last executing test programs:

3m20.51499524s ago: executing program 32 (id=53):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

3m6.991860261s ago: executing program 33 (id=282):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffdff, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000100106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58)

3m6.251480776s ago: executing program 34 (id=299):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x9, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, 0x0)
r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt(r1, 0x2, 0x4, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000030"], 0x20)

3m5.620588515s ago: executing program 35 (id=310):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0)

2m57.024757656s ago: executing program 36 (id=502):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000a017e2c05ffff00acbbbbbbbbbb88a84000810030006558"], 0x84)

2m17.53707793s ago: executing program 37 (id=1001):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x7f, [0x92e, 0x746ffec1], 0x8000}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

2m11.056646522s ago: executing program 38 (id=1111):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x88b}, 0x10ecc8, 0x1224, 0x0, 0x4, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x7, 0x80, 0x0, 0x0, @tick, {}, {0xfd}, @result={0x8, 0x401}}, {0x0, 0x0, 0x3, 0x0, @time={0x0, 0xb3c2}, {}, {}, @result={0x400000, 0x407}}], 0x38)
prlimit64(0x0, 0xe, 0x0, 0x0)

2m4.682287019s ago: executing program 39 (id=1167):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x3}, 0x1c)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

1m55.753919027s ago: executing program 40 (id=1302):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r3, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m49.871744441s ago: executing program 41 (id=1387):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="39000000130003470010041442aeffff0100000001000000400000002500f4d7bd8404000400000007fd17e5ffff080d7f2840df87dd22b6ef", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

1m46.528784417s ago: executing program 4 (id=1423):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x44f1301bddefb818, 0xf, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fb00)

1m45.489845655s ago: executing program 4 (id=1433):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1})
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
shutdown(r0, 0x0)

1m45.243382587s ago: executing program 4 (id=1437):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82)
ftruncate(r0, 0x2007ffa)
sendfile(r0, r0, 0x0, 0x80000001)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80)
truncate(&(0x7f00000000c0)='./file2\x00', 0x8)

1m44.690161893s ago: executing program 4 (id=1441):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
fsetxattr$security_ima(r0, &(0x7f00000000c0), 0x0, 0x0, 0x2)

1m44.359126488s ago: executing program 4 (id=1445):
r0 = syz_io_uring_setup(0x3e3, &(0x7f0000000080)={0x0, 0xe138, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
io_uring_enter(r0, 0x35b3, 0x22c8, 0x46, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x24b7, 0xcb15, 0x21, 0x0, 0x0)
io_uring_enter(r0, 0x1, 0xfffffffd, 0x1, 0x0, 0x0)

1m43.939512798s ago: executing program 4 (id=1447):
poll(&(0x7f0000000300), 0x0, 0x101)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)

1m43.939415198s ago: executing program 42 (id=1447):
poll(&(0x7f0000000300), 0x0, 0x101)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)

1m31.291884848s ago: executing program 6 (id=1581):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000440)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x74, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x2, 0x3, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044)

1m31.163307224s ago: executing program 6 (id=1588):
pipe2(&(0x7f0000000040), 0x0)
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)=ANY=[@ANYBLOB="201000001300210800000000fedbdf2508000000", @ANYRES32=r0, @ANYBLOB="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"], 0x1020}], 0x1, 0x0, 0x0, 0x20004814}, 0x0)

1m31.015101351s ago: executing program 6 (id=1591):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
lsm_list_modules(0x0, &(0x7f0000000680), 0x0)

1m30.796873292s ago: executing program 6 (id=1594):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
fsetxattr$security_ima(r0, &(0x7f00000000c0), 0x0, 0x0, 0x2)

1m30.575498162s ago: executing program 6 (id=1597):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev}, 'veth1_to_bridge\x00'})
r1 = socket$inet(0x2, 0x1, 0x6)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)

1m30.244759387s ago: executing program 6 (id=1599):
r0 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r2, 0x0, 0x0)

1m30.161997691s ago: executing program 43 (id=1599):
r0 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r2, 0x0, 0x0)

53.099183571s ago: executing program 0 (id=2271):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = gettid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee01)
msgctl$IPC_RMID(0x0, 0x0)
ioprio_set$pid(0x1, r0, 0x0)

53.078241732s ago: executing program 0 (id=2274):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000000)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

52.171227264s ago: executing program 0 (id=2300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x4a, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="bf", 0xfd62, 0x0, 0x0, 0x2}])

52.170978604s ago: executing program 8 (id=2302):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8)

52.115571447s ago: executing program 8 (id=2304):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004000)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

51.968045014s ago: executing program 8 (id=2308):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$addseals(r0, 0x409, 0x3)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
capset(&(0x7f00000004c0)={0x19980330}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

51.886005068s ago: executing program 8 (id=2311):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x1, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x8]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)

51.856080959s ago: executing program 0 (id=2313):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

51.678069337s ago: executing program 0 (id=2315):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000000c80)="$eJzs3TFrE2EYB/DHNm1DQewsDgcuTkGdXINUEANC5AadPKgurQjX5XS6j+Fn8CP5MTp1O7EXmrZGoTTXN738fhDugT+B/7vkEnjf3MdHXw4Pvh5/bn79iOEwi0FE3TQRe7ERm9G6N7tunM3bcVEdAMBdM50W49Qd6FZZjoutiNj5K8l/JikEAAAAAAAAAADAjS3a/x+n9v8DQJ/dZP//YLlV6EhZjovd2fe3y+z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANI5bZoHzX9eqfsBAMt33fv//TQ1AYAl8vsfANaP+z8ArJ937z+8GU8m+9MsG0ac1FVe5e21zV+9nuw/zc7szd91UlX55nn+rM2zy/lW7M7y5wvz7XjyuM3/ZC/fTq7kO3HQ/fIBAAAAAAAAAAAAAAAAAABgJYyycwvP949G/8rb6cL/A1w5vz+Ih4NbWwYAAAAAAAAAAAAAAAAAAADcacffvh8WR0efSkNvhnixEjVue4hYiRp9GVJ/MgEAAAAAAAAAAAAAAAAAwPqZH/pN3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0pk//7+7ISLqppV6uQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/Q4AAP//Fcea3w==")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)

51.63347436s ago: executing program 8 (id=2318):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0)

51.41140232s ago: executing program 0 (id=2320):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100005ff000000002d00000001"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
r0 = io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="760accff02"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x24}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

51.4112262s ago: executing program 44 (id=2320):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100005ff000000002d00000001"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
r0 = io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="760accff02"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x24}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

51.396378531s ago: executing program 8 (id=2324):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000140)="1100f8ae33df8736", 0x8}], 0x2)

51.379862661s ago: executing program 45 (id=2324):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000140)="1100f8ae33df8736", 0x8}], 0x2)

15.757810764s ago: executing program 7 (id=2998):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r3, 0x101}, 0x8)

15.733010225s ago: executing program 7 (id=2999):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1)

15.714789906s ago: executing program 7 (id=3001):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r1 = dup(r0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71)
ftruncate(r2, 0x200002)
sendfile(r1, r2, 0x0, 0x80001d00c0d1)

15.671742208s ago: executing program 7 (id=3003):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

15.655955559s ago: executing program 7 (id=3004):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x3130000, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)=""/17, &(0x7f00000003c0)=0x11)

15.429260479s ago: executing program 7 (id=3011):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x42)

15.429060379s ago: executing program 46 (id=3011):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000100)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x42)

3.294646646s ago: executing program 9 (id=3231):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

3.21331169s ago: executing program 9 (id=3235):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x180940, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
write(r1, &(0x7f0000000280)='{*', 0x2)

3.160906102s ago: executing program 9 (id=3239):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50)

3.077569796s ago: executing program 9 (id=3243):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
unshare(0x100000)

2.603738668s ago: executing program 9 (id=3247):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

2.587695299s ago: executing program 9 (id=3250):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000180)=ANY=[], 0x6)

2.240706485s ago: executing program 5 (id=3271):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20)

2.205812347s ago: executing program 5 (id=3262):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.111244291s ago: executing program 2 (id=3267):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.062841404s ago: executing program 1 (id=3269):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20)

1.779388547s ago: executing program 3 (id=3272):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x20003a, &(0x7f0000000080)={0x3a, 0x4813, 0x9})

1.751758378s ago: executing program 3 (id=3273):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d0}, 0x4c51)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0)

1.253306091s ago: executing program 5 (id=3274):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb)
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0)

1.211240423s ago: executing program 5 (id=3275):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399})
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)

1.099036049s ago: executing program 2 (id=3276):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000)
fallocate(r0, 0x0, 0x0, 0x8800000)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

1.05537119s ago: executing program 1 (id=3286):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

1.040607591s ago: executing program 5 (id=3277):
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x1)
accept(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1.029119212s ago: executing program 3 (id=3278):
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="618c226e", @ANYRES16, @ANYBLOB="01002a070000000000000002000008df0300", @ANYRES32, @ANYBLOB="08003500000000000a000600ffffffffffff00000a003400020202020202000008"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc000)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8001, 0xd)

971.160344ms ago: executing program 2 (id=3279):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xc4)

822.552101ms ago: executing program 1 (id=3280):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000206d149cc20000000000010902240001000010240904000502e5ffffff082100003e012218000905810308000004084e9998c2c9bb49669eee4f116ec3800d2b8d44b56cc060845c85de05e21a3e8d942245c0b3a8c0b9d3bf0816bda7e39799f2cea52bc287b21e0e622e18b3e650203cbc90216a2f1704df0697971a3f19d39622dbaf84e6850197f4de992d95b44859d4463cdc268a9b7f1c97b7f70e37f0181ae8ce093bcdcd7b0a8b8d7244c7a5e9ed5c48ed432076a2b6c2ea8b706c941fe21ffb97688457e4c5fcd1a2f09a85584568cdba8ba65cc7d96749deea8cc386a8c65bbe39b94752dd3652c4bc96eb56fd38bfa6e409b3ba59e14c82ba73421460cafb6e93851fbaa68e955d3d2608b4d28b58901863d381"], 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a0012000200", 0x3e, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='t'])
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

820.729641ms ago: executing program 2 (id=3281):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x30008b08)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x22, 0xfffffffe, 0x0)

742.058815ms ago: executing program 2 (id=3282):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x428)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46ca040000010000000000000003003e00f32e0000940200000200000042000000000000000000000020000000000000007db8380001"], 0x78)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

713.089777ms ago: executing program 2 (id=3283):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

300.312256ms ago: executing program 1 (id=3284):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20)
lseek(r0, 0x2000000008, 0x0)

277.219857ms ago: executing program 1 (id=3285):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x80000000)
close(0x3)

154.319652ms ago: executing program 1 (id=3287):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002fc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0)

138.391884ms ago: executing program 3 (id=3288):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_procfs(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000df92eca739803c8b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r0}, &(0x7f0000001a00), &(0x7f0000001a40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, 0x0, 0x0}, 0x20)

92.116855ms ago: executing program 5 (id=3289):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@i_version}, {@block_validity}], [{@obj_user={'obj_user', 0x3d, '\xff\xff\xff\xff\xff\xff'}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xae6}, [@generic={0x91, 0x1, 0x1, 0xcb}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

54.372787ms ago: executing program 3 (id=3290):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

0s ago: executing program 3 (id=3291):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

l pblock 0 (length 1)
[  179.537765][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.537923][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.538279][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.538559][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.538853][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.539005][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.539220][T12428] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.2335: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.564472][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  179.620400][  T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.634951][  T198] bond0 (unregistering): Released all slaves
[  179.662920][ T3029] 8021q: adding VLAN 0 to HW filter on device eth1
[  179.721452][  T198] tipc: Left network mode
[  179.796572][  T198] hsr_slave_0: left promiscuous mode
[  179.797158][  T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.797175][  T198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.803649][  T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.803665][  T198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.812962][  T198] veth1_macvtap: left promiscuous mode
[  179.813072][  T198] veth0_macvtap: left promiscuous mode
[  179.813119][  T198] veth1_vlan: left promiscuous mode
[  179.813154][  T198] veth0_vlan: left promiscuous mode
[  179.967220][ T1509] kernel read not supported for file /input/event1 (pid: 1509 comm: kworker/0:3)
[  179.991583][  T198] team0 (unregistering): Port device team_slave_1 removed
[  180.074454][ T3029] 8021q: adding VLAN 0 to HW filter on device eth2
[  180.104675][T12451] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.225075][T12451] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.379147][T12451] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.510914][T12451] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.529935][T12381] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.529968][T12381] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.530068][T12381] bridge_slave_0: entered allmulticast mode
[  180.530619][T12381] bridge_slave_0: entered promiscuous mode
[  180.531780][T12381] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.531819][T12381] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.531954][T12381] bridge_slave_1: entered allmulticast mode
[  180.532412][T12381] bridge_slave_1: entered promiscuous mode
[  180.553548][T12381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.554689][T12381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.565724][T12381] team0: Port device team_slave_0 added
[  180.566655][T12381] team0: Port device team_slave_1 added
[  180.577113][T12381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.577125][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.577209][T12381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.577887][T12381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.577900][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.577933][T12381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.599864][T12381] hsr_slave_0: entered promiscuous mode
[  180.601075][T12381] hsr_slave_1: entered promiscuous mode
[  180.601338][T12381] debugfs: 'hsr0' already exists in 'hsr'
[  180.601353][T12381] Cannot create hsr debugfs directory
[  180.831713][ T3029] 8021q: adding VLAN 0 to HW filter on device eth3
[  180.878334][T12378] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.878370][T12378] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.878489][T12378] bridge_slave_0: entered allmulticast mode
[  180.879486][T12378] bridge_slave_0: entered promiscuous mode
[  180.900005][T12378] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.900038][T12378] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.900101][T12378] bridge_slave_1: entered allmulticast mode
[  180.900592][T12378] bridge_slave_1: entered promiscuous mode
[  180.920057][   T48] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.950414][T12378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.958819][T12378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.007730][T12378] team0: Port device team_slave_0 added
[  181.010031][  T198] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.010220][  T198] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.010270][  T198] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.016634][T12378] team0: Port device team_slave_1 added
[  181.060294][T12378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.060310][T12378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.060339][T12378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.066933][T12378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.066949][T12378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.067012][T12378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.108373][T12378] hsr_slave_0: entered promiscuous mode
[  181.108762][T12378] hsr_slave_1: entered promiscuous mode
[  181.108993][T12378] debugfs: 'hsr0' already exists in 'hsr'
[  181.109007][T12378] Cannot create hsr debugfs directory
[  181.261503][T12553] loop2: detected capacity change from 0 to 512
[  181.263550][T12553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  181.290606][T12553] EXT4-fs (loop2): 1 truncate cleaned up
[  181.292749][T12553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.410543][ T3029] 8021q: adding VLAN 0 to HW filter on device eth4
[  181.412119][T12381] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  181.416175][T12381] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  181.416830][T12381] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  181.422693][T12381] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  181.458807][T12381] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  181.470933][T12381] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  181.477223][T12381] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  181.483776][T12381] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  181.601382][T12381] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.633873][T12381] 8021q: adding VLAN 0 to HW filter on device team0
[  181.654307][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.654347][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.671350][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.675559][ T3389] kernel read not supported for file 586/task/587/fail-nth (pid: 3389 comm: kworker/0:4)
[  181.716122][  T198] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.716171][  T198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.749061][T12378] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  181.762058][T12378] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  181.860257][T12378] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  181.864289][T12378] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  181.872118][T12378] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  181.878774][T12378] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  181.887142][T12378] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  181.894707][T12378] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  182.013436][T12615] loop2: detected capacity change from 0 to 512
[  182.014308][T12615] EXT4-fs: test_dummy_encryption option not supported
[  182.065080][T12378] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.097026][T12378] 8021q: adding VLAN 0 to HW filter on device team0
[  182.107194][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.107232][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.115239][  T198] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.115271][  T198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.230198][T12634] loop9: detected capacity change from 0 to 512
[  182.252443][T12634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.252512][T12634] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.349568][ T7523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.353281][T12381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.467425][T12660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  182.638823][T12378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.714633][T12381] veth0_vlan: entered promiscuous mode
[  182.727677][T12381] veth1_vlan: entered promiscuous mode
[  182.783878][T12381] veth0_macvtap: entered promiscuous mode
[  182.789267][T12381] veth1_macvtap: entered promiscuous mode
[  182.799592][T12381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.811013][T12381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.831170][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  182.831285][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  182.831388][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  182.831480][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  182.832839][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.833760][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.833921][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.834026][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.129361][T12378] veth0_vlan: entered promiscuous mode
[  183.133219][T12378] veth1_vlan: entered promiscuous mode
[  183.141069][T12378] veth0_macvtap: entered promiscuous mode
[  183.142719][T12378] veth1_macvtap: entered promiscuous mode
[  183.148235][T12378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.149625][T12378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.191068][  T734] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.231054][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.231431][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.231809][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.379431][T12757] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2396'.
[  183.419834][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2397'.
[  183.496505][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  183.496524][   T29] audit: type=1400 audit(1789972338.130:1831): avc:  denied  { write } for  pid=12754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.507932][   T29] audit: type=1400 audit(1789972338.100:1830): avc:  denied  { setopt } for  pid=12767 comm="syz.1.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  183.541853][   T29] audit: type=1400 audit(1789972338.150:1832): avc:  denied  { getopt } for  pid=12767 comm="syz.1.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  183.622836][   T29] audit: type=1400 audit(1789972338.260:1833): avc:  denied  { write } for  pid=12777 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.937544][   T29] audit: type=1400 audit(1789972338.570:1834): avc:  denied  { write } for  pid=12784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.022628][   T29] audit: type=1400 audit(1789972338.660:1835): avc:  denied  { write } for  pid=12808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.365970][   T29] audit: type=1400 audit(1789972339.000:1836): avc:  denied  { write } for  pid=12815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.481726][   T29] audit: type=1400 audit(1789972339.120:1837): avc:  denied  { write } for  pid=12842 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.494046][T12845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2417'.
[  184.587450][   T29] audit: type=1326 audit(1789972339.220:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.5.2420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  184.588158][   T29] audit: type=1326 audit(1789972339.220:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.5.2420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  184.649000][T12859] loop5: detected capacity change from 0 to 512
[  184.665111][T12859] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  184.685485][T12859] EXT4-fs error (device loop5): __ext4_iget:5592: inode #11: block 2: comm syz.5.2420: invalid block
[  184.685519][T12859] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  184.685752][T12859] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2420: couldn't read orphan inode 11 (err -117)
[  184.685778][T12859] loop5: lost filesystem error report for type 5 error -117
[  184.686253][T12859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.695390][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'.
[  184.742002][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.785817][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2425'.
[  184.832831][T12875] team1: entered promiscuous mode
[  184.832913][T12875] team1: entered allmulticast mode
[  184.833235][T12875] 8021q: adding VLAN 0 to HW filter on device team1
[  184.981485][T12896] xt_hashlimit: size too large, truncated to 1048576
[  185.086002][T12903] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock
[  185.216302][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2437'.
[  185.238255][T12914] netlink: 'syz.1.2437': attribute type 1 has an invalid length.
[  185.250307][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2439'.
[  185.335818][T12923] loop2: detected capacity change from 0 to 512
[  185.338353][T12923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  185.346021][T12923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  185.346060][T12923] System zones: 1-12
[  185.346279][T12923] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2440: bad orphan inode 131072
[  185.346302][T12923] loop2: lost filesystem error report for type 5 error -117
[  185.346792][T12923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.358706][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2442'.
[  185.446706][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.766949][T12972] sctp: [Deprecated]: syz.1.2452 (pid 12972) Use of int in max_burst socket option deprecated.
[  185.766949][T12972] Use struct sctp_assoc_value instead
[  185.818430][T12975] loop9: detected capacity change from 0 to 512
[  185.818828][T12975] EXT4-fs: Ignoring removed i_version option
[  185.819355][T12975] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  185.828885][T12975] EXT4-fs (loop9): 1 truncate cleaned up
[  185.829320][T12975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.845227][T12953] loop5: detected capacity change from 0 to 8192
[  185.917097][T12984] loop1: detected capacity change from 0 to 128
[  185.928176][T12984] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  185.955537][T12984] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.960919][T12984] ext2 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.991635][ T7523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.025674][T12381] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.480585][T13030] hub 1-0:1.0: USB hub found
[  186.480846][T13030] hub 1-0:1.0: 8 ports detected
[  186.577423][T13033] sctp: [Deprecated]: syz.7.2467 (pid 13033) Use of int in max_burst socket option deprecated.
[  186.577423][T13033] Use struct sctp_assoc_value instead
[  186.646061][T13045] FAULT_INJECTION: forcing a failure.
[  186.646061][T13045] name fail_futex, interval 1, probability 0, space 0, times 0
[  186.646095][T13045] CPU: 0 UID: 0 PID: 13045 Comm: syz.7.2471 Not tainted syzkaller #0 PREEMPT(lazy) 
[  186.646168][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  186.646180][T13045] Call Trace:
[  186.646187][T13045]  <TASK>
[  186.646195][T13045]  __dump_stack+0x1d/0x30
[  186.646226][T13045]  dump_stack_lvl+0x95/0xd0
[  186.646283][T13045]  dump_stack+0x15/0x1b
[  186.646305][T13045]  should_fail_ex+0x262/0x280
[  186.646332][T13045]  should_fail+0xb/0x20
[  186.646360][T13045]  get_futex_key+0x12d/0xb10
[  186.646389][T13045]  ? btf_struct_resolve+0x5ef/0x830
[  186.646425][T13045]  futex_wait_setup+0x49/0x3e0
[  186.646508][T13045]  ? btf_parse_type_sec+0x1487/0x1520
[  186.646547][T13045]  __futex_wait+0xa9/0x260
[  186.646571][T13045]  ? __pfx_futex_wake_mark+0x10/0x10
[  186.646652][T13045]  futex_wait+0x98/0x1c0
[  186.646678][T13045]  do_futex+0x391/0x460
[  186.646717][T13045]  __se_sys_futex+0x2f6/0x370
[  186.646753][T13045]  __x64_sys_futex+0x78/0x90
[  186.646786][T13045]  x64_sys_call+0x22e2/0x2550
[  186.646824][T13045]  do_syscall_64+0x112/0x360
[  186.646843][T13045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.646866][T13045] RIP: 0033:0x7f140806e159
[  186.646919][T13045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.646940][T13045] RSP: 002b:00007f1406ac70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  186.646965][T13045] RAX: ffffffffffffffda RBX: 00007f14082f5fa8 RCX: 00007f140806e159
[  186.646981][T13045] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14082f5fa8
[  186.647005][T13045] RBP: 00007f14082f5fa0 R08: 0000000000000000 R09: 0000000000000000
[  186.647021][T13045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.647035][T13045] R13: 00007f14082f6038 R14: 00007ffc98114800 R15: 00007ffc981148e8
[  186.647058][T13045]  </TASK>
[  187.393560][T13128] FAULT_INJECTION: forcing a failure.
[  187.393560][T13128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.393621][T13128] CPU: 0 UID: 0 PID: 13128 Comm: syz.9.2475 Not tainted syzkaller #0 PREEMPT(lazy) 
[  187.393650][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  187.393664][T13128] Call Trace:
[  187.393672][T13128]  <TASK>
[  187.393681][T13128]  __dump_stack+0x1d/0x30
[  187.393788][T13128]  dump_stack_lvl+0x95/0xd0
[  187.393837][T13128]  dump_stack+0x15/0x1b
[  187.393862][T13128]  should_fail_ex+0x262/0x280
[  187.393891][T13128]  should_fail+0xb/0x20
[  187.393915][T13128]  should_fail_usercopy+0x1a/0x20
[  187.393970][T13128]  _copy_from_user+0x1c/0xb0
[  187.394002][T13128]  virtual_ncidev_write+0x7e/0x110
[  187.394039][T13128]  ? __pfx_virtual_ncidev_write+0x10/0x10
[  187.394108][T13128]  vfs_write+0x254/0x9a0
[  187.394201][T13128]  ? __fget_files+0x184/0x1c0
[  187.394229][T13128]  ksys_write+0xdc/0x1a0
[  187.394262][T13128]  __x64_sys_write+0x40/0x50
[  187.394290][T13128]  x64_sys_call+0x154e/0x2550
[  187.394397][T13128]  do_syscall_64+0x112/0x360
[  187.394422][T13128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.394446][T13128] RIP: 0033:0x7ff16661e159
[  187.394462][T13128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.394517][T13128] RSP: 002b:00007ff165077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  187.394543][T13128] RAX: ffffffffffffffda RBX: 00007ff1668a5fa0 RCX: 00007ff16661e159
[  187.394560][T13128] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000003
[  187.394573][T13128] RBP: 00007ff1666b506b R08: 0000000000000000 R09: 0000000000000000
[  187.394587][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.394603][T13128] R13: 00007ff1668a6038 R14: 00007ff1668a5fa0 R15: 00007fff18e60708
[  187.394683][T13128]  </TASK>
[  187.395206][T13136] netlink: 'syz.5.2478': attribute type 4 has an invalid length.
[  187.411631][T13136] netlink: 'syz.5.2478': attribute type 4 has an invalid length.
[  187.853065][T13178] loop7: detected capacity change from 0 to 1024
[  187.888476][T13178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.951200][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  187.951293][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  187.951392][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  187.951464][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  187.951535][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  187.951630][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  188.013453][T13153] sctp: [Deprecated]: syz.2.2482 (pid 13153) Use of int in max_burst socket option deprecated.
[  188.013453][T13153] Use struct sctp_assoc_value instead
[  188.326341][T12378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.447701][T13203] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  188.569413][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'.
[  188.583923][   T29] kauditd_printk_skb: 163 callbacks suppressed
[  188.583939][   T29] audit: type=1400 audit(1789972343.220:2003): avc:  denied  { write } for  pid=13201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.593284][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  188.696132][   T29] audit: type=1400 audit(1789972343.330:2004): avc:  denied  { write } for  pid=13227 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.920311][   T29] audit: type=1400 audit(1789972343.550:2005): avc:  denied  { write } for  pid=13232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.976966][   T29] audit: type=1400 audit(1789972343.610:2006): avc:  denied  { write } for  pid=13243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.141125][T13252] ip_tables: iptables: counters copy to user failed while replacing table
[  189.141526][   T29] audit: type=1400 audit(1789972343.780:2007): avc:  denied  { listen } for  pid=13253 comm="syz.7.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  189.141923][ T4434] kernel read not supported for file /40/oom_score_adj (pid: 4434 comm: kworker/1:4)
[  189.147423][T13261] xt_hashlimit: size too large, truncated to 1048576
[  189.148462][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'.
[  189.194851][T13264] sctp: [Deprecated]: syz.9.2500 (pid 13264) Use of int in max_burst socket option deprecated.
[  189.194851][T13264] Use struct sctp_assoc_value instead
[  189.263377][   T29] audit: type=1400 audit(1789972343.900:2008): avc:  denied  { write } for  pid=13245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.312910][   T29] audit: type=1400 audit(1789972343.950:2009): avc:  denied  { write } for  pid=13275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.772900][  T945] kernel read not supported for file /71/oom_score_adj (pid: 945 comm: kworker/0:2)
[  189.878310][T13310] netlink: 'syz.1.2521': attribute type 1 has an invalid length.
[  189.946704][T13310] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.978390][T13313] bond1: (slave geneve2): making interface the new active one
[  190.002154][T13313] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  190.178334][T13325] bond0: no command found in slaves file - use +ifname or -ifname
[  190.180754][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'.
[  190.180898][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'.
[  190.371680][T13346] sctp: [Deprecated]: syz.7.2535 (pid 13346) Use of int in max_burst socket option deprecated.
[  190.371680][T13346] Use struct sctp_assoc_value instead
[  190.527725][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2545'.
[  190.527758][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2545'.
[  190.587832][T13365] bond0: no command found in slaves file - use +ifname or -ifname
[  190.940528][T13384] sctp: [Deprecated]: syz.9.2552 (pid 13384) Use of int in max_burst socket option deprecated.
[  190.940528][T13384] Use struct sctp_assoc_value instead
[  191.112482][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'.
[  191.112514][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'.
[  191.431434][T13419] loop1: detected capacity change from 0 to 32768
[  191.471136][T13419]  loop1: p1 p3 < >
[  191.508533][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  191.509427][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  191.790351][  T198] IPVS: starting estimator thread 0...
[  191.831542][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'.
[  191.831636][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'.
[  191.880589][T13439] IPVS: using max 2544 ests per chain, 127200 per kthread
[  191.930758][T13448] sctp: [Deprecated]: syz.2.2587 (pid 13448) Use of int in max_burst socket option deprecated.
[  191.930758][T13448] Use struct sctp_assoc_value instead
[  193.070629][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  193.814190][   T29] audit: type=1400 audit(1789972348.450:2010): avc:  denied  { write } for  pid=13451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  193.852333][   T29] audit: type=1400 audit(1789972348.490:2011): avc:  denied  { write } for  pid=13462 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.260780][   T29] audit: type=1400 audit(1789972348.900:2012): avc:  denied  { write } for  pid=13465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.302159][   T29] audit: type=1400 audit(1789972348.940:2013): avc:  denied  { write } for  pid=13476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.351401][  T198] rpcbind: server 127.0.0.1 not responding, timed out
[  194.356399][  T198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.393457][  T198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.433047][  T198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.484030][  T198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.545302][  T198] bridge_slave_1: left allmulticast mode
[  194.545326][  T198] bridge_slave_1: left promiscuous mode
[  194.545511][  T198] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.546269][  T198] bridge_slave_0: left allmulticast mode
[  194.546288][  T198] bridge_slave_0: left promiscuous mode
[  194.546445][  T198] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.627509][  T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.628733][  T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.629591][  T198] bond0 (unregistering): Released all slaves
[  194.633897][T13430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.685141][  T198] hsr_slave_0: left promiscuous mode
[  194.689579][  T198] hsr_slave_1: left promiscuous mode
[  194.690641][  T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.690657][  T198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.695869][  T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.695885][  T198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.708972][  T198] veth1_macvtap: left promiscuous mode
[  194.709045][  T198] veth0_macvtap: left promiscuous mode
[  194.709167][  T198] veth1_vlan: left promiscuous mode
[  194.709203][  T198] veth0_vlan: left promiscuous mode
[  194.774240][T13488] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2584'.
[  194.822780][T13490] loop1: detected capacity change from 0 to 4096
[  194.835318][T13490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.882556][T13503] loop7: detected capacity change from 0 to 512
[  194.905640][T13503] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  194.905899][T13503] EXT4-fs (loop7): orphan cleanup on readonly fs
[  194.906096][T13503] Quota error (device loop7): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  194.906257][T13503] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  194.906479][T13503] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  194.907439][T13503] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.2586: bg 0: block 15: invalid block bitmap
[  194.907560][T13503] loop7: lost filesystem error report for type 5 error -117
[  194.907795][T13503] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  194.907833][T13503] loop7: lost filesystem error report for type 5 error -117
[  194.908254][T13503] EXT4-fs warning (device loop7): ext4_evict_inode:196: inode #16: comm syz.7.2586: data will be lost
[  194.908347][T13503] EXT4-fs (loop7): 1 truncate cleaned up
[  194.909016][T13503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.023496][T12381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.055450][   T29] audit: type=1400 audit(1789972349.690:2014): avc:  denied  { write } for  pid=13480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.067242][T12378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.162576][   T29] audit: type=1400 audit(1789972349.800:2015): avc:  denied  { write } for  pid=13516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.188174][T13519] sctp: [Deprecated]: syz.9.2591 (pid 13519) Use of int in max_burst socket option deprecated.
[  195.188174][T13519] Use struct sctp_assoc_value instead
[  195.188325][  T198] team0 (unregistering): Port device team_slave_1 removed
[  195.209409][  T198] team0 (unregistering): Port device team_slave_0 removed
[  195.269600][ T3029] 8021q: adding VLAN 0 to HW filter on device eth9
[  195.329974][   T12] IPVS: starting estimator thread 0...
[  195.430123][T13533] IPVS: using max 2400 ests per chain, 120000 per kthread
[  195.447965][T13543] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2597'.
[  195.468174][  T198] IPVS: stop unused estimator thread 0...
[  195.517769][T13551] netlink: 'syz.7.2598': attribute type 4 has an invalid length.
[  195.525470][T13551] netlink: 'syz.7.2598': attribute type 4 has an invalid length.
[  195.535150][T13554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.535228][T13554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.538312][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2600'.
[  195.540419][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2600'.
[  195.585865][   T29] audit: type=1400 audit(1789972350.220:2016): avc:  denied  { write } for  pid=13535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.621237][   T29] audit: type=1400 audit(1789972350.260:2017): avc:  denied  { write } for  pid=13560 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.676107][ T3029] 8021q: adding VLAN 0 to HW filter on device eth10
[  195.700272][T13566] loop7: detected capacity change from 0 to 512
[  195.702543][T13566] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  195.724209][T13566] EXT4-fs (loop7): 1 truncate cleaned up
[  195.724585][T13566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.743600][   T29] audit: type=1400 audit(1789972350.360:2018): avc:  denied  { write } for  pid=13563 comm="syz.7.2603" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  195.783153][T12378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.870670][ T3029] 8021q: adding VLAN 0 to HW filter on device eth11
[  195.986943][T13598] loop5: detected capacity change from 0 to 736
[  196.093122][ T3029] 8021q: adding VLAN 0 to HW filter on device eth12
[  196.372723][T13638] netlink: 'syz.5.2619': attribute type 5 has an invalid length.
[  196.372756][T13638] netlink: 'syz.5.2619': attribute type 8 has an invalid length.
[  196.478614][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.478826][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.487298][T13643] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2630'.
[  196.533041][T13639] sctp: [Deprecated]: syz.2.2618 (pid 13639) Use of int in max_burst socket option deprecated.
[  196.533041][T13639] Use struct sctp_assoc_value instead
[  196.632199][T13654] loop9: detected capacity change from 0 to 512
[  196.632733][T13654] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  196.635128][T13654] EXT4-fs (loop9): 1 truncate cleaned up
[  196.635876][T13654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.657208][ T7523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.985455][T13684] sctp: [Deprecated]: syz.9.2636 (pid 13684) Use of int in max_burst socket option deprecated.
[  196.985455][T13684] Use struct sctp_assoc_value instead
[  197.024727][T13688] loop7: detected capacity change from 0 to 512
[  197.035314][T13688] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  197.038006][T13688] EXT4-fs (loop7): 1 truncate cleaned up
[  197.038863][T13688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.085989][T12378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.108879][T13696] FAULT_INJECTION: forcing a failure.
[  197.108879][T13696] name fail_futex, interval 1, probability 0, space 0, times 0
[  197.108928][T13696] CPU: 1 UID: 0 PID: 13696 Comm: syz.7.2641 Not tainted syzkaller #0 PREEMPT(lazy) 
[  197.108949][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  197.108958][T13696] Call Trace:
[  197.108963][T13696]  <TASK>
[  197.108980][T13696]  __dump_stack+0x1d/0x30
[  197.108999][T13696]  dump_stack_lvl+0x95/0xd0
[  197.109048][T13696]  dump_stack+0x15/0x1b
[  197.109115][T13696]  should_fail_ex+0x262/0x280
[  197.109131][T13696]  should_fail+0xb/0x20
[  197.109172][T13696]  get_futex_key+0x12d/0xb10
[  197.109190][T13696]  ? __refill_obj_stock+0x1f8/0x3d0
[  197.109273][T13696]  ? __memcg_slab_free_hook+0x78/0x340
[  197.109345][T13696]  futex_wake+0x89/0x400
[  197.109359][T13696]  do_futex+0x3f8/0x460
[  197.109377][T13696]  ? irqentry_exit+0x7d/0x610
[  197.109398][T13696]  __se_sys_futex+0x2f6/0x370
[  197.109449][T13696]  __x64_sys_futex+0x78/0x90
[  197.109468][T13696]  x64_sys_call+0x22e2/0x2550
[  197.109485][T13696]  do_syscall_64+0x112/0x360
[  197.109498][T13696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.109575][T13696] RIP: 0033:0x7f140806e159
[  197.109586][T13696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.109599][T13696] RSP: 002b:00007f1406ac70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  197.109614][T13696] RAX: ffffffffffffffda RBX: 00007f14082f5fa8 RCX: 00007f140806e159
[  197.109639][T13696] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14082f5fac
[  197.109648][T13696] RBP: 00007f14082f5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  197.109683][T13696] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  197.109696][T13696] R13: 00007f14082f6038 R14: 00007ffc98114800 R15: 00007ffc981148e8
[  197.109719][T13696]  </TASK>
[  197.258461][T13704] can0: slcan on pts0.
[  197.307415][T13702] can0 (unregistered): slcan off pts0.
[  197.406394][T13721] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2646'.
[  197.550222][T13736] loop1: detected capacity change from 0 to 512
[  197.554445][T13736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  197.557722][T13736] EXT4-fs (loop1): 1 truncate cleaned up
[  197.564206][T13736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.601154][T12381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.191278][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  198.191368][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  198.191447][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  198.191540][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  198.740984][T13863] loop2: detected capacity change from 0 to 512
[  198.757748][T13863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  198.759219][T13863] EXT4-fs (loop2): 1 truncate cleaned up
[  198.759886][T13863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.792847][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.041089][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  199.041107][   T29] audit: type=1326 audit(1789972353.680:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.5.2671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7fc00000
[  199.041136][   T29] audit: type=1326 audit(1789972353.680:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.5.2671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd7988e159 code=0x7fc00000
[  199.741071][   T29] audit: type=1326 audit(1789972354.370:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.2.2669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecec63e159 code=0x7fc00000
[  199.868630][T13911] loop9: detected capacity change from 0 to 128
[  200.232440][   T29] audit: type=1400 audit(1789972354.870:2035): avc:  denied  { read write } for  pid=13944 comm="syz.9.2692" name="uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  200.232476][   T29] audit: type=1400 audit(1789972354.870:2036): avc:  denied  { open } for  pid=13944 comm="syz.9.2692" path="/dev/uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  200.235638][ T3399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  200.236004][ T3399] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  200.385494][T13950] fido_id[13950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  200.388076][T13960] loop1: detected capacity change from 0 to 256
[  200.553793][T13971] program syz.9.2702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.614695][T13975] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  200.860351][   T29] audit: type=1400 audit(1789972355.490:2037): avc:  denied  { write } for  pid=13980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.915748][   T29] audit: type=1400 audit(1789972355.550:2038): avc:  denied  { write } for  pid=13992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.987986][T13996] loop9: detected capacity change from 0 to 512
[  201.002773][T13996] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.002900][T13996] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.005871][   T29] audit: type=1400 audit(1789972355.640:2039): avc:  denied  { write } for  pid=13995 comm="syz.9.2707" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  201.071911][ T7523] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.097301][T14000] loop9: detected capacity change from 0 to 512
[  201.097835][T14000] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  201.134741][T14000] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00)
[  201.134882][T14000] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00)
[  201.135156][T14000] syz.9.2708: attempt to access beyond end of device
[  201.135156][T14000] loop9: rw=2049, sector=17179852706, nr_sectors = 64 limit=512
[  201.197512][T14002] loop9: detected capacity change from 0 to 128
[  201.206974][T14002] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.254861][  T734] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.268497][T14004] loop7: detected capacity change from 0 to 512
[  201.389425][T14015] FAULT_INJECTION: forcing a failure.
[  201.389425][T14015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.389491][T14015] CPU: 0 UID: 0 PID: 14015 Comm: syz.1.2715 Not tainted syzkaller #0 PREEMPT(lazy) 
[  201.389535][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  201.389626][T14015] Call Trace:
[  201.389635][T14015]  <TASK>
[  201.389643][T14015]  __dump_stack+0x1d/0x30
[  201.389677][T14015]  dump_stack_lvl+0x95/0xd0
[  201.389705][T14015]  dump_stack+0x15/0x1b
[  201.389756][T14015]  should_fail_ex+0x262/0x280
[  201.389785][T14015]  should_fail+0xb/0x20
[  201.389809][T14015]  should_fail_usercopy+0x1a/0x20
[  201.389902][T14015]  _copy_from_user+0x1c/0xb0
[  201.389940][T14015]  __se_sys_rt_sigqueueinfo+0x29d/0x410
[  201.389974][T14015]  __x64_sys_rt_sigqueueinfo+0x43/0x50
[  201.390091][T14015]  x64_sys_call+0x235b/0x2550
[  201.390118][T14015]  do_syscall_64+0x112/0x360
[  201.390160][T14015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.390186][T14015] RIP: 0033:0x7f16fa5ce159
[  201.390204][T14015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.390225][T14015] RSP: 002b:00007f16f9027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081
[  201.390331][T14015] RAX: ffffffffffffffda RBX: 00007f16fa855fa0 RCX: 00007f16fa5ce159
[  201.390349][T14015] RDX: 0000200000000080 RSI: 000000000020003a RDI: 0000000000000000
[  201.390365][T14015] RBP: 00007f16fa66506b R08: 0000000000000000 R09: 0000000000000000
[  201.390440][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.390456][T14015] R13: 00007f16fa856038 R14: 00007f16fa855fa0 R15: 00007ffd3ba67be8
[  201.390476][T14015]  </TASK>
[  201.391007][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  201.556992][  T794] Bluetooth: hci0: Frame reassembly failed (-84)
[  201.642006][T14025] EXT4-fs (sda1): Invalid checksum for backup superblock 32768
[  202.670180][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  202.778611][T13904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.884035][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'.
[  203.073109][T14065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14065 comm=syz.1.2735
[  203.104149][T14068] netdevsim netdevsim7 netdevsim3: IPsec offload requires 128 bit authentication
[  203.312223][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312326][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312394][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312556][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312636][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312710][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312787][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312884][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.312977][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  203.351398][T14092] loop5: detected capacity change from 0 to 8192
[  203.506054][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2752'.
[  203.629803][ T3666] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  203.685923][T14116] loop7: detected capacity change from 0 to 512
[  203.702474][T14117] loop5: detected capacity change from 0 to 1024
[  203.703244][T14117] EXT4-fs: Ignoring removed bh option
[  203.714892][T14116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.715002][T14116] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.758311][T14117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  203.758441][T14117] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.785697][   T29] audit: type=1400 audit(1789972358.420:2040): avc:  denied  { write } for  pid=14115 comm="syz.5.2756" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  203.815746][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.815941][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.815973][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.816224][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.819494][T14117] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 3)
[  203.824269][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.824500][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.824572][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.824747][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.824880][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.825063][   T29] audit: type=1400 audit(1789972358.460:2041): avc:  denied  { write } for  pid=14114 comm="syz.7.2758" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  203.825733][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.825758][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.826004][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.828491][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.833598][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.833786][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.833814][T14116] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.2758: corrupted xattr block 6: invalid header
[  203.834067][T14116] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=12
[  203.859619][T12378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.869244][T14117] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  203.869323][T14117] EXT4-fs (loop5): This should not happen!! Data will be lost
[  203.869323][T14117] 
[  203.900047][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.900450][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.903428][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.903727][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.903907][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.905086][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.905320][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.905528][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.905739][T14133] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.2756: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.949523][T14136] syzkaller1: entered promiscuous mode
[  203.949544][T14136] syzkaller1: entered allmulticast mode
[  204.032241][   T48] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  204.032275][   T48] EXT4-fs (loop5): This should not happen!! Data will be lost
[  204.032275][   T48] 
[  204.033245][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  204.307601][T14151] ptp ptp0: guarantee physical clock free running
[  204.628341][   T29] audit: type=1400 audit(1789972359.260:2042): avc:  denied  { getopt } for  pid=14171 comm="syz.7.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  204.834605][  T945] kernel read not supported for file /ppp (pid: 945 comm: kworker/0:2)
[  204.857216][   T29] audit: type=1326 audit(1789972359.490:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.857761][   T29] audit: type=1326 audit(1789972359.490:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.857792][   T29] audit: type=1326 audit(1789972359.490:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.858047][   T29] audit: type=1326 audit(1789972359.490:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.858194][   T29] audit: type=1326 audit(1789972359.490:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.858612][   T29] audit: type=1326 audit(1789972359.490:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.858835][   T29] audit: type=1326 audit(1789972359.490:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.859121][   T29] audit: type=1326 audit(1789972359.490:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  204.859406][   T29] audit: type=1326 audit(1789972359.490:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.5.2799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7988e159 code=0x7ffc0000
[  205.075101][  T198] Bluetooth: hci0: Frame reassembly failed (-84)
[  205.174574][T14211] loop1: detected capacity change from 0 to 512
[  205.196958][T14211] EXT4-fs (loop1): 1 orphan inode deleted
[  205.197649][T14211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.197943][T14211] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.212298][T14211] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2793'.
[  205.219540][  T734] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 1
[  205.262567][T12381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.414306][T14232] loop5: detected capacity change from 0 to 256
[  205.433347][T14232] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  205.560386][T14244] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200)
[  205.560433][T14244] FAT-fs (loop5): Filesystem has been set read-only
[  205.611152][T14247] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  205.777731][T14263] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2815'.
[  205.777788][T14263] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2815'.
[  206.510304][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  206.691581][T14313] netlink: 'syz.9.2839': attribute type 7 has an invalid length.
[  206.697972][T14313] netlink: 'syz.9.2839': attribute type 7 has an invalid length.
[  206.744138][T14315] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  206.747164][T14317] ref_ctr_offset mismatch. inode: 0x3a8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080
[  206.750079][   T48] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.751723][   T48] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.752074][   T48] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.752144][   T48] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.836295][T14319] loop9: detected capacity change from 0 to 1024
[  206.846390][T14319] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  206.846518][T14319] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  206.849469][T14319] JBD2: no valid journal superblock found
[  206.849570][T14319] EXT4-fs (loop9): Could not load journal inode
[  206.970380][T14329] loop7: detected capacity change from 0 to 164
[  207.012246][T14333] loop7: detected capacity change from 0 to 256
[  207.150184][ T3675] Bluetooth: hci0: command 0x1003 tx timeout
[  207.150250][T11308] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  207.497899][T14397] loop1: detected capacity change from 0 to 2048
[  207.526171][T14397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.599448][T12381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.759241][  T764] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.759369][  T764] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.811979][  T764] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.812076][  T764] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.849165][  T734] Bluetooth: hci0: Frame reassembly failed (-84)
[  207.859286][  T764] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.859338][  T764] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.917394][  T764] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.917498][  T764] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.035774][  T764] bridge_slave_1: left allmulticast mode
[  208.035796][  T764] bridge_slave_1: left promiscuous mode
[  208.035945][  T764] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.036867][  T764] bridge_slave_0: left allmulticast mode
[  208.036888][  T764] bridge_slave_0: left promiscuous mode
[  208.037097][  T764] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.202469][  T764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.203779][  T764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.204876][  T764] bond0 (unregistering): Released all slaves
[  208.255387][  T764] hsr_slave_0: left promiscuous mode
[  208.256072][  T764] hsr_slave_1: left promiscuous mode
[  208.256707][  T764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.256731][  T764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.257149][  T764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.257164][  T764] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.259966][  T764] veth1_macvtap: left promiscuous mode
[  208.260052][  T764] veth0_macvtap: left promiscuous mode
[  208.260139][  T764] veth1_vlan: left promiscuous mode
[  208.260245][  T764] veth0_vlan: left promiscuous mode
[  208.367510][  T764] team0 (unregistering): Port device team_slave_1 removed
[  208.369539][  T764] team0 (unregistering): Port device team_slave_0 removed
[  208.430022][    C1] sctp_transport_update_pmtu: 1 callbacks suppressed
[  208.430042][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  208.442759][T14426] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.442794][T14426] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.442859][T14426] bridge_slave_0: entered allmulticast mode
[  208.443320][T14426] bridge_slave_0: entered promiscuous mode
[  208.444416][T14426] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.444446][T14426] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.444573][T14426] bridge_slave_1: entered allmulticast mode
[  208.444981][T14426] bridge_slave_1: entered promiscuous mode
[  208.456587][T14426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.457885][T14426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.468977][T14426] team0: Port device team_slave_0 added
[  208.470219][T14426] team0: Port device team_slave_1 added
[  208.480504][T14426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.480517][T14426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.480544][T14426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.481198][T14426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.481223][T14426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.481249][T14426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.498702][T14426] hsr_slave_0: entered promiscuous mode
[  208.499062][T14426] hsr_slave_1: entered promiscuous mode
[  208.499452][T14426] debugfs: 'hsr0' already exists in 'hsr'
[  208.499467][T14426] Cannot create hsr debugfs directory
[  208.756065][  T764] IPVS: stop unused estimator thread 0...
[  208.909761][ T3675] Bluetooth: hci1: command 0x1003 tx timeout
[  208.909821][ T3666] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  209.869732][T11308] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  209.869755][ T3666] Bluetooth: hci0: command 0x1003 tx timeout
[  210.079213][T14481] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9
[  210.177642][T14488] loop5: detected capacity change from 0 to 512
[  210.203875][T14488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.203940][T14488] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.685914][T14410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.701231][T14426] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  211.082388][T14426] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  211.084606][T14426] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  211.113133][T14426] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  211.114689][T14426] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  211.201385][T14426] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  211.202193][T14426] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  211.211552][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.242146][   T48] IPVS: starting estimator thread 0...
[  211.248835][T14426] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  211.309795][T14426] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.316596][T14426] 8021q: adding VLAN 0 to HW filter on device team0
[  211.319165][  T764] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.319200][  T764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.348424][T14513] IPVS: using max 2544 ests per chain, 127200 per kthread
[  211.360161][  T734] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.360200][  T734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.388873][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  211.388942][   T29] audit: type=1400 audit(1789972366.020:2063): avc:  denied  { write } for  pid=14511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.429743][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdefe00: rx timeout, send abort
[  211.475159][   T29] audit: type=1400 audit(1789972366.110:2064): avc:  denied  { write } for  pid=14538 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.593517][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2911'.
[  211.593578][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2911'.
[  211.691292][   T29] audit: type=1400 audit(1789972366.320:2065): avc:  denied  { write } for  pid=14544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.746225][T14426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.747338][    T9] kernel read not supported for file /regulator/supply_map (pid: 9 comm: kworker/0:0)
[  211.749280][   T29] audit: type=1400 audit(1789972366.380:2066): avc:  denied  { write } for  pid=14574 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.929777][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811cf7a400: rx timeout, send abort
[  211.929910][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811bdefe00: abort rx timeout. Force session deactivation
[  211.935817][   T29] audit: type=1400 audit(1789972366.570:2067): avc:  denied  { write } for  pid=14594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.953079][T14609] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in;
[  211.953079][T14609]    program syz.5.2922 not setting count and/or reply_len properly
[  212.013881][T14617] loop5: detected capacity change from 0 to 128
[  212.014288][T14617] ext4: Unknown parameter 'nouser_xattr'
[  212.074768][   T29] audit: type=1400 audit(1789972366.710:2068): avc:  denied  { write } for  pid=14621 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.138189][T14616] loop2: detected capacity change from 0 to 8192
[  212.162928][T14616]  loop2: p1[EZD] p3 p4
[  212.163931][T14616] loop2: p3 start 150994944 is beyond EOD, truncated
[  212.171046][   T29] audit: type=1400 audit(1789972366.810:2069): avc:  denied  { read write } for  pid=14614 comm="syz.2.2925" name="loop2p4" dev="devtmpfs" ino=1557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  212.171137][   T29] audit: type=1400 audit(1789972366.810:2070): avc:  denied  { open } for  pid=14614 comm="syz.2.2925" path="/dev/loop2p4" dev="devtmpfs" ino=1557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  212.256058][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  212.256572][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  212.259189][T14630] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  212.315158][T14426] veth0_vlan: entered promiscuous mode
[  212.322391][T14426] veth1_vlan: entered promiscuous mode
[  212.349140][T14426] veth0_macvtap: entered promiscuous mode
[  212.362328][T14426] veth1_macvtap: entered promiscuous mode
[  212.395630][T14426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.405697][T14426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.429849][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811cf7a400: abort rx timeout. Force session deactivation
[  212.459957][  T764] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.462554][  T734] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.462678][  T734] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.462716][  T734] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.565912][   T29] audit: type=1400 audit(1789972367.200:2071): avc:  denied  { write } for  pid=14638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.621255][   T29] audit: type=1400 audit(1789972367.260:2072): avc:  denied  { write } for  pid=14661 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.821245][T14687] loop9: detected capacity change from 0 to 2048
[  212.828412][T14687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.828519][T14687] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.024724][T14426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.093026][T14699] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long
[  213.213263][T14713] syzkaller0: entered promiscuous mode
[  213.213280][T14713] syzkaller0: entered allmulticast mode
[  213.550346][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  213.550426][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  213.550492][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  213.550539][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  213.583488][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2970'.
[  213.627597][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2972'.
[  213.647440][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2972'.
[  213.716835][T14761] loop5: detected capacity change from 0 to 512
[  213.807831][T14772] loop2: detected capacity change from 0 to 128
[  213.824518][T14772] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.825947][T14772] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.852898][T10160] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.892528][T14779] FAULT_INJECTION: forcing a failure.
[  213.892528][T14779] name failslab, interval 1, probability 0, space 0, times 0
[  213.892558][T14779] CPU: 0 UID: 0 PID: 14779 Comm: syz.2.2983 Not tainted syzkaller #0 PREEMPT(lazy) 
[  213.892581][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  213.892626][T14779] Call Trace:
[  213.892632][T14779]  <TASK>
[  213.892704][T14779]  __dump_stack+0x1d/0x30
[  213.892763][T14779]  dump_stack_lvl+0x95/0xd0
[  213.892789][T14779]  dump_stack+0x15/0x1b
[  213.892851][T14779]  should_fail_ex+0x262/0x280
[  213.892878][T14779]  should_failslab+0x8c/0xb0
[  213.892907][T14779]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[  213.892937][T14779]  ? selinux_netlbl_sk_security_free+0x18b/0x1d0
[  213.892977][T14779]  ? security_netlbl_sid_to_secattr+0xbc/0x150
[  213.893044][T14779]  ? security_netlbl_sid_to_secattr+0xbc/0x150
[  213.893072][T14779]  kstrdup+0x3e/0xd0
[  213.893097][T14779]  security_netlbl_sid_to_secattr+0xbc/0x150
[  213.893193][T14779]  selinux_netlbl_sock_genattr+0xa8/0x260
[  213.893231][T14779]  selinux_netlbl_socket_post_create+0x66/0x100
[  213.893330][T14779]  selinux_mptcp_add_subflow+0xbd/0xd0
[  213.893367][T14779]  security_mptcp_add_subflow+0x3c/0x70
[  213.893404][T14779]  mptcp_subflow_create_socket+0xe3/0x500
[  213.893515][T14779]  __mptcp_nmpc_sk+0xb5/0x3d0
[  213.893551][T14779]  mptcp_getsockopt+0x72d/0x1830
[  213.893581][T14779]  ? __rcu_read_unlock+0x4e/0x70
[  213.893641][T14779]  ? mt_find+0x8c1/0xa10
[  213.893728][T14779]  ? hrtimer_start_range_ns+0x108/0x120
[  213.893756][T14779]  ? cmp_ex_search+0x25/0x40
[  213.893807][T14779]  ? bsearch+0x91/0xc0
[  213.893889][T14779]  ? __pfx_cmp_ex_search+0x10/0x10
[  213.893915][T14779]  ? rep_movs_alternative+0xf/0xa0
[  213.893939][T14779]  ? search_extable+0x53/0x80
[  213.893960][T14779]  ? rep_movs_alternative+0xf/0xa0
[  213.894054][T14779]  ? rep_movs_alternative+0xf/0xa0
[  213.894081][T14779]  ? fixup_exception+0x742/0xce0
[  213.894121][T14779]  ? do_user_addr_fault+0xcd1/0x1060
[  213.894149][T14779]  ? avc_has_perm_noaudit+0xac/0x160
[  213.894171][T14779]  ? raw_irqentry_exit_cond_resched+0x3b/0x60
[  213.894241][T14779]  ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40
[  213.894273][T14779]  ? irqentry_exit+0x7d/0x610
[  213.894315][T14779]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  213.894415][T14779]  sock_common_getsockopt+0x60/0x70
[  213.894450][T14779]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  213.894481][T14779]  do_sock_getsockopt+0x2f5/0x570
[  213.894522][T14779]  __x64_sys_getsockopt+0x11d/0x1a0
[  213.894574][T14779]  x64_sys_call+0x1032/0x2550
[  213.894660][T14779]  do_syscall_64+0x112/0x360
[  213.894684][T14779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.894727][T14779] RIP: 0033:0x7fecec63e159
[  213.894744][T14779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.894762][T14779] RSP: 002b:00007feceb097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  213.894784][T14779] RAX: ffffffffffffffda RBX: 00007fecec8c5fa0 RCX: 00007fecec63e159
[  213.894800][T14779] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000003
[  213.894836][T14779] RBP: 00007fecec6d506b R08: 0000000000000000 R09: 0000000000000000
[  213.894848][T14779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.894861][T14779] R13: 00007fecec8c6038 R14: 00007fecec8c5fa0 R15: 00007ffd93842598
[  213.894879][T14779]  </TASK>
[  214.091871][T14791] FAULT_INJECTION: forcing a failure.
[  214.091871][T14791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.091903][T14791] CPU: 0 UID: 0 PID: 14791 Comm: syz.7.2987 Not tainted syzkaller #0 PREEMPT(lazy) 
[  214.091929][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  214.091999][T14791] Call Trace:
[  214.092007][T14791]  <TASK>
[  214.092015][T14791]  __dump_stack+0x1d/0x30
[  214.092043][T14791]  dump_stack_lvl+0x95/0xd0
[  214.092089][T14791]  dump_stack+0x15/0x1b
[  214.092110][T14791]  should_fail_ex+0x262/0x280
[  214.092136][T14791]  should_fail+0xb/0x20
[  214.092158][T14791]  should_fail_usercopy+0x1a/0x20
[  214.092184][T14791]  _copy_from_user+0x1c/0xb0
[  214.092265][T14791]  perf_copy_attr+0x141/0x600
[  214.092345][T14791]  __se_sys_perf_event_open+0x67/0x1280
[  214.092446][T14791]  ? do_futex+0x391/0x460
[  214.092480][T14791]  __x64_sys_perf_event_open+0x67/0x80
[  214.092512][T14791]  x64_sys_call+0x1f25/0x2550
[  214.092608][T14791]  do_syscall_64+0x112/0x360
[  214.092630][T14791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.092653][T14791] RIP: 0033:0x7f140806e159
[  214.092730][T14791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.092750][T14791] RSP: 002b:00007f1406ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  214.092772][T14791] RAX: ffffffffffffffda RBX: 00007f14082f5fa0 RCX: 00007f140806e159
[  214.092788][T14791] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[  214.092802][T14791] RBP: 00007f140810506b R08: 0000000000000000 R09: 0000000000000000
[  214.092823][T14791] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  214.092895][T14791] R13: 00007f14082f6038 R14: 00007f14082f5fa0 R15: 00007ffc981148e8
[  214.092915][T14791]  </TASK>
[  214.154102][T14793] loop7: detected capacity change from 0 to 512
[  214.248681][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2992'.
[  214.272908][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2992'.
[  214.488278][T14819] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  214.657254][T14833] loop9: detected capacity change from 0 to 512
[  214.667382][T14833] EXT4-fs (loop9): invalid journal inode
[  214.667413][T14833] EXT4-fs (loop9): can't get journal size
[  214.669447][T14833] EXT4-fs (loop9): 1 truncate cleaned up
[  214.670007][T14833] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.714286][T14426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.788239][T14839] ip_tables: iptables: counters copy to user failed while replacing table
[  214.813867][T14844] loop5: detected capacity change from 0 to 128
[  214.821567][T14844] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  214.821898][T14844] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.839633][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  214.929560][T11550] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.968751][T14856] loop5: detected capacity change from 0 to 1024
[  215.004096][T14856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  215.004156][T14856] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.010547][T14855] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.010739][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.010925][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.011083][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.011329][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.011537][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.011825][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.012075][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.012382][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.012629][T14855] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: comm syz.5.3015: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.033842][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  215.070490][T14863] ptp ptp0: guarantee physical clock free running
[  215.278194][T14846] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.278230][T14846] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.278304][T14846] bridge_slave_0: entered allmulticast mode
[  215.278687][T14846] bridge_slave_0: entered promiscuous mode
[  215.279822][T14846] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.279855][T14846] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.279929][T14846] bridge_slave_1: entered allmulticast mode
[  215.280381][T14846] bridge_slave_1: entered promiscuous mode
[  215.291860][T14846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.292824][T14846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.303298][T14846] team0: Port device team_slave_0 added
[  215.304319][T14846] team0: Port device team_slave_1 added
[  215.321374][T14846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.321388][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.321482][T14846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.322180][T14846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.322191][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.322228][T14846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.378746][T14846] hsr_slave_0: entered promiscuous mode
[  215.379193][T14846] hsr_slave_1: entered promiscuous mode
[  215.379456][T14846] debugfs: 'hsr0' already exists in 'hsr'
[  215.379471][T14846] Cannot create hsr debugfs directory
[  215.537007][T14890] syzkaller1: entered promiscuous mode
[  215.537029][T14890] syzkaller1: entered allmulticast mode
[  215.653912][T14903] loop1: detected capacity change from 0 to 2048
[  215.659862][T14903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.659948][T14903] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.808059][T12381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.929132][T14933] loop2: detected capacity change from 0 to 128
[  215.938336][T14933] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  215.941829][T14933] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.090312][T10160] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.092468][  T764] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.181361][T14846] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  216.205140][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  216.223875][  T764] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.235992][T14846] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  216.245517][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  216.248976][T14846] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  216.261461][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  216.271086][T14846] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  216.288255][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  216.315310][  T764] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.343333][  T764] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.359156][T14954] loop1: detected capacity change from 0 to 512
[  216.421858][T14846] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.427586][T14846] 8021q: adding VLAN 0 to HW filter on device team0
[  216.431142][  T794] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.431177][  T794] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.436362][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  216.436378][   T29] audit: type=1400 audit(1789972371.070:2104): avc:  denied  { write } for  pid=14968 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.494690][  T794] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.494724][  T794] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.518485][  T764] bridge_slave_1: left allmulticast mode
[  216.518507][  T764] bridge_slave_1: left promiscuous mode
[  216.518683][  T764] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.528577][  T764] bridge_slave_0: left allmulticast mode
[  216.528597][  T764] bridge_slave_0: left promiscuous mode
[  216.528697][  T764] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.569570][T14954] EXT4-fs: test_dummy_encryption option not supported
[  216.702390][   T29] audit: type=1400 audit(1789972371.340:2105): avc:  denied  { write } for  pid=14976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.747792][   T29] audit: type=1400 audit(1789972371.380:2106): avc:  denied  { write } for  pid=15005 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.791517][  T198] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  216.821068][  T764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.825414][  T764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.826405][  T764] bond0 (unregistering): Released all slaves
[  216.864405][T14994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.895646][  T764] hsr_slave_0: left promiscuous mode
[  216.895916][  T764] hsr_slave_1: left promiscuous mode
[  216.896407][  T764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.896423][  T764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.896862][  T764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.896877][  T764] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.909170][  T764] veth1_macvtap: left promiscuous mode
[  216.909197][  T764] veth0_macvtap: left promiscuous mode
[  216.909295][  T764] veth1_vlan: left promiscuous mode
[  216.909328][  T764] veth0_vlan: left promiscuous mode
[  217.113405][  T764] team0 (unregistering): Port device team_slave_1 removed
[  217.116385][  T764] team0 (unregistering): Port device team_slave_0 removed
[  217.203556][T15021] loop5: detected capacity change from 0 to 2048
[  217.227095][T15021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.227230][T15021] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.292669][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.322869][   T29] audit: type=1400 audit(1789972371.960:2107): avc:  denied  { write } for  pid=15012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.353019][   T29] audit: type=1400 audit(1789972371.980:2108): avc:  denied  { write } for  pid=15040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.382932][  T764] IPVS: stop unused estimator thread 0...
[  217.396621][T14846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.456911][   T29] audit: type=1400 audit(1789972372.090:2109): avc:  denied  { write } for  pid=15042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.483573][   T29] audit: type=1400 audit(1789972372.110:2110): avc:  denied  { write } for  pid=15060 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.515493][T14846] veth0_vlan: entered promiscuous mode
[  217.517688][T14846] veth1_vlan: entered promiscuous mode
[  217.538594][T14846] veth0_macvtap: entered promiscuous mode
[  217.540850][T14846] veth1_macvtap: entered promiscuous mode
[  217.545213][T14846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.548556][T14846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.554034][  T764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.554125][  T764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.554158][  T764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.595255][   T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.612719][   T29] audit: type=1400 audit(1789972372.250:2111): avc:  denied  { write } for  pid=15062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.643568][   T29] audit: type=1400 audit(1789972372.270:2112): avc:  denied  { write } for  pid=15074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.713608][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3065'.
[  217.733751][T15081] team1: entered promiscuous mode
[  217.733771][T15081] team1: entered allmulticast mode
[  217.737283][T15081] 8021q: adding VLAN 0 to HW filter on device team1
[  217.792196][   T29] audit: type=1400 audit(1789972372.430:2113): avc:  denied  { write } for  pid=15080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  218.572963][T15167] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock
[  218.659804][T15174] loop1: detected capacity change from 0 to 128
[  218.670399][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  218.670475][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  218.670523][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  218.679503][T15174] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  218.683807][T15174] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.852600][T12381] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.150848][T15204] xt_hashlimit: size too large, truncated to 1048576
[  219.390510][T15214] loop1: detected capacity change from 0 to 8192
[  219.481300][T15225] loop5: detected capacity change from 0 to 512
[  219.505146][T15225] EXT4-fs (loop5): 1 orphan inode deleted
[  219.505633][T15225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.505814][T15225] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.508775][T15225] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3080'.
[  219.539204][  T764] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 1
[  219.553449][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.649578][T15232] netdevsim netdevsim1 netdevsim3: IPsec offload requires 128 bit authentication
[  219.673773][T14997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  219.693003][T15238] loop1: detected capacity change from 0 to 1024
[  219.695098][T15238] EXT4-fs: Ignoring removed bh option
[  219.718860][T15238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  219.718921][T15238] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.747781][T15238] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 3)
[  219.749423][T15238] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  219.749450][T15238] EXT4-fs (loop1): This should not happen!! Data will be lost
[  219.749450][T15238] 
[  219.789416][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.804057][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.818369][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.832777][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.846925][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.861534][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.863189][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.864753][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.865134][T15252] loop3: detected capacity change from 0 to 128
[  219.866169][T15238] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.3086: lblock 3 mapped to illegal pblock 3 (length 1)
[  219.869550][T15252] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  219.870069][T15252] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.022257][T12381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  220.090972][T14846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.165010][ T3029] 8021q: adding VLAN 0 to HW filter on device eth5
[  220.296773][T15280] loop9: detected capacity change from 0 to 512
[  220.322856][T15280] EXT4-fs (loop9): 1 orphan inode deleted
[  220.323272][T15280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.323528][T15280] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.353635][  T764] EXT4-fs error (device loop9): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 1
[  220.396756][T15280] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3094'.
[  220.465934][T14426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.511980][ T3029] 8021q: adding VLAN 0 to HW filter on device eth6
[  220.590203][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  220.715191][T15319] loop5: detected capacity change from 0 to 512
[  220.728888][T15322] loop2: detected capacity change from 0 to 1024
[  220.729326][T15322] EXT4-fs: Ignoring removed bh option
[  220.758702][T15322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  220.758767][T15322] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.759228][T15319] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.3105: iget: bad i_size value: 38620345925642
[  220.759271][T15319] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  220.759488][T15319] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.3105: couldn't read orphan inode 15 (err -117)
[  220.759516][T15319] loop5: lost filesystem error report for type 5 error -117
[  220.759679][    C0] EXT4-fs (loop5): error count since last fsck: 2
[  220.759729][    C0] EXT4-fs (loop5): initial error at time 1789972375: ext4_orphan_get:1403: inode 15
[  220.759757][    C0] EXT4-fs (loop5): last error at time 1789972375: ext4_orphan_get:1408
[  220.760744][T15319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.785075][T15322] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 3)
[  220.827889][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.828183][T15322] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  220.828219][T15322] EXT4-fs (loop2): This should not happen!! Data will be lost
[  220.828219][T15322] 
[  220.848347][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.848622][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.848853][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.849156][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.849389][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.857441][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.857719][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.857897][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.858111][T15322] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.3103: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.010372][  T764] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  221.010401][  T764] EXT4-fs (loop2): This should not happen!! Data will be lost
[  221.010401][  T764] 
[  221.011127][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  221.035137][ T3029] 8021q: adding VLAN 0 to HW filter on device eth7
[  221.055295][T15342] loop1: detected capacity change from 0 to 512
[  221.055645][T15342] EXT4-fs: Ignoring removed i_version option
[  221.055696][T15342] ext2: Unknown parameter 'obj_user'
[  221.360348][ T3029] 8021q: adding VLAN 0 to HW filter on device eth8
[  221.741545][T15389] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  221.766141][T15400] loop9: detected capacity change from 0 to 512
[  221.786748][T15400] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.3123: iget: bad i_size value: 38620345925642
[  221.786784][T15400] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  221.789789][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  221.789812][    C1] EXT4-fs (loop9): initial error at time 1789972376: ext4_orphan_get:1403: inode 15
[  221.789860][    C1] EXT4-fs (loop9): last error at time 1789972376: ext4_orphan_get:1403: inode 15
[  221.841478][T15400] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.3123: couldn't read orphan inode 15 (err -117)
[  221.841514][T15400] loop9: lost filesystem error report for type 5 error -117
[  221.844557][T15400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.848228][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  221.848297][   T29] audit: type=1400 audit(1789972376.480:2138): avc:  denied  { write } for  pid=15396 comm="syz.9.3123" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  221.939934][T14426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.039468][T15415] ip_tables: iptables: counters copy to user failed while replacing table
[  222.297582][T15430] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  222.673084][T15457] loop3: detected capacity change from 0 to 512
[  222.696128][T15457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.696198][T15457] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.729436][T14846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.961181][T15474] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  222.980540][T15486] loop5: detected capacity change from 0 to 164
[  223.084630][T15493] loop5: detected capacity change from 0 to 2048
[  223.105852][T15493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.108951][   T29] audit: type=1400 audit(1789972377.740:2139): avc:  denied  { write } for  pid=15492 comm="syz.5.3156" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  223.146703][T11550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.213613][  T734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.264627][  T734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.316958][  T734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.397150][  T734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.545408][  T734] bridge_slave_1: left allmulticast mode
[  223.545476][  T734] bridge_slave_1: left promiscuous mode
[  223.545577][  T734] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.553519][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811c5df400: rx timeout, send abort
[  223.563992][  T734] bridge_slave_0: left allmulticast mode
[  223.564013][  T734] bridge_slave_0: left promiscuous mode
[  223.564231][  T734] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.721665][  T734] bond1 (unregistering): (slave geneve2): Releasing active interface
[  223.756530][  T734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.769130][  T734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.770337][  T734] bond0 (unregistering): Released all slaves
[  223.790812][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.790862][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.790908][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.790962][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.790999][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.791044][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.791097][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  223.793085][  T734] bond1 (unregistering): Released all slaves
[  223.923786][  T734] hsr_slave_0: left promiscuous mode
[  223.924348][  T734] hsr_slave_1: left promiscuous mode
[  223.925136][  T734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.925154][  T734] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.927151][  T734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.927167][  T734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.936499][  T734] veth1_macvtap: left promiscuous mode
[  223.936525][  T734] veth0_macvtap: left promiscuous mode
[  223.936594][  T734] veth1_vlan: left promiscuous mode
[  223.936663][  T734] veth0_vlan: left promiscuous mode
[  224.011092][  T764] IPVS: starting estimator thread 0...
[  224.037605][   T29] audit: type=1400 audit(1789972378.670:2140): avc:  denied  { write } for  pid=15551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.062961][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a83ee00: rx timeout, send abort
[  224.063004][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811c5df400: abort rx timeout. Force session deactivation
[  224.100240][T15570] IPVS: using max 2496 ests per chain, 124800 per kthread
[  224.138246][   T29] audit: type=1400 audit(1789972378.770:2141): avc:  denied  { write } for  pid=15577 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.181647][  T734] team0 (unregistering): Port device team_slave_1 removed
[  224.197055][  T734] team0 (unregistering): Port device team_slave_0 removed
[  224.284960][T15588] loop3: detected capacity change from 0 to 1024
[  224.288550][T15588] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  224.288577][T15588] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  224.316945][T15588] JBD2: no valid journal superblock found
[  224.317000][T15588] EXT4-fs (loop3): Could not load journal inode
[  224.341390][ T3029] 8021q: adding VLAN 0 to HW filter on device eth17
[  224.511356][T15512] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.511438][T15512] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.511495][T15512] bridge_slave_0: entered allmulticast mode
[  224.511970][T15512] bridge_slave_0: entered promiscuous mode
[  224.544167][T15512] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.544205][T15512] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.544273][T15512] bridge_slave_1: entered allmulticast mode
[  224.544859][T15512] bridge_slave_1: entered promiscuous mode
[  224.563802][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a83ee00: abort rx timeout. Force session deactivation
[  224.619141][T15512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.631861][T15512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.651397][T15512] team0: Port device team_slave_0 added
[  224.652442][T15512] team0: Port device team_slave_1 added
[  224.691385][T15512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.691401][T15512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.691497][T15512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.692042][T15512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.692054][T15512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.692080][T15512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.698446][   T29] audit: type=1400 audit(1789972379.330:2142): avc:  denied  { write } for  pid=15605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.736252][  T734] IPVS: stop unused estimator thread 0...
[  224.757241][T15512] hsr_slave_0: entered promiscuous mode
[  224.763515][T15512] hsr_slave_1: entered promiscuous mode
[  224.763727][T15512] debugfs: 'hsr0' already exists in 'hsr'
[  224.763742][T15512] Cannot create hsr debugfs directory
[  224.774122][   T29] audit: type=1400 audit(1789972379.410:2143): avc:  denied  { write } for  pid=15628 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.876800][ T3029] 8021q: adding VLAN 0 to HW filter on device eth18
[  225.016811][   T29] audit: type=1400 audit(1789972379.650:2144): avc:  denied  { write } for  pid=15635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.053161][   T29] audit: type=1400 audit(1789972379.690:2145): avc:  denied  { write } for  pid=15652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.202840][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811d987400: rx timeout, send abort
[  225.211840][T15512] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  225.222058][T15512] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  225.222499][T15512] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  225.227643][T15512] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  225.228329][T15512] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  225.235027][T15512] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  225.235838][T15512] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  225.241856][T15512] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  225.287214][T15512] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.287249][T15512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.287311][T15512] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.287418][T15512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.289246][   T29] audit: type=1400 audit(1789972379.920:2146): avc:  denied  { write } for  pid=15657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.343985][   T29] audit: type=1400 audit(1789972379.980:2147): avc:  denied  { write } for  pid=15676 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.430697][T15675] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  225.430996][  T794] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.434349][  T794] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.446877][T15512] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.457715][T15512] 8021q: adding VLAN 0 to HW filter on device team0
[  225.466376][  T734] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.466411][  T734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.471801][  T734] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.471835][  T734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.702873][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d24fc00: rx timeout, send abort
[  225.702930][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811d987400: abort rx timeout. Force session deactivation
[  225.714527][T15512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.938750][T15512] veth0_vlan: entered promiscuous mode
[  225.947509][T15512] veth1_vlan: entered promiscuous mode
[  226.032480][T15512] veth0_macvtap: entered promiscuous mode
[  226.035480][T15512] veth1_macvtap: entered promiscuous mode
[  226.041476][T15751] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3212'.
[  226.041497][T15751] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3212'.
[  226.042612][T15512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.047188][T15512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.129959][  T764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.130001][  T764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.130115][  T764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.130254][  T764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.202920][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d24fc00: abort rx timeout. Force session deactivation
[  226.910118][  T945] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  226.912427][  T945] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  226.949610][T15793] fido_id[15793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  227.147056][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  227.147072][   T29] audit: type=1326 audit(1789972381.780:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.147183][   T29] audit: type=1326 audit(1789972381.780:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.147613][   T29] audit: type=1326 audit(1789972381.780:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.148936][   T29] audit: type=1326 audit(1789972381.780:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.149088][   T29] audit: type=1326 audit(1789972381.780:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.152318][   T29] audit: type=1326 audit(1789972381.790:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.153184][   T29] audit: type=1326 audit(1789972381.790:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.154257][   T29] audit: type=1326 audit(1789972381.790:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.156161][   T29] audit: type=1326 audit(1789972381.790:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.156359][   T29] audit: type=1326 audit(1789972381.790:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.9.3243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7864e159 code=0x7ffc0000
[  227.655547][T15843] syzkaller1: entered promiscuous mode
[  227.655568][T15843] syzkaller1: entered allmulticast mode
[  227.827450][   T48] IPVS: starting estimator thread 0...
[  227.827832][T15854] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  227.920646][T15858] IPVS: using max 2544 ests per chain, 127200 per kthread
[  227.970194][T15871] loop2: detected capacity change from 0 to 512
[  227.987999][T15871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.988066][T15871] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.039872][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.430022][T15895] FAULT_INJECTION: forcing a failure.
[  228.430022][T15895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  228.430055][T15895] CPU: 1 UID: 0 PID: 15895 Comm: syz.3.3272 Not tainted syzkaller #0 PREEMPT(lazy) 
[  228.430145][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.430158][T15895] Call Trace:
[  228.430165][T15895]  <TASK>
[  228.430175][T15895]  __dump_stack+0x1d/0x30
[  228.430243][T15895]  dump_stack_lvl+0x95/0xd0
[  228.430271][T15895]  dump_stack+0x15/0x1b
[  228.430290][T15895]  should_fail_ex+0x262/0x280
[  228.430320][T15895]  should_fail+0xb/0x20
[  228.430356][T15895]  should_fail_usercopy+0x1a/0x20
[  228.430466][T15895]  _copy_from_user+0x1c/0xb0
[  228.430533][T15895]  __se_sys_rt_sigqueueinfo+0x29d/0x410
[  228.430574][T15895]  __x64_sys_rt_sigqueueinfo+0x43/0x50
[  228.430605][T15895]  x64_sys_call+0x235b/0x2550
[  228.430663][T15895]  do_syscall_64+0x112/0x360
[  228.430718][T15895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.430769][T15895] RIP: 0033:0x7fc80295e159
[  228.430835][T15895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.430859][T15895] RSP: 002b:00007fc8013b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081
[  228.430885][T15895] RAX: ffffffffffffffda RBX: 00007fc802be5fa0 RCX: 00007fc80295e159
[  228.430901][T15895] RDX: 0000200000000080 RSI: 000000000020003a RDI: 0000000000000000
[  228.430915][T15895] RBP: 00007fc8029f506b R08: 0000000000000000 R09: 0000000000000000
[  228.430928][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.430941][T15895] R13: 00007fc802be6038 R14: 00007fc802be5fa0 R15: 00007fff556ebe28
[  228.430986][T15895]  </TASK>
[  228.911103][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.911160][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.911212][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.911252][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.911302][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  228.911348][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  229.089160][T15902] loop5: detected capacity change from 0 to 512
[  229.100983][T15902] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  229.115706][T15902] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[  229.115891][T15902] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[  229.116090][T15902] syz.5.3275: attempt to access beyond end of device
[  229.116090][T15902] loop5: rw=2049, sector=17179852706, nr_sectors = 64 limit=512
[  229.124476][T15907] loop2: detected capacity change from 0 to 512
[  229.180982][T15907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.181048][T15907] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.225570][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.382861][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.382948][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.385796][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3280'.
[  229.386341][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3280'.
[  229.398589][T15919] loop2: detected capacity change from 0 to 4096
[  229.427639][T15919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.453622][T10160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.118947][T15939] loop5: detected capacity change from 0 to 512
[  230.120571][T15939] EXT4-fs: Ignoring removed i_version option
[  230.120699][T15939] ext2: Unknown parameter 'obj_user'
[  230.307633][ T2990] ==================================================================
[  230.307662][ T2990] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath
[  230.307694][ T2990] 
[  230.307702][ T2990] write to 0xffff888100598f00 of 4 bytes by task 3941 on cpu 1:
[  230.307720][ T2990]  d_make_discardable+0x4f/0x90
[  230.307746][ T2990]  simple_unlink+0x68/0x80
[  230.307777][ T2990]  shmem_unlink+0x12d/0x140
[  230.307797][ T2990]  vfs_unlink+0x1c3/0x490
[  230.307826][ T2990]  filename_unlinkat+0x1dc/0x410
[  230.307860][ T2990]  __se_sys_unlink+0x2b/0xe0
[  230.307889][ T2990]  __x64_sys_unlink+0x1f/0x30
[  230.307917][ T2990]  x64_sys_call+0x18ee/0x2550
[  230.307939][ T2990]  do_syscall_64+0x112/0x360
[  230.307958][ T2990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.307983][ T2990] 
[  230.307990][ T2990] read to 0xffff888100598f00 of 4 bytes by task 2990 on cpu 0:
[  230.308009][ T2990]  step_into_slowpath+0x139/0x4c0
[  230.308035][ T2990]  path_lookupat+0x2eb/0x4c0
[  230.308057][ T2990]  filename_lookup+0x18f/0x390
[  230.308080][ T2990]  do_readlinkat+0x74/0x2f0
[  230.308106][ T2990]  __x64_sys_readlink+0x47/0x60
[  230.308129][ T2990]  x64_sys_call+0x1d41/0x2550
[  230.308151][ T2990]  do_syscall_64+0x112/0x360
[  230.308166][ T2990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.308186][ T2990] 
[  230.308190][ T2990] value changed: 0x08300080 -> 0x00004080
[  230.308204][ T2990] 
[  230.308209][ T2990] Reported by Kernel Concurrency Sanitizer on:
[  230.308221][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  230.308245][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  230.308257][ T2990] ==================================================================
[  230.615872][T15838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.480701][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  232.725793][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  232.725812][   T29] audit: type=1400 audit(1789972387.360:2170): avc:  denied  { write } for  pid=15972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  232.766359][   T29] audit: type=1400 audit(1789972387.400:2171): avc:  denied  { write } for  pid=15983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  233.278402][   T29] audit: type=1400 audit(1789972387.910:2172): avc:  denied  { write } for  pid=15986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  233.317117][   T29] audit: type=1400 audit(1789972387.950:2173): avc:  denied  { write } for  pid=15997 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.030361][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  234.030422][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  234.030495][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.600163][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  239.160566][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  239.160635][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  239.160668][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  239.160731][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  239.160801][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512