAULT_INJECTION: forcing a failure.
[  134.727844][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.727917][ T7999] CPU: 1 UID: 0 PID: 7999 Comm: syz.0.1585 Not tainted syzkaller #0 PREEMPT(lazy) 
[  134.727948][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.727986][ T7999] Call Trace:
[  134.728049][ T7999]  <TASK>
[  134.728137][ T7999]  __dump_stack+0x1d/0x30
[  134.728236][ T7999]  dump_stack_lvl+0x95/0xd0
[  134.728266][ T7999]  dump_stack+0x15/0x1b
[  134.728303][ T7999]  should_fail_ex+0x262/0x280
[  134.728327][ T7999]  should_fail+0xb/0x20
[  134.728350][ T7999]  should_fail_usercopy+0x1a/0x20
[  134.728447][ T7999]  _copy_from_user+0x1c/0xb0
[  134.728501][ T7999]  __se_sys_io_uring_setup+0x11f/0x1e0
[  134.728598][ T7999]  __x64_sys_io_uring_setup+0x31/0x40
[  134.728650][ T7999]  x64_sys_call+0x1fbf/0x2550
[  134.728754][ T7999]  do_syscall_64+0x112/0x360
[  134.728794][ T7999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.728825][ T7999] RIP: 0033:0x7fac926fe159
[  134.728906][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.728936][ T7999] RSP: 002b:00007fac91156fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  134.728965][ T7999] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007fac926fe159
[  134.728982][ T7999] RDX: 0000200000000240 RSI: 0000200000000400 RDI: 0000000000000efd
[  134.728998][ T7999] RBP: 00007fac9279506b R08: 0000000000000000 R09: 0000000000000000
[  134.729074][ T7999] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240
[  134.729097][ T7999] R13: 0000200000000280 R14: 0000200000000100 R15: 00007fff625f3a08
[  134.729127][ T7999]  </TASK>
[  135.123272][   T29] audit: type=1400 audit(1790399006.743:1337): avc:  denied  { read } for  pid=8008 comm="syz.2.1590" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  135.123319][   T29] audit: type=1400 audit(1790399006.743:1338): avc:  denied  { open } for  pid=8008 comm="syz.2.1590" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  135.174385][   T29] audit: type=1400 audit(1790399006.793:1339): avc:  denied  { ioctl } for  pid=8008 comm="syz.2.1590" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  135.340516][   T29] audit: type=1326 audit(1790399006.963:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  135.341168][   T29] audit: type=1326 audit(1790399006.963:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  135.341425][   T29] audit: type=1326 audit(1790399006.963:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  135.341674][   T29] audit: type=1326 audit(1790399006.963:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  135.341863][   T29] audit: type=1326 audit(1790399006.963:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  135.342284][   T29] audit: type=1326 audit(1790399006.963:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.1597" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac926fe159 code=0x7ffc0000
[  135.541540][ T8030] tipc: Started in network mode
[  135.541580][ T8030] tipc: Node identity ac14140f, cluster identity 4711
[  135.542045][ T8030] tipc: Enabled bearer <udp:syz2>, priority 10
[  135.695758][ T8040] device-mapper: ioctl: Invalid ioctl structure: uuid @, name , dev fc5b
[  135.880845][ T8058] loop2: detected capacity change from 0 to 764
[  135.900844][ T8058] Symlink component flag not implemented
[  135.901158][ T8058] Symlink component flag not implemented (128)
[  135.959503][ T8064] loop7: detected capacity change from 0 to 164
[  136.012582][ T8064] iso9660: Corrupted directory entry in block 2 of inode 1920
[  136.197643][ T8074] netlink: 'syz.1.1621': attribute type 10 has an invalid length.
[  136.197974][ T8074] bridge0: port 3(syz_tun) entered disabled state
[  136.241438][ T8074] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  136.455977][ T8096] loop0: detected capacity change from 0 to 256
[  136.659820][ T3398] tipc: Node number set to 2886997007
[  136.781668][ T8119] syz.7.1640 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  137.766429][ T8140] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc02
[  137.837030][ T8146] loop2: detected capacity change from 0 to 512
[  137.879386][ T8146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.879501][ T8146] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.936189][ T8144] loop7: detected capacity change from 0 to 512
[  137.986542][ T8144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.018299][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.137257][ T8144] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.484591][ T8177] loop7: detected capacity change from 0 to 4096
[  138.521871][ T8177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.654108][ T8185] Invalid argument reading file caps for ./file0
[  138.751531][ T8187] loop0: detected capacity change from 0 to 512
[  138.805171][ T8187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.873696][ T8187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.913051][ T8194] xt_hashlimit: size too large, truncated to 1048576
[  138.913108][ T8194] xt_hashlimit: max too large, truncated to 1048576
[  139.122427][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  139.122447][   T29] audit: type=1400 audit(1790399010.743:1363): avc:  denied  { read } for  pid=8199 comm="syz.1.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  139.156920][ T8200] macvlan2: entered promiscuous mode
[  139.156939][ T8200] gretap0: entered promiscuous mode
[  139.171449][ T8200] gretap0: left promiscuous mode
[  139.220578][ T8202] loop0: detected capacity change from 0 to 512
[  139.247768][ T8202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.247901][ T8202] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.306231][   T29] audit: type=1400 audit(1790399010.923:1364): avc:  denied  { write } for  pid=8201 comm="syz.0.1672" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.354750][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.450819][ T8208] loop2: detected capacity change from 0 to 1024
[  139.453142][ T8208] EXT4-fs: Ignoring removed orlov option
[  139.490515][ T8208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.511898][   T29] audit: type=1400 audit(1790399011.113:1365): avc:  denied  { write } for  pid=8206 comm="syz.2.1674" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.534961][ T8208] EXT4-fs error (device loop2): __ext4_new_inode:1289: comm syz.2.1674: failed to insert inode 12: doubly allocated?
[  139.540622][   T29] audit: type=1400 audit(1790399011.143:1366): avc:  denied  { write } for  pid=8206 comm="syz.2.1674" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.540782][   T29] audit: type=1400 audit(1790399011.143:1367): avc:  denied  { write } for  pid=8206 comm="syz.2.1674" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.540823][   T29] audit: type=1400 audit(1790399011.153:1368): avc:  denied  { write } for  pid=8206 comm="syz.2.1674" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.657449][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.669001][ T6705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.711951][ T8212] loop0: detected capacity change from 0 to 512
[  139.712485][ T8212] EXT4-fs: Ignoring removed i_version option
[  139.712521][ T8212] EXT4-fs: Ignoring removed oldalloc option
[  139.750968][ T8212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.840016][   T29] audit: type=1400 audit(1790399011.463:1369): avc:  denied  { execute } for  pid=8220 comm="syz.1.1678" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=20698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  139.992050][ T8226] bond2: invalid NS target :: specified for addition
[  139.992074][ T8226] bond2: option ns_ip6_target: invalid value (18446744073709551615)
[  139.995054][ T8226] bond2 (unregistering): Released all slaves
[  140.114259][ T8235] FAULT_INJECTION: forcing a failure.
[  140.114259][ T8235] name failslab, interval 1, probability 0, space 0, times 0
[  140.114294][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: syz.2.1682 Not tainted syzkaller #0 PREEMPT(lazy) 
[  140.114327][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.114381][ T8235] Call Trace:
[  140.114392][ T8235]  <TASK>
[  140.114405][ T8235]  __dump_stack+0x1d/0x30
[  140.114436][ T8235]  dump_stack_lvl+0x95/0xd0
[  140.114463][ T8235]  dump_stack+0x15/0x1b
[  140.114499][ T8235]  should_fail_ex+0x262/0x280
[  140.114544][ T8235]  should_failslab+0x8c/0xb0
[  140.114580][ T8235]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[  140.114650][ T8235]  ? kstrdup_const+0x3e/0x50
[  140.114679][ T8235]  ? kstrdup_const+0x3e/0x50
[  140.114719][ T8235]  kstrdup+0x3e/0xd0
[  140.114747][ T8235]  kstrdup_const+0x3e/0x50
[  140.114771][ T8235]  alloc_vfsmnt+0xe2/0x2f0
[  140.114871][ T8235]  clone_mnt+0x30/0x5d0
[  140.114928][ T8235]  lock_mount_exact+0xca/0x460
[  140.114970][ T8235]  open_new_namespace+0x179/0xa90
[  140.115005][ T8235]  vfs_open_tree+0x24d/0x2d0
[  140.115070][ T8235]  __x64_sys_open_tree+0x5e/0xd0
[  140.115114][ T8235]  x64_sys_call+0x1d6d/0x2550
[  140.115150][ T8235]  do_syscall_64+0x112/0x360
[  140.115230][ T8235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.115260][ T8235] RIP: 0033:0x7f9b2c03e159
[  140.115282][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.115308][ T8235] RSP: 002b:00007f9b2aa97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  140.115422][ T8235] RAX: ffffffffffffffda RBX: 00007f9b2c2c5fa0 RCX: 00007f9b2c03e159
[  140.115442][ T8235] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  140.115462][ T8235] RBP: 00007f9b2c0d506b R08: 0000000000000000 R09: 0000000000000000
[  140.115529][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.115551][ T8235] R13: 00007f9b2c2c6038 R14: 00007f9b2c2c5fa0 R15: 00007fff4cec14e8
[  140.115577][ T8235]  </TASK>
[  140.329048][   T29] audit: type=1400 audit(1790399011.953:1370): avc:  denied  { bind } for  pid=8238 comm="syz.1.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  140.524064][ T8241] loop2: detected capacity change from 0 to 4096
[  140.551377][ T8241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.588384][   T29] audit: type=1400 audit(1790399012.203:1371): avc:  denied  { write } for  pid=8240 comm="syz.2.1687" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.746154][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.766001][   T29] audit: type=1400 audit(1790399012.383:1372): avc:  denied  { write } for  pid=8245 comm="syz.6.1690" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  141.543326][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.555757][ T8255] bond0: entered promiscuous mode
[  141.555783][ T8255] bond_slave_0: entered promiscuous mode
[  141.555961][ T8255] bond_slave_1: entered promiscuous mode
[  141.573793][ T8255] batadv0: entered promiscuous mode
[  141.616493][ T8255] 8021q: adding VLAN 0 to HW filter on device hsr1
[  141.628195][ T8255] bond0: left promiscuous mode
[  141.628212][ T8255] bond_slave_0: left promiscuous mode
[  141.639864][ T8255] bond_slave_1: left promiscuous mode
[  141.654171][ T8255] batadv0: left promiscuous mode
[  141.990777][ T8281] device-mapper: ioctl: Unable to interpret geometry settings.
[  142.191867][ T8295] loop1: detected capacity change from 0 to 1024
[  142.193680][ T8295] EXT4-fs: Ignoring removed orlov option
[  142.238971][ T8295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.284074][ T8295] EXT4-fs error (device loop1): __ext4_new_inode:1289: comm syz.1.1706: failed to insert inode 12: doubly allocated?
[  142.401894][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.662458][ T8315] bond0: entered promiscuous mode
[  142.662483][ T8315] bond_slave_0: entered promiscuous mode
[  142.664256][ T8315] bond_slave_1: entered promiscuous mode
[  142.686877][ T8315] batadv0: entered promiscuous mode
[  142.702793][ T8315] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  142.702865][ T8315] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  142.703605][ T8315] 8021q: adding VLAN 0 to HW filter on device hsr1
[  142.737453][ T8315] bond0: left promiscuous mode
[  142.737492][ T8315] bond_slave_0: left promiscuous mode
[  142.737646][ T8315] bond_slave_1: left promiscuous mode
[  142.756120][ T8315] batadv0: left promiscuous mode
[  142.895292][ T3411] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  142.904995][ T3411] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  142.932574][ T8323] sctp: [Deprecated]: syz.1.1719 (pid 8323) Use of int in maxseg socket option.
[  142.932574][ T8323] Use struct sctp_assoc_value instead
[  142.966479][ T8326] udevd[8326]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error
[  143.117245][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1722'.
[  143.692338][ T8356] bond0: entered promiscuous mode
[  143.696184][ T8356] bond_slave_0: entered promiscuous mode
[  143.696422][ T8356] bond_slave_1: entered promiscuous mode
[  143.720176][ T8356] batadv0: entered promiscuous mode
[  143.726433][ T8356] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  143.726495][ T8356] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  143.755481][ T8356] 8021q: adding VLAN 0 to HW filter on device hsr1
[  143.765764][ T8356] bond0: left promiscuous mode
[  143.765782][ T8356] bond_slave_0: left promiscuous mode
[  143.766072][ T8356] bond_slave_1: left promiscuous mode
[  143.785160][ T8356] batadv0: left promiscuous mode
[  144.572294][ T8385] loop6: detected capacity change from 0 to 2048
[  144.610677][ T8385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.610757][ T8385] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.681829][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  144.681896][   T29] audit: type=1326 audit(1790399016.303:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12888ae159 code=0x7ffc0000
[  144.681933][   T29] audit: type=1326 audit(1790399016.303:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12888ae159 code=0x7ffc0000
[  144.751640][   T29] audit: type=1326 audit(1790399016.373:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12888ae159 code=0x7ffc0000
[  144.751679][   T29] audit: type=1326 audit(1790399016.373:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12888ae159 code=0x7ffc0000
[  144.762535][   T29] audit: type=1326 audit(1790399016.373:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f12888ae159 code=0x7ffc0000
[  144.822827][   T29] audit: type=1326 audit(1790399016.443:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12888ae159 code=0x7ffc0000
[  144.822927][   T29] audit: type=1326 audit(1790399016.443:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12888adec2 code=0x7ffc0000
[  144.823055][   T29] audit: type=1326 audit(1790399016.443:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f12888adf57 code=0x7ffc0000
[  144.854159][   T29] audit: type=1326 audit(1790399016.473:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f128886ae51 code=0x7ffc0000
[  144.854305][   T29] audit: type=1326 audit(1790399016.473:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f12888aef49 code=0x7ffc0000
[  145.452293][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.762360][ T8416] loop2: detected capacity change from 0 to 512
[  145.762782][ T8416] EXT4-fs: Ignoring removed i_version option
[  145.762892][ T8416] EXT4-fs: Ignoring removed oldalloc option
[  145.792615][ T8416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.414227][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.481532][ T8436] loop2: detected capacity change from 0 to 512
[  146.510620][ T8436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1761: bg 0: block 385: padding at end of block bitmap is not set
[  146.510658][ T8436] loop2: lost filesystem error report for type 5 error -117
[  146.511355][ T8436] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  146.511431][ T8436] loop2: lost filesystem error report for type 5 error -117
[  146.512511][ T8436] EXT4-fs (loop2): 2 truncates cleaned up
[  146.518192][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.655380][ T8439] loop1: detected capacity change from 0 to 1024
[  146.694676][ T8439] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled
[  146.717886][ T8439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.732460][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.783416][ T8439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1762: bg 0: block 153: padding at end of block bitmap is not set
[  146.902727][ T8452] loop0: detected capacity change from 0 to 128
[  146.927242][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.049726][ T8459] loop2: detected capacity change from 0 to 256
[  147.533883][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.537679][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.601521][ T8494] loop7: detected capacity change from 0 to 256
[  147.645202][ T8492] bond0: entered promiscuous mode
[  147.645227][ T8492] bond_slave_0: entered promiscuous mode
[  147.645420][ T8492] bond_slave_1: entered promiscuous mode
[  147.675634][ T8492] batadv0: entered promiscuous mode
[  147.700214][ T8492] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  147.700273][ T8492] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  147.701239][ T8492] 8021q: adding VLAN 0 to HW filter on device hsr1
[  147.763772][ T8492] bond0: left promiscuous mode
[  147.763797][ T8492] bond_slave_0: left promiscuous mode
[  147.763925][ T8492] bond_slave_1: left promiscuous mode
[  147.793289][ T8492] batadv0: left promiscuous mode
[  148.161388][ T8508] loop6: detected capacity change from 0 to 512
[  148.185480][ T8508] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.1793: inode has both inline data and extents flags
[  148.185517][ T8508] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  148.185796][ T8508] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1793: couldn't read orphan inode 15 (err -117)
[  148.185826][ T8508] loop6: lost filesystem error report for type 5 error -117
[  148.186848][ T8508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.361942][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.435883][ T8518] loop2: detected capacity change from 0 to 256
[  148.758318][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'.
[  148.789167][ T8527] bond0: ARP target 8.4.0.0 is already present
[  148.789208][ T8527] bond0: option arp_ip_target: invalid value (1032)
[  148.903436][ T8539] loop2: detected capacity change from 0 to 1024
[  148.915938][ T8539] EXT4-fs: Ignoring removed bh option
[  148.937650][ T8539] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  148.953440][ T8539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.192641][ T6705] bridge0: port 3(syz_tun) entered disabled state
[  149.210900][ T6705] syz_tun (unregistering): left allmulticast mode
[  149.210921][ T6705] syz_tun (unregistering): left promiscuous mode
[  149.210997][ T6705] bridge0: port 3(syz_tun) entered disabled state
[  149.336497][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.379656][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.403085][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.475579][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.562424][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.697310][ T3395] kernel write not supported for file bpf-prog (pid: 3395 comm: kworker/1:4)
[  149.890896][   T12] bridge_slave_1: left allmulticast mode
[  149.890922][   T12] bridge_slave_1: left promiscuous mode
[  149.891041][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.931176][   T12] bridge_slave_0: left allmulticast mode
[  149.931217][   T12] bridge_slave_0: left promiscuous mode
[  149.931347][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.975975][ T8592] loop0: detected capacity change from 0 to 128
[  150.068254][   T29] kauditd_printk_skb: 27 callbacks suppressed
[  150.068272][   T29] audit: type=1400 audit(1790399021.683:1420): avc:  denied  { getopt } for  pid=8587 comm="syz.0.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  150.321207][ T8602] GUP no longer grows the stack in syz.6.1833 (8602): 200000ffd000-200001000000 (200000ffa000)
[  150.321316][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.6.1833 Not tainted syzkaller #0 PREEMPT(lazy) 
[  150.321344][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.321357][ T8602] Call Trace:
[  150.321392][ T8602]  <TASK>
[  150.321404][ T8602]  __dump_stack+0x1d/0x30
[  150.321430][ T8602]  dump_stack_lvl+0x95/0xd0
[  150.321458][ T8602]  dump_stack+0x15/0x1b
[  150.321526][ T8602]  __get_user_pages+0x1bde/0x1eb0
[  150.321606][ T8602]  ? trace_buffer_unlock_commit_regs+0x115/0x310
[  150.321657][ T8602]  ? trace_event_raw_event_ma_read+0x162/0x1e0
[  150.321767][ T8602]  ? __rcu_read_unlock+0x4e/0x70
[  150.321854][ T8602]  get_user_pages_remote+0x1d5/0x6b0
[  150.321913][ T8602]  __access_remote_vm+0x156/0x4d0
[  150.321954][ T8602]  access_remote_vm+0x32/0x40
[  150.321985][ T8602]  environ_read+0x1dc/0x360
[  150.322085][ T8602]  ? __pfx_environ_read+0x10/0x10
[  150.322123][ T8602]  vfs_readv+0x417/0x6d0
[  150.322152][ T8602]  __x64_sys_preadv+0xfd/0x1c0
[  150.322195][ T8602]  x64_sys_call+0x20e8/0x2550
[  150.322228][ T8602]  do_syscall_64+0x112/0x360
[  150.322321][ T8602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.322410][ T8602] RIP: 0033:0x7f12888ae159
[  150.322426][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.322445][ T8602] RSP: 002b:00007f1287307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  150.322468][ T8602] RAX: ffffffffffffffda RBX: 00007f1288b35fa0 RCX: 00007f12888ae159
[  150.322489][ T8602] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000003
[  150.322574][ T8602] RBP: 00007f128894506b R08: 0000000000000000 R09: 0000000000000000
[  150.322591][ T8602] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000000
[  150.322608][ T8602] R13: 00007f1288b36038 R14: 00007f1288b35fa0 R15: 00007ffeca089418
[  150.322631][ T8602]  </TASK>
[  150.325332][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.496804][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.549608][   T12] bond0 (unregistering): Released all slaves
[  150.616900][   T12] tipc: Disabling bearer <udp:syz2>
[  150.617016][   T12] tipc: Left network mode
[  150.644613][   T12] hsr_slave_0: left promiscuous mode
[  150.652441][   T12] hsr_slave_1: left promiscuous mode
[  150.655270][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.655315][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.675535][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.675557][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.712785][   T12] veth1_macvtap: left promiscuous mode
[  150.712820][   T12] veth0_macvtap: left promiscuous mode
[  150.712900][   T12] veth1_vlan: left promiscuous mode
[  150.713022][   T12] veth0_vlan: left promiscuous mode
[  150.920882][   T29] audit: type=1400 audit(1790399022.543:1421): avc:  denied  { write } for  pid=8607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.968911][   T12] team0 (unregistering): Port device team_slave_1 removed
[  151.033885][   T29] audit: type=1400 audit(1790399022.653:1422): avc:  denied  { write } for  pid=8631 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.120220][   T12] team0 (unregistering): Port device team_slave_0 removed
[  151.302691][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13
[  151.507403][ T8646] FAULT_INJECTION: forcing a failure.
[  151.507403][ T8646] name failslab, interval 1, probability 0, space 0, times 0
[  151.507468][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.0.1842 Not tainted syzkaller #0 PREEMPT(lazy) 
[  151.507495][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  151.507510][ T8646] Call Trace:
[  151.507519][ T8646]  <TASK>
[  151.507528][ T8646]  __dump_stack+0x1d/0x30
[  151.507612][ T8646]  dump_stack_lvl+0x95/0xd0
[  151.507650][ T8646]  dump_stack+0x15/0x1b
[  151.507740][ T8646]  should_fail_ex+0x262/0x280
[  151.507767][ T8646]  ? create_new_namespaces+0x38/0x420
[  151.507843][ T8646]  should_failslab+0x8c/0xb0
[  151.507875][ T8646]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  151.507937][ T8646]  ? create_new_namespaces+0x38/0x420
[  151.507972][ T8646]  create_new_namespaces+0x38/0x420
[  151.508045][ T8646]  unshare_nsproxy_namespaces+0x115/0x150
[  151.508081][ T8646]  ksys_unshare+0x42b/0x710
[  151.508173][ T8646]  __x64_sys_unshare+0x1f/0x30
[  151.508202][ T8646]  x64_sys_call+0x1e33/0x2550
[  151.508229][ T8646]  do_syscall_64+0x112/0x360
[  151.508318][ T8646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.508341][ T8646] RIP: 0033:0x7fac926fe159
[  151.508360][ T8646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.508381][ T8646] RSP: 002b:00007fac91157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  151.508409][ T8646] RAX: ffffffffffffffda RBX: 00007fac92985fa0 RCX: 00007fac926fe159
[  151.508482][ T8646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[  151.508501][ T8646] RBP: 00007fac9279506b R08: 0000000000000000 R09: 0000000000000000
[  151.508518][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.508566][ T8646] R13: 00007fac92986038 R14: 00007fac92985fa0 R15: 00007fff625f3a08
[  151.508589][ T8646]  </TASK>
[  151.778276][ T8653] loop0: detected capacity change from 0 to 512
[  151.815183][ T8653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.815258][ T8653] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.872178][   T29] audit: type=1400 audit(1790399023.493:1423): avc:  denied  { write } for  pid=8652 comm="syz.0.1845" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.872223][   T29] audit: type=1400 audit(1790399023.493:1424): avc:  denied  { append } for  pid=8652 comm="syz.0.1845" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  151.893109][   T29] audit: type=1400 audit(1790399023.513:1425): avc:  denied  { write } for  pid=8652 comm="syz.0.1845" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.923987][ T8653] EXT4-fs (loop0): Online defrag not supported for non-extent files
[  151.979487][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.252927][   T29] audit: type=1400 audit(1790399023.873:1426): avc:  denied  { write } for  pid=8649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  152.293163][   T29] audit: type=1400 audit(1790399023.913:1427): avc:  denied  { read write } for  pid=8671 comm="syz.2.1849" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  152.293293][   T29] audit: type=1400 audit(1790399023.913:1428): avc:  denied  { open } for  pid=8671 comm="syz.2.1849" path="/369/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  152.437476][   T29] audit: type=1400 audit(1790399024.053:1429): avc:  denied  { write } for  pid=8680 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  152.499927][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14
[  152.894180][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.894226][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.894681][ T8573] bridge_slave_0: entered allmulticast mode
[  152.907710][ T8573] bridge_slave_0: entered promiscuous mode
[  152.927391][ T8713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1860'.
[  152.941391][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.941432][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.941846][ T8573] bridge_slave_1: entered allmulticast mode
[  152.962521][ T8573] bridge_slave_1: entered promiscuous mode
[  153.002707][ T8716] loop6: detected capacity change from 0 to 4096
[  153.029350][ T8716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.139539][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.167022][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.274520][ T8573] team0: Port device team_slave_0 added
[  153.303729][ T8573] team0: Port device team_slave_1 added
[  153.421696][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.421792][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.421826][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.423745][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.423758][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.423793][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.646303][ T8573] hsr_slave_0: entered promiscuous mode
[  153.661432][ T8573] hsr_slave_1: entered promiscuous mode
[  153.762092][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15
[  154.094658][ T8573] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  154.110153][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  154.111263][ T8573] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  154.137840][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  154.146949][ T8573] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  154.164624][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  154.166507][ T8573] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  154.189902][ T8573] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  154.206106][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.352713][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.432555][ T8573] 8021q: adding VLAN 0 to HW filter on device team0
[  154.445858][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16
[  154.475144][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.475249][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.505181][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.505228][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.634085][ T8573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.758038][ T8806] tipc: Started in network mode
[  154.758057][ T8806] tipc: Node identity 4, cluster identity 4711
[  154.758107][ T8806] tipc: Node number set to 4
[  154.889156][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.889283][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.981968][ T8819] loop1: detected capacity change from 0 to 764
[  155.111340][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.583279][ T8573] veth0_vlan: entered promiscuous mode
[  155.609119][ T8573] veth1_vlan: entered promiscuous mode
[  155.699511][ T8573] veth0_macvtap: entered promiscuous mode
[  155.720090][ T8573] veth1_macvtap: entered promiscuous mode
[  155.782001][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.811918][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.840731][ T8832] IPVS: You probably need to specify IP address on multicast interface.
[  155.840752][ T8832] IPVS: Error connecting to the multicast addr
[  155.889109][ T6400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.889226][ T6400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.889273][ T6400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.889866][ T6406] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.061970][ T8863] loop2: detected capacity change from 0 to 1024
[  156.072415][ T8863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  156.099372][ T8863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  156.099447][ T8863] System zones: 0-1, 3-36
[  156.106603][ T8863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.164799][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  156.164861][   T29] audit: type=1400 audit(1790399027.783:1437): avc:  denied  { write } for  pid=8862 comm="syz.2.1899" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  156.213327][   T29] audit: type=1400 audit(1790399027.833:1438): avc:  denied  { write } for  pid=8862 comm="syz.2.1899" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  156.213361][   T29] audit: type=1400 audit(1790399027.833:1439): avc:  denied  { unlink } for  pid=8862 comm="syz.2.1899" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  156.312209][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.344086][   T29] audit: type=1400 audit(1790399027.963:1440): avc:  denied  { shutdown } for  pid=8867 comm="syz.0.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  156.497858][ T8874] loop2: detected capacity change from 0 to 256
[  156.618721][ T8877] syz.2.1901: attempt to access beyond end of device
[  156.618721][ T8877] loop2: rw=1, sector=1800, nr_sectors = 688 limit=256
[  156.725105][ T8870] loop1: detected capacity change from 0 to 8192
[  157.118386][ T8898] tls_set_device_offload_rx: netdev not found
[  157.271455][ T8905] FAULT_INJECTION: forcing a failure.
[  157.271455][ T8905] name failslab, interval 1, probability 0, space 0, times 0
[  157.271490][ T8905] CPU: 1 UID: 0 PID: 8905 Comm: syz.8.1916 Not tainted syzkaller #0 PREEMPT(lazy) 
[  157.271523][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.271536][ T8905] Call Trace:
[  157.271543][ T8905]  <TASK>
[  157.271551][ T8905]  __dump_stack+0x1d/0x30
[  157.271583][ T8905]  dump_stack_lvl+0x95/0xd0
[  157.271653][ T8905]  dump_stack+0x15/0x1b
[  157.271751][ T8905]  should_fail_ex+0x262/0x280
[  157.271776][ T8905]  should_failslab+0x8c/0xb0
[  157.271850][ T8905]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[  157.271883][ T8905]  ? __d_alloc+0x34/0x320
[  157.271978][ T8905]  ? __d_alloc+0x34/0x320
[  157.272011][ T8905]  __d_alloc+0x34/0x320
[  157.272036][ T8905]  d_alloc+0x2e/0x100
[  157.272060][ T8905]  lookup_one_qstr_excl+0x95/0x240
[  157.272152][ T8905]  filename_create+0x155/0x220
[  157.272237][ T8905]  filename_mkdirat+0x81/0x300
[  157.272353][ T8905]  __se_sys_mkdirat+0x32/0xf0
[  157.272389][ T8905]  __x64_sys_mkdirat+0x43/0x50
[  157.272499][ T8905]  x64_sys_call+0x368/0x2550
[  157.272538][ T8905]  do_syscall_64+0x112/0x360
[  157.272568][ T8905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.272616][ T8905] RIP: 0033:0x7f8e8c51e159
[  157.272632][ T8905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.272651][ T8905] RSP: 002b:00007f8e8af77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  157.272678][ T8905] RAX: ffffffffffffffda RBX: 00007f8e8c7a5fa0 RCX: 00007f8e8c51e159
[  157.272704][ T8905] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  157.272757][ T8905] RBP: 00007f8e8c5b506b R08: 0000000000000000 R09: 0000000000000000
[  157.272771][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.272788][ T8905] R13: 00007f8e8c7a6038 R14: 00007f8e8c7a5fa0 R15: 00007fff0fd279b8
[  157.272814][ T8905]  </TASK>
[  157.611814][ T6404] kworker/u8:17: attempt to access beyond end of device
[  157.611814][ T6404] loop2: rw=1, sector=2488, nr_sectors = 2192 limit=256
[  157.641443][ T6404] kworker/u8:17: attempt to access beyond end of device
[  157.641443][ T6404] loop2: rw=1, sector=4680, nr_sectors = 2208 limit=256
[  157.664785][ T6404] kworker/u8:17: attempt to access beyond end of device
[  157.664785][ T6404] loop2: rw=1, sector=6888, nr_sectors = 1584 limit=256
[  158.151198][   T29] audit: type=1400 audit(1790399029.773:1441): avc:  denied  { read } for  pid=8936 comm="syz.2.1932" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  158.151245][   T29] audit: type=1400 audit(1790399029.773:1442): avc:  denied  { read open } for  pid=8936 comm="syz.2.1932" path="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  158.210210][ T8939] loop8: detected capacity change from 0 to 256
[  158.337057][ T8945] syz.8.1933: attempt to access beyond end of device
[  158.337057][ T8945] loop8: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  158.555996][ T8951] SELinux: DCCP has been removed, pid=8951 comm=syz.1.1938
[  158.567442][ T8951] netlink: 'syz.1.1938': attribute type 1 has an invalid length.
[  158.567464][ T8951] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1938'.
[  158.805828][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.806088][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.970319][   T29] audit: type=1400 audit(1790399030.593:1443): avc:  denied  { ioctl } for  pid=8960 comm="syz.2.1942" path="socket:[22918]" dev="sockfs" ino=22918 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  159.176685][ T6404] kworker/u8:17: attempt to access beyond end of device
[  159.176685][ T6404] loop8: rw=1, sector=3856, nr_sectors = 2064 limit=256
[  159.203397][ T6404] kworker/u8:17: attempt to access beyond end of device
[  159.203397][ T6404] loop8: rw=1, sector=5920, nr_sectors = 2064 limit=256
[  159.234067][ T6404] kworker/u8:17: attempt to access beyond end of device
[  159.234067][ T6404] loop8: rw=1, sector=7984, nr_sectors = 3992 limit=256
[  159.268326][ T6404] kworker/u8:17: attempt to access beyond end of device
[  159.268326][ T6404] loop8: rw=1, sector=11976, nr_sectors = 2088 limit=256
[  159.295241][ T6404] kworker/u8:17: attempt to access beyond end of device
[  159.295241][ T6404] loop8: rw=1, sector=14064, nr_sectors = 2784 limit=256
[  159.455986][   T29] audit: type=1400 audit(1790399031.073:1444): avc:  denied  { listen } for  pid=8975 comm="syz.1.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  159.457104][ T3079] kernel read not supported for file /1027/oom_score_adj (pid: 3079 comm: kworker/1:2)
[  159.457478][   T29] audit: type=1400 audit(1790399031.073:1445): avc:  denied  { mounton } for  pid=8975 comm="syz.1.1950" path="/460/file0" dev="tmpfs" ino=2442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  159.751500][ T8985] batadv_slave_0: entered promiscuous mode
[  159.751671][ T8985] batadv_slave_0: left promiscuous mode
[  159.929963][ T3079] kernel write not supported for file bpf-prog (pid: 3079 comm: kworker/1:2)
[  160.097219][   T29] audit: type=1400 audit(1790399031.713:1446): avc:  denied  { getopt } for  pid=8997 comm="syz.1.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  160.521015][ T9027] FAULT_INJECTION: forcing a failure.
[  160.521015][ T9027] name failslab, interval 1, probability 0, space 0, times 0
[  160.521044][ T9027] CPU: 1 UID: 0 PID: 9027 Comm: syz.2.1970 Not tainted syzkaller #0 PREEMPT(lazy) 
[  160.521131][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.521144][ T9027] Call Trace:
[  160.521152][ T9027]  <TASK>
[  160.521163][ T9027]  __dump_stack+0x1d/0x30
[  160.521188][ T9027]  dump_stack_lvl+0x95/0xd0
[  160.521217][ T9027]  dump_stack+0x15/0x1b
[  160.521244][ T9027]  should_fail_ex+0x262/0x280
[  160.521289][ T9027]  ? sk_prot_alloc+0x3f/0x180
[  160.521349][ T9027]  should_failslab+0x8c/0xb0
[  160.521384][ T9027]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  160.521468][ T9027]  ? sk_prot_alloc+0x3f/0x180
[  160.521558][ T9027]  sk_prot_alloc+0x3f/0x180
[  160.521589][ T9027]  sk_alloc+0x34/0x3e0
[  160.521614][ T9027]  __vsock_create+0x37/0x4f0
[  160.521637][ T9027]  vsock_create+0xef/0x330
[  160.521662][ T9027]  __sock_create+0x2e5/0x580
[  160.521776][ T9027]  __sys_socket+0xaf/0x180
[  160.521814][ T9027]  __x64_sys_socket+0x3f/0x50
[  160.521967][ T9027]  x64_sys_call+0x246e/0x2550
[  160.522059][ T9027]  do_syscall_64+0x112/0x360
[  160.522085][ T9027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.522164][ T9027] RIP: 0033:0x7f9b2c03e159
[  160.522209][ T9027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.522233][ T9027] RSP: 002b:00007f9b2aa97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  160.522328][ T9027] RAX: ffffffffffffffda RBX: 00007f9b2c2c5fa0 RCX: 00007f9b2c03e159
[  160.522347][ T9027] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000028
[  160.522385][ T9027] RBP: 00007f9b2c0d506b R08: 0000000000000000 R09: 0000000000000000
[  160.522399][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.522412][ T9027] R13: 00007f9b2c2c6038 R14: 00007f9b2c2c5fa0 R15: 00007fff4cec14e8
[  160.522431][ T9027]  </TASK>
[  160.755719][ T9032] FAULT_INJECTION: forcing a failure.
[  160.755719][ T9032] name failslab, interval 1, probability 0, space 0, times 0
[  160.755750][ T9032] CPU: 0 UID: 0 PID: 9032 Comm: syz.2.1972 Not tainted syzkaller #0 PREEMPT(lazy) 
[  160.755778][ T9032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.755904][ T9032] Call Trace:
[  160.755914][ T9032]  <TASK>
[  160.755925][ T9032]  __dump_stack+0x1d/0x30
[  160.755949][ T9032]  dump_stack_lvl+0x95/0xd0
[  160.755999][ T9032]  dump_stack+0x15/0x1b
[  160.756026][ T9032]  should_fail_ex+0x262/0x280
[  160.756058][ T9032]  ? do_getname+0x2e/0x1c0
[  160.756083][ T9032]  should_failslab+0x8c/0xb0
[  160.756145][ T9032]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  160.756242][ T9032]  ? do_getname+0x2e/0x1c0
[  160.756266][ T9032]  do_getname+0x2e/0x1c0
[  160.756318][ T9032]  __se_sys_linkat+0x2f/0x1d0
[  160.756337][ T9032]  __x64_sys_linkat+0x67/0x80
[  160.756424][ T9032]  x64_sys_call+0x21e5/0x2550
[  160.756455][ T9032]  do_syscall_64+0x112/0x360
[  160.756480][ T9032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.756502][ T9032] RIP: 0033:0x7f9b2c03e159
[  160.756568][ T9032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.756592][ T9032] RSP: 002b:00007f9b2aa97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  160.756680][ T9032] RAX: ffffffffffffffda RBX: 00007f9b2c2c5fa0 RCX: 00007f9b2c03e159
[  160.756709][ T9032] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff
[  160.756727][ T9032] RBP: 00007f9b2c0d506b R08: 0000000000001000 R09: 0000000000000000
[  160.756774][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.756787][ T9032] R13: 00007f9b2c2c6038 R14: 00007f9b2c2c5fa0 R15: 00007fff4cec14e8
[  160.756807][ T9032]  </TASK>
[  161.261761][ T9050] loop2: detected capacity change from 0 to 128
[  161.445788][   T29] audit: type=1400 audit(1790399033.063:1447): avc:  denied  { name_bind } for  pid=9054 comm="syz.2.1981" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  162.255859][ T9092] FAULT_INJECTION: forcing a failure.
[  162.255859][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.255892][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.8.1996 Not tainted syzkaller #0 PREEMPT(lazy) 
[  162.255921][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.255934][ T9092] Call Trace:
[  162.255941][ T9092]  <TASK>
[  162.255950][ T9092]  __dump_stack+0x1d/0x30
[  162.255988][ T9092]  dump_stack_lvl+0x95/0xd0
[  162.256010][ T9092]  dump_stack+0x15/0x1b
[  162.256098][ T9092]  should_fail_ex+0x262/0x280
[  162.256132][ T9092]  should_fail+0xb/0x20
[  162.256153][ T9092]  should_fail_usercopy+0x1a/0x20
[  162.256279][ T9092]  _copy_from_user+0x1c/0xb0
[  162.256341][ T9092]  bpf_vlog_reverse_ubuf+0xed/0x360
[  162.256372][ T9092]  bpf_vlog_finalize+0x147/0x200
[  162.256472][ T9092]  bpf_log_attr_finalize+0x33/0x100
[  162.256516][ T9092]  btf_new_fd+0x34a/0x6a0
[  162.256596][ T9092]  bpf_btf_load+0x116/0x130
[  162.256623][ T9092]  __sys_bpf+0xbce/0xc30
[  162.256733][ T9092]  __x64_sys_bpf+0x69/0x80
[  162.256797][ T9092]  x64_sys_call+0xf26/0x2550
[  162.256830][ T9092]  do_syscall_64+0x112/0x360
[  162.256858][ T9092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.256879][ T9092] RIP: 0033:0x7f8e8c51e159
[  162.256923][ T9092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.256948][ T9092] RSP: 002b:00007f8e8af77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  162.256977][ T9092] RAX: ffffffffffffffda RBX: 00007f8e8c7a5fa0 RCX: 00007f8e8c51e159
[  162.256997][ T9092] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  162.257011][ T9092] RBP: 00007f8e8c5b506b R08: 0000000000000000 R09: 0000000000000000
[  162.257058][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.257076][ T9092] R13: 00007f8e8c7a6038 R14: 00007f8e8c7a5fa0 R15: 00007fff0fd279b8
[  162.257145][ T9092]  </TASK>
[  162.345472][ T9090] loop6: detected capacity change from 0 to 4096
[  162.347483][ T9090] EXT4-fs: Ignoring removed orlov option
[  162.455622][ T9090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.508841][ T9022] Bluetooth: hci0: command 0x1003 tx timeout
[  162.508976][ T3762] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  162.582910][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.810862][ T6404] Bluetooth: hci0: Frame reassembly failed (-84)
[  162.903943][ T9110] netlink: 'syz.0.2004': attribute type 4 has an invalid length.
[  162.904477][ T9110] netlink: 'syz.0.2004': attribute type 4 has an invalid length.
[  163.094186][ T9122] FAULT_INJECTION: forcing a failure.
[  163.094186][ T9122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.094218][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.1.2009 Not tainted syzkaller #0 PREEMPT(lazy) 
[  163.094261][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.094279][ T9122] Call Trace:
[  163.094341][ T9122]  <TASK>
[  163.094353][ T9122]  __dump_stack+0x1d/0x30
[  163.094385][ T9122]  dump_stack_lvl+0x95/0xd0
[  163.094409][ T9122]  dump_stack+0x15/0x1b
[  163.094428][ T9122]  should_fail_ex+0x262/0x280
[  163.094517][ T9122]  should_fail+0xb/0x20
[  163.094590][ T9122]  should_fail_usercopy+0x1a/0x20
[  163.094625][ T9122]  _copy_to_user+0x20/0xa0
[  163.094709][ T9122]  bpf_verifier_vlog+0x3c5/0x5a0
[  163.094735][ T9122]  btf_verifier_log+0xb2/0xf0
[  163.094773][ T9122]  btf_parse_type_sec+0x1390/0x1520
[  163.094847][ T9122]  ? btf_parse_hdr+0x43a/0x440
[  163.094877][ T9122]  ? btf_parse_str_sec+0x1ae/0x1b0
[  163.094913][ T9122]  btf_new_fd+0x2ec/0x6a0
[  163.094987][ T9122]  bpf_btf_load+0x116/0x130
[  163.095029][ T9122]  __sys_bpf+0xbce/0xc30
[  163.095068][ T9122]  __x64_sys_bpf+0x69/0x80
[  163.095175][ T9122]  x64_sys_call+0xf26/0x2550
[  163.095327][ T9122]  do_syscall_64+0x112/0x360
[  163.095349][ T9122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.095435][ T9122] RIP: 0033:0x7f440687e159
[  163.095456][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.095497][ T9122] RSP: 002b:00007f44052d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  163.095526][ T9122] RAX: ffffffffffffffda RBX: 00007f4406b05fa0 RCX: 00007f440687e159
[  163.095541][ T9122] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  163.095615][ T9122] RBP: 00007f440691506b R08: 0000000000000000 R09: 0000000000000000
[  163.095685][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.095703][ T9122] R13: 00007f4406b06038 R14: 00007f4406b05fa0 R15: 00007ffd19cc5238
[  163.095726][ T9122]  </TASK>
[  163.714511][ T9143] tipc: Publication distribution failure
[  164.676804][ T9179] FAULT_INJECTION: forcing a failure.
[  164.676804][ T9179] name failslab, interval 1, probability 0, space 0, times 0
[  164.676906][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.1.2029 Not tainted syzkaller #0 PREEMPT(lazy) 
[  164.676935][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  164.676953][ T9179] Call Trace:
[  164.676961][ T9179]  <TASK>
[  164.676969][ T9179]  __dump_stack+0x1d/0x30
[  164.676992][ T9179]  dump_stack_lvl+0x95/0xd0
[  164.677093][ T9179]  dump_stack+0x15/0x1b
[  164.677120][ T9179]  should_fail_ex+0x262/0x280
[  164.677144][ T9179]  ? alloc_uid+0xff/0x360
[  164.677172][ T9179]  should_failslab+0x8c/0xb0
[  164.677227][ T9179]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  164.677264][ T9179]  ? alloc_uid+0xff/0x360
[  164.677383][ T9179]  alloc_uid+0xff/0x360
[  164.677415][ T9179]  __sys_setreuid+0x400/0x530
[  164.677451][ T9179]  __x64_sys_setreuid+0x2d/0x40
[  164.677491][ T9179]  x64_sys_call+0x2161/0x2550
[  164.677518][ T9179]  do_syscall_64+0x112/0x360
[  164.677627][ T9179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.677700][ T9179] RIP: 0033:0x7f440687e159
[  164.677762][ T9179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.677783][ T9179] RSP: 002b:00007f44052d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[  164.677804][ T9179] RAX: ffffffffffffffda RBX: 00007f4406b05fa0 RCX: 00007f440687e159
[  164.677819][ T9179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  164.677835][ T9179] RBP: 00007f440691506b R08: 0000000000000000 R09: 0000000000000000
[  164.677863][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.677883][ T9179] R13: 00007f4406b06038 R14: 00007f4406b05fa0 R15: 00007ffd19cc5238
[  164.677903][ T9179]  </TASK>
[  164.837073][ T9022] Bluetooth: hci0: command 0x1003 tx timeout
[  164.837165][ T3762] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  165.224781][ T9195] syz_tun: left allmulticast mode
[  165.585825][ T9220] usb usb8: usbfs: process 9220 (syz.2.2043) did not claim interface 0 before use
[  165.636793][   T29] audit: type=1400 audit(1790399037.253:1448): avc:  denied  { write } for  pid=9199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.775776][   T29] audit: type=1400 audit(1790399037.393:1449): avc:  denied  { write } for  pid=9226 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.317910][   T29] audit: type=1400 audit(1790399037.933:1450): avc:  denied  { write } for  pid=9229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.493838][   T29] audit: type=1400 audit(1790399038.113:1451): avc:  denied  { write } for  pid=9252 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.835384][   T29] audit: type=1400 audit(1790399038.453:1452): avc:  denied  { write } for  pid=9255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.910088][   T29] audit: type=1400 audit(1790399038.533:1453): avc:  denied  { write } for  pid=9267 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  167.317737][   T29] audit: type=1400 audit(1790399038.933:1454): avc:  denied  { write } for  pid=9270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  167.537465][   T29] audit: type=1400 audit(1790399039.153:1455): avc:  denied  { write } for  pid=9295 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  168.094265][   T29] audit: type=1400 audit(1790399039.713:1456): avc:  denied  { write } for  pid=9308 comm="syz.2.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  168.389477][ T9324] loop2: detected capacity change from 0 to 128
[  168.446358][   T29] audit: type=1326 audit(1790399040.063:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.2.2067" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b2c03e159 code=0x0
[  169.355807][   T29] audit: type=1400 audit(1790399040.973:1458): avc:  denied  { unmount } for  pid=6164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  169.563565][   T29] audit: type=1400 audit(1790399041.183:1459): avc:  denied  { create } for  pid=9343 comm="syz.0.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  169.609420][   T29] audit: type=1400 audit(1790399041.223:1460): avc:  denied  { listen } for  pid=9343 comm="syz.0.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  170.322228][ T9357] loop0: detected capacity change from 0 to 2048
[  170.381265][ T9357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.439215][ T9357] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  170.439306][ T9357] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  170.439328][ T9357] EXT4-fs (loop0): This should not happen!! Data will be lost
[  170.439328][ T9357] 
[  170.439341][ T9357] EXT4-fs (loop0): Total free blocks count 0
[  170.439393][ T9357] EXT4-fs (loop0): Free/Dirty block details
[  170.439410][ T9357] EXT4-fs (loop0): free_blocks=4096
[  170.439427][ T9357] EXT4-fs (loop0): dirty_blocks=48
[  170.439441][ T9357] EXT4-fs (loop0): Block reservation details
[  170.439456][ T9357] EXT4-fs (loop0): i_reserved_data_blocks=3
[  170.574693][ T6400] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  170.678858][ T9373] loop8: detected capacity change from 0 to 512
[  170.679740][ T9373] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  171.284541][ T6400] Bluetooth: hci0: Frame reassembly failed (-84)
[  171.597434][ T9420] loop0: detected capacity change from 0 to 256
[  172.197269][ T9449] loop6: detected capacity change from 0 to 2048
[  172.232548][ T9449]  loop6: p2 < > p3 < p5 > p4
[  172.232562][ T9449] loop6: partition table partially beyond EOD, truncated
[  172.232909][ T9449] loop6: p2 start 4278190080 is beyond EOD, truncated
[  172.234463][ T9449] loop6: p4 size 8192 extends beyond EOD, truncated
[  172.237096][ T9449] loop6: p5 size 8192 extends beyond EOD, truncated
[  172.335821][ T6400] bridge_slave_1: left allmulticast mode
[  172.335847][ T6400] bridge_slave_1: left promiscuous mode
[  172.336064][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.362841][ T6400] bridge_slave_0: left allmulticast mode
[  172.362977][ T6400] bridge_slave_0: left promiscuous mode
[  172.363168][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.461564][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.481751][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.487154][ T6400] bond0 (unregistering): Released all slaves
[  172.513117][ T6400] bond1 (unregistering): Released all slaves
[  172.547392][ T6400] tipc: Left network mode
[  172.571440][ T6400] hsr_slave_0: left promiscuous mode
[  172.574563][ T6400] hsr_slave_1: left promiscuous mode
[  172.576231][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.601358][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.694113][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  172.725886][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  172.743465][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  172.743479][   T29] audit: type=1400 audit(1790399044.363:1463): avc:  denied  { setopt } for  pid=9461 comm="syz.1.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  172.756195][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'.
[  173.308825][ T3762] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  173.335798][   T29] audit: type=1400 audit(1790399044.953:1464): avc:  denied  { write } for  pid=9471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  173.419650][   T29] audit: type=1400 audit(1790399045.033:1465): avc:  denied  { write } for  pid=9496 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  173.455674][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.455717][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.456094][ T9450] bridge_slave_0: entered allmulticast mode
[  173.462618][ T9450] bridge_slave_0: entered promiscuous mode
[  173.473726][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.473891][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.476634][ T9450] bridge_slave_1: entered allmulticast mode
[  173.487409][ T9450] bridge_slave_1: entered promiscuous mode
[  173.529585][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17
[  173.556079][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.572756][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.613121][ T9450] team0: Port device team_slave_0 added
[  173.625579][ T9450] team0: Port device team_slave_1 added
[  173.660867][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.660881][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.660943][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.662747][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.662764][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.662820][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.777389][ T9450] hsr_slave_0: entered promiscuous mode
[  173.785483][ T9450] hsr_slave_1: entered promiscuous mode
[  173.786440][ T9450] debugfs: 'hsr0' already exists in 'hsr'
[  173.786453][ T9450] Cannot create hsr debugfs directory
[  174.024184][   T29] audit: type=1400 audit(1790399045.643:1466): avc:  denied  { write } for  pid=9500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  174.106647][   T29] audit: type=1400 audit(1790399045.723:1467): avc:  denied  { remount } for  pid=9518 comm="syz.8.2130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  174.135161][ T9521] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[  174.194623][ T9507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  174.228292][   T29] audit: type=1400 audit(1790399045.843:1468): avc:  denied  { write } for  pid=9523 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  174.300481][ T9526] FAULT_INJECTION: forcing a failure.
[  174.300481][ T9526] name failslab, interval 1, probability 0, space 0, times 0
[  174.300514][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.8.2131 Not tainted syzkaller #0 PREEMPT(lazy) 
[  174.300565][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.300586][ T9526] Call Trace:
[  174.300598][ T9526]  <TASK>
[  174.300610][ T9526]  __dump_stack+0x1d/0x30
[  174.300638][ T9526]  dump_stack_lvl+0x95/0xd0
[  174.300703][ T9526]  dump_stack+0x15/0x1b
[  174.300737][ T9526]  should_fail_ex+0x262/0x280
[  174.300784][ T9526]  ? __send_signal_locked+0x1ca/0x7a0
[  174.300816][ T9526]  should_failslab+0x8c/0xb0
[  174.300855][ T9526]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  174.300928][ T9526]  ? __send_signal_locked+0x1ca/0x7a0
[  174.300994][ T9526]  __send_signal_locked+0x1ca/0x7a0
[  174.301032][ T9526]  send_signal_locked+0x3b0/0x430
[  174.301126][ T9526]  force_sig_info_to_task+0x1de/0x270
[  174.301168][ T9526]  force_sig_fault+0x91/0xc0
[  174.301279][ T9526]  exc_page_fault+0x62/0xa0
[  174.301379][ T9526]  asm_exc_page_fault+0x26/0x30
[  174.301408][ T9526] RIP: 0033:0x7f8e8c5072df
[  174.301431][ T9526] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 <c5> fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79
[  174.301457][ T9526] RSP: 002b:00007f8e8af76bd8 EFLAGS: 00010283
[  174.301484][ T9526] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000
[  174.301559][ T9526] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f8e8af76c00
[  174.301578][ T9526] RBP: 00007f8e8af76c00 R08: 0000000000000000 R09: 0000000000000000
[  174.301597][ T9526] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd
[  174.301618][ T9526] R13: 00007f8e8c7a6038 R14: 00007f8e8c7a5fa0 R15: 00007fff0fd279b8
[  174.301645][ T9526]  </TASK>
[  174.503068][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18
[  174.505470][ T9528] loop2: detected capacity change from 0 to 512
[  174.505999][ T9528] EXT4-fs: test_dummy_encryption option not supported
[  174.565511][ T9450] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  174.583727][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.645016][ T9450] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  174.683994][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.686082][ T9450] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  174.715181][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.735741][ T9450] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  174.763937][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  175.027450][   T29] audit: type=1400 audit(1790399046.643:1469): avc:  denied  { write } for  pid=9542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.058094][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.168120][ T9450] 8021q: adding VLAN 0 to HW filter on device team0
[  175.216682][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.216730][ T6406] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.254866][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.254921][ T6390] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.267399][   T29] audit: type=1400 audit(1790399046.883:1470): avc:  denied  { load_policy } for  pid=9558 comm="syz.6.2141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  175.309608][   T29] audit: type=1400 audit(1790399046.933:1471): avc:  denied  { write } for  pid=9562 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.359438][ T9563] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  175.359583][ T9563] SELinux: failed to load policy
[  175.453168][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19
[  175.808207][ T9585] ref_ctr_offset mismatch. inode: 0xcf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080
[  176.037887][   T29] audit: type=1400 audit(1790399047.653:1472): avc:  denied  { write } for  pid=9575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.143019][ T9611] loop1: detected capacity change from 0 to 1024
[  176.144067][ T9611] EXT4-fs: Ignoring removed bh option
[  176.147022][ T9611] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  176.174090][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2151'.
[  176.204696][ T9611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.261641][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.351232][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.444975][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20
[  176.645441][ T6400] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.076524][ T9450] veth0_vlan: entered promiscuous mode
[  177.094493][ T9450] veth1_vlan: entered promiscuous mode
[  177.116167][ T9664] loop1: detected capacity change from 0 to 512
[  177.121188][ T9664] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  177.184781][ T9450] veth0_macvtap: entered promiscuous mode
[  177.202548][ T9450] veth1_macvtap: entered promiscuous mode
[  177.225535][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.252718][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.359072][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.359917][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.360058][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.360177][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.476869][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2119'.
[  177.476895][ T9681] netlink: 316 bytes leftover after parsing attributes in process `syz.9.2119'.
[  177.476912][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2119'.
[  177.477052][ T9681] netlink: 316 bytes leftover after parsing attributes in process `syz.9.2119'.
[  177.576500][ T9685] loop2: detected capacity change from 0 to 512
[  177.645168][ T9685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.645294][ T9685] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.811826][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.276786][ T9707] loop2: detected capacity change from 0 to 1024
[  178.289759][ T9707] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  178.313277][ T9707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.383113][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.617865][ T9725] netlink: 'syz.1.2187': attribute type 1 has an invalid length.
[  178.668694][ T3762] Bluetooth: hci0: command 0x1003 tx timeout
[  178.668779][ T9022] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  178.815644][ T9731] loop1: detected capacity change from 0 to 512
[  178.820985][ T9731] EXT4-fs: Ignoring removed nobh option
[  178.826260][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  178.826316][   T29] audit: type=1400 audit(1790399050.443:1479): avc:  denied  { mounton } for  pid=9728 comm="syz.1.2189" path="/file0" dev="ramfs" ino=25305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  178.883142][ T9731] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.2189: corrupted inode contents
[  178.883172][ T9731] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  178.888373][ T9731] EXT4-fs (loop1): Remounting filesystem read-only
[  178.888518][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  178.888539][    C1] EXT4-fs (loop1): initial error at time 1790399050: ext4_do_update_inode:5801: inode 3
[  178.888588][    C1] EXT4-fs (loop1): last error at time 1790399050: ext4_do_update_inode:5801: inode 3
[  178.902607][ T9731] Quota error (device loop1): write_blk: dquota write failed
[  178.902826][ T9731] Quota error (device loop1): qtree_write_dquot: Error -30 occurred while creating quota
[  178.917865][ T9731] EXT4-fs (loop1): 1 truncate cleaned up
[  178.939050][ T9731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.939137][ T9731] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.967600][ T9731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.379454][ T9757] loop1: detected capacity change from 0 to 512
[  179.381676][ T9757] EXT4-fs: Ignoring removed nobh option
[  179.381744][ T9757] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.418967][ T9757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.423256][ T9757] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.456318][   T29] audit: type=1400 audit(1790399051.073:1480): avc:  denied  { write } for  pid=9754 comm="syz.1.2200" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  179.626427][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.868247][ T9774] loop2: detected capacity change from 0 to 512
[  179.871296][ T9774] EXT4-fs: Ignoring removed nobh option
[  179.942956][ T9774] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #3: comm syz.2.2209: corrupted inode contents
[  179.943003][ T9774] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  179.946605][ T9774] EXT4-fs (loop2): Remounting filesystem read-only
[  179.948564][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  179.948615][    C1] EXT4-fs (loop2): initial error at time 1790399051: ext4_do_update_inode:5801: inode 3
[  179.948673][    C1] EXT4-fs (loop2): last error at time 1790399051: ext4_do_update_inode:5801: inode 3
[  180.008178][ T9774] Quota error (device loop2): write_blk: dquota write failed
[  180.008344][ T9774] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota
[  180.035690][ T9774] EXT4-fs (loop2): 1 truncate cleaned up
[  180.036433][ T9774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.036583][ T9774] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.070570][ T9774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.090135][ T9777] pim6reg9: entered allmulticast mode
[  180.265036][   T12] bridge_slave_1: left allmulticast mode
[  180.265146][   T12] bridge_slave_1: left promiscuous mode
[  180.265355][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.268289][   T12] bridge_slave_0: left allmulticast mode
[  180.268309][   T12] bridge_slave_0: left promiscuous mode
[  180.272696][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.326630][ T6406] Bluetooth: hci0: Frame reassembly failed (-84)
[  180.407583][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.423771][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.427483][   T12] bond0 (unregistering): Released all slaves
[  180.517098][   T12] hsr_slave_0: left promiscuous mode
[  180.531291][   T12] hsr_slave_1: left promiscuous mode
[  180.532559][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.551228][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.753710][   T12] team0 (unregistering): Port device team_slave_1 removed
[  180.791688][   T12] team0 (unregistering): Port device team_slave_0 removed
[  180.936837][   T29] audit: type=1400 audit(1790399052.553:1481): avc:  denied  { write } for  pid=9796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.999388][   T29] audit: type=1400 audit(1790399052.623:1482): avc:  denied  { write } for  pid=9810 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.072811][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21
[  181.392109][   T12] IPVS: stop unused estimator thread 0...
[  181.613574][   T29] audit: type=1400 audit(1790399053.233:1483): avc:  denied  { write } for  pid=9817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.734450][   T29] audit: type=1400 audit(1790399053.353:1484): avc:  denied  { write } for  pid=9838 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  182.349193][ T3762] Bluetooth: hci0: command 0x1003 tx timeout
[  182.349236][ T9022] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  182.574643][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22
[  182.912935][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.912975][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.913494][ T9789] bridge_slave_0: entered allmulticast mode
[  182.915854][ T9789] bridge_slave_0: entered promiscuous mode
[  182.949752][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.949861][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.950328][ T9789] bridge_slave_1: entered allmulticast mode
[  182.953591][ T9789] bridge_slave_1: entered promiscuous mode
[  183.038681][ T9789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.044043][ T9789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.102412][ T9789] team0: Port device team_slave_0 added
[  183.117177][ T9789] team0: Port device team_slave_1 added
[  183.157727][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.157746][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.157803][ T9789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.227687][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.227705][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.227737][ T9789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.305536][ T9789] hsr_slave_0: entered promiscuous mode
[  183.307480][ T9789] hsr_slave_1: entered promiscuous mode
[  183.321076][ T9789] debugfs: 'hsr0' already exists in 'hsr'
[  183.321090][ T9789] Cannot create hsr debugfs directory
[  183.421304][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23
[  183.557295][ T9881] loop2: detected capacity change from 0 to 256
[  184.025917][ T9912] netlink: 'syz.8.2236': attribute type 25 has an invalid length.
[  184.025983][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2236'.
[  184.077916][ T9912] netlink: 'syz.8.2236': attribute type 25 has an invalid length.
[  184.077940][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2236'.
[  184.099410][ T6406] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.101311][   T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.101383][   T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.101587][   T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.107044][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  184.107058][   T29] audit: type=1400 audit(1790399055.723:1487): avc:  denied  { write } for  pid=9888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.126943][   T29] audit: type=1400 audit(1790399055.733:1488): avc:  denied  { write } for  pid=9916 comm="syz.9.2238" name="instances" dev="tracefs" ino=2400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  184.185396][ T9920] binfmt_misc: register: failed to install interpreter ./tracefs/instances/foo
[  184.267043][   T29] audit: type=1400 audit(1790399055.883:1489): avc:  denied  { write } for  pid=9922 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.300148][ T9789] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  184.323252][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  184.325600][ T9789] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  184.344761][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  184.347343][ T9926] loop8: detected capacity change from 0 to 256
[  184.364055][ T9923] loop1: detected capacity change from 0 to 512
[  184.364670][ T9923] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  184.366177][ T9789] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  184.400111][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  184.414667][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24
[  184.481758][ T9789] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  184.503508][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  184.569583][ T9938] loop9: detected capacity change from 0 to 256
[  184.572601][ T9938] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.607173][ T9938] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.713305][   T29] audit: type=1400 audit(1790399056.333:1490): avc:  denied  { watch watch_reads } for  pid=9940 comm="syz.8.2242" path="/55/file1" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  184.751530][ T9789] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.784163][ T9789] 8021q: adding VLAN 0 to HW filter on device team0
[  184.804287][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.804397][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.845503][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.845617][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.883017][ T9953] loop8: detected capacity change from 0 to 1024
[  184.885555][ T9953] EXT4-fs: Ignoring removed bh option
[  184.917293][ T9953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.917424][ T9953] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.927607][   T29] audit: type=1400 audit(1790399056.543:1491): avc:  denied  { write } for  pid=9952 comm="syz.8.2245" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  185.087385][ T9953] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.2245: lblock 0 mapped to illegal pblock 0 (length 6)
[  185.091454][ T9953] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  185.091623][ T9953] EXT4-fs (loop8): This should not happen!! Data will be lost
[  185.091623][ T9953] 
[  185.127689][ T9959] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.2245: lblock 0 mapped to illegal pblock 0 (length 4)
[  185.146542][ T9959] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.2245: lblock 0 mapped to illegal pblock 0 (length 4)
[  185.150945][ T9959] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.2245: lblock 0 mapped to illegal pblock 0 (length 4)
[  185.156356][ T9959] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.2245: lblock 0 mapped to illegal pblock 0 (length 4)
[  185.256409][ T9953] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.2245: lblock 0 mapped to illegal pblock 0 (length 1)
[  185.261763][ T9953] EXT4-fs error (device loop8) in ext4_setattr:6247: Corrupt filesystem
[  185.315038][   T29] audit: type=1400 audit(1790399056.933:1492): avc:  denied  { write } for  pid=9941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.433715][   T29] audit: type=1400 audit(1790399057.053:1493): avc:  denied  { write } for  pid=9970 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.667766][ T9980] xt_hashlimit: size too large, truncated to 1048576
[  185.770087][   T29] audit: type=1400 audit(1790399057.393:1494): avc:  denied  { write } for  pid=9974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.913711][   T29] audit: type=1400 audit(1790399057.533:1495): avc:  denied  { write } for  pid=9991 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.918192][ T8573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  186.026657][ T9998] loop8: detected capacity change from 0 to 1024
[  186.060499][ T9998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.133780][ T9789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.148681][   T29] audit: type=1400 audit(1790399057.763:1496): avc:  denied  { write } for  pid=9997 comm="syz.8.2248" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  186.363932][ T8573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.509109][T10018] bond0: (slave syz_tun): Releasing backup interface
[  186.538186][T10018] bridge_slave_0: left allmulticast mode
[  186.538221][T10018] bridge_slave_0: left promiscuous mode
[  186.538641][T10018] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.574971][T10018] bridge_slave_1: left allmulticast mode
[  186.575001][T10018] bridge_slave_1: left promiscuous mode
[  186.575250][T10018] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.624784][T10018] bond0: (slave bond_slave_0): Releasing backup interface
[  186.652712][T10018] bond0: (slave bond_slave_1): Releasing backup interface
[  186.694629][T10018] team0: Port device team_slave_0 removed
[  186.726461][T10018] team0: Port device team_slave_1 removed
[  186.744799][T10018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.757573][T10018] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.771708][T10018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  187.050028][ T9789] veth0_vlan: entered promiscuous mode
[  187.072320][ T9789] veth1_vlan: entered promiscuous mode
[  187.133651][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  187.167794][ T9789] veth0_macvtap: entered promiscuous mode
[  187.191289][ T9789] veth1_macvtap: entered promiscuous mode
[  187.242299][ T9789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.272152][ T9789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.319831][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.319942][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.320051][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.320087][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.727030][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2264'.
[  187.886361][T10100] loop2: detected capacity change from 0 to 512
[  188.110748][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2269'.
[  188.114503][T10099] loop4: detected capacity change from 0 to 8192
[  188.263344][T10120] loop9: detected capacity change from 0 to 512
[  188.264522][T10120] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  188.275532][T10120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  188.275659][T10120] System zones: 1-12
[  188.295755][T10120] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.2271: bad orphan inode 131072
[  188.295843][T10120] loop9: lost filesystem error report for type 5 error -117
[  188.318797][T10120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.455804][ T9450] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.127199][T10173] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2277'.
[  189.128536][T10173] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2277'.
[  189.162941][ T3762] Bluetooth: hci0: command 0x1003 tx timeout
[  189.163023][ T9022] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  189.199092][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  189.199111][   T29] audit: type=1400 audit(1790399060.813:1508): avc:  denied  { write } for  pid=10174 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.335027][   T29] audit: type=1400 audit(1790399060.953:1509): avc:  denied  { read write } for  pid=10177 comm="syz.9.2278" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  189.335094][   T29] audit: type=1400 audit(1790399060.953:1510): avc:  denied  { open } for  pid=10177 comm="syz.9.2278" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  189.485437][T10022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.590116][   T29] audit: type=1400 audit(1790399061.213:1511): avc:  denied  { write } for  pid=10180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.685981][   T29] audit: type=1326 audit(1790399061.303:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.4.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f13cae159 code=0x0
[  189.775639][   T29] audit: type=1400 audit(1790399061.393:1513): avc:  denied  { write } for  pid=10204 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.899258][T10208] loop1: detected capacity change from 0 to 1024
[  189.911731][T10208] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.954233][T10208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  189.954418][T10208] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.997268][   T29] audit: type=1400 audit(1790399061.613:1514): avc:  denied  { write } for  pid=10207 comm="syz.1.2284" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.062000][T10208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2284: bg 0: block 112: padding at end of block bitmap is not set
[  190.069164][T10208] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  190.069202][T10208] EXT4-fs (loop1): This should not happen!! Data will be lost
[  190.069202][T10208] 
[  190.069308][T10208] EXT4-fs (loop1): Total free blocks count 0
[  190.069433][T10208] EXT4-fs (loop1): Free/Dirty block details
[  190.069472][T10208] EXT4-fs (loop1): free_blocks=0
[  190.069517][T10208] EXT4-fs (loop1): dirty_blocks=64
[  190.069561][T10208] EXT4-fs (loop1): Block reservation details
[  190.069598][T10208] EXT4-fs (loop1): i_reserved_data_blocks=4
[  190.204930][ T6406] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28
[  190.352568][T10218] loop1: detected capacity change from 0 to 512
[  190.380496][T10218] FAT-fs (loop1): invalid media value (0x03)
[  190.380516][T10218] FAT-fs (loop1): Can't find a valid FAT filesystem
[  190.425300][T10220] loop8: detected capacity change from 0 to 164
[  190.714211][   T29] audit: type=1400 audit(1790399062.333:1515): avc:  denied  { name_bind } for  pid=10228 comm="syz.4.2287" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  190.811322][   T29] audit: type=1400 audit(1790399062.433:1516): avc:  denied  { write } for  pid=10213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.958673][   T29] audit: type=1400 audit(1790399062.573:1517): avc:  denied  { write } for  pid=10238 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.758039][T10284] loop1: detected capacity change from 0 to 512
[  191.773543][T10284] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  191.773624][T10284] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  191.773684][T10284] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2306: Corrupt directory, running e2fsck is recommended
[  191.795967][T10284] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  191.796851][T10284] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2306: corrupted in-inode xattr: e_name out of bounds
[  191.796924][T10284] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  191.798173][T10284] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2306: couldn't read orphan inode 15 (err -117)
[  191.798246][T10284] loop1: lost filesystem error report for type 5 error -117
[  191.798508][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  191.798554][    C0] EXT4-fs (loop1): initial error at time 1790399063: ext4_iget_extra_inode:5210: inode 15
[  191.798660][    C0] EXT4-fs (loop1): last error at time 1790399063: ext4_iget_extra_inode:5210: inode 15
[  191.817013][T10284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.869189][T10284] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  191.869272][T10284] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  191.869313][T10284] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2306: Corrupt directory, running e2fsck is recommended
[  191.994451][T10290] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  191.994560][T10290] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  191.994579][T10290] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2306: Corrupt directory, running e2fsck is recommended
[  192.076505][T10284] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  192.076536][T10284] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  192.076556][T10284] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2306: Corrupt directory, running e2fsck is recommended
[  192.149421][T10290] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  192.202477][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.927639][T10337] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  193.337173][T10369] loop1: detected capacity change from 0 to 512
[  193.444432][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'.
[  193.445479][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.445504][T10369] FAT-fs (loop1): Filesystem has been set read-only
[  193.445732][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.446364][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.446749][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.499847][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.501859][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.502742][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.502949][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.503521][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.503796][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.504182][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.504509][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.505040][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.505353][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.505884][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.506150][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.506277][T10369] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  193.506592][T10369] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  193.988151][T10386] bridge_slave_0: left allmulticast mode
[  193.988173][T10386] bridge_slave_0: left promiscuous mode
[  193.992884][T10386] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.022104][T10386] bridge_slave_1: left allmulticast mode
[  194.022124][T10386] bridge_slave_1: left promiscuous mode
[  194.022280][T10386] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.104907][T10386] bond0: (slave bond_slave_0): Releasing backup interface
[  195.006500][T10386] bond0: (slave bond_slave_1): Releasing backup interface
[  195.105055][T10386] team0: Port device team_slave_0 removed
[  195.120200][T10386] team0: Port device team_slave_1 removed
[  195.122084][T10386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.122103][T10386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.125064][T10386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.125149][T10386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.168287][T10386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  195.531114][T10423] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.531270][T10423] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.594981][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  195.595000][   T29] audit: type=1400 audit(1790399067.213:1529): avc:  denied  { read } for  pid=10429 comm="syz.2.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  195.637239][   T29] audit: type=1400 audit(1790399067.253:1530): avc:  denied  { write } for  pid=10411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.725401][   T29] audit: type=1400 audit(1790399067.343:1531): avc:  denied  { write } for  pid=10446 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.217791][T10465] loop8: detected capacity change from 0 to 2048
[  196.251113][T10465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.279046][   T29] audit: type=1400 audit(1790399067.903:1532): avc:  denied  { write } for  pid=10456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.336390][   T29] audit: type=1400 audit(1790399067.953:1533): avc:  denied  { write } for  pid=10462 comm="syz.8.2356" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  196.416236][T10465] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  196.416322][T10465] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 18 with error 28
[  196.416579][T10465] EXT4-fs (loop8): This should not happen!! Data will be lost
[  196.416579][T10465] 
[  196.416599][T10465] EXT4-fs (loop8): Total free blocks count 0
[  196.416617][T10465] EXT4-fs (loop8): Free/Dirty block details
[  196.416663][T10465] EXT4-fs (loop8): free_blocks=4096
[  196.416677][T10465] EXT4-fs (loop8): dirty_blocks=64
[  196.416690][T10465] EXT4-fs (loop8): Block reservation details
[  196.416701][T10465] EXT4-fs (loop8): i_reserved_data_blocks=4
[  196.504007][T10462] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  196.619181][   T29] audit: type=1400 audit(1790399068.243:1534): avc:  denied  { write } for  pid=10480 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.765255][T10483] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2362'.
[  196.951328][T10486] loop8: detected capacity change from 0 to 2048
[  196.973346][T10486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.973488][T10486] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.031042][   T29] audit: type=1400 audit(1790399068.653:1535): avc:  denied  { write } for  pid=10485 comm="syz.8.2361" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  197.192823][   T29] audit: type=1400 audit(1790399068.813:1536): avc:  denied  { write } for  pid=10484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.262688][   T29] audit: type=1400 audit(1790399068.883:1537): avc:  denied  { write } for  pid=10504 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.346537][T10511] FAULT_INJECTION: forcing a failure.
[  197.346537][T10511] name failslab, interval 1, probability 0, space 0, times 0
[  197.346565][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.4.2367 Not tainted syzkaller #0 PREEMPT(lazy) 
[  197.346626][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  197.346644][T10511] Call Trace:
[  197.346655][T10511]  <TASK>
[  197.346669][T10511]  __dump_stack+0x1d/0x30
[  197.346730][T10511]  dump_stack_lvl+0x95/0xd0
[  197.346758][T10511]  dump_stack+0x15/0x1b
[  197.346826][T10511]  should_fail_ex+0x262/0x280
[  197.346859][T10511]  ? swevent_hlist_get+0xfd/0x2e0
[  197.346886][T10511]  should_failslab+0x8c/0xb0
[  197.346919][T10511]  __kmalloc_cache_noprof+0x7a/0x400
[  197.347002][T10511]  ? swevent_hlist_get+0xfd/0x2e0
[  197.347048][T10511]  swevent_hlist_get+0xfd/0x2e0
[  197.347076][T10511]  perf_swevent_init+0x133/0x180
[  197.347122][T10511]  perf_try_init_event+0x254/0x6e0
[  197.347229][T10511]  perf_event_alloc+0xb13/0x19e0
[  197.347274][T10511]  __se_sys_perf_event_open+0x674/0x1280
[  197.347415][T10511]  ? trace_buffer_unlock_commit_regs+0x115/0x310
[  197.347467][T10511]  __x64_sys_perf_event_open+0x67/0x80
[  197.347509][T10511]  x64_sys_call+0x1f25/0x2550
[  197.347536][T10511]  do_syscall_64+0x112/0x360
[  197.347623][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.347682][T10511] RIP: 0033:0x7f2f13cae159
[  197.347705][T10511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.347731][T10511] RSP: 002b:00007f2f12707028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  197.347758][T10511] RAX: ffffffffffffffda RBX: 00007f2f13f35fa0 RCX: 00007f2f13cae159
[  197.347773][T10511] RDX: ffffefffffffffff RSI: 0000000000000000 RDI: 0000200000000480
[  197.347887][T10511] RBP: 00007f2f13d4506b R08: 0000000000000000 R09: 0000000000000000
[  197.347913][T10511] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  197.347932][T10511] R13: 00007f2f13f36038 R14: 00007f2f13f35fa0 R15: 00007ffee56f7c28
[  197.347975][T10511]  </TASK>
[  197.664776][ T8573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.782055][T10515] pim6reg1: entered promiscuous mode
[  197.782077][T10515] pim6reg1: entered allmulticast mode
[  197.887519][T10520] loop2: detected capacity change from 0 to 512
[  197.942477][T10520] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  198.025806][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.025880][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.026009][T10525] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  198.026082][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.026120][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.026166][T10525] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  198.026261][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.026311][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.026353][T10525] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  198.026535][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.026563][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.026616][T10525] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  198.026648][T10525] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  198.028302][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.192539][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.192800][T10525] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  198.193035][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.193117][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.193250][T10525] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  198.193398][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.193589][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.193728][T10525] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  198.215757][T10525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.2368: No space for directory leaf checksum. Please run e2fsck -D.
[  198.215857][T10525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.2368: checksumming directory block 0
[  198.216053][T10525] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  198.216119][T10525] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  198.501865][T10442] ==================================================================
[  198.501907][T10442] BUG: KCSAN: data-race in rb_get_reader_page / ring_buffer_unlock_commit
[  198.501978][T10442] 
[  198.501987][T10442] write to 0xffff888100078868 of 8 bytes by task 10530 on cpu 0:
[  198.502010][T10442]  rb_get_reader_page+0x8a3/0xdf0
[  198.502052][T10442]  rb_buffer_peek+0x44/0x870
[  198.502100][T10442]  ring_buffer_peek+0xb2/0x210
[  198.502127][T10442]  __find_next_entry+0x229/0x420
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  198.502153][T10442]  tracing_read_pipe+0x2f7/0x790
[  198.502179][T10442]  vfs_read+0x18e/0x7c0
[  198.502212][T10442]  ksys_read+0xdc/0x1a0
[  198.502241][T10442]  __x64_sys_read+0x40/0x50
[  198.502274][T10442]  x64_sys_call+0x2135/0x2550
[  198.502306][T10442]  do_syscall_64+0x112/0x360
[  198.502329][T10442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.502353][T10442] 
[  198.502360][T10442] read to 0xffff888100078868 of 8 bytes by task 10442 on cpu 1:
[  198.502375][T10442]  ring_buffer_unlock_commit+0x17b/0x450
[  198.502406][T10442]  trace_buffer_unlock_commit_regs+0x43/0x310
[  198.502442][T10442]  trace_event_buffer_commit+0x149/0x590
[  198.502474][T10442]  trace_event_raw_event_kfree+0x94/0xf0
[  198.502496][T10442]  kfree+0x351/0x3b0
[  198.502525][T10442]  ___sys_recvmsg+0x135/0x3a0
[  198.502551][T10442]  do_recvmmsg+0x1e5/0x560
[  198.502575][T10442]  __x64_sys_recvmmsg+0xe5/0x170
[  198.502599][T10442]  x64_sys_call+0x77f/0x2550
[  198.502630][T10442]  do_syscall_64+0x112/0x360
[  198.502653][T10442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.502681][T10442] 
[  198.502687][T10442] value changed: 0xffff88810019b140 -> 0xffff88811b615c80
[  198.502700][T10442] 
[  198.502705][T10442] Reported by Kernel Concurrency Sanitizer on:
[  198.502716][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.1.2351 Not tainted syzkaller #0 PREEMPT(lazy) 
[  198.502744][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  198.502756][T10442] ==================================================================
[  198.568085][   T29] audit: type=1400 audit(1790399070.183:1538): avc:  denied  { write } for  pid=3285 comm="syz-executor" path="pipe:[2679]" dev="pipefs" ino=2679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  198.755303][T10520] loop2: detected capacity change from 0 to 4096
[  198.823549][T10520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.042595][T10520] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.194107][ T6398] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.275237][T10520] syz_tun (unregistering): left allmulticast mode
[  199.275259][T10520] syz_tun (unregistering): left promiscuous mode
[  199.275303][T10520] bridge0: port 3(syz_tun) entered disabled state
[  199.314029][ T6398] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.391342][ T6398] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.451446][ T6398] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.756153][ T6398] bridge_slave_1: left allmulticast mode
[  199.756224][ T6398] bridge_slave_1: left promiscuous mode
[  199.756380][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.759040][ T6398] bridge_slave_0: left allmulticast mode
[  199.759132][ T6398] bridge_slave_0: left promiscuous mode
[  199.759516][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.980553][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.011975][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.016338][ T6398] bond0 (unregistering): Released all slaves
[  200.081704][ T6398] hsr_slave_0: left promiscuous mode
[  200.084598][ T6398] hsr_slave_1: left promiscuous mode
[  200.085807][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.085821][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.088852][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.089383][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.142347][ T6398] veth1_macvtap: left promiscuous mode
[  200.142438][ T6398] veth0_macvtap: left promiscuous mode
[  200.142476][ T6398] veth1_vlan: left promiscuous mode
[  200.142518][ T6398] veth0_vlan: left promiscuous mode
[  200.483453][ T6398] team0 (unregistering): Port device team_slave_1 removed
[  200.510970][ T6398] team0 (unregistering): Port device team_slave_0 removed
[  200.616988][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1
[  200.872902][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  200.872923][   T29] audit: type=1400 audit(1790399072.493:1543): avc:  denied  { write } for  pid=10547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.937226][   T29] audit: type=1400 audit(1790399072.553:1544): avc:  denied  { write } for  pid=10558 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.995145][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2
[  201.067389][ T6398] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.069124][ T6398] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.136821][ T6398] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.136852][ T6398] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.217461][ T6398] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.217521][ T6398] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.246634][   T29] audit: type=1400 audit(1790399072.863:1545): avc:  denied  { write } for  pid=10561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.295823][ T6398] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.295937][ T6398] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.322209][   T29] audit: type=1400 audit(1790399072.943:1546): avc:  denied  { write } for  pid=10572 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.431638][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3
[  201.603343][   T29] audit: type=1400 audit(1790399073.223:1547): avc:  denied  { write } for  pid=10575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.698656][   T29] audit: type=1400 audit(1790399073.313:1548): avc:  denied  { write } for  pid=10586 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.736463][ T6398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.794335][ T6398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.826839][ T6398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.865302][ T6398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.975621][ T6398] pim6reg9: left allmulticast mode
[  201.977473][ T6398] bridge_slave_1: left allmulticast mode
[  201.977490][ T6398] bridge_slave_1: left promiscuous mode
[  201.977660][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.984413][ T6398] bridge_slave_0: left allmulticast mode
[  201.984515][ T6398] bridge_slave_0: left promiscuous mode
[  201.984786][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.022715][ T6398] bridge_slave_1: left allmulticast mode
[  202.022736][ T6398] bridge_slave_1: left promiscuous mode
[  202.022886][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.024730][ T6398] bridge_slave_0: left allmulticast mode
[  202.024755][ T6398] bridge_slave_0: left promiscuous mode
[  202.024925][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.136157][   T29] audit: type=1400 audit(1790399073.753:1549): avc:  denied  { write } for  pid=10592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.194632][   T29] audit: type=1400 audit(1790399073.813:1550): avc:  denied  { write } for  pid=10603 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.314345][ T6398] bond0 (unregistering): Released all slaves
[  202.363901][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.367581][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.385875][ T6398] bond0 (unregistering): Released all slaves
[  202.389001][ T6398] bond1 (unregistering): Released all slaves
[  202.444039][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.462873][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.466707][ T6398] bond0 (unregistering): Released all slaves
[  202.475104][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4
[  202.548195][ T6398] tipc: Disabling bearer <udp:syz0>
[  202.548309][ T6398] tipc: Left network mode
[  202.565586][ T6398] IPVS: stopping master sync thread 6505 ...
[  202.584578][ T6398] hsr_slave_0: left promiscuous mode
[  202.585576][ T6398] hsr_slave_1: left promiscuous mode
[  202.600192][ T6398] hsr_slave_0: left promiscuous mode
[  202.601364][ T6398] hsr_slave_1: left promiscuous mode
[  202.602938][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.604061][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.629221][ T6398] hsr_slave_0: left promiscuous mode
[  202.641208][ T6398] hsr_slave_1: left promiscuous mode
[  202.642356][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.642370][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.643672][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.643690][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.708223][ T6398] veth1_macvtap: left promiscuous mode
[  202.708252][ T6398] veth0_macvtap: left promiscuous mode
[  202.708334][ T6398] veth1_vlan: left promiscuous mode
[  202.712816][ T6398] veth0_vlan: left promiscuous mode
[  202.730355][ T6398] veth1_macvtap: left promiscuous mode
[  202.730378][ T6398] veth0_macvtap: left promiscuous mode
[  202.730422][ T6398] veth1_vlan: left promiscuous mode
[  202.730461][ T6398] veth0_vlan: left promiscuous mode
[  203.062253][ T6398] team0 (unregistering): Port device team_slave_1 removed
[  203.085299][ T6398] team0 (unregistering): Port device team_slave_0 removed
[  203.216042][ T6398] team0 (unregistering): Port device team_slave_1 removed
[  203.235514][ T6398] team0 (unregistering): Port device team_slave_0 removed
[  203.503140][   T29] audit: type=1400 audit(1790399075.123:1551): avc:  denied  { write } for  pid=10608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  203.563650][   T29] audit: type=1400 audit(1790399075.183:1552): avc:  denied  { write } for  pid=10619 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  203.625440][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25
[  204.120570][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26
[  204.373893][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27
[  204.419348][ T6398] bond0 (unregistering): Released all slaves
[  204.423225][ T6398] bond1 (unregistering): Released all slaves
[  204.462786][ T6398] hsr_slave_0: left promiscuous mode
[  204.463963][ T6398] hsr_slave_1: left promiscuous mode
[  204.686522][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28
[  204.895165][ T6398] IPVS: stop unused estimator thread 0...
[  204.895335][ T3020] 8021q: adding VLAN 0 to HW filter on device eth29
[  205.109197][ T3020] 8021q: adding VLAN 0 to HW filter on device eth30
[  205.322355][ T3020] 8021q: adding VLAN 0 to HW filter on device eth31
[  205.536682][ T3020] 8021q: adding VLAN 0 to HW filter on device eth32
[  205.757682][ T3020] 8021q: adding VLAN 0 to HW filter on device eth33
[  205.902287][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  205.902309][   T29] audit: type=1400 audit(1790399077.523:1571): avc:  denied  { write } for  pid=10761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.958019][   T29] audit: type=1400 audit(1790399077.573:1572): avc:  denied  { write } for  pid=10772 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.005050][ T3020] 8021q: adding VLAN 0 to HW filter on device eth34
[  206.149433][   T29] audit: type=1400 audit(1790399077.773:1573): avc:  denied  { write } for  pid=10775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.196978][   T29] audit: type=1400 audit(1790399077.813:1574): avc:  denied  { write } for  pid=10786 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.242766][ T3020] 8021q: adding VLAN 0 to HW filter on device eth35
[  206.383743][   T29] audit: type=1400 audit(1790399078.003:1575): avc:  denied  { write } for  pid=10789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.437269][   T29] audit: type=1400 audit(1790399078.053:1576): avc:  denied  { write } for  pid=10800 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.481964][ T3020] 8021q: adding VLAN 0 to HW filter on device eth36
[  206.621999][   T29] audit: type=1400 audit(1790399078.243:1577): avc:  denied  { write } for  pid=10803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.668286][   T29] audit: type=1400 audit(1790399078.283:1578): avc:  denied  { write } for  pid=10814 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.711683][ T3020] 8021q: adding VLAN 0 to HW filter on device eth37
[  206.748675][ T7403] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 60 sec
[  206.862127][   T29] audit: type=1400 audit(1790399078.483:1579): avc:  denied  { write } for  pid=10817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.910226][   T29] audit: type=1400 audit(1790399078.533:1580): avc:  denied  { write } for  pid=10828 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.951875][ T3020] 8021q: adding VLAN 0 to HW filter on device eth38
[  207.157952][ T3020] 8021q: adding VLAN 0 to HW filter on device eth39
[  207.360749][ T3020] 8021q: adding VLAN 0 to HW filter on device eth40