last executing test programs:

7m48.6527374s ago: executing program 1 (id=99):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x10000042, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
close(r0)

7m48.628600882s ago: executing program 1 (id=102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

7m48.590667006s ago: executing program 1 (id=104):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'ipvlan1\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xf0bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050)

7m48.570552868s ago: executing program 1 (id=105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xa0)
mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000680)='./file0/../file0\x00')
mount$bind(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0xd5848, 0x0)
pivot_root(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000d40)='./file0/../file0\x00')

7m48.514926004s ago: executing program 1 (id=109):
r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r0, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200))
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)

7m48.301378856s ago: executing program 1 (id=120):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70)
readv(r0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2)

7m48.301249945s ago: executing program 32 (id=120):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70)
readv(r0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2)

7m37.890761835s ago: executing program 4 (id=314):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000400)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4ec, &(0x7f0000000b40)="$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")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
statx(r0, &(0x7f0000003540)='./file1\x00', 0x800, 0x800, &(0x7f0000002c40))

7m37.319211943s ago: executing program 4 (id=330):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x284b43a, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd6d}}, {@grpquota}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq}, {@uid_gt}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x39, 0x36, 0x37, 0x39, 0x64, 0x30, 0x39], 0x2d, [0x38, 0x65, 0x61, 0x61], 0x2d, [0x61, 0x34, 0x34, 0x65], 0x2d, [0x30, 0x31, 0x39, 0x37], 0x2d, [0x32, 0x30, 0x5, 0x63, 0x39, 0x33, 0x62, 0x37]}}}, {@euid_lt}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2a0471a, &(0x7f0000000640)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x0, 0xa)
ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000001440)={0xc3e1, 0xd000003, 0x7})

7m36.601837936s ago: executing program 4 (id=349):
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2808080, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=cp865,rodir,uni_xlate=0,uni_xrrors=remount-ro,iocharset=cp850,shortname=mixed,rodir,nonumtail=0,nfs=stale_rw,iocharset=cp437,flush,nonumtail=0,\x00'], 0x81, 0x2b2, &(0x7f0000000480)="$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")
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x2, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000040000000000000000004000000bb7f1a00be00feff000000009500000000000000"], &(0x7f0000000dc0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000e00)=""/147, 0xffffffb0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)

7m32.946117838s ago: executing program 4 (id=365):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000003c0)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002f80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000003000)='./file2\x00', &(0x7f0000003040)=[0x2], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40)

7m32.737141899s ago: executing program 4 (id=373):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x63, 0x1, 0x0, 0x21}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

7m32.426379871s ago: executing program 4 (id=380):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000001140)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000001200)={&(0x7f0000001240)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000012c0)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)

7m32.426248311s ago: executing program 33 (id=380):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000001140)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000001200)={&(0x7f0000001240)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000012c0)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)

6m23.298637516s ago: executing program 6 (id=1958):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="7cf13307000000000008000081001aac1a88", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m20.105125231s ago: executing program 6 (id=1970):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0xa8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)

6m19.960631475s ago: executing program 6 (id=1973):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000300)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f00000003c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc\x00', 0x161)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f00000008c0)='.\x00', 0x80000, 0x103)
getdents(r0, &(0x7f0000000900)=""/184, 0xb8)

6m19.744162798s ago: executing program 6 (id=1975):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000002bc0)='./file0\x00', 0x18b)
mount$bind(&(0x7f0000002c80)='.\x00', &(0x7f0000002cc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
mount$bpf(0x0, &(0x7f0000002d00)='./file0\x00', 0x0, 0x84000, 0x0)

6m19.642973118s ago: executing program 6 (id=1976):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='foo:mod:no', 0xa)
write(r0, &(0x7f0000000140)='!foo:mod:no', 0xb)

6m19.385154704s ago: executing program 6 (id=1981):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f00000016c0)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r1, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="06c3", 0xffd8}], 0x1)

6m19.320567651s ago: executing program 34 (id=1981):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f00000016c0)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r1, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="06c3", 0xffd8}], 0x1)

5m29.611904049s ago: executing program 7 (id=3098):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./pipefs\x00', &(0x7f00000003c0)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/gssd/clntXX/gssd\x00', 0x101001, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xbc78, 0xa276)
open(&(0x7f0000000440)='./pipefs/gssd/clntXX/gssd\x00', 0x149c01, 0x0)

5m29.526205828s ago: executing program 7 (id=3103):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000930000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x8000c89f, 0xc880, 0x7, 0x20002f3})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'tunl0\x00', {0x3}, 0xff})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m29.161750045s ago: executing program 7 (id=3111):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
listen(r0, 0x89)

5m29.081252784s ago: executing program 7 (id=3112):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

5m29.080738873s ago: executing program 7 (id=3114):
mkdir(&(0x7f0000000340)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='my_sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0)
syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)

5m29.062404935s ago: executing program 7 (id=3116):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x3ff, 0x4)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13)

5m13.917055376s ago: executing program 35 (id=3116):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x3ff, 0x4)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13)

2m18.992716077s ago: executing program 8 (id=6854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x0)

2m18.97336555s ago: executing program 8 (id=6855):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0xaf07, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0xde4efe0668956469}, 0x0)

2m18.905815257s ago: executing program 8 (id=6858):
perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
request_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000a00)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
write$UHID_INPUT2(r0, &(0x7f0000000b80)={0xc, {0xf, "11ff01b61409fd914cba2b73b9f89c"}}, 0x15)

2m18.812194756s ago: executing program 8 (id=6860):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

2m18.759340721s ago: executing program 8 (id=6863):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file2\x00', 0x0, 0x8}, 0x18)
r0 = io_uring_setup(0x51f4, &(0x7f00000000c0)={0x0, 0x16a0d, 0x3000, 0x1, 0x387})
prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r0}, 0x1)

2m17.477032822s ago: executing program 8 (id=6892):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x40000000, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x3a, 0x3, @mcast2}, 0x1c, 0x0}, 0x30048b88)

2m17.465226603s ago: executing program 36 (id=6892):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x40000000, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x3a, 0x3, @mcast2}, 0x1c, 0x0}, 0x30048b88)

2.510962663s ago: executing program 3 (id=9159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.098633265s ago: executing program 3 (id=9166):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7ff, 0x3}, 0x10ecc8, 0x1224, 0xfffffdff, 0x1, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(r2, &(0x7f00000000c0)=@random={'security.', 'ip6gretap\x00'}, &(0x7f0000100700)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

1.887850837s ago: executing program 2 (id=9170):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001480)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001580), &(0x7f00000015c0)}, 0x2a)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001600)={0x40000000, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

915.910187ms ago: executing program 2 (id=9176):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
socket$packet(0x11, 0x2, 0x300)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0)

874.636561ms ago: executing program 3 (id=9179):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000740)={[{@nojournal_checksum}, {@errors_continue}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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")
select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

766.461902ms ago: executing program 2 (id=9182):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94)
openat$binderfs_feature(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/features/extended_error\x00', 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2000)

725.657656ms ago: executing program 0 (id=9193):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)

725.121646ms ago: executing program 3 (id=9184):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x18}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = fsopen(&(0x7f0000000340)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000500)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9ZR\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f00000006c0)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000780)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000007c0)="82", 0x1)
close(r0)

637.690675ms ago: executing program 0 (id=9187):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x3}]}}}, @IFLA_XDP={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

626.858906ms ago: executing program 5 (id=9188):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0x20000017})
close_range(r0, r1, 0x0)

595.585999ms ago: executing program 2 (id=9190):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000200)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

513.019778ms ago: executing program 3 (id=9191):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000c00)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
listen(r0, 0x1)
sendmsg(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0)
recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x20200000}], 0x1, 0x2, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000001d40)={&(0x7f0000001d80)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000001e00)=[{&(0x7f0000001e40), 0x1000}], 0x1, &(0x7f0000001e80)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)

489.94261ms ago: executing program 0 (id=9192):
socket$kcm(0x10, 0x2, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8)

474.625602ms ago: executing program 5 (id=9194):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x2400, 0x0, 0x0, 0x2, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000b80)="$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")
syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000f40))
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_eee={0x33, 0x7, 0x800081, 0x1, 0xfffffffe, 0x8, 0x8, 0x0, [0x3, 0x9]}})

421.266447ms ago: executing program 2 (id=9205):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/8, 0x8}, {0x0}], 0x2}, 0x95}], 0x1, 0x40000043, 0x0)

421.006357ms ago: executing program 0 (id=9196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

419.066937ms ago: executing program 2 (id=9198):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

375.453532ms ago: executing program 3 (id=9199):
r0 = gettid()
timer_create(0x1, &(0x7f0000000ec0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000f00))
timer_settime(0x0, 0x0, &(0x7f0000000f40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000f80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
vmsplice(r1, &(0x7f0000001000)=[{&(0x7f0000001040)='*', 0x1}], 0x1, 0xd)

338.971846ms ago: executing program 5 (id=9200):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x4440, 0x0, 0x7, 0x4, 0x3, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f00000002c0)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='X', 0x1, 0x400e1, &(0x7f0000000340)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380)={0x0, 0x0, 0xfc, 0x0, 0x8, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x41, 0x0, 0x0, 0x0, 0xffffffffffffff2b}, 0x1}], 0x414, 0x0, 0x0)

338.786516ms ago: executing program 9 (id=9201):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94)
openat$binderfs_feature(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/features/extended_error\x00', 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2000)

255.442384ms ago: executing program 9 (id=9202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="40100000004104002c00128008000100677265002000028008000700ac1414aa060003008100000008", @ANYRES32=r2], 0x54}}, 0x4040000)

246.622505ms ago: executing program 5 (id=9203):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000000)="ddfe4dda11fb68e9528806c92b74cb939544ba5ba90fcae672f58efee1809574cadaa9bc", 0x0}, 0x20)

181.280452ms ago: executing program 5 (id=9204):
sched_setattr(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

175.636123ms ago: executing program 5 (id=9206):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x5eaa)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x2, 0xffffffff, 0x4, 0x7fff, 0x8, "3526a9c1dd12c37ef693333468f1e9228beb50"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x1)

149.453625ms ago: executing program 9 (id=9207):
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x409, 0x4)

145.319846ms ago: executing program 0 (id=9208):
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0xc1)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000580)='27', 0x2)
bpf$MAP_CREATE(0x4000000000000, &(0x7f00000005c0)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48)
mlockall(0x7)

64.969944ms ago: executing program 9 (id=9209):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(0x0, 0x108843, 0x98)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180063f1000450047699e5de4b7347724d64dd1c4e8a4", 0x3d}, {&(0x7f0000000800)="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", 0x3f8}], 0x2}, 0x40)

50.520386ms ago: executing program 0 (id=9210):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

21.216318ms ago: executing program 9 (id=9211):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x3, 0x300)
unshare(0x40400)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000400), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000480), 0x8)

0s ago: executing program 9 (id=9212):
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='|', 0xfd}], 0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

[T23656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  410.888619][T23656] Call Trace:
[  410.888640][T23656]  <TASK>
[  410.888663][T23656]  __dump_stack+0x1d/0x30
[  410.888755][T23656]  dump_stack_lvl+0x95/0xd0
[  410.888835][T23656]  dump_stack+0x15/0x1b
[  410.888948][T23656]  should_fail_ex+0x262/0x280
[  410.889048][T23656]  ? __kernfs_new_node+0x70/0x440
[  410.889121][T23656]  should_failslab+0x8c/0xb0
[  410.889228][T23656]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  410.889323][T23656]  ? __kernfs_new_node+0x70/0x440
[  410.889461][T23656]  __kernfs_new_node+0x70/0x440
[  410.889481][T23656]  ? kernfs_link_sibling+0x2f5/0x320
[  410.889502][T23656]  ? __rcu_read_unlock+0x4e/0x70
[  410.889534][T23656]  ? kernfs_activate_one+0x10c/0x140
[  410.889628][T23656]  ? up_write+0x19/0x60
[  410.889696][T23656]  ? kernfs_add_one+0xf4/0x310
[  410.889764][T23656]  kernfs_new_node+0x107/0x140
[  410.889792][T23656]  __kernfs_create_file+0x4b/0x180
[  410.889824][T23656]  ? __pfx_dev_attr_show+0x10/0x10
[  410.889882][T23656]  ? __pfx_dev_attr_store+0x10/0x10
[  410.889974][T23656]  sysfs_add_file_mode_ns+0x132/0x1b0
[  410.890007][T23656]  sysfs_create_file_ns+0xd9/0x120
[  410.890102][T23656]  device_create_file+0xa5/0x110
[  410.890227][T23656]  device_add+0x32e/0x790
[  410.890347][T23656]  device_create+0x183/0x1e0
[  410.890403][T23656]  ? vsnprintf+0x857/0x8c0
[  410.890502][T23656]  bdi_register_va+0x6f/0x420
[  410.890600][T23656]  super_setup_bdi_name+0x94/0x140
[  410.890715][T23656]  ? _raw_spin_unlock+0x9/0x30
[  410.890831][T23656]  super_setup_bdi+0x47/0x50
[  410.890989][T23656]  v9fs_get_tree+0x292/0x5e0
[  410.891073][T23656]  vfs_get_tree+0x57/0x1d0
[  410.891168][T23656]  do_new_mount+0x288/0x730
[  410.891333][T23656]  ? security_capable+0x7b/0x90
[  410.891398][T23656]  path_mount+0x4ad/0xb90
[  410.891530][T23656]  __se_sys_mount+0x28c/0x2e0
[  410.891620][T23656]  __x64_sys_mount+0x67/0x80
[  410.891717][T23656]  x64_sys_call+0xc3b/0x2550
[  410.891806][T23656]  do_syscall_64+0x112/0x360
[  410.891906][T23656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.892021][T23656] RIP: 0033:0x7fd19860f559
[  410.892073][T23656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.892133][T23656] RSP: 002b:00007fd19705f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  410.892212][T23656] RAX: ffffffffffffffda RBX: 00007fd198895fa0 RCX: 00007fd19860f559
[  410.892243][T23656] RDX: 0000200000001dc0 RSI: 0000200000001d80 RDI: 0000000000000000
[  410.892333][T23656] RBP: 00007fd1986a6b20 R08: 0000200000001e00 R09: 0000000000000000
[  410.892446][T23656] R10: 0000000002204803 R11: 0000000000000246 R12: 0000000000000000
[  410.892488][T23656] R13: 00007fd198896038 R14: 00007fd198895fa0 R15: 00007ffe3ec17838
[  410.892550][T23656]  </TASK>
[  411.244472][T23663] __nla_validate_parse: 2 callbacks suppressed
[  411.244489][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7854'.
[  411.434624][T23676] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7860'.
[  411.492799][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d262600: rx timeout, send abort
[  411.510858][T23680] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  411.657594][T23690] loop9: detected capacity change from 0 to 1024
[  411.674746][T23690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.677982][   T29] audit: type=1400 audit(1793129718.944:4598): avc:  denied  { write } for  pid=23689 comm="syz.9.7867" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  411.884879][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.992837][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881158e3c00: rx timeout, send abort
[  411.992893][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d262600: abort rx timeout. Force session deactivation
[  412.213248][T23737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7887'.
[  412.361561][   T29] audit: type=1400 audit(1793129719.634:4599): avc:  denied  { cmd } for  pid=23745 comm="syz.3.7892" path="socket:[70844]" dev="sockfs" ino=70844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  412.387588][   T29] audit: type=1400 audit(1793129719.654:4600): avc:  denied  { create } for  pid=23744 comm="syz.0.7891" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1
[  412.489153][T23759] netlink: 'syz.0.7897': attribute type 83 has an invalid length.
[  412.492891][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881158e3c00: abort rx timeout. Force session deactivation
[  412.638535][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  412.892745][T23798] loop9: detected capacity change from 0 to 512
[  412.906168][T23798] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  412.906189][T23798] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  412.913918][T23798] EXT4-fs (loop9): 1 truncate cleaned up
[  412.919533][T23798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.960597][T23807] loop2: detected capacity change from 0 to 164
[  412.974533][T23807] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  412.986482][T23807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7918'.
[  413.005694][T23807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7918'.
[  413.037384][   T29] audit: type=1326 audit(1793129720.304:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.037426][   T29] audit: type=1326 audit(1793129720.304:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.037457][   T29] audit: type=1326 audit(1793129720.304:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.037514][   T29] audit: type=1326 audit(1793129720.304:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.064332][   T29] audit: type=1326 audit(1793129720.314:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.064439][   T29] audit: type=1326 audit(1793129720.314:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.064478][   T29] audit: type=1326 audit(1793129720.314:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23797 comm="syz.9.7916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  413.243593][T23817] netlink: 'syz.0.7922': attribute type 1 has an invalid length.
[  413.252697][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.266512][T23817] 8021q: adding VLAN 0 to HW filter on device bond8
[  413.286322][T23817] bond8: (slave gretap1): making interface the new active one
[  413.287030][T23817] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  413.622201][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7939'.
[  413.639063][T23856] netlink: 'syz.5.7940': attribute type 4 has an invalid length.
[  413.687950][T23856] netlink: 'syz.5.7940': attribute type 4 has an invalid length.
[  413.872315][T23865] loop2: detected capacity change from 0 to 128
[  413.899580][T23865] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  413.928905][T23865] FAT-fs (loop2): IO charset š‡/}ôU„A¹ž)utf8 not found
[  413.931027][T23873] bridge0: port 6(vlan2) entered blocking state
[  413.931088][T23873] bridge0: port 6(vlan2) entered disabled state
[  413.931225][T23873] vlan2: entered allmulticast mode
[  413.931244][T23873] geneve0: entered allmulticast mode
[  413.934236][T23873] vlan2: entered promiscuous mode
[  413.934254][T23873] geneve0: entered promiscuous mode
[  414.125383][T23881] FAULT_INJECTION: forcing a failure.
[  414.125383][T23881] name failslab, interval 1, probability 0, space 0, times 0
[  414.125422][T23881] CPU: 1 UID: 0 PID: 23881 Comm: syz.2.7949 Not tainted syzkaller #0 PREEMPT(lazy) 
[  414.125456][T23881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  414.125475][T23881] Call Trace:
[  414.125484][T23881]  <TASK>
[  414.125523][T23881]  __dump_stack+0x1d/0x30
[  414.125557][T23881]  dump_stack_lvl+0x95/0xd0
[  414.125605][T23881]  dump_stack+0x15/0x1b
[  414.125634][T23881]  should_fail_ex+0x262/0x280
[  414.125703][T23881]  ? __memcg_list_lru_alloc+0x288/0x470
[  414.125784][T23881]  should_failslab+0x8c/0xb0
[  414.125827][T23881]  __kmalloc_noprof+0xb6/0x4b0
[  414.125897][T23881]  ? __memcg_list_lru_alloc+0x288/0x470
[  414.126065][T23881]  __memcg_list_lru_alloc+0x288/0x470
[  414.126115][T23881]  memcg_list_lru_alloc+0x88/0xa0
[  414.126158][T23881]  __memcg_slab_post_alloc_hook+0x23e/0x8c0
[  414.126195][T23881]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  414.126286][T23881]  ? should_fail_ex+0xdb/0x280
[  414.126352][T23881]  kmem_cache_alloc_lru_noprof+0x1d6/0x3e0
[  414.126423][T23881]  ? __d_alloc+0x34/0x320
[  414.126491][T23881]  ? __d_alloc+0x34/0x320
[  414.126528][T23881]  __d_alloc+0x34/0x320
[  414.126562][T23881]  __d_alloc_parallel+0x4f/0xd80
[  414.126600][T23881]  ? avc_has_perm_noaudit+0xac/0x160
[  414.126713][T23881]  ? __rcu_read_unlock+0x4e/0x70
[  414.126751][T23881]  ? __d_lookup+0x30c/0x340
[  414.126791][T23881]  d_alloc_parallel+0x1f/0x30
[  414.126938][T23881]  lookup_open+0x21d/0x1010
[  414.126981][T23881]  path_openat+0x492/0x11c0
[  414.127023][T23881]  do_file_open+0x16c/0x290
[  414.127075][T23881]  do_sys_openat2+0xa1/0x140
[  414.127183][T23881]  __x64_sys_openat+0xf2/0x120
[  414.127261][T23881]  x64_sys_call+0x1f72/0x2550
[  414.127297][T23881]  do_syscall_64+0x112/0x360
[  414.127338][T23881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.127384][T23881] RIP: 0033:0x7f94af6bfd8e
[  414.127404][T23881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.127430][T23881] RSP: 002b:00007f94ae14e9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  414.127480][T23881] RAX: ffffffffffffffda RBX: 00007f94ae14f6c0 RCX: 00007f94af6bfd8e
[  414.127497][T23881] RDX: 0000000000080001 RSI: 00007f94af76a0a0 RDI: ffffffffffffff9c
[  414.127512][T23881] RBP: 00007f94af76a0a0 R08: 0000000000000000 R09: 0000000000000000
[  414.127538][T23881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  414.127551][T23881] R13: 00007f94ae14ea90 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  414.127576][T23881]  </TASK>
[  414.649024][T23895] loop5: detected capacity change from 0 to 512
[  414.710424][T23904] FAULT_INJECTION: forcing a failure.
[  414.710424][T23904] name failslab, interval 1, probability 0, space 0, times 0
[  414.710464][T23904] CPU: 0 UID: 0 PID: 23904 Comm: syz.5.7960 Not tainted syzkaller #0 PREEMPT(lazy) 
[  414.710497][T23904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  414.710523][T23904] Call Trace:
[  414.710532][T23904]  <TASK>
[  414.710542][T23904]  __dump_stack+0x1d/0x30
[  414.710609][T23904]  dump_stack_lvl+0x95/0xd0
[  414.710633][T23904]  dump_stack+0x15/0x1b
[  414.710674][T23904]  should_fail_ex+0x262/0x280
[  414.710704][T23904]  should_failslab+0x8c/0xb0
[  414.710741][T23904]  kmem_cache_alloc_lru_noprof+0x61/0x3e0
[  414.710784][T23904]  ? __d_alloc+0x34/0x320
[  414.710890][T23904]  ? __d_alloc+0x34/0x320
[  414.710964][T23904]  __d_alloc+0x34/0x320
[  414.710991][T23904]  d_make_root+0x28/0x70
[  414.711027][T23904]  mqueue_fill_super+0x194/0x1d0
[  414.711057][T23904]  ? __pfx_mqueue_fill_super+0x10/0x10
[  414.711144][T23904]  get_tree_nodev+0x83/0x100
[  414.711182][T23904]  mqueue_get_tree+0x5d/0x80
[  414.711211][T23904]  vfs_get_tree+0x57/0x1d0
[  414.711256][T23904]  fc_mount_longterm+0x18/0xb0
[  414.711287][T23904]  mq_init_ns+0x2db/0x370
[  414.711331][T23904]  copy_ipcs+0x26d/0x460
[  414.711435][T23904]  create_new_namespaces+0x121/0x420
[  414.711462][T23904]  unshare_nsproxy_namespaces+0x115/0x150
[  414.711598][T23904]  ksys_unshare+0x3a3/0x690
[  414.711650][T23904]  __x64_sys_unshare+0x1f/0x30
[  414.711709][T23904]  x64_sys_call+0x1e33/0x2550
[  414.711781][T23904]  do_syscall_64+0x112/0x360
[  414.711878][T23904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.711901][T23904] RIP: 0033:0x7fd19860f559
[  414.711985][T23904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.712009][T23904] RSP: 002b:00007fd19705f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  414.712033][T23904] RAX: ffffffffffffffda RBX: 00007fd198895fa0 RCX: 00007fd19860f559
[  414.712128][T23904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200
[  414.712186][T23904] RBP: 00007fd1986a6b20 R08: 0000000000000000 R09: 0000000000000000
[  414.712198][T23904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.712245][T23904] R13: 00007fd198896038 R14: 00007fd198895fa0 R15: 00007ffe3ec17838
[  414.712270][T23904]  </TASK>
[  415.158801][T23928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  415.251301][T23912] loop9: detected capacity change from 0 to 512
[  415.276451][T23912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  415.297628][T23912] System zones: 1-12
[  415.300481][T23912] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.7964: missing EA_INODE flag
[  415.300522][T23912] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  415.306051][T23912] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.7964: error while reading EA inode 12 err=-117
[  415.306451][T23912] loop9: lost filesystem error report for type 5 error -117
[  415.310052][    C0] EXT4-fs (loop9): error count since last fsck: 2
[  415.310453][    C0] EXT4-fs (loop9): initial error at time 1793129722: ext4_xattr_inode_iget:437: inode 12
[  415.310742][    C0] EXT4-fs (loop9): last error at time 1793129722: ext4_xattr_inode_iget:442
[  415.392713][T23912] EXT4-fs (loop9): 1 orphan inode deleted
[  415.398819][T23912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.499396][T23946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7973'.
[  415.503722][T23912] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7964'.
[  415.545880][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.661454][T23958] gretap2: entered promiscuous mode
[  415.686495][T23960] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7979'.
[  415.687081][T23960] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7979'.
[  415.728309][ T3908] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  415.732900][ T3908] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  416.080342][T23987] netlink: 'syz.9.7989': attribute type 1 has an invalid length.
[  416.109230][T23987] bond1: entered promiscuous mode
[  416.115971][T23987] 8021q: adding VLAN 0 to HW filter on device bond1
[  416.136223][T23985] ip_tables: iptables: counters copy to user failed while replacing table
[  416.163481][T23987] 8021q: adding VLAN 0 to HW filter on device bond1
[  416.163787][T23987] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  416.163865][T23987] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  416.182964][T23985] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  416.208841][T23987] bond1: (slave ip6gre1): making interface the new active one
[  416.208881][T23987] ip6gre1: entered promiscuous mode
[  416.213324][T23987] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  416.285574][T23993] bond0: no command found in slaves file - use +ifname or -ifname
[  416.287086][T23996] ip_tables: iptables: counters copy to user failed while replacing table
[  416.460418][T24014] rxe_eth0 speed is unknown, defaulting to 1000
[  417.408214][T24073] netlink: 'syz.0.8022': attribute type 29 has an invalid length.
[  417.431557][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8022'.
[  417.431621][T24073] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8022'.
[  417.772022][T24096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8032'.
[  417.862432][T24103] bridge0: port 3(syz_tun) entered disabled state
[  417.864643][T24103] bridge0: port 5(batadv2) entered disabled state
[  417.864789][T24103] bridge0: port 4(batadv1) entered disabled state
[  417.864890][T24103] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.878385][T24103] team_slave_0: left promiscuous mode
[  417.906213][T24103] team_slave_1: left promiscuous mode
[  418.098704][T20199] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  418.098817][T20199] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.098862][T20199] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  418.098900][T20199] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.098954][T20199] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  418.098990][T20199] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.099084][T20199] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  418.099121][T20199] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  418.713654][T24166] ip_tables: iptables: counters copy to user failed while replacing table
[  418.727300][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  418.727349][   T29] audit: type=1326 audit(1793129725.994:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24165 comm="syz.3.8057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feee0eef559 code=0x0
[  418.763925][T24166] raw_sendmsg: syz.0.8055 forgot to set AF_INET. Fix it!
[  418.863398][T24158] loop9: detected capacity change from 0 to 512
[  418.906954][T24158] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  418.907084][T24158] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  418.965986][T24158] EXT4-fs (loop9): 1 truncate cleaned up
[  418.971033][T24158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.980774][   T29] audit: type=1400 audit(1793129726.244:4612): avc:  denied  { write } for  pid=24157 comm="syz.9.8051" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.060678][T24189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8065'.
[  419.237367][ T3402] kernel write not supported for file bpf-prog (pid: 3402 comm: kworker/0:5)
[  419.346932][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.702756][T24245] FAULT_INJECTION: forcing a failure.
[  419.702756][T24245] name failslab, interval 1, probability 0, space 0, times 0
[  419.702797][T24245] CPU: 1 UID: 0 PID: 24245 Comm: syz.2.8089 Not tainted syzkaller #0 PREEMPT(lazy) 
[  419.702828][T24245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  419.702855][T24245] Call Trace:
[  419.702864][T24245]  <TASK>
[  419.702874][T24245]  __dump_stack+0x1d/0x30
[  419.702909][T24245]  dump_stack_lvl+0x95/0xd0
[  419.702935][T24245]  dump_stack+0x15/0x1b
[  419.702957][T24245]  should_fail_ex+0x262/0x280
[  419.702982][T24245]  ? alloc_empty_file+0x70/0x1e0
[  419.703010][T24245]  should_failslab+0x8c/0xb0
[  419.703050][T24245]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  419.703088][T24245]  ? alloc_empty_file+0x70/0x1e0
[  419.703112][T24245]  alloc_empty_file+0x70/0x1e0
[  419.703134][T24245]  alloc_file_pseudo+0x92/0x120
[  419.703159][T24245]  __shmem_file_setup+0x226/0x260
[  419.703196][T24245]  shmem_zero_setup+0x66/0xe0
[  419.703233][T24245]  mmap_region+0x1a6f/0x2320
[  419.703305][T24245]  do_mmap+0xa20/0xc70
[  419.703346][T24245]  vm_mmap_pgoff+0x183/0x2d0
[  419.703383][T24245]  ksys_mmap_pgoff+0xc1/0x310
[  419.703422][T24245]  ? __x64_sys_mmap+0x49/0x70
[  419.703464][T24245]  x64_sys_call+0x23b3/0x2550
[  419.703500][T24245]  do_syscall_64+0x112/0x360
[  419.703540][T24245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.703562][T24245] RIP: 0033:0x7f94af6ff559
[  419.703583][T24245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.703608][T24245] RSP: 002b:00007f94ae14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  419.703631][T24245] RAX: ffffffffffffffda RBX: 00007f94af985fa0 RCX: 00007f94af6ff559
[  419.703646][T24245] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000
[  419.703660][T24245] RBP: 00007f94af796b20 R08: ffffffffffffffff R09: 0000000000000000
[  419.703674][T24245] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  419.703688][T24245] R13: 00007f94af986038 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  419.703713][T24245]  </TASK>
[  420.120726][T24258] loop2: detected capacity change from 0 to 512
[  420.121602][T24258] EXT4-fs: Ignoring removed nobh option
[  420.122741][T24258] EXT4-fs (loop2): orphan cleanup on readonly fs
[  420.122761][T24258] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  420.123295][T24258] EXT4-fs error (device loop2): ext4_clear_blocks:893: inode #13: comm syz.2.8095: attempt to clear invalid blocks 2 len 1
[  420.123331][T24258] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  420.123588][T24258] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  420.123762][T24258] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #13: comm syz.2.8095: invalid indirect mapped block 1819239214 (level 0)
[  420.123807][T24258] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  420.124103][T24258] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #13: comm syz.2.8095: invalid indirect mapped block 1819239214 (level 1)
[  420.124132][T24258] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  420.124681][T24258] EXT4-fs (loop2): 1 truncate cleaned up
[  420.125074][T24258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  420.126944][T24258] EXT4-fs (loop2): shut down requested (2)
[  420.127106][T24258] EXT4-fs: Ignoring removed nobh option
[  420.127140][T24258] EXT4-fs: Ignoring sb option on remount
[  420.320763][ T8585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.458510][T24270] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  420.589781][T20188] batman_adv: batadv3: IGMP Querier appeared
[  420.589801][T20188] batman_adv: batadv3: MLD Querier appeared
[  420.589921][T20188] batman_adv: batadv5: IGMP Querier appeared
[  420.589934][T20188] batman_adv: batadv5: MLD Querier appeared
[  420.589991][T20188] batman_adv: batadv1: IGMP Querier appeared
[  420.590005][T20188] batman_adv: batadv1: MLD Querier appeared
[  420.590097][T20188] batman_adv: batadv4: IGMP Querier appeared
[  420.590108][T20188] batman_adv: batadv4: MLD Querier appeared
[  420.590198][T20188] batman_adv: batadv2: IGMP Querier appeared
[  420.590208][T20188] batman_adv: batadv2: MLD Querier appeared
[  423.616122][T24301] syz.2.8111 (24301): drop_caches: 2
[  424.417677][   T29] audit: type=1400 audit(1793129731.684:4613): avc:  denied  { map } for  pid=24315 comm="syz.2.8116" path="socket:[70530]" dev="sockfs" ino=70530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  424.451813][T24322] syz_tun: left allmulticast mode
[  424.451839][T24322] syz_tun: left promiscuous mode
[  424.452005][T24322] bridge0: port 1(syz_tun) entered disabled state
[  424.517922][T24322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  424.518903][T24326] team0: Mode changed to "broadcast"
[  424.519408][T24327] FAULT_INJECTION: forcing a failure.
[  424.519408][T24327] name failslab, interval 1, probability 0, space 0, times 0
[  424.519469][T24327] CPU: 0 UID: 0 PID: 24327 Comm: syz.2.8123 Not tainted syzkaller #0 PREEMPT(lazy) 
[  424.519546][T24327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  424.519588][T24327] Call Trace:
[  424.519616][T24327]  <TASK>
[  424.519638][T24327]  __dump_stack+0x1d/0x30
[  424.519723][T24327]  dump_stack_lvl+0x95/0xd0
[  424.519869][T24327]  dump_stack+0x15/0x1b
[  424.519937][T24327]  should_fail_ex+0x262/0x280
[  424.520010][T24327]  ? tcf_ct_flow_table_get+0x318/0xdb0
[  424.520139][T24327]  should_failslab+0x8c/0xb0
[  424.520230][T24327]  __kmalloc_cache_noprof+0x5d/0x3e0
[  424.520379][T24327]  ? tcf_ct_flow_table_get+0x318/0xdb0
[  424.520552][T24327]  tcf_ct_flow_table_get+0x318/0xdb0
[  424.520662][T24327]  tcf_ct_init+0x4b8/0x680
[  424.520754][T24327]  ? __nla_validate_parse+0x16c7/0x1d70
[  424.521004][T24327]  ? __pfx_tcf_ct_init+0x10/0x10
[  424.521116][T24327]  tcf_action_init_1+0x395/0x4d0
[  424.521248][T24327]  tcf_action_init+0x29f/0x770
[  424.521428][T24327]  tc_ctl_action+0x29a/0x8c0
[  424.521603][T24327]  ? __pfx_tc_ctl_action+0x10/0x10
[  424.521801][T24327]  rtnetlink_rcv_msg+0x6a7/0x720
[  424.521916][T24327]  netlink_rcv_skb+0x11e/0x220
[  424.522036][T24327]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.522123][T24327]  rtnetlink_rcv+0x1c/0x30
[  424.522250][T24327]  netlink_unicast+0x665/0x740
[  424.522414][T24327]  netlink_sendmsg+0x5ef/0x740
[  424.522519][T24327]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.522691][T24327]  ____sys_sendmsg+0x54a/0x590
[  424.522848][T24327]  ___sys_sendmsg+0x195/0x1e0
[  424.522982][T24327]  __x64_sys_sendmsg+0xd4/0x160
[  424.523119][T24327]  x64_sys_call+0x22ab/0x2550
[  424.523210][T24327]  do_syscall_64+0x112/0x360
[  424.523296][T24327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.523344][T24327] RIP: 0033:0x7f94af6ff559
[  424.523453][T24327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.523510][T24327] RSP: 002b:00007f94ae14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.523624][T24327] RAX: ffffffffffffffda RBX: 00007f94af985fa0 RCX: 00007f94af6ff559
[  424.523659][T24327] RDX: 0000000000044810 RSI: 0000200000000000 RDI: 0000000000000004
[  424.523702][T24327] RBP: 00007f94af796b20 R08: 0000000000000000 R09: 0000000000000000
[  424.523737][T24327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.523773][T24327] R13: 00007f94af986038 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  424.523897][T24327]  </TASK>
[  424.940992][T24346] loop2: detected capacity change from 0 to 1024
[  424.983047][T24346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.003840][   T29] audit: type=1400 audit(1793129732.274:4614): avc:  denied  { write } for  pid=24343 comm="syz.2.8129" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  425.231459][ T8585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.469077][T20221] batman_adv: batadv1: MLD Querier appeared
[  425.469186][T20221] batman_adv: batadv2: MLD Querier appeared
[  425.692961][T24369] loop9: detected capacity change from 0 to 512
[  425.806527][T24369] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.8136: invalid indirect mapped block 256 (level 2)
[  425.806627][T24369] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  425.810343][T24369] EXT4-fs (loop9): 2 truncates cleaned up
[  425.811323][T24369] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.826276][   T29] audit: type=1400 audit(1793129733.094:4615): avc:  denied  { write } for  pid=24366 comm="syz.9.8136" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  425.828107][T24369] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.8136: bg 0: block 5: invalid block bitmap
[  425.887895][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  425.914708][   T29] audit: type=1326 audit(1793129733.184:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  425.914864][   T29] audit: type=1326 audit(1793129733.184:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  425.915071][   T29] audit: type=1326 audit(1793129733.184:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  425.915182][   T29] audit: type=1326 audit(1793129733.184:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  425.915428][   T29] audit: type=1326 audit(1793129733.184:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  425.915591][   T29] audit: type=1326 audit(1793129733.184:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  425.915824][   T29] audit: type=1326 audit(1793129733.184:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.0.8144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  426.170190][T24398] netlink: 'syz.2.8147': attribute type 4 has an invalid length.
[  426.210435][T24401] loop5: detected capacity change from 0 to 512
[  426.258839][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8151'.
[  426.258872][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8151'.
[  426.293443][T24407] netlink: 75 bytes leftover after parsing attributes in process `syz.0.8152'.
[  426.494697][T24407] 8021q: adding VLAN 0 to HW filter on device bond2
[  426.496987][T24407] 8021q: adding VLAN 0 to HW filter on device bond3
[  426.558019][T24407] bridge0: port 2(batadv1) entered blocking state
[  426.558078][T24407] bridge0: port 2(batadv1) entered forwarding state
[  426.558264][T24407] 8021q: adding VLAN 0 to HW filter on device batadv1
[  426.565319][T24407] bridge0: port 3(batadv2) entered blocking state
[  426.565405][T24407] bridge0: port 3(batadv2) entered forwarding state
[  426.565560][T24407] 8021q: adding VLAN 0 to HW filter on device batadv2
[  426.789039][T20221] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  426.789075][T20221] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  426.789201][T20221] bond7: active interface up!
[  426.904698][T24420] loop5: detected capacity change from 0 to 128
[  426.986688][T24427] FAULT_INJECTION: forcing a failure.
[  426.986688][T24427] name failslab, interval 1, probability 0, space 0, times 0
[  426.986787][T24427] CPU: 0 UID: 60928 PID: 24427 Comm: syz.9.8160 Not tainted syzkaller #0 PREEMPT(lazy) 
[  426.986820][T24427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  426.986837][T24427] Call Trace:
[  426.986846][T24427]  <TASK>
[  426.986918][T24427]  __dump_stack+0x1d/0x30
[  426.986950][T24427]  dump_stack_lvl+0x95/0xd0
[  426.986977][T24427]  dump_stack+0x15/0x1b
[  426.987005][T24427]  should_fail_ex+0x262/0x280
[  426.987041][T24427]  ? copy_utsname+0x117/0x3b0
[  426.987069][T24427]  should_failslab+0x8c/0xb0
[  426.987107][T24427]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  426.987179][T24427]  ? copy_utsname+0x117/0x3b0
[  426.987209][T24427]  copy_utsname+0x117/0x3b0
[  426.987237][T24427]  create_new_namespaces+0xda/0x420
[  426.987266][T24427]  unshare_nsproxy_namespaces+0x115/0x150
[  426.987355][T24427]  ksys_unshare+0x3a3/0x690
[  426.987402][T24427]  __x64_sys_unshare+0x1f/0x30
[  426.987442][T24427]  x64_sys_call+0x1e33/0x2550
[  426.987541][T24427]  do_syscall_64+0x112/0x360
[  426.987655][T24427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.987709][T24427] RIP: 0033:0x7f8f0d59f559
[  426.987730][T24427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.987757][T24427] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  426.987783][T24427] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  426.987813][T24427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480
[  426.987830][T24427] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  426.987845][T24427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  426.987886][T24427] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  426.987913][T24427]  </TASK>
[  427.279338][T24446] vlan2: entered promiscuous mode
[  427.279361][T24446] syz_tun: entered promiscuous mode
[  427.365839][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  427.397749][T24461] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  427.500322][T24470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  427.500339][T24470] block device autoloading is deprecated and will be removed.
[  427.677755][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8184'.
[  427.730539][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8184'.
[  427.778232][T24484] A link change request failed with some changes committed already. Interface gre6 may have been left with an inconsistent configuration, please check.
[  428.339403][T24500] netlink: 'syz.0.8191': attribute type 1 has an invalid length.
[  428.808052][T24535] FAULT_INJECTION: forcing a failure.
[  428.808052][T24535] name failslab, interval 1, probability 0, space 0, times 0
[  428.808082][T24535] CPU: 0 UID: 0 PID: 24535 Comm: syz.9.8206 Not tainted syzkaller #0 PREEMPT(lazy) 
[  428.808107][T24535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  428.808123][T24535] Call Trace:
[  428.808132][T24535]  <TASK>
[  428.808143][T24535]  __dump_stack+0x1d/0x30
[  428.808283][T24535]  dump_stack_lvl+0x95/0xd0
[  428.808315][T24535]  dump_stack+0x15/0x1b
[  428.808343][T24535]  should_fail_ex+0x262/0x280
[  428.808377][T24535]  ? sget_fc+0x991/0xfa0
[  428.808472][T24535]  should_failslab+0x8c/0xb0
[  428.808510][T24535]  __kmalloc_cache_noprof+0x5d/0x3e0
[  428.808601][T24535]  ? sget_fc+0x991/0xfa0
[  428.808632][T24535]  ? __list_lru_init+0x2f3/0x320
[  428.808748][T24535]  sget_fc+0x991/0xfa0
[  428.808769][T24535]  ? __pfx_set_anon_super_fc+0x10/0x10
[  428.808817][T24535]  ? _raw_spin_lock+0x53/0xa0
[  428.808916][T24535]  ? __list_add_valid_or_report+0x38/0xe0
[  428.808956][T24535]  ? _raw_spin_unlock+0x9/0x30
[  428.809032][T24535]  v9fs_get_tree+0xae/0x5e0
[  428.809059][T24535]  vfs_get_tree+0x57/0x1d0
[  428.809101][T24535]  do_new_mount+0x288/0x730
[  428.809140][T24535]  ? security_capable+0x7b/0x90
[  428.809161][T24535]  path_mount+0x4ad/0xb90
[  428.809198][T24535]  __se_sys_mount+0x28c/0x2e0
[  428.809257][T24535]  __x64_sys_mount+0x67/0x80
[  428.809282][T24535]  x64_sys_call+0xc3b/0x2550
[  428.809445][T24535]  do_syscall_64+0x112/0x360
[  428.809587][T24535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.809618][T24535] RIP: 0033:0x7f8f0d59f559
[  428.809639][T24535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.809694][T24535] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  428.809720][T24535] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  428.809741][T24535] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000
[  428.809770][T24535] RBP: 00007f8f0d636b20 R08: 0000200000000300 R09: 0000000000000000
[  428.809786][T24535] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  428.809802][T24535] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  428.809827][T24535]  </TASK>
[  429.098393][T24525] rxe_eth0 speed is unknown, defaulting to 1000
[  429.294893][T24545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8210'.
[  429.540843][T24561] rxe_eth0 speed is unknown, defaulting to 1000
[  429.821411][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  429.821442][   T29] audit: type=1400 audit(1793129737.094:4630): avc:  denied  { mounton } for  pid=24571 comm="syz.0.8231" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  429.883843][T24576] netlink: 'syz.9.8222': attribute type 4 has an invalid length.
[  429.883908][T24576] netlink: 206236 bytes leftover after parsing attributes in process `syz.9.8222'.
[  430.031974][T24581] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8225'.
[  430.083553][   T29] audit: type=1400 audit(1793129737.354:4631): avc:  denied  { write } for  pid=24585 comm="rm" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  430.147068][   T29] audit: type=1400 audit(1793129737.414:4632): avc:  denied  { write } for  pid=24584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  430.218199][   T29] audit: type=1400 audit(1793129737.484:4633): avc:  denied  { write } for  pid=24593 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  430.260895][   T29] audit: type=1400 audit(1793129737.534:4634): avc:  denied  { setattr } for  pid=24594 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  436.125024][   T29] audit: type=1400 audit(1793129743.394:4635): avc:  denied  { write } for  pid=24615 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.191711][   T29] audit: type=1400 audit(1793129743.464:4636): avc:  denied  { write } for  pid=24615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.236789][   T29] audit: type=1400 audit(1793129743.504:4637): avc:  denied  { write } for  pid=24629 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  437.758041][T24639] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  437.764002][T24640] ip_tables: iptables: counters copy to user failed while replacing table
[  437.767541][T24639] xt_hashlimit: size too large, truncated to 1048576
[  437.769299][T24640] ip_tables: iptables: counters copy to user failed while replacing table
[  437.804528][T24642] loop2: detected capacity change from 0 to 512
[  438.025445][T24660] ip_tables: iptables: counters copy to user failed while replacing table
[  438.113699][T24668] FAULT_INJECTION: forcing a failure.
[  438.113699][T24668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.113741][T24668] CPU: 1 UID: 0 PID: 24668 Comm: syz.2.8252 Not tainted syzkaller #0 PREEMPT(lazy) 
[  438.113775][T24668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  438.113793][T24668] Call Trace:
[  438.113802][T24668]  <TASK>
[  438.113827][T24668]  __dump_stack+0x1d/0x30
[  438.113863][T24668]  dump_stack_lvl+0x95/0xd0
[  438.113895][T24668]  dump_stack+0x15/0x1b
[  438.113973][T24668]  should_fail_ex+0x262/0x280
[  438.114009][T24668]  should_fail+0xb/0x20
[  438.114060][T24668]  should_fail_usercopy+0x1a/0x20
[  438.114108][T24668]  _copy_from_user+0x1c/0xb0
[  438.114149][T24668]  sctp_getsockopt_local_auth_chunks+0x89/0x470
[  438.114198][T24668]  ? lock_sock_nested+0x7f/0x110
[  438.114225][T24668]  sctp_getsockopt+0x38d/0xaa0
[  438.114246][T24668]  sock_common_getsockopt+0x60/0x70
[  438.114346][T24668]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  438.114406][T24668]  do_sock_getsockopt+0x2ce/0x350
[  438.114455][T24668]  __x64_sys_getsockopt+0x11d/0x1a0
[  438.114529][T24668]  x64_sys_call+0x1032/0x2550
[  438.114613][T24668]  do_syscall_64+0x112/0x360
[  438.114653][T24668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.114682][T24668] RIP: 0033:0x7f94af6ff559
[  438.114703][T24668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.114729][T24668] RSP: 002b:00007f94ae14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  438.114765][T24668] RAX: ffffffffffffffda RBX: 00007f94af985fa0 RCX: 00007f94af6ff559
[  438.114785][T24668] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003
[  438.114803][T24668] RBP: 00007f94af796b20 R08: 0000200000002900 R09: 0000000000000000
[  438.114821][T24668] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000000
[  438.114839][T24668] R13: 00007f94af986038 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  438.114885][T24668]  </TASK>
[  438.408834][T24677] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.408914][T24677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  438.408924][T24677] IPv6: NLM_F_CREATE should be set when creating new route
[  438.678197][    T9] kernel write not supported for file /gssd/clntXX/gssd (pid: 9 comm: kworker/0:0)
[  438.878573][    C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257
[  439.082971][T24726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8276'.
[  439.083048][T24726] netlink: 'syz.3.8276': attribute type 12 has an invalid length.
[  439.083092][T24726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8276'.
[  439.083108][T24726] netlink: 'syz.3.8276': attribute type 12 has an invalid length.
[  439.356383][T24749] usbcore.quirks: string doesn't fit in 127 chars.
[  442.277075][T24764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8295'.
[  442.331160][T24768] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8295'.
[  442.333110][T24767] loop9: detected capacity change from 0 to 512
[  442.333708][T24767] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  442.333724][T24767] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  442.373889][T24767] EXT4-fs (loop9): 1 truncate cleaned up
[  442.374255][T24767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.396385][   T29] audit: type=1400 audit(1793129749.654:4638): avc:  denied  { write } for  pid=24766 comm="syz.9.8296" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  442.434237][T24764] ip6gre3: entered promiscuous mode
[  442.434257][T24764] ip6gre3: entered allmulticast mode
[  442.527354][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.903762][   T29] audit: type=1400 audit(1793129750.164:4639): avc:  denied  { create } for  pid=24807 comm="syz.2.8311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  442.942405][   T29] audit: type=1400 audit(1793129750.214:4640): avc:  denied  { getopt } for  pid=24814 comm="syz.9.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  443.469825][   T29] audit: type=1326 audit(1793129750.744:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  443.469952][   T29] audit: type=1326 audit(1793129750.744:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  443.470440][   T29] audit: type=1326 audit(1793129750.744:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  443.470478][   T29] audit: type=1326 audit(1793129750.744:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  443.472509][   T29] audit: type=1326 audit(1793129750.744:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  443.472544][   T29] audit: type=1326 audit(1793129750.744:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  443.472591][   T29] audit: type=1326 audit(1793129750.744:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24860 comm="syz.2.8335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  444.673064][T24900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8349'.
[  444.673549][T24900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8349'.
[  444.866681][T24908] SELinux: DCCP has been removed, pid=24908 comm=syz.2.8353
[  444.866910][T24908] netlink: 'syz.2.8353': attribute type 12 has an invalid length.
[  444.866949][T24908] netlink: 'syz.2.8353': attribute type 29 has an invalid length.
[  444.866962][T24908] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8353'.
[  444.867058][T24908] netlink: 'syz.2.8353': attribute type 1 has an invalid length.
[  444.867072][T24908] netlink: 'syz.2.8353': attribute type 2 has an invalid length.
[  444.867084][T24908] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8353'.
[  445.572791][T24968] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  445.572820][T24968] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  445.605976][T24972] tipc: Failed to remove unknown binding: 66,1,1/10005162:3497802201/3497802203
[  446.064013][T25007] loop5: detected capacity change from 0 to 1024
[  446.407702][T25029] loop9: detected capacity change from 0 to 256
[  446.409547][T25026] ip_tables: iptables: counters copy to user failed while replacing table
[  446.414952][T25026] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  446.478657][T24110] page_pool_release_retry() stalled pool shutdown: id 244, 1 inflight 60 sec
[  446.544791][T25041] loop5: detected capacity change from 0 to 512
[  449.300473][T25093] loop5: detected capacity change from 0 to 2048
[  449.343992][T25097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8431'.
[  449.388079][T25101] loop5: detected capacity change from 0 to 2048
[  449.431464][T25101] Alternate GPT is invalid, using primary GPT.
[  449.431583][T25101]  loop5: p1 p2 p3
[  449.431593][T25101] loop5: partition table partially beyond EOD, truncated
[  450.437371][T25160] loop9: detected capacity change from 0 to 128
[  450.465640][T25160] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  450.466648][T25160] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  450.500467][T25160] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  450.594397][T25180] loop9: detected capacity change from 0 to 512
[  450.647769][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  450.647786][   T29] audit: type=1326 audit(1793129757.914:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25184 comm="syz.3.8468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feee0eef559 code=0x0
[  450.722267][T25192] FAULT_INJECTION: forcing a failure.
[  450.722267][T25192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.722307][T25192] CPU: 1 UID: 0 PID: 25192 Comm: syz.2.8471 Not tainted syzkaller #0 PREEMPT(lazy) 
[  450.722375][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  450.722396][T25192] Call Trace:
[  450.722403][T25192]  <TASK>
[  450.722411][T25192]  __dump_stack+0x1d/0x30
[  450.722444][T25192]  dump_stack_lvl+0x95/0xd0
[  450.722475][T25192]  dump_stack+0x15/0x1b
[  450.722565][T25192]  should_fail_ex+0x262/0x280
[  450.722593][T25192]  should_fail+0xb/0x20
[  450.722622][T25192]  should_fail_usercopy+0x1a/0x20
[  450.722697][T25192]  _copy_from_user+0x1c/0xb0
[  450.722728][T25192]  br_dev_siocdevprivate+0x82/0xf40
[  450.722757][T25192]  ? full_name_hash+0x92/0xe0
[  450.722789][T25192]  dev_ifsioc+0x8f5/0xfc0
[  450.722851][T25192]  dev_ioctl+0x78c/0x960
[  450.722880][T25192]  sock_ioctl+0x58f/0x610
[  450.722908][T25192]  ? __pfx_sock_ioctl+0x10/0x10
[  450.722930][T25192]  __se_sys_ioctl+0xce/0x140
[  450.723047][T25192]  __x64_sys_ioctl+0x43/0x50
[  450.723077][T25192]  x64_sys_call+0x239d/0x2550
[  450.723169][T25192]  do_syscall_64+0x112/0x360
[  450.723213][T25192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.723243][T25192] RIP: 0033:0x7f94af6ff559
[  450.723260][T25192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.723298][T25192] RSP: 002b:00007f94ae14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  450.723325][T25192] RAX: ffffffffffffffda RBX: 00007f94af985fa0 RCX: 00007f94af6ff559
[  450.723344][T25192] RDX: 0000200000000080 RSI: 00000000000089f6 RDI: 0000000000000004
[  450.723361][T25192] RBP: 00007f94af796b20 R08: 0000000000000000 R09: 0000000000000000
[  450.723378][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  450.723395][T25192] R13: 00007f94af986038 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  450.723489][T25192]  </TASK>
[  451.077127][T25217] gretap0: entered promiscuous mode
[  451.151294][T25220] loop9: detected capacity change from 0 to 164
[  451.171846][   T29] audit: type=1400 audit(1793129758.444:4697): avc:  denied  { mount } for  pid=25219 comm="syz.9.8485" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  451.213054][T25220] Unsupported NM flag settings (240)
[  451.213376][T25220] Unsupported NM flag settings (240)
[  451.430104][   T29] audit: type=1400 audit(1793129758.704:4698): avc:  denied  { unmount } for  pid=21277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  451.485602][T25229] gre1: entered promiscuous mode
[  451.581080][T25233] bridge0: port 2(team0) entered blocking state
[  451.581123][T25233] bridge0: port 2(team0) entered listening state
[  451.581269][T25233] bridge0: port 3(syz_tun) entered blocking state
[  451.581315][T25233] bridge0: port 3(syz_tun) entered listening state
[  451.582321][T25233] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.583104][T25233] bridge0: port 1(bridge_slave_0) entered listening state
[  451.980950][T25233] bridge0: port 4(batadv1) entered blocking state
[  451.981003][T25233] bridge0: port 4(batadv1) entered listening state
[  451.981151][T25233] 8021q: adding VLAN 0 to HW filter on device batadv1
[  451.989008][T25233] 8021q: adding VLAN 0 to HW filter on device bond3
[  452.063752][T25233] 8021q: adding VLAN 0 to HW filter on device eth0
[  452.066794][T25233] 8021q: adding VLAN 0 to HW filter on device eth1
[  452.075011][T25233] 8021q: adding VLAN 0 to HW filter on device eth2
[  452.081058][T25233] 8021q: adding VLAN 0 to HW filter on device eth3
[  452.100865][T20192] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  452.104491][T20192] ip6_tunnel:  xmit: Local address not yet configured!
[  452.105221][T20192] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  452.129093][T24110] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  452.153839][T25237] rxe_eth0 speed is unknown, defaulting to 1000
[  452.968641][T24117] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  454.867078][   T29] audit: type=1400 audit(1793129762.134:4699): avc:  denied  { setopt } for  pid=25265 comm="syz.0.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  454.894961][T25278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8508'.
[  454.943091][T25281] FAULT_INJECTION: forcing a failure.
[  454.943091][T25281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.943124][T25281] CPU: 0 UID: 0 PID: 25281 Comm: syz.5.8511 Not tainted syzkaller #0 PREEMPT(lazy) 
[  454.943157][T25281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  454.943174][T25281] Call Trace:
[  454.943249][T25281]  <TASK>
[  454.943260][T25281]  __dump_stack+0x1d/0x30
[  454.943293][T25281]  dump_stack_lvl+0x95/0xd0
[  454.943390][T25281]  dump_stack+0x15/0x1b
[  454.943418][T25281]  should_fail_ex+0x262/0x280
[  454.943484][T25281]  should_fail+0xb/0x20
[  454.943506][T25281]  should_fail_usercopy+0x1a/0x20
[  454.943535][T25281]  strncpy_from_user+0x27/0x250
[  454.943612][T25281]  ? rep_movs_alternative+0x4a/0xa0
[  454.943636][T25281]  strncpy_from_bpfptr+0x43/0x50
[  454.943716][T25281]  bpf_prog_load+0xaa9/0x10a0
[  454.943780][T25281]  ? avc_has_perm_noaudit+0xac/0x160
[  454.943819][T25281]  __sys_bpf+0xbce/0xc50
[  454.943842][T25281]  ? do_futex+0x390/0x460
[  454.943925][T25281]  __x64_sys_bpf+0x69/0x80
[  454.943968][T25281]  x64_sys_call+0xf26/0x2550
[  454.943996][T25281]  do_syscall_64+0x112/0x360
[  454.944027][T25281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.944120][T25281] RIP: 0033:0x7fd19860f559
[  454.944137][T25281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.944158][T25281] RSP: 002b:00007fd19705f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  454.944258][T25281] RAX: ffffffffffffffda RBX: 00007fd198895fa0 RCX: 00007fd19860f559
[  454.944332][T25281] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[  454.944352][T25281] RBP: 00007fd1986a6b20 R08: 0000000000000000 R09: 0000000000000000
[  454.944421][T25281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.944435][T25281] R13: 00007fd198896038 R14: 00007fd198895fa0 R15: 00007ffe3ec17838
[  454.944457][T25281]  </TASK>
[  454.992709][T25286] netlink: 'syz.2.8512': attribute type 1 has an invalid length.
[  455.031269][T25286] bond8: entered promiscuous mode
[  455.031523][T25286] 8021q: adding VLAN 0 to HW filter on device bond8
[  455.192893][T25286] 8021q: adding VLAN 0 to HW filter on device bond8
[  455.193221][T25286] bond8: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  455.193323][T25286] bond8: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  455.226816][T25286] bond8: (slave ip6gre3): making interface the new active one
[  455.226844][T25286] ip6gre3: entered promiscuous mode
[  455.236021][T25286] bond8: (slave ip6gre3): Enslaving as an active interface with an up link
[  455.364701][T25313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8519'.
[  455.365602][T25313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8519'.
[  455.656758][T25350] PKCS7: Unknown OID: [4] (bad)
[  455.656776][T25350] PKCS7: Only support pkcs7_signedData type
[  455.704608][T25352] loop5: detected capacity change from 0 to 1024
[  455.770707][T25357] netlink: 'syz.0.8542': attribute type 1 has an invalid length.
[  455.770739][T25357] netlink: 'syz.0.8542': attribute type 4 has an invalid length.
[  455.770755][T25357] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8542'.
[  455.852515][T25365] xt_connbytes: Forcing CT accounting to be enabled
[  455.858359][T25363] netlink: 'syz.3.8545': attribute type 2 has an invalid length.
[  455.932150][T25373] netlink: 'syz.3.8550': attribute type 4 has an invalid length.
[  455.934828][T25373] netlink: 'syz.3.8550': attribute type 4 has an invalid length.
[  456.007930][T25381] ip_tables: iptables: counters copy to user failed while replacing table
[  456.015212][T25381] ip_tables: iptables: counters copy to user failed while replacing table
[  456.077474][   T29] audit: type=1326 audit(1793129763.344:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  456.077514][   T29] audit: type=1326 audit(1793129763.344:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  456.077548][   T29] audit: type=1326 audit(1793129763.344:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  456.078470][   T29] audit: type=1326 audit(1793129763.344:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  456.085425][T25393] netlink: 'syz.3.8559': attribute type 1 has an invalid length.
[  456.117951][T25393] 8021q: adding VLAN 0 to HW filter on device bond10
[  456.129708][   T29] audit: type=1326 audit(1793129763.374:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  456.129751][   T29] audit: type=1326 audit(1793129763.374:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4e561f2c2 code=0x7ffc0000
[  456.129843][   T29] audit: type=1326 audit(1793129763.374:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa4e561f357 code=0x7ffc0000
[  456.129880][   T29] audit: type=1326 audit(1793129763.374:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa4e55dc251 code=0x7ffc0000
[  456.155767][   T29] audit: type=1326 audit(1793129763.404:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa4e5620349 code=0x7ffc0000
[  456.155806][   T29] audit: type=1326 audit(1793129763.404:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25390 comm="syz.0.8560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa4e55dc2bb code=0x7ffc0000
[  456.247348][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  456.324386][    C0] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  456.398705][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  456.428319][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8563'.
[  456.808134][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  456.910787][T25451] rxe_eth0 speed is unknown, defaulting to 1000
[  456.996657][T25460] loop9: detected capacity change from 0 to 4096
[  457.047243][T25460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.124827][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.354922][T25498] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  457.355223][T25498] batman_adv: batadv0: Adding interface: gretap3
[  457.355240][T25498] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.355417][T25498] batman_adv: batadv0: Interface activated: gretap3
[  457.464953][T25510] loop9: detected capacity change from 0 to 2048
[  457.501187][T25510]  loop9: p1 < > p3 p4 < p5 >
[  457.501809][T25510] loop9: p3 size 467968 extends beyond EOD, truncated
[  457.503822][T25510] loop9: p5 size 467968 extends beyond EOD, truncated
[  457.688256][T25534] loop9: detected capacity change from 0 to 256
[  458.347227][T25601] bridge3: entered promiscuous mode
[  458.506990][T25610] FAULT_INJECTION: forcing a failure.
[  458.506990][T25610] name failslab, interval 1, probability 0, space 0, times 0
[  458.507027][T25610] CPU: 0 UID: 60928 PID: 25610 Comm: syz.2.8616 Not tainted syzkaller #0 PREEMPT(lazy) 
[  458.507207][T25610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  458.507226][T25610] Call Trace:
[  458.507235][T25610]  <TASK>
[  458.507244][T25610]  __dump_stack+0x1d/0x30
[  458.507271][T25610]  dump_stack_lvl+0x95/0xd0
[  458.507311][T25610]  dump_stack+0x15/0x1b
[  458.507341][T25610]  should_fail_ex+0x262/0x280
[  458.507412][T25610]  ? security_cred_alloc_blank+0x4d/0x110
[  458.507474][T25610]  should_failslab+0x8c/0xb0
[  458.507583][T25610]  __kmalloc_noprof+0xb6/0x4b0
[  458.507681][T25610]  ? security_cred_alloc_blank+0x4d/0x110
[  458.507730][T25610]  security_cred_alloc_blank+0x4d/0x110
[  458.507786][T25610]  cred_alloc_blank+0x4e/0xe0
[  458.507886][T25610]  keyctl_session_to_parent+0x42/0x4c0
[  458.507917][T25610]  __se_sys_keyctl+0x484/0xb70
[  458.508009][T25610]  ? __se_sys_futex+0x2f6/0x370
[  458.508034][T25610]  ? xfd_validate_state+0x45/0xf0
[  458.508070][T25610]  ? restore_fpregs_from_fpstate+0x61/0x110
[  458.508177][T25610]  __x64_sys_keyctl+0x67/0x80
[  458.508208][T25610]  x64_sys_call+0x1fe0/0x2550
[  458.508261][T25610]  do_syscall_64+0x112/0x360
[  458.508301][T25610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.508405][T25610] RIP: 0033:0x7f94af6ff559
[  458.508481][T25610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.508504][T25610] RSP: 002b:00007f94ae14f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  458.508532][T25610] RAX: ffffffffffffffda RBX: 00007f94af985fa0 RCX: 00007f94af6ff559
[  458.508553][T25610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  458.508629][T25610] RBP: 00007f94af796b20 R08: 0000000000000000 R09: 0000000000000000
[  458.508649][T25610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.508665][T25610] R13: 00007f94af986038 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  458.508687][T25610]  </TASK>
[  458.978398][T25631] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  459.037793][T25603] 8021q: adding VLAN 0 to HW filter on device bond9
[  459.136633][T25642] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8626'.
[  459.140608][T25642] ip6gre3: entered promiscuous mode
[  459.140662][T25642] ip6gre3: entered allmulticast mode
[  459.175339][T25642] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8626'.
[  459.333672][T25658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8636'.
[  459.667722][T25680] rxe_eth0 speed is unknown, defaulting to 1000
[  460.106751][T25702] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  460.659354][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8674'.
[  460.663086][T25744] 
: (slave bond_slave_0): Releasing backup interface
[  461.081129][T25778] loop9: detected capacity change from 0 to 1024
[  461.111404][T25778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.114413][   T29] kauditd_printk_skb: 129 callbacks suppressed
[  461.114432][   T29] audit: type=1400 audit(1793129768.384:4839): avc:  denied  { write } for  pid=25777 comm="syz.9.8687" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  461.190534][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.617238][T25801] FAULT_INJECTION: forcing a failure.
[  461.617238][T25801] name failslab, interval 1, probability 0, space 0, times 0
[  461.617278][T25801] CPU: 0 UID: 0 PID: 25801 Comm: syz.9.8694 Not tainted syzkaller #0 PREEMPT(lazy) 
[  461.617312][T25801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  461.617330][T25801] Call Trace:
[  461.617337][T25801]  <TASK>
[  461.617369][T25801]  __dump_stack+0x1d/0x30
[  461.617396][T25801]  dump_stack_lvl+0x95/0xd0
[  461.617436][T25801]  dump_stack+0x15/0x1b
[  461.617463][T25801]  should_fail_ex+0x262/0x280
[  461.617512][T25801]  ? __kernfs_new_node+0x70/0x440
[  461.617550][T25801]  should_failslab+0x8c/0xb0
[  461.617588][T25801]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  461.617646][T25801]  ? __kernfs_new_node+0x70/0x440
[  461.617716][T25801]  __kernfs_new_node+0x70/0x440
[  461.617739][T25801]  ? __rcu_read_unlock+0x4e/0x70
[  461.617772][T25801]  ? up_write+0x19/0x60
[  461.617801][T25801]  ? kernfs_link_sibling+0x2f5/0x320
[  461.617850][T25801]  ? __rcu_read_unlock+0x4e/0x70
[  461.617883][T25801]  kernfs_new_node+0x107/0x140
[  461.617940][T25801]  __kernfs_create_file+0x4b/0x180
[  461.618036][T25801]  ? __pfx_dev_attr_show+0x10/0x10
[  461.618127][T25801]  ? __pfx_dev_attr_store+0x10/0x10
[  461.618242][T25801]  sysfs_add_file_mode_ns+0x132/0x1b0
[  461.618283][T25801]  sysfs_merge_group+0xed/0x1c0
[  461.618372][T25801]  dpm_sysfs_add+0xaf/0x1e0
[  461.618404][T25801]  device_add+0x3bc/0x790
[  461.618445][T25801]  netdev_register_kobject+0x127/0x240
[  461.618599][T25801]  register_netdevice+0xc68/0x13f0
[  461.618669][T25801]  __ip_tunnel_create+0x31d/0x420
[  461.618705][T25801]  ip_tunnel_ctl+0x56f/0xa10
[  461.618734][T25801]  ipip_tunnel_ctl+0xd2/0x160
[  461.618767][T25801]  ip_tunnel_siocdevprivate+0x77/0xe0
[  461.618854][T25801]  dev_ifsioc+0x8f5/0xfc0
[  461.618888][T25801]  dev_ioctl+0x78c/0x960
[  461.618931][T25801]  sock_ioctl+0x58f/0x610
[  461.618958][T25801]  ? __pfx_sock_ioctl+0x10/0x10
[  461.618984][T25801]  __se_sys_ioctl+0xce/0x140
[  461.619069][T25801]  __x64_sys_ioctl+0x43/0x50
[  461.619143][T25801]  x64_sys_call+0x239d/0x2550
[  461.619172][T25801]  do_syscall_64+0x112/0x360
[  461.619206][T25801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.619312][T25801] RIP: 0033:0x7f8f0d59f559
[  461.619331][T25801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.619353][T25801] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  461.619415][T25801] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  461.619430][T25801] RDX: 0000200000000800 RSI: 00000000000089f1 RDI: 0000000000000004
[  461.619447][T25801] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  461.619501][T25801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.619518][T25801] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  461.619544][T25801]  </TASK>
[  461.790838][T25806] FAULT_INJECTION: forcing a failure.
[  461.790838][T25806] name failslab, interval 1, probability 0, space 0, times 0
[  461.790933][T25806] CPU: 0 UID: 0 PID: 25806 Comm: syz.9.8696 Not tainted syzkaller #0 PREEMPT(lazy) 
[  461.791067][T25806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  461.791118][T25806] Call Trace:
[  461.791140][T25806]  <TASK>
[  461.791164][T25806]  __dump_stack+0x1d/0x30
[  461.791249][T25806]  dump_stack_lvl+0x95/0xd0
[  461.791407][T25806]  dump_stack+0x15/0x1b
[  461.791488][T25806]  should_fail_ex+0x262/0x280
[  461.791578][T25806]  ? alloc_netdev_mqs+0x81e/0xa50
[  461.791744][T25806]  should_failslab+0x8c/0xb0
[  461.791857][T25806]  __kmalloc_cache_noprof+0x5d/0x3e0
[  461.791919][T25806]  ? alloc_netdev_mqs+0x81e/0xa50
[  461.792076][T25806]  alloc_netdev_mqs+0x81e/0xa50
[  461.792295][T25806]  tun_set_iff+0x444/0x880
[  461.792389][T25806]  __tun_chr_ioctl+0x682/0x1550
[  461.792487][T25806]  ? selinux_file_ioctl+0x333/0x3b0
[  461.792627][T25806]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  461.792726][T25806]  tun_chr_ioctl+0x27/0x40
[  461.792801][T25806]  __se_sys_ioctl+0xce/0x140
[  461.792979][T25806]  __x64_sys_ioctl+0x43/0x50
[  461.793074][T25806]  x64_sys_call+0x239d/0x2550
[  461.793164][T25806]  do_syscall_64+0x112/0x360
[  461.793307][T25806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.793385][T25806] RIP: 0033:0x7f8f0d59f559
[  461.793449][T25806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.793571][T25806] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  461.793693][T25806] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  461.793744][T25806] RDX: 0000200000000840 RSI: 00000000400454ca RDI: 0000000000000004
[  461.793787][T25806] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  461.793830][T25806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.793883][T25806] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  461.793954][T25806]  </TASK>
[  461.840989][T24117] page_pool_release_retry() stalled pool shutdown: id 254, 1 inflight 60 sec
[  462.760392][T25820] FAULT_INJECTION: forcing a failure.
[  462.760392][T25820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.760426][T25820] CPU: 1 UID: 0 PID: 25820 Comm: syz.2.8703 Not tainted syzkaller #0 PREEMPT(lazy) 
[  462.760476][T25820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  462.760496][T25820] Call Trace:
[  462.760505][T25820]  <TASK>
[  462.760516][T25820]  __dump_stack+0x1d/0x30
[  462.760585][T25820]  dump_stack_lvl+0x95/0xd0
[  462.760660][T25820]  dump_stack+0x15/0x1b
[  462.760688][T25820]  should_fail_ex+0x262/0x280
[  462.760723][T25820]  should_fail+0xb/0x20
[  462.760754][T25820]  should_fail_usercopy+0x1a/0x20
[  462.760801][T25820]  _copy_to_user+0x20/0xa0
[  462.760862][T25820]  __x64_sys_clock_adjtime+0x167/0x1d0
[  462.760905][T25820]  x64_sys_call+0x1f3b/0x2550
[  462.760985][T25820]  do_syscall_64+0x112/0x360
[  462.761019][T25820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.761042][T25820] RIP: 0033:0x7f94af6ff559
[  462.761065][T25820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.761091][T25820] RSP: 002b:00007f94ae14f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  462.761166][T25820] RAX: ffffffffffffffda RBX: 00007f94af985fa0 RCX: 00007f94af6ff559
[  462.761206][T25820] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000
[  462.761224][T25820] RBP: 00007f94af796b20 R08: 0000000000000000 R09: 0000000000000000
[  462.761242][T25820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.761259][T25820] R13: 00007f94af986038 R14: 00007f94af985fa0 R15: 00007fff3dec2298
[  462.761314][T25820]  </TASK>
[  464.488154][    C0] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  465.124372][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  465.125799][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  465.960062][   T29] audit: type=1326 audit(1793129773.229:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.5.8720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19860f559 code=0x7ffc0000
[  465.960204][   T29] audit: type=1326 audit(1793129773.229:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.5.8720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19860f559 code=0x7ffc0000
[  465.961922][   T29] audit: type=1326 audit(1793129773.229:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.5.8720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd19860f559 code=0x7ffc0000
[  465.970842][T25857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8717'.
[  465.993562][T25857] FAULT_INJECTION: forcing a failure.
[  465.993562][T25857] name fail_futex, interval 1, probability 0, space 0, times 0
[  465.993623][T25857] CPU: 0 UID: 0 PID: 25857 Comm: syz.2.8717 Not tainted syzkaller #0 PREEMPT(lazy) 
[  465.993667][T25857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  465.993747][T25857] Call Trace:
[  465.993756][T25857]  <TASK>
[  465.993855][T25857]  __dump_stack+0x1d/0x30
[  465.993889][T25857]  dump_stack_lvl+0x95/0xd0
[  465.993914][T25857]  dump_stack+0x15/0x1b
[  465.994041][T25857]  should_fail_ex+0x262/0x280
[  465.994071][T25857]  should_fail+0xb/0x20
[  465.994100][T25857]  get_futex_key+0x12c/0xc40
[  465.994139][T25857]  futex_wake+0x89/0x400
[  465.994174][T25857]  do_futex+0x3f8/0x460
[  465.994208][T25857]  __se_sys_futex+0x2f6/0x370
[  465.994250][T25857]  __x64_sys_futex+0x78/0x90
[  465.994313][T25857]  x64_sys_call+0x22e2/0x2550
[  465.994342][T25857]  do_syscall_64+0x112/0x360
[  465.994382][T25857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.994420][T25857] RIP: 0033:0x7f94af6ff559
[  465.994516][T25857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.994618][T25857] RSP: 002b:00007f94ae14f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  465.994641][T25857] RAX: ffffffffffffffda RBX: 00007f94af985fa8 RCX: 00007f94af6ff559
[  465.994657][T25857] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f94af985fac
[  465.994673][T25857] RBP: 00007f94af985fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  465.994687][T25857] R10: 0000000000000cd0 R11: 0000000000000246 R12: 0000000000000000
[  465.994702][T25857] R13: 00007f94af986038 R14: 00007fff3dec21b0 R15: 00007fff3dec2298
[  465.994724][T25857]  </TASK>
[  466.152777][   T29] audit: type=1326 audit(1793129773.419:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.5.8720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19860f559 code=0x7ffc0000
[  466.183166][   T29] audit: type=1326 audit(1793129773.419:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.5.8720" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19860f559 code=0x7ffc0000
[  466.653863][T25898] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  466.653863][T25898] Please contact the netfilter-devel mailing list or update your nftables rules.
[  466.752811][T25910] ./dev/sda1: Can't lookup blockdev
[  467.285319][T25921] loop9: detected capacity change from 0 to 1024
[  467.294747][T25921] EXT4-fs: Ignoring removed orlov option
[  467.307585][T25921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.331162][   T29] audit: type=1400 audit(1793129774.600:4845): avc:  denied  { write } for  pid=25920 comm="syz.9.8743" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  467.332370][   T29] audit: type=1400 audit(1793129774.600:4846): avc:  denied  { write } for  pid=25920 comm="syz.9.8743" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  467.363631][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.540688][T25935] loop5: detected capacity change from 0 to 512
[  467.552425][T25940] loop9: detected capacity change from 0 to 512
[  467.572174][T25940] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  467.599487][T25940] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.8750: bad orphan inode 13
[  467.599520][T25940] loop9: lost filesystem error report for type 5 error -117
[  467.599711][T25940] ext4_test_bit(bit=12, block=18) = 1
[  467.599729][T25940] is_bad_inode(inode)=0
[  467.599738][T25940] NEXT_ORPHAN(inode)=0
[  467.599746][T25940] max_ino=32
[  467.599753][T25940] i_nlink=1
[  467.600184][T25940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  467.846110][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  468.381226][T25982] gretap0: entered promiscuous mode
[  468.986912][   T29] audit: type=1326 audit(1793129776.261:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26018 comm="syz.9.8781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  468.987141][   T29] audit: type=1326 audit(1793129776.261:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26018 comm="syz.9.8781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  468.988639][   T29] audit: type=1326 audit(1793129776.261:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26018 comm="syz.9.8781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  468.988747][   T29] audit: type=1326 audit(1793129776.261:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26018 comm="syz.9.8781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  468.988821][   T29] audit: type=1326 audit(1793129776.261:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26018 comm="syz.9.8781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8f0d59f559 code=0x7ffc0000
[  469.062864][   T29] audit: type=1326 audit(1793129776.321:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26018 comm="syz.9.8781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f0d55fd8e code=0x7ffc0000
[  469.452514][T26067] xt_hashlimit: size too large, truncated to 1048576
[  469.676299][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8809'.
[  469.698581][T26084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8809'.
[  469.699071][T26084] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  469.711158][T26086] netlink: 'syz.5.8811': attribute type 1 has an invalid length.
[  469.867670][T26095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8814'.
[  470.074098][T26136] FAULT_INJECTION: forcing a failure.
[  470.074098][T26136] name failslab, interval 1, probability 0, space 0, times 0
[  470.074138][T26136] CPU: 0 UID: 0 PID: 26136 Comm: syz.5.8828 Not tainted syzkaller #0 PREEMPT(lazy) 
[  470.074224][T26136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  470.074241][T26136] Call Trace:
[  470.074249][T26136]  <TASK>
[  470.074259][T26136]  __dump_stack+0x1d/0x30
[  470.074291][T26136]  dump_stack_lvl+0x95/0xd0
[  470.074314][T26136]  dump_stack+0x15/0x1b
[  470.074371][T26136]  should_fail_ex+0x262/0x280
[  470.074402][T26136]  ? __anon_vma_prepare+0xc8/0x2f0
[  470.074456][T26136]  should_failslab+0x8c/0xb0
[  470.074530][T26136]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  470.074566][T26136]  ? __anon_vma_prepare+0xc8/0x2f0
[  470.074701][T26136]  __anon_vma_prepare+0xc8/0x2f0
[  470.074735][T26136]  handle_mm_fault+0x31da/0x3c60
[  470.074770][T26136]  do_user_addr_fault+0x3ce/0xde0
[  470.074868][T26136]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  470.074908][T26136]  ? trace_page_fault_user+0x1f/0xa0
[  470.074991][T26136]  exc_page_fault+0x62/0xa0
[  470.075019][T26136]  asm_exc_page_fault+0x26/0x30
[  470.075046][T26136] RIP: 0033:0x7fd1985d1482
[  470.075067][T26136] Code: 8d 15 d0 26 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 89 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41
[  470.075088][T26136] RSP: 002b:00007fd19705dd20 EFLAGS: 00010286
[  470.075233][T26136] RAX: ffffffffffffffff RBX: 00007fd190000000 RCX: 00007fd19860f357
[  470.075252][T26136] RDX: 00007fd1986c3b2e RSI: 0000000000021000 RDI: 00007fd190000000
[  470.075321][T26136] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  470.075338][T26136] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  470.075355][T26136] R13: 0000000000001000 R14: 00007fd194000000 R15: 0000000000fc1000
[  470.075381][T26136]  </TASK>
[  470.113109][T26138] bridge0: port 1(syz_tun) entered blocking state
[  470.113227][T26138] bridge0: port 1(syz_tun) entered disabled state
[  470.113532][T26138] syz_tun: entered allmulticast mode
[  470.116085][T26138] syz_tun: entered promiscuous mode
[  470.295530][T26136] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  470.388703][T26148] vlan2: entered promiscuous mode
[  470.562165][T26164] FAULT_INJECTION: forcing a failure.
[  470.562165][T26164] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.562208][T26164] CPU: 0 UID: 0 PID: 26164 Comm: syz.9.8840 Not tainted syzkaller #0 PREEMPT(lazy) 
[  470.562243][T26164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  470.562261][T26164] Call Trace:
[  470.562270][T26164]  <TASK>
[  470.562280][T26164]  __dump_stack+0x1d/0x30
[  470.562340][T26164]  dump_stack_lvl+0x95/0xd0
[  470.562385][T26164]  dump_stack+0x15/0x1b
[  470.562417][T26164]  should_fail_ex+0x262/0x280
[  470.562466][T26164]  should_fail+0xb/0x20
[  470.562564][T26164]  should_fail_usercopy+0x1a/0x20
[  470.562600][T26164]  strncpy_from_user+0x27/0x250
[  470.562628][T26164]  ? rep_movs_alternative+0x4a/0xa0
[  470.562659][T26164]  strncpy_from_bpfptr+0x43/0x50
[  470.562725][T26164]  bpf_prog_load+0xaa9/0x10a0
[  470.562754][T26164]  ? avc_has_perm_noaudit+0xac/0x160
[  470.562796][T26164]  __sys_bpf+0xbce/0xc50
[  470.562860][T26164]  ? do_futex+0x390/0x460
[  470.562907][T26164]  __x64_sys_bpf+0x69/0x80
[  470.562952][T26164]  x64_sys_call+0xf26/0x2550
[  470.562990][T26164]  do_syscall_64+0x112/0x360
[  470.563031][T26164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.563061][T26164] RIP: 0033:0x7f8f0d59f559
[  470.563082][T26164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.563108][T26164] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  470.563166][T26164] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  470.563186][T26164] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[  470.563205][T26164] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  470.563252][T26164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  470.563270][T26164] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  470.563365][T26164]  </TASK>
[  470.816508][T26188] loop9: detected capacity change from 0 to 128
[  470.867483][T26190] FAULT_INJECTION: forcing a failure.
[  470.867483][T26190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.867520][T26190] CPU: 0 UID: 0 PID: 26190 Comm: syz.9.8851 Not tainted syzkaller #0 PREEMPT(lazy) 
[  470.867572][T26190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  470.867585][T26190] Call Trace:
[  470.867591][T26190]  <TASK>
[  470.867598][T26190]  __dump_stack+0x1d/0x30
[  470.867628][T26190]  dump_stack_lvl+0x95/0xd0
[  470.867682][T26190]  dump_stack+0x15/0x1b
[  470.867773][T26190]  should_fail_ex+0x262/0x280
[  470.867876][T26190]  should_fail+0xb/0x20
[  470.867903][T26190]  should_fail_usercopy+0x1a/0x20
[  470.867927][T26190]  _copy_from_user+0x1c/0xb0
[  470.867950][T26190]  core_sys_select+0x1e7/0x7a0
[  470.868053][T26190]  __se_sys_select+0xb5/0x260
[  470.868093][T26190]  __x64_sys_select+0x67/0x80
[  470.868127][T26190]  x64_sys_call+0x1c78/0x2550
[  470.868156][T26190]  do_syscall_64+0x112/0x360
[  470.868195][T26190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.868283][T26190] RIP: 0033:0x7f8f0d59f559
[  470.868298][T26190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.868316][T26190] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  470.868335][T26190] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  470.868380][T26190] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000040
[  470.868392][T26190] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  470.868484][T26190] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000
[  470.868497][T26190] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  470.868516][T26190]  </TASK>
[  470.976044][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8852'.
[  471.233725][T26197] ip_tables: iptables: counters copy to user failed while replacing table
[  471.559423][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  471.559499][   T29] audit: type=1326 audit(1793129778.832:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.559645][   T29] audit: type=1326 audit(1793129778.832:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.559827][   T29] audit: type=1326 audit(1793129778.832:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.560004][   T29] audit: type=1326 audit(1793129778.832:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.560361][   T29] audit: type=1326 audit(1793129778.832:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.560491][   T29] audit: type=1326 audit(1793129778.832:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.560553][   T29] audit: type=1326 audit(1793129778.832:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.560942][   T29] audit: type=1326 audit(1793129778.832:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4e55dfd8e code=0x7ffc0000
[  471.561226][   T29] audit: type=1326 audit(1793129778.832:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.561258][   T29] audit: type=1326 audit(1793129778.832:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26227 comm="syz.0.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  471.784431][T26231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8867'.
[  471.960904][T26237] loop5: detected capacity change from 0 to 8192
[  472.322197][T26250] loop9: detected capacity change from 0 to 512
[  472.479380][T26250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.480011][T26250] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.543221][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.543945][T26271] netlink: 'syz.5.8883': attribute type 1 has an invalid length.
[  472.578409][T26271] 8021q: adding VLAN 0 to HW filter on device bond9
[  472.603843][T26271] bond9: (slave gretap2): making interface the new active one
[  472.619188][T26271] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  472.818059][T26282] FAULT_INJECTION: forcing a failure.
[  472.818059][T26282] name failslab, interval 1, probability 0, space 0, times 0
[  472.818096][T26282] CPU: 0 UID: 0 PID: 26282 Comm: syz.9.8886 Not tainted syzkaller #0 PREEMPT(lazy) 
[  472.818161][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  472.818175][T26282] Call Trace:
[  472.818181][T26282]  <TASK>
[  472.818190][T26282]  __dump_stack+0x1d/0x30
[  472.818293][T26282]  dump_stack_lvl+0x95/0xd0
[  472.818324][T26282]  dump_stack+0x15/0x1b
[  472.818394][T26282]  should_fail_ex+0x262/0x280
[  472.818423][T26282]  ? devcgroup_css_alloc+0x2e/0xa0
[  472.818518][T26282]  should_failslab+0x8c/0xb0
[  472.818548][T26282]  __kmalloc_cache_noprof+0x5d/0x3e0
[  472.818651][T26282]  ? devcgroup_css_alloc+0x2e/0xa0
[  472.818689][T26282]  devcgroup_css_alloc+0x2e/0xa0
[  472.818793][T26282]  cgroup_apply_control_enable+0x1f9/0x8b0
[  472.818865][T26282]  cgroup_mkdir+0x1104/0x11b0
[  472.818930][T26282]  ? __pfx_cgroup_mkdir+0x10/0x10
[  472.819003][T26282]  kernfs_iop_mkdir+0x11e/0x1c0
[  472.819032][T26282]  vfs_mkdir+0x29d/0x3e0
[  472.819074][T26282]  filename_mkdirat+0x138/0x300
[  472.819109][T26282]  __se_sys_mkdirat+0x32/0xf0
[  472.819192][T26282]  __x64_sys_mkdirat+0x43/0x50
[  472.819291][T26282]  x64_sys_call+0x368/0x2550
[  472.819391][T26282]  do_syscall_64+0x112/0x360
[  472.819423][T26282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.819462][T26282] RIP: 0033:0x7f8f0d59f559
[  472.819485][T26282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.819573][T26282] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  472.819655][T26282] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  472.819676][T26282] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  472.819696][T26282] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  472.819715][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.819743][T26282] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  472.819832][T26282]  </TASK>
[  474.221754][T26375] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8923'.
[  474.828252][T20188] Bluetooth: hci0: Frame reassembly failed (-84)
[  476.037670][T26478] bridge0: port 3(syz_tun) entered disabled state
[  476.059123][T26478] bridge0: port 2(team0) entered disabled state
[  476.059401][T26478] bridge0: port 4(batadv1) entered disabled state
[  476.060291][T26478] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.069624][T26478] bridge0: left promiscuous mode
[  476.188306][T26478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.217811][T26478] tipc: Resetting bearer <eth:vlan0>
[  476.221234][T26478] veth0_vlan: left promiscuous mode
[  476.240113][T26478] tipc: Resetting bearer <eth:ipvlan1>
[  476.344849][T26478] ip6gre1: left promiscuous mode
[  476.344970][T26478] ip6gre1: left allmulticast mode
[  476.464180][T26478] geneve2: left promiscuous mode
[  476.464205][T26478] geneve2: left allmulticast mode
[  476.466959][T26478] erspan1: left allmulticast mode
[  476.469564][T26478] bond4: left promiscuous mode
[  476.469587][T26478] veth3: left promiscuous mode
[  476.478357][T26478] bond5: left promiscuous mode
[  476.478425][T26478] bond6: left promiscuous mode
[  476.509675][T26478] bond7: left promiscuous mode
[  476.509699][T26478] bond7: left allmulticast mode
[  476.510453][T26478] ip6erspan0: left allmulticast mode
[  476.511529][T26478] bridge3: left promiscuous mode
[  476.511606][T26478] bridge3: left allmulticast mode
[  476.540003][T26478] geneve3: left allmulticast mode
[  476.541811][T26478] gretap1: left promiscuous mode
[  476.580619][T26478] batman_adv: batadv0: Interface deactivated: gretap2
[  476.581573][T26478] ip6gre2: left promiscuous mode
[  476.581640][T26478] ip6gre2: left allmulticast mode
[  476.625599][T26478] bond8: left promiscuous mode
[  476.625626][T26478] ip6gre3: left promiscuous mode
[  476.645059][T20214] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.645095][T20214] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  476.645123][T20214] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  476.645207][T20214] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.645278][T20214] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  476.645372][T20214] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  476.645417][T20214] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.645454][T20214] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  476.645538][T20214] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  476.849177][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  476.849200][   T29] audit: type=1400 audit(1793129784.125:4923): avc:  denied  { write } for  pid=26494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  476.872575][T16075] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  476.910210][   T29] audit: type=1400 audit(1793129784.185:4924): avc:  denied  { write } for  pid=26507 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  477.005419][T26493] bridge0: port 3(batadv2) entered disabled state
[  477.005493][T26493] bridge0: port 2(batadv1) entered disabled state
[  477.184232][T26493] batman_adv: batadv0: Interface deactivated: netdevsim2
[  477.517214][T26493] batman_adv: batadv0: Interface deactivated: gretap3
[  477.520141][T26497] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8965'.
[  477.541196][T26396] can0: slcan on ptm0.
[  477.582171][T26394] can0 (unregistered): slcan off ptm0.
[  477.602253][T20188] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.602295][T20188] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  477.602441][T20188] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  477.602479][T20188] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.602517][T20188] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0
[  477.602555][T20188] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.602650][T20188] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  477.602757][T20188] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.602826][T20188] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0
[  477.602865][T20188] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.602949][T20188] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  477.603030][T20188] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.603090][T20188] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0
[  477.603169][T20188] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.603206][T20188] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  477.603342][T20188] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.603376][T20188] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0
[  477.603412][T20188] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.603530][T20188] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  477.965865][   T29] audit: type=1400 audit(1793129785.245:4925): avc:  denied  { write } for  pid=26518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.024119][T26547] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8977'.
[  478.024337][   T29] audit: type=1400 audit(1793129785.305:4926): avc:  denied  { write } for  pid=26554 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.269616][   T29] audit: type=1400 audit(1793129785.545:4927): avc:  denied  { write } for  pid=26561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.321050][   T29] audit: type=1400 audit(1793129785.595:4928): avc:  denied  { write } for  pid=26590 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.521204][   T29] audit: type=1400 audit(1793129785.795:4929): avc:  denied  { write } for  pid=26593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.608331][   T29] audit: type=1400 audit(1793129785.885:4930): avc:  denied  { write } for  pid=26612 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.831694][   T29] audit: type=1400 audit(1793129786.116:4931): avc:  denied  { write } for  pid=26620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.896394][   T29] audit: type=1400 audit(1793129786.176:4932): avc:  denied  { write } for  pid=26633 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.012037][T26638] loop9: detected capacity change from 0 to 1024
[  479.037840][T26638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.047500][T26644] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  479.188942][T26653] bond6: (slave lo): Releasing backup interface
[  479.200323][T26653] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  479.216900][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.341699][T26666] FAULT_INJECTION: forcing a failure.
[  479.341699][T26666] name failslab, interval 1, probability 0, space 0, times 0
[  479.341739][T26666] CPU: 0 UID: 0 PID: 26666 Comm: syz.9.9001 Not tainted syzkaller #0 PREEMPT(lazy) 
[  479.341900][T26666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  479.341918][T26666] Call Trace:
[  479.341927][T26666]  <TASK>
[  479.341937][T26666]  __dump_stack+0x1d/0x30
[  479.342008][T26666]  dump_stack_lvl+0x95/0xd0
[  479.342076][T26666]  dump_stack+0x15/0x1b
[  479.342108][T26666]  should_fail_ex+0x262/0x280
[  479.342139][T26666]  ? __memcg_list_lru_alloc+0x288/0x470
[  479.342180][T26666]  should_failslab+0x8c/0xb0
[  479.342274][T26666]  __kmalloc_noprof+0xb6/0x4b0
[  479.342308][T26666]  ? __memcg_list_lru_alloc+0x288/0x470
[  479.342351][T26666]  __memcg_list_lru_alloc+0x288/0x470
[  479.342482][T26666]  memcg_list_lru_alloc+0x88/0xa0
[  479.342526][T26666]  __memcg_slab_post_alloc_hook+0x23e/0x8c0
[  479.342563][T26666]  ? __rcu_read_unlock+0x4e/0x70
[  479.342598][T26666]  ? should_fail_ex+0xdb/0x280
[  479.342653][T26666]  kmem_cache_alloc_lru_noprof+0x1d6/0x3e0
[  479.342690][T26666]  ? mqueue_alloc_inode+0x34/0x50
[  479.342719][T26666]  ? mqueue_alloc_inode+0x34/0x50
[  479.342818][T26666]  ? __pfx_mqueue_fill_super+0x10/0x10
[  479.342919][T26666]  ? __pfx_mqueue_alloc_inode+0x10/0x10
[  479.342988][T26666]  mqueue_alloc_inode+0x34/0x50
[  479.343017][T26666]  alloc_inode+0x40/0x170
[  479.343045][T26666]  new_inode+0x1d/0xe0
[  479.343082][T26666]  ? __pfx_mqueue_fill_super+0x10/0x10
[  479.343113][T26666]  mqueue_fill_super+0x89/0x1d0
[  479.343175][T26666]  ? __pfx_mqueue_fill_super+0x10/0x10
[  479.343198][T26666]  get_tree_nodev+0x83/0x100
[  479.343233][T26666]  mqueue_get_tree+0x5d/0x80
[  479.343254][T26666]  vfs_get_tree+0x57/0x1d0
[  479.343365][T26666]  fc_mount_longterm+0x18/0xb0
[  479.343519][T26666]  mq_init_ns+0x2db/0x370
[  479.343564][T26666]  copy_ipcs+0x26d/0x460
[  479.343590][T26666]  create_new_namespaces+0x121/0x420
[  479.343615][T26666]  unshare_nsproxy_namespaces+0x115/0x150
[  479.343696][T26666]  ksys_unshare+0x3a3/0x690
[  479.343740][T26666]  __x64_sys_unshare+0x1f/0x30
[  479.343804][T26666]  x64_sys_call+0x1e33/0x2550
[  479.343849][T26666]  do_syscall_64+0x112/0x360
[  479.343891][T26666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.343984][T26666] RIP: 0033:0x7f8f0d59f559
[  479.344007][T26666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.344033][T26666] RSP: 002b:00007f8f0bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  479.344062][T26666] RAX: ffffffffffffffda RBX: 00007f8f0d825fa0 RCX: 00007f8f0d59f559
[  479.344082][T26666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200
[  479.344166][T26666] RBP: 00007f8f0d636b20 R08: 0000000000000000 R09: 0000000000000000
[  479.344186][T26666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.344243][T26666] R13: 00007f8f0d826038 R14: 00007f8f0d825fa0 R15: 00007ffd03d33b68
[  479.344272][T26666]  </TASK>
[  479.344498][T26653] bridge0: port 3(syz_tun) entered disabled state
[  479.640448][T26653] bridge_slave_0: left allmulticast mode
[  479.642133][T26653] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.668295][T26673] loop9: detected capacity change from 0 to 256
[  479.681103][T26673] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  479.681648][T26653] bond0: (slave bond_slave_0): Releasing backup interface
[  479.695652][T26673] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  479.695682][T26673] FAT-fs (loop9): Filesystem has been set read-only
[  479.737365][T26653] bond0: (slave bond_slave_1): Releasing backup interface
[  479.778702][T26653] team0: Port device team_slave_1 removed
[  479.790041][T26653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.790150][T26653] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.809923][T26653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.809944][T26653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.876888][T26653] batadv1: left allmulticast mode
[  479.876917][T26653] batadv1: left promiscuous mode
[  479.877021][T26653] bridge0: port 4(batadv1) entered disabled state
[  479.899272][T26653] batadv2: left allmulticast mode
[  479.899299][T26653] batadv2: left promiscuous mode
[  479.899407][T26653] bridge0: port 5(batadv2) entered disabled state
[  479.903912][T26653] batadv3: left allmulticast mode
[  479.904031][T26653] batadv3: left promiscuous mode
[  479.904509][T26653] bridge0: port 6(batadv3) entered disabled state
[  479.944205][T26653] batadv4: left allmulticast mode
[  479.944230][T26653] batadv4: left promiscuous mode
[  479.944315][T26653] bridge0: port 7(batadv4) entered disabled state
[  479.948443][T26653] batadv5: left allmulticast mode
[  479.948468][T26653] batadv5: left promiscuous mode
[  479.948585][T26653] bridge0: port 8(batadv5) entered disabled state
[  479.990967][T26653] bond5: (slave veth3): Releasing backup interface
[  479.990998][T26653] veth3: left promiscuous mode
[  480.041401][T26653] bond7: (slave gretap1): Releasing active interface
[  480.084781][T26653] bond9: (slave gretap2): Releasing active interface
[  480.105751][T26656] team0: Mode changed to "broadcast"
[  480.169898][T26705] loop5: detected capacity change from 0 to 512
[  480.795588][T26778] rxe_eth0 speed is unknown, defaulting to 1000
[  482.287500][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  482.287573][   T29] audit: type=1326 audit(1793129789.557:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26787 comm="syz.2.9018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  482.287707][   T29] audit: type=1326 audit(1793129789.557:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26787 comm="syz.2.9018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  482.289516][   T29] audit: type=1326 audit(1793129789.557:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26787 comm="syz.2.9018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  482.347463][   T29] audit: type=1326 audit(1793129789.617:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26787 comm="syz.2.9018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  482.349034][   T29] audit: type=1326 audit(1793129789.617:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26787 comm="syz.2.9018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  482.410862][   T29] audit: type=1326 audit(1793129789.687:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26787 comm="syz.2.9018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94af6ff559 code=0x7ffc0000
[  483.434122][   T29] audit: type=1326 audit(1793129790.708:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26797 comm="syz.0.9022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  483.434220][   T29] audit: type=1326 audit(1793129790.708:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26797 comm="syz.0.9022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  483.437814][   T29] audit: type=1326 audit(1793129790.708:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26797 comm="syz.0.9022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  483.437869][   T29] audit: type=1326 audit(1793129790.708:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26797 comm="syz.0.9022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e561f559 code=0x7ffc0000
[  483.868086][T26806] loop9: detected capacity change from 0 to 1024
[  483.884044][T26806] EXT4-fs: Ignoring removed bh option
[  483.915209][T26806] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  483.940975][T26806] EXT4-fs (loop9): can't mount with commit=, fs mounted w/o journal
[  484.736839][T26848] netlink: 75 bytes leftover after parsing attributes in process `syz.2.9051'.
[  484.739656][T26848] gretap0: left promiscuous mode
[  484.771066][T26848] bridge0: port 3(syz_tun) entered blocking state
[  484.771130][T26848] bridge0: port 3(syz_tun) entered listening state
[  484.773784][T26848] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.775103][T26848] 8021q: adding VLAN 0 to HW filter on device team0
[  484.777490][T26848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.852365][T26848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.870696][T26848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  484.872736][T26848] veth1_vlan: left promiscuous mode
[  484.873305][T26848] veth0_vlan: entered promiscuous mode
[  484.873769][T26848] tipc: Resetting bearer <eth:vlan0>
[  484.874583][T26848] veth1_vlan: entered promiscuous mode
[  484.915131][T26848] tipc: Resetting bearer <eth:ipvlan1>
[  484.915284][T26848] tipc: Resetting bearer <eth:ipvlan1>
[  484.915497][T26848] veth1_macvtap: left promiscuous mode
[  484.933569][T26848] veth0_macvtap: left promiscuous mode
[  484.938345][T26848] veth0_macvtap: entered promiscuous mode
[  484.939786][T26848] veth1_macvtap: entered promiscuous mode
[  484.984676][T26848] 8021q: adding VLAN 0 to HW filter on device bond1
[  484.985702][T26848] 8021q: adding VLAN 0 to HW filter on device bond2
[  485.152680][T26848] bridge0: port 4(batadv1) entered blocking state
[  485.152726][T26848] bridge0: port 4(batadv1) entered listening state
[  485.152832][T26848] 8021q: adding VLAN 0 to HW filter on device batadv1
[  485.175424][T26848] 8021q: adding VLAN 0 to HW filter on device bond3
[  485.177412][T26848] 8021q: adding VLAN 0 to HW filter on device bond4
[  485.183834][T26848] 8021q: adding VLAN 0 to HW filter on device bond5
[  485.186631][T26848] 8021q: adding VLAN 0 to HW filter on device bond6
[  485.217658][T26848] 8021q: adding VLAN 0 to HW filter on device bond7
[  485.252682][T26848] 8021q: adding VLAN 0 to HW filter on device eth0
[  485.253708][T26848] 8021q: adding VLAN 0 to HW filter on device eth1
[  485.254588][T26848] 8021q: adding VLAN 0 to HW filter on device eth2
[  485.255682][T26848] 8021q: adding VLAN 0 to HW filter on device eth3
[  485.293342][T26848] batman_adv: batadv0: Interface activated: gretap2
[  485.342795][T26848] gretap0: entered promiscuous mode
[  485.344299][T26848] 8021q: adding VLAN 0 to HW filter on device bond8
[  485.380883][T20196] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.381576][T20196] bridge0: port 1(bridge_slave_0) entered listening state
[  485.424782][T20196] bridge0: port 2(team0) entered blocking state
[  485.424900][T20196] bridge0: port 2(team0) entered listening state
[  485.446775][T20188] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  485.446883][T20188] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  485.466532][T20188] ip6_tunnel:  xmit: Local address not yet configured!
[  485.466669][T20188] ip6_tunnel:  xmit: Local address not yet configured!
[  485.468172][ T3419] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  485.492787][ T3419] ip6_tunnel:  xmit: Local address not yet configured!
[  485.501935][T20188] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  485.502014][T20188] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  485.506084][T20188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  485.506231][T20188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  485.573985][T20188] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  485.574029][T20188] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.574177][T20188] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  485.574220][T20188] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  485.574315][T20188] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.574351][T20188] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  485.574401][T20188] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  485.574438][T20188] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.574524][T20188] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  485.574577][T20188] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  485.574726][T20188] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.574762][T20188] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  486.160332][T26895] netlink: 75 bytes leftover after parsing attributes in process `syz.9.9060'.
[  486.182638][T26895] bridge0: port 1(syz_tun) entered blocking state
[  486.182682][T26895] bridge0: port 1(syz_tun) entered forwarding state
[  486.184856][T26895] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.193054][T26895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.259694][T26895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  486.259714][T26895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  486.262500][T26895] veth1_vlan: left promiscuous mode
[  486.269278][T26895] veth0_vlan: left promiscuous mode
[  486.271907][T26895] veth0_vlan: entered promiscuous mode
[  486.289985][T26895] veth1_vlan: entered promiscuous mode
[  486.313837][T26895] veth1_macvtap: left promiscuous mode
[  486.314640][T26895] veth0_macvtap: left promiscuous mode
[  486.315563][T26895] veth0_macvtap: entered promiscuous mode
[  486.316172][T26895] veth1_macvtap: entered promiscuous mode
[  486.342768][T26895] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  486.343578][T26895] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  486.344422][T26895] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  486.345403][T26895] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  486.487546][T20194] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.487683][T20194] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.487782][T20194] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.488217][T20194] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.147669][T26927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9065'.
[  487.340460][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  487.340479][   T29] audit: type=1400 audit(1793129794.620:4962): avc:  denied  { write } for  pid=26951 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  490.625568][    C0] ip6_tnl_xmit_ctl: 20 callbacks suppressed
[  490.625591][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  491.877118][   T29] audit: type=1400 audit(1793129799.162:4963): avc:  denied  { write } for  pid=27019 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  491.941434][   T29] audit: type=1400 audit(1793129799.222:4964): avc:  denied  { write } for  pid=27019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  491.987422][   T29] audit: type=1400 audit(1793129799.272:4965): avc:  denied  { write } for  pid=27033 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.609694][T27051] loop9: detected capacity change from 0 to 512
[  494.612883][T27051] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  494.612900][T27051] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  494.644737][T27051] EXT4-fs (loop9): 1 truncate cleaned up
[  494.645193][T27051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.648640][   T29] audit: type=1400 audit(1793129801.933:4966): avc:  denied  { write } for  pid=27050 comm="syz.9.9083" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  494.919350][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.956644][T27074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9092'.
[  495.937117][   T29] audit: type=1400 audit(1793129803.224:4967): avc:  denied  { write } for  pid=27091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.990216][   T29] audit: type=1400 audit(1793129803.274:4968): avc:  denied  { write } for  pid=27102 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  496.034112][T27109] loop9: detected capacity change from 0 to 512
[  496.058291][T27109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.058450][T27109] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.172931][T21277] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.003804][T27226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9111'.
[  497.041476][T27229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9113'.
[  497.052674][T27229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9113'.
[  497.091199][T27231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9115'.
[  497.102741][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  497.197774][   T29] audit: type=1400 audit(1793129804.484:4969): avc:  denied  { write } for  pid=27234 comm="syz.0.9116" path="socket:[81293]" dev="sockfs" ino=81293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  497.742177][    C0] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  497.878763][   T29] audit: type=1400 audit(1793129805.165:4970): avc:  denied  { write } for  pid=27241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  497.923574][   T29] audit: type=1400 audit(1793129805.215:4971): avc:  denied  { write } for  pid=27252 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  498.381893][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  498.382217][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  498.382270][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  499.227592][T27131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.349921][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9129'.
[  500.278942][T27366] loop5: detected capacity change from 0 to 512
[  500.429408][T27380] netlink: 'syz.0.9137': attribute type 6 has an invalid length.
[  500.585173][T27386] rxe_eth0 speed is unknown, defaulting to 1000
[  500.912421][T27397] loop5: detected capacity change from 0 to 1024
[  502.353010][T27514] loop5: detected capacity change from 0 to 512
[  502.568456][T27550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9150'.
[  502.569690][T27550] netlink: 'syz.5.9150': attribute type 30 has an invalid length.
[  503.948630][T27553] rxe_eth0 speed is unknown, defaulting to 1000
[  503.970501][T27550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9150'.
[  503.970538][T27550] netlink: 'syz.5.9150': attribute type 30 has an invalid length.
[  504.256869][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9162'.
[  504.801800][T27748] loop9: detected capacity change from 0 to 256
[  505.828682][T27859] ip6gre4: entered promiscuous mode
[  505.828757][T27859] ip6gre4: entered allmulticast mode
[  505.831560][T20217] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  505.831642][T20217] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  505.868390][   T23] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  505.892598][T27859] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  506.110617][T27887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  506.120638][   T29] audit: type=1400 audit(1793129813.409:4972): avc:  denied  { read } for  pid=27888 comm="syz.9.9189" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  506.122648][   T29] audit: type=1400 audit(1793129813.409:4973): avc:  denied  { open } for  pid=27888 comm="syz.9.9189" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  506.132761][   T29] audit: type=1400 audit(1793129813.409:4974): avc:  denied  { mount } for  pid=27890 comm="syz.2.9190" name="/" dev="autofs" ino=80672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  506.283057][T27904] loop5: detected capacity change from 0 to 128
[  506.457162][T27927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9202'.
[  506.520919][T27927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9202'.
[  506.520954][T27927] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9202'.
[  506.624990][T27939] netlink: 'syz.9.9209': attribute type 1 has an invalid length.
[  506.625201][T27939] netlink: 5 bytes leftover after parsing attributes in process `syz.9.9209'.
[  506.708255][T24116] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  506.761642][T27946] ==================================================================
[  506.761695][T27946] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  506.761753][T27946] 
[  506.761759][T27946] write to 0xffff8881390e5ca0 of 8 bytes by task 27943 on cpu 1:
[  506.761778][T27946]  shmem_file_splice_read+0x3eb/0x570
[  506.761821][T27946]  splice_direct_to_actor+0x25d/0x680
[  506.761849][T27946]  do_splice_direct+0x119/0x1a0
[  506.761874][T27946]  do_sendfile+0x37d/0x640
[  506.761896][T27946]  __x64_sys_sendfile64+0x105/0x150
[  506.761930][T27946]  x64_sys_call+0x1015/0x2550
[  506.761957][T27946]  do_syscall_64+0x112/0x360
[  506.761994][T27946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.762032][T27946] 
[  506.762040][T27946] write to 0xffff8881390e5ca0 of 8 bytes by task 27946 on cpu 0:
[  506.762058][T27946]  shmem_file_splice_read+0x3eb/0x570
[  506.762096][T27946]  splice_direct_to_actor+0x25d/0x680
[  506.762122][T27946]  do_splice_direct+0x119/0x1a0
[  506.762147][T27946]  do_sendfile+0x37d/0x640
[  506.762169][T27946]  __x64_sys_sendfile64+0x105/0x150
[  506.762203][T27946]  x64_sys_call+0x1015/0x2550
[  506.762234][T27946]  do_syscall_64+0x112/0x360
[  506.762270][T27946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.762298][T27946] 
[  506.762303][T27946] value changed: 0x0000000000001833 -> 0x0000000000001834
[  506.762314][T27946] 
[  506.762319][T27946] Reported by Kernel Concurrency Sanitizer on:
[  506.762330][T27946] CPU: 0 UID: 0 PID: 27946 Comm: syz.0.9210 Not tainted syzkaller #0 PREEMPT(lazy) 
[  506.762359][T27946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  506.762373][T27946] ==================================================================
[  506.790115][T24116] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  509.976441][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  512.455346][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  513.734909][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  513.734984][    C0] ip6_tunnel: üÿÿÿÿÿÿÿ xmit: Local address not yet configured!
[  515.014437][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  515.014558][    C0] bridge0: port 3(syz_tun) entered learning state
[  515.654032][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  515.654141][    C0] bridge0: port 2(team0) entered learning state
[  515.655026][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  515.655829][    C0] bridge0: port 4(batadv1) entered learning state