last executing test programs: 11m20.258294513s ago: executing program 32 (id=300): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x1e, 0x4, 0x0) 11m19.793640825s ago: executing program 33 (id=308): getrandom(0x0, 0x0, 0x3) 10m19.611782077s ago: executing program 34 (id=1005): accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 10m11.877808084s ago: executing program 35 (id=1080): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 10m10.949859827s ago: executing program 36 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10m10.615361965s ago: executing program 37 (id=1092): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) 10m4.369734967s ago: executing program 38 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 10m0.242279057s ago: executing program 9 (id=1219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000600)="61e21d", 0x3}, {0x0}, {0x0}], 0x3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$nbd(r1, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES64=r0], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0xfffffffc}, 0x9c) 10m0.12695947s ago: executing program 9 (id=1222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m59.634948972s ago: executing program 9 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000800000000000000000018110000", @ANYRES32=r0], &(0x7f0000000680)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) 9m59.344488649s ago: executing program 9 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 9m59.29755542s ago: executing program 9 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x4, 0x12bb41) r1 = timerfd_create(0x0, 0x80800) timerfd_settime(r1, 0x1, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x3dc}, 0x0, &(0x7f0000000000), &(0x7f0000000740)) 9m57.746764488s ago: executing program 9 (id=1253): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, 0x0, 0xb2) 9m57.565875752s ago: executing program 39 (id=1253): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, 0x0, 0xb2) 9m55.122713502s ago: executing program 8 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x3, 0x4e9, &(0x7f00000000c0)="$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") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x20) 9m54.451000108s ago: executing program 8 (id=1297): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xfffffffffffffe1a) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2090100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m54.35823467s ago: executing program 8 (id=1298): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xfffffffffffffe1a) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m54.35093263s ago: executing program 0 (id=1301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000200)="080000000100", 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000005c0)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r3, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 9m54.35002623s ago: executing program 8 (id=1302): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00') 9m54.277138452s ago: executing program 8 (id=1304): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703935302c73686f72746e616d653d77696e6e742c757466383d312c646f733178666c6f7070792c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c757466383d312c726f6469722c636f6465706167653d313235312c756e695f786c6174653d312c73686f72746e616d653d6d697865642c757466383d312c6e6f636173652c756e695f786c6174653d312c726f6469722c00efc697e01092648b35866058"], 0x1, 0x2a6, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 9m54.018519829s ago: executing program 8 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) 9m54.013152598s ago: executing program 40 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) 9m53.14597271s ago: executing program 0 (id=1317): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xfffffffffffffe1a) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2090100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m53.103692381s ago: executing program 0 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m53.039046542s ago: executing program 0 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00') 9m53.036851312s ago: executing program 0 (id=1320): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801b, &(0x7f0000000240), 0xff, 0x523, &(0x7f00000006c0)="$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") 9m52.615026793s ago: executing program 0 (id=1323): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x90000000000002, 0x0) 9m52.503892815s ago: executing program 41 (id=1323): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x90000000000002, 0x0) 9m51.307506554s ago: executing program 2 (id=1331): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801b, &(0x7f0000000240), 0xff, 0x523, &(0x7f00000006c0)="$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") 9m50.364388247s ago: executing program 2 (id=1334): socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xfffffffffffffe1a) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2090100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m49.907840749s ago: executing program 2 (id=1335): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m49.870755689s ago: executing program 2 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) 9m49.863306679s ago: executing program 2 (id=1337): unshare(0x22020600) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf255100000008000300", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x10000881}, 0x4) 9m49.546047077s ago: executing program 4 (id=1339): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_ringparam={0x10, 0x1, 0x9, 0xfff, 0xfffffffc, 0x5, 0x81, 0xffff8001, 0xecd}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='xprtsec\x00', 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x7fc00000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3b82, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1001c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$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") r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="540000004c186800b92ac7847b9ba194c3f31a9f435484ec47ce74b8a99a7521b9992c02f60238a1987616d3cb72aba71ccc6a0bbde466a9368327fba352e99a3474b0d81df7c23994b8c4c7d5c6d3ccad49fcb72b70ea453b8fe423ef09dea19e375106b29c91ad3ecaefc0a9801d23c4695872fba42dc0e177b10e12270132c7ad757dfb0249badf62addc7377c24d905f5a543572ad61c17ab4c212119c298104d57bbda2f83dc43e30c2d54a27796f0effef012b3ec13e68e82e8048d7f6eb0404c500012a724bc3ac9c5f428c6ce0e883b474", @ANYRES16=r7, @ANYBLOB="00082dbd7000ffdbdf250100000008000400090000000500050009000000080002000500000008000200020000000500050007000000080003000300000008000300030000000800020007000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}, @generic={0x79, 0x1, 0xa, 0xfff8}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 9m49.545768807s ago: executing program 2 (id=1340): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='re', 0x2) 9m49.523835887s ago: executing program 42 (id=1340): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='re', 0x2) 9m49.191722056s ago: executing program 4 (id=1342): socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xfffffffffffffe1a) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2090100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m49.175114806s ago: executing program 4 (id=1343): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m49.075068458s ago: executing program 4 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) 9m49.033856659s ago: executing program 4 (id=1345): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801b, &(0x7f0000000240), 0xff, 0x523, &(0x7f00000006c0)="$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") 9m48.470967903s ago: executing program 4 (id=1347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000600)="61e21d", 0x3}, {0x0}, {0x0}], 0x3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$nbd(r1, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES64=r0], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0xfffffffc}, 0x9c) 9m48.316558997s ago: executing program 43 (id=1347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000600)="61e21d", 0x3}, {0x0}, {0x0}], 0x3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$nbd(r1, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES64=r0], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0xfffffffc}, 0x9c) 4.928837011s ago: executing program 3 (id=5730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 4.773412944s ago: executing program 3 (id=5734): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 4.713827526s ago: executing program 3 (id=5736): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) 4.684538917s ago: executing program 7 (id=5739): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000"], 0x108}}], 0x1, 0xc040) 4.613360338s ago: executing program 7 (id=5740): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.834878137s ago: executing program 3 (id=5744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a980000050007000600000008000640000000010500010006000000090002"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.667141552s ago: executing program 6 (id=5751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 2.955237898s ago: executing program 3 (id=5752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) 2.92836259s ago: executing program 7 (id=5753): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x4018080) 2.870038191s ago: executing program 6 (id=5754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, 0x0) 2.757897994s ago: executing program 6 (id=5756): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/4091, 0xffb}, {&(0x7f0000002c40)=""/4083, 0xff3}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x5}, 0x40000000) 2.659598806s ago: executing program 1 (id=5757): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000001b80)=""/4090, 0x0, 0xffa, 0xa}, 0x28) 2.524212759s ago: executing program 1 (id=5759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2.418724532s ago: executing program 1 (id=5762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a980000050007000600000008000640000000010500010006000000090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.396786423s ago: executing program 5 (id=5763): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1.907755415s ago: executing program 7 (id=5764): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x8, 0x1}, 0x182, 0x0, 0xfffffffe, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.896879484s ago: executing program 1 (id=5765): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0xa) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/ip6_tables_matches\x00') sendfile(r1, r2, 0x0, 0x80000000) 1.822873896s ago: executing program 6 (id=5766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.788147837s ago: executing program 7 (id=5767): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a310000000004000480090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 1.612209251s ago: executing program 3 (id=5768): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r3, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) 1.469282535s ago: executing program 5 (id=5769): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001b80)=""/4090, 0x1a, 0xffa, 0xa}, 0x28) 1.467889815s ago: executing program 6 (id=5770): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a310000000004000480090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 1.234375321s ago: executing program 5 (id=5771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "1b7bd3ec92f1ea38afc4ed82006292070000000e160e8b2616cfc5f36f682cac1a363cf4d014a4146e057a5568a5c7166f245303bb6aa069cd887a10a479f69948"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.205691361s ago: executing program 7 (id=5772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000080)=0x1) 1.169849932s ago: executing program 5 (id=5773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.030039746s ago: executing program 6 (id=5774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 1.028969716s ago: executing program 1 (id=5775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a980000050007000600000008000640000000010500010006000000090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 987.796567ms ago: executing program 5 (id=5776): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a310000000004000480090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 374.037122ms ago: executing program 1 (id=5777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 0s ago: executing program 5 (id=5778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r0, &(0x7f0000000000)='3', 0x4e) setresuid(0x0, 0xee00, 0x0) capset(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): x64_sys_call+0xf26/0x2550 [ 684.941667][T29980] do_syscall_64+0x112/0x360 [ 684.941691][T29980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.941713][T29980] RIP: 0033:0x7fd8af28e159 [ 684.941757][T29980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.941778][T29980] RSP: 002b:00007fd8adce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.941799][T29980] RAX: ffffffffffffffda RBX: 00007fd8af515fa0 RCX: 00007fd8af28e159 [ 684.941814][T29980] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 684.941829][T29980] RBP: 00007fd8af32506b R08: 0000000000000000 R09: 0000000000000000 [ 684.941843][T29980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.941858][T29980] R13: 00007fd8af516038 R14: 00007fd8af515fa0 R15: 00007ffdf16188b8 [ 684.941888][T29980] [ 684.965054][T29985] FAULT_INJECTION: forcing a failure. [ 684.965054][T29985] name failslab, interval 1, probability 0, space 0, times 0 [ 684.965116][T29985] CPU: 1 UID: 60928 PID: 29985 Comm: syz.7.5203 Not tainted syzkaller #0 PREEMPT(lazy) [ 684.965153][T29985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.965198][T29985] Call Trace: [ 684.965204][T29985] [ 684.965211][T29985] __dump_stack+0x1d/0x30 [ 684.965236][T29985] dump_stack_lvl+0x95/0xd0 [ 684.965257][T29985] dump_stack+0x15/0x1b [ 684.965375][T29985] should_fail_ex+0x262/0x280 [ 684.965402][T29985] should_failslab+0x8c/0xb0 [ 684.965502][T29985] __kvmalloc_node_noprof+0x168/0x5c0 [ 684.965632][T29985] ? __rhashtable_init_noprof+0x320/0x490 [ 684.965665][T29985] ? __rhashtable_init_noprof+0x320/0x490 [ 684.965692][T29985] ? __list_add_valid_or_report+0x38/0xe0 [ 684.965763][T29985] __rhashtable_init_noprof+0x320/0x490 [ 684.965793][T29985] ipc_init_ids+0x58/0xb0 [ 684.965867][T29985] msg_init_ns+0xea/0x100 [ 684.965957][T29985] copy_ipcs+0x2a3/0x460 [ 684.965987][T29985] create_new_namespaces+0x121/0x420 [ 684.966042][T29985] unshare_nsproxy_namespaces+0x115/0x150 [ 684.966133][T29985] ksys_unshare+0x42b/0x710 [ 684.966161][T29985] __x64_sys_unshare+0x1f/0x30 [ 684.966251][T29985] x64_sys_call+0x1e33/0x2550 [ 684.966275][T29985] do_syscall_64+0x112/0x360 [ 684.966304][T29985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.966402][T29985] RIP: 0033:0x7f3de992e159 [ 684.966421][T29985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.966439][T29985] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 684.966468][T29985] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 684.966499][T29985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 684.966514][T29985] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 684.966529][T29985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.966595][T29985] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 684.966617][T29985] [ 685.055949][T29990] FAULT_INJECTION: forcing a failure. [ 685.055949][T29990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.055978][T29990] CPU: 1 UID: 0 PID: 29990 Comm: syz.7.5205 Not tainted syzkaller #0 PREEMPT(lazy) [ 685.056001][T29990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.056062][T29990] Call Trace: [ 685.056071][T29990] [ 685.056080][T29990] __dump_stack+0x1d/0x30 [ 685.056135][T29990] dump_stack_lvl+0x95/0xd0 [ 685.056184][T29990] dump_stack+0x15/0x1b [ 685.056207][T29990] should_fail_ex+0x262/0x280 [ 685.056235][T29990] should_fail+0xb/0x20 [ 685.056315][T29990] should_fail_usercopy+0x1a/0x20 [ 685.056345][T29990] _copy_from_user+0x1c/0xb0 [ 685.056376][T29990] __se_sys_capset+0x1f3/0x480 [ 685.056437][T29990] ? switch_fpu_return+0xe7/0x1b0 [ 685.056463][T29990] __x64_sys_capset+0x31/0x40 [ 685.056484][T29990] x64_sys_call+0x1515/0x2550 [ 685.056511][T29990] do_syscall_64+0x112/0x360 [ 685.056569][T29990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.056594][T29990] RIP: 0033:0x7f3de992e159 [ 685.056611][T29990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.056661][T29990] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 685.056683][T29990] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 685.056727][T29990] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 685.056741][T29990] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 685.056756][T29990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.056844][T29990] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 685.056865][T29990] [ 685.446453][T29999] syzkaller0: entered promiscuous mode [ 685.446538][T29999] syzkaller0: entered allmulticast mode [ 685.597413][T30004] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5210'. [ 686.195978][T30021] FAULT_INJECTION: forcing a failure. [ 686.195978][T30021] name failslab, interval 1, probability 0, space 0, times 0 [ 686.196021][T30021] CPU: 0 UID: 0 PID: 30021 Comm: syz.7.5218 Not tainted syzkaller #0 PREEMPT(lazy) [ 686.196066][T30021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.196083][T30021] Call Trace: [ 686.196090][T30021] [ 686.196097][T30021] __dump_stack+0x1d/0x30 [ 686.196124][T30021] dump_stack_lvl+0x95/0xd0 [ 686.196149][T30021] dump_stack+0x15/0x1b [ 686.196216][T30021] should_fail_ex+0x262/0x280 [ 686.196278][T30021] ? prepare_creds+0x38/0x550 [ 686.196372][T30021] should_failslab+0x8c/0xb0 [ 686.196408][T30021] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 686.196438][T30021] ? prepare_creds+0x38/0x550 [ 686.196462][T30021] ? _raw_spin_unlock+0x9/0x30 [ 686.196514][T30021] prepare_creds+0x38/0x550 [ 686.196544][T30021] __se_sys_capset+0x2da/0x480 [ 686.196640][T30021] __x64_sys_capset+0x31/0x40 [ 686.196661][T30021] x64_sys_call+0x1515/0x2550 [ 686.196732][T30021] do_syscall_64+0x112/0x360 [ 686.196760][T30021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.196782][T30021] RIP: 0033:0x7f3de992e159 [ 686.196806][T30021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.196828][T30021] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 686.196850][T30021] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 686.196863][T30021] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 686.196876][T30021] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 686.196889][T30021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.196960][T30021] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 686.196977][T30021] [ 686.389359][T30031] syzkaller0: entered promiscuous mode [ 686.389386][T30031] syzkaller0: entered allmulticast mode [ 686.460519][T30033] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5223'. [ 687.828142][T30056] FAULT_INJECTION: forcing a failure. [ 687.828142][T30056] name failslab, interval 1, probability 0, space 0, times 0 [ 687.828170][T30056] CPU: 0 UID: 0 PID: 30056 Comm: syz.1.5232 Not tainted syzkaller #0 PREEMPT(lazy) [ 687.828206][T30056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.828225][T30056] Call Trace: [ 687.828232][T30056] [ 687.828241][T30056] __dump_stack+0x1d/0x30 [ 687.828267][T30056] dump_stack_lvl+0x95/0xd0 [ 687.828447][T30056] dump_stack+0x15/0x1b [ 687.828472][T30056] should_fail_ex+0x262/0x280 [ 687.828512][T30056] ? prepare_creds+0x38/0x550 [ 687.828542][T30056] should_failslab+0x8c/0xb0 [ 687.828634][T30056] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 687.828668][T30056] ? prepare_creds+0x38/0x550 [ 687.828698][T30056] prepare_creds+0x38/0x550 [ 687.828722][T30056] __se_sys_capset+0x2da/0x480 [ 687.828824][T30056] ? switch_fpu_return+0xe7/0x1b0 [ 687.828849][T30056] __x64_sys_capset+0x31/0x40 [ 687.828870][T30056] x64_sys_call+0x1515/0x2550 [ 687.828972][T30056] do_syscall_64+0x112/0x360 [ 687.829034][T30056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.829061][T30056] RIP: 0033:0x7fc893b2e159 [ 687.829153][T30056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.829171][T30056] RSP: 002b:00007fc892587028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 687.829233][T30056] RAX: ffffffffffffffda RBX: 00007fc893db5fa0 RCX: 00007fc893b2e159 [ 687.829246][T30056] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 687.829259][T30056] RBP: 00007fc893bc506b R08: 0000000000000000 R09: 0000000000000000 [ 687.829272][T30056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.829287][T30056] R13: 00007fc893db6038 R14: 00007fc893db5fa0 R15: 00007fff75619ed8 [ 687.829309][T30056] [ 687.919836][T29975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.052603][T30062] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5235'. [ 688.075329][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 688.075346][ T29] audit: type=1400 audit(1791118374.938:19696): avc: denied { shutdown } for pid=30063 comm="syz.1.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 688.171611][T30073] FAULT_INJECTION: forcing a failure. [ 688.171611][T30073] name failslab, interval 1, probability 0, space 0, times 0 [ 688.171638][T30073] CPU: 1 UID: 60928 PID: 30073 Comm: syz.5.5239 Not tainted syzkaller #0 PREEMPT(lazy) [ 688.171738][T30073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.171783][T30073] Call Trace: [ 688.171791][T30073] [ 688.171800][T30073] __dump_stack+0x1d/0x30 [ 688.171829][T30073] dump_stack_lvl+0x95/0xd0 [ 688.171871][T30073] dump_stack+0x15/0x1b [ 688.171892][T30073] should_fail_ex+0x262/0x280 [ 688.171981][T30073] ? copy_fs_struct+0x31/0x110 [ 688.172013][T30073] should_failslab+0x8c/0xb0 [ 688.172116][T30073] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 688.172145][T30073] ? copy_fs_struct+0x31/0x110 [ 688.172177][T30073] copy_fs_struct+0x31/0x110 [ 688.172238][T30073] ksys_unshare+0x2f1/0x710 [ 688.172265][T30073] __x64_sys_unshare+0x1f/0x30 [ 688.172291][T30073] x64_sys_call+0x1e33/0x2550 [ 688.172321][T30073] do_syscall_64+0x112/0x360 [ 688.172385][T30073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.172410][T30073] RIP: 0033:0x7fd8af28e159 [ 688.172425][T30073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.172451][T30073] RSP: 002b:00007fd8adce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 688.172487][T30073] RAX: ffffffffffffffda RBX: 00007fd8af515fa0 RCX: 00007fd8af28e159 [ 688.172504][T30073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 688.172520][T30073] RBP: 00007fd8af32506b R08: 0000000000000000 R09: 0000000000000000 [ 688.172541][T30073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.172553][T30073] R13: 00007fd8af516038 R14: 00007fd8af515fa0 R15: 00007ffdf16188b8 [ 688.172572][T30073] [ 688.186539][T30076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 689.515892][T30093] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5247'. [ 689.517235][T30091] FAULT_INJECTION: forcing a failure. [ 689.517235][T30091] name failslab, interval 1, probability 0, space 0, times 0 [ 689.517275][T30091] CPU: 1 UID: 0 PID: 30091 Comm: syz.7.5246 Not tainted syzkaller #0 PREEMPT(lazy) [ 689.517303][T30091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.517318][T30091] Call Trace: [ 689.517325][T30091] [ 689.517334][T30091] __dump_stack+0x1d/0x30 [ 689.517440][T30091] dump_stack_lvl+0x95/0xd0 [ 689.517463][T30091] dump_stack+0x15/0x1b [ 689.517483][T30091] should_fail_ex+0x262/0x280 [ 689.517511][T30091] ? get_mountpoint+0x17e/0x370 [ 689.517607][T30091] should_failslab+0x8c/0xb0 [ 689.517756][T30091] __kmalloc_cache_noprof+0x7a/0x400 [ 689.517857][T30091] ? get_mountpoint+0x17e/0x370 [ 689.517889][T30091] get_mountpoint+0x17e/0x370 [ 689.517926][T30091] attach_recursive_mnt+0x11a/0x1700 [ 689.517957][T30091] ? _raw_spin_unlock+0x9/0x30 [ 689.517987][T30091] ? get_mountpoint+0x35c/0x370 [ 689.518132][T30091] do_new_mount+0x718/0x8d0 [ 689.518156][T30091] path_mount+0x4ad/0xb90 [ 689.518179][T30091] __se_sys_mount+0x28c/0x2e0 [ 689.518320][T30091] __x64_sys_mount+0x67/0x80 [ 689.518346][T30091] x64_sys_call+0xc3b/0x2550 [ 689.518375][T30091] do_syscall_64+0x112/0x360 [ 689.518442][T30091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.518467][T30091] RIP: 0033:0x7f3de992e159 [ 689.518544][T30091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.518561][T30091] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 689.518613][T30091] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 689.518626][T30091] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 689.518640][T30091] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 689.518654][T30091] R10: 0000000002200cd0 R11: 0000000000000246 R12: 0000000000000000 [ 689.518669][T30091] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 689.518691][T30091] [ 689.563869][T30100] FAULT_INJECTION: forcing a failure. [ 689.563869][T30100] name failslab, interval 1, probability 0, space 0, times 0 [ 689.563899][T30100] CPU: 1 UID: 0 PID: 30100 Comm: syz.1.5248 Not tainted syzkaller #0 PREEMPT(lazy) [ 689.563949][T30100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.563965][T30100] Call Trace: [ 689.563973][T30100] [ 689.563982][T30100] __dump_stack+0x1d/0x30 [ 689.564016][T30100] dump_stack_lvl+0x95/0xd0 [ 689.564069][T30100] dump_stack+0x15/0x1b [ 689.564092][T30100] should_fail_ex+0x262/0x280 [ 689.564121][T30100] ? sk_prot_alloc+0xa8/0x180 [ 689.564196][T30100] should_failslab+0x8c/0xb0 [ 689.564232][T30100] __kmalloc_noprof+0xd0/0x4d0 [ 689.564324][T30100] ? sk_prot_alloc+0xa8/0x180 [ 689.564349][T30100] sk_prot_alloc+0xa8/0x180 [ 689.564374][T30100] sk_alloc+0x34/0x3e0 [ 689.564409][T30100] ? __pfx_genl_release+0x10/0x10 [ 689.564473][T30100] ? __pfx_genl_release+0x10/0x10 [ 689.564502][T30100] netlink_create+0x331/0x460 [ 689.564526][T30100] ? __pfx_genl_unbind+0x10/0x10 [ 689.564554][T30100] ? __pfx_genl_bind+0x10/0x10 [ 689.564592][T30100] __sock_create+0x2e5/0x580 [ 689.564628][T30100] __sys_socket+0xaf/0x180 [ 689.564663][T30100] __x64_sys_socket+0x3f/0x50 [ 689.564744][T30100] x64_sys_call+0x246e/0x2550 [ 689.564810][T30100] do_syscall_64+0x112/0x360 [ 689.564839][T30100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.564864][T30100] RIP: 0033:0x7fc893b2f9c7 [ 689.564881][T30100] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.564920][T30100] RSP: 002b:00007fc892585f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 689.564943][T30100] RAX: ffffffffffffffda RBX: 00007fc893db5fa0 RCX: 00007fc893b2f9c7 [ 689.564961][T30100] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 689.564976][T30100] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 689.564991][T30100] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 689.565006][T30100] R13: 00007fc893db6038 R14: 00007fc893db5fa0 R15: 00007fff75619ed8 [ 689.565122][T30100] [ 689.760265][T30109] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5253'. [ 689.781587][T30111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 689.840723][T30119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5256'. [ 689.920329][T30122] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5258'. [ 690.084760][T30128] FAULT_INJECTION: forcing a failure. [ 690.084760][T30128] name failslab, interval 1, probability 0, space 0, times 0 [ 690.084800][T30128] CPU: 1 UID: 0 PID: 30128 Comm: syz.6.5260 Not tainted syzkaller #0 PREEMPT(lazy) [ 690.084903][T30128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.084918][T30128] Call Trace: [ 690.084929][T30128] [ 690.084939][T30128] __dump_stack+0x1d/0x30 [ 690.084983][T30128] dump_stack_lvl+0x95/0xd0 [ 690.085050][T30128] dump_stack+0x15/0x1b [ 690.085075][T30128] should_fail_ex+0x262/0x280 [ 690.085105][T30128] ? prepare_creds+0x38/0x550 [ 690.085239][T30128] should_failslab+0x8c/0xb0 [ 690.085275][T30128] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 690.085308][T30128] ? prepare_creds+0x38/0x550 [ 690.085413][T30128] prepare_creds+0x38/0x550 [ 690.085444][T30128] __sys_setresuid+0x47f/0x6f0 [ 690.085481][T30128] __x64_sys_setresuid+0x3f/0x50 [ 690.085549][T30128] x64_sys_call+0x216c/0x2550 [ 690.085632][T30128] do_syscall_64+0x112/0x360 [ 690.085662][T30128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.085748][T30128] RIP: 0033:0x7f26defce159 [ 690.085766][T30128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.085788][T30128] RSP: 002b:00007f26dda27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 690.085842][T30128] RAX: ffffffffffffffda RBX: 00007f26df255fa0 RCX: 00007f26defce159 [ 690.085857][T30128] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 690.085871][T30128] RBP: 00007f26df06506b R08: 0000000000000000 R09: 0000000000000000 [ 690.085958][T30128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.085973][T30128] R13: 00007f26df256038 R14: 00007f26df255fa0 R15: 00007fffce99ade8 [ 690.086029][T30128] [ 690.324676][T30132] FAULT_INJECTION: forcing a failure. [ 690.324676][T30132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.324695][T30132] CPU: 1 UID: 0 PID: 30132 Comm: syz.6.5262 Not tainted syzkaller #0 PREEMPT(lazy) [ 690.324711][T30132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.324718][T30132] Call Trace: [ 690.324723][T30132] [ 690.324728][T30132] __dump_stack+0x1d/0x30 [ 690.324794][T30132] dump_stack_lvl+0x95/0xd0 [ 690.324807][T30132] dump_stack+0x15/0x1b [ 690.324819][T30132] should_fail_ex+0x262/0x280 [ 690.324873][T30132] should_fail+0xb/0x20 [ 690.324887][T30132] should_fail_usercopy+0x1a/0x20 [ 690.324903][T30132] _copy_from_user+0x1c/0xb0 [ 690.324922][T30132] __sys_sendto+0x1b5/0x470 [ 690.324979][T30132] __x64_sys_sendto+0x76/0x90 [ 690.325006][T30132] x64_sys_call+0x200c/0x2550 [ 690.325035][T30132] do_syscall_64+0x112/0x360 [ 690.325106][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.325120][T30132] RIP: 0033:0x7f26def8e98e [ 690.325131][T30132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 690.325142][T30132] RSP: 002b:00007f26dda25e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 690.325155][T30132] RAX: ffffffffffffffda RBX: 00007f26dda276c0 RCX: 00007f26def8e98e [ 690.325163][T30132] RDX: 0000000000000020 RSI: 00007f26dda26000 RDI: 0000000000000003 [ 690.325248][T30132] RBP: 0000000000000000 R08: 00007f26dda25f04 R09: 000000000000000c [ 690.325257][T30132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 690.325265][T30132] R13: 00007f26dda25f58 R14: 00007f26dda26000 R15: 0000000000000000 [ 690.325276][T30132] [ 691.310583][T30154] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5269'. [ 692.525372][T30095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.639386][T30183] FAULT_INJECTION: forcing a failure. [ 693.639386][T30183] name failslab, interval 1, probability 0, space 0, times 0 [ 693.639480][T30183] CPU: 1 UID: 0 PID: 30183 Comm: syz.3.5279 Not tainted syzkaller #0 PREEMPT(lazy) [ 693.639504][T30183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.639518][T30183] Call Trace: [ 693.639526][T30183] [ 693.639534][T30183] __dump_stack+0x1d/0x30 [ 693.639638][T30183] dump_stack_lvl+0x95/0xd0 [ 693.639659][T30183] dump_stack+0x15/0x1b [ 693.639758][T30183] should_fail_ex+0x262/0x280 [ 693.639860][T30183] ? call_usermodehelper_setup+0x72/0x190 [ 693.639898][T30183] should_failslab+0x8c/0xb0 [ 693.639930][T30183] __kmalloc_cache_noprof+0x7a/0x400 [ 693.640084][T30183] ? call_usermodehelper_setup+0x72/0x190 [ 693.640116][T30183] ? __pfx_free_modprobe_argv+0x10/0x10 [ 693.640161][T30183] call_usermodehelper_setup+0x72/0x190 [ 693.640280][T30183] __request_module+0x264/0x3c0 [ 693.640306][T30183] ? capable+0x81/0xb0 [ 693.640332][T30183] dev_load+0x61/0xc0 [ 693.640404][T30183] dev_ioctl+0x2d1/0x960 [ 693.640479][T30183] sock_do_ioctl+0x1aa/0x230 [ 693.640512][T30183] sock_ioctl+0x439/0x610 [ 693.640543][T30183] ? __pfx_sock_ioctl+0x10/0x10 [ 693.640614][T30183] __se_sys_ioctl+0xce/0x140 [ 693.640671][T30183] __x64_sys_ioctl+0x43/0x50 [ 693.640744][T30183] x64_sys_call+0x239d/0x2550 [ 693.640768][T30183] do_syscall_64+0x112/0x360 [ 693.640847][T30183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.640871][T30183] RIP: 0033:0x7fa720dae159 [ 693.640888][T30183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.640972][T30183] RSP: 002b:00007fa71f807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.640992][T30183] RAX: ffffffffffffffda RBX: 00007fa721035fa0 RCX: 00007fa720dae159 [ 693.641006][T30183] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 693.641069][T30183] RBP: 00007fa720e4506b R08: 0000000000000000 R09: 0000000000000000 [ 693.641081][T30183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.641093][T30183] R13: 00007fa721036038 R14: 00007fa721035fa0 R15: 00007fff81424768 [ 693.641111][T30183] [ 694.232297][T30225] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5281'. [ 694.342670][ T29] audit: type=1400 audit(1791118381.198:19697): avc: denied { create } for pid=30237 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 694.342698][ T29] audit: type=1400 audit(1791118381.198:19698): avc: denied { write } for pid=30237 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 694.345001][T30239] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5285'. [ 694.482254][ T29] audit: type=1400 audit(1791118381.338:19699): avc: denied { getopt } for pid=30237 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 695.824534][T30278] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 695.824534][T30278] program syz.6.5293 not setting count and/or reply_len properly [ 696.060709][T30321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5296'. [ 696.060811][T30321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5296'. [ 696.107884][T30323] syzkaller0: entered promiscuous mode [ 696.107902][T30323] syzkaller0: entered allmulticast mode [ 697.130108][ T29] audit: type=1400 audit(1791118383.988:19700): avc: denied { write } for pid=30347 comm="syz.6.5307" lport=60912 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 697.238839][T30351] FAULT_INJECTION: forcing a failure. [ 697.238839][T30351] name fail_futex, interval 1, probability 0, space 0, times 0 [ 697.238871][T30351] CPU: 0 UID: 0 PID: 30351 Comm: syz.6.5308 Not tainted syzkaller #0 PREEMPT(lazy) [ 697.238922][T30351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.238935][T30351] Call Trace: [ 697.238942][T30351] [ 697.238949][T30351] __dump_stack+0x1d/0x30 [ 697.238974][T30351] dump_stack_lvl+0x95/0xd0 [ 697.239058][T30351] dump_stack+0x15/0x1b [ 697.239101][T30351] should_fail_ex+0x262/0x280 [ 697.239192][T30351] should_fail+0xb/0x20 [ 697.239218][T30351] get_futex_key+0x12d/0xb10 [ 697.239328][T30351] futex_wake+0x89/0x400 [ 697.239354][T30351] do_futex+0x3f8/0x460 [ 697.239385][T30351] __se_sys_futex+0x2f6/0x370 [ 697.239477][T30351] __x64_sys_futex+0x78/0x90 [ 697.239512][T30351] x64_sys_call+0x22e2/0x2550 [ 697.239538][T30351] do_syscall_64+0x112/0x360 [ 697.239592][T30351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.239619][T30351] RIP: 0033:0x7f26defce159 [ 697.239635][T30351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.239651][T30351] RSP: 002b:00007f26dda270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 697.239670][T30351] RAX: ffffffffffffffda RBX: 00007f26df255fa8 RCX: 00007f26defce159 [ 697.239723][T30351] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f26df255fac [ 697.239737][T30351] RBP: 00007f26df255fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 697.239750][T30351] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 697.239833][T30351] R13: 00007f26df256038 R14: 00007fffce99ad00 R15: 00007fffce99ade8 [ 697.239855][T30351] [ 697.521448][T30251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.560866][T30360] FAULT_INJECTION: forcing a failure. [ 697.560866][T30360] name failslab, interval 1, probability 0, space 0, times 0 [ 697.560899][T30360] CPU: 0 UID: 0 PID: 30360 Comm: syz.7.5312 Not tainted syzkaller #0 PREEMPT(lazy) [ 697.560944][T30360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.560959][T30360] Call Trace: [ 697.560967][T30360] [ 697.560983][T30360] __dump_stack+0x1d/0x30 [ 697.561013][T30360] dump_stack_lvl+0x95/0xd0 [ 697.561037][T30360] dump_stack+0x15/0x1b [ 697.561064][T30360] should_fail_ex+0x262/0x280 [ 697.561093][T30360] ? prepare_creds+0x38/0x550 [ 697.561126][T30360] should_failslab+0x8c/0xb0 [ 697.561156][T30360] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 697.561185][T30360] ? prepare_creds+0x38/0x550 [ 697.561274][T30360] prepare_creds+0x38/0x550 [ 697.561303][T30360] __sys_setresuid+0x47f/0x6f0 [ 697.561342][T30360] __x64_sys_setresuid+0x3f/0x50 [ 697.561417][T30360] x64_sys_call+0x216c/0x2550 [ 697.561446][T30360] do_syscall_64+0x112/0x360 [ 697.561474][T30360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.561500][T30360] RIP: 0033:0x7f3de992e159 [ 697.561545][T30360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.561566][T30360] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 697.561590][T30360] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 697.561604][T30360] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 697.561616][T30360] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 697.561628][T30360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.561640][T30360] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 697.561694][T30360] [ 697.766735][T30374] syzkaller0: entered promiscuous mode [ 697.766757][T30374] syzkaller0: entered allmulticast mode [ 697.810122][T30370] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 697.810122][T30370] program syz.1.5310 not setting count and/or reply_len properly [ 697.882303][T30378] FAULT_INJECTION: forcing a failure. [ 697.882303][T30378] name fail_futex, interval 1, probability 0, space 0, times 0 [ 697.882332][T30378] CPU: 1 UID: 0 PID: 30378 Comm: syz.3.5319 Not tainted syzkaller #0 PREEMPT(lazy) [ 697.882396][T30378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.882412][T30378] Call Trace: [ 697.882419][T30378] [ 697.882428][T30378] __dump_stack+0x1d/0x30 [ 697.882465][T30378] dump_stack_lvl+0x95/0xd0 [ 697.882491][T30378] dump_stack+0x15/0x1b [ 697.882548][T30378] should_fail_ex+0x262/0x280 [ 697.882578][T30378] should_fail+0xb/0x20 [ 697.882605][T30378] get_futex_key+0x12d/0xb10 [ 697.882639][T30378] futex_wake+0x89/0x400 [ 697.882697][T30378] do_futex+0x3f8/0x460 [ 697.882731][T30378] __se_sys_futex+0x2f6/0x370 [ 697.882826][T30378] __x64_sys_futex+0x78/0x90 [ 697.882856][T30378] x64_sys_call+0x22e2/0x2550 [ 697.882889][T30378] do_syscall_64+0x112/0x360 [ 697.882915][T30378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.882940][T30378] RIP: 0033:0x7fa720dae159 [ 697.882958][T30378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.883002][T30378] RSP: 002b:00007fa71f8070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 697.883097][T30378] RAX: ffffffffffffffda RBX: 00007fa721035fa8 RCX: 00007fa720dae159 [ 697.883113][T30378] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa721035fac [ 697.883128][T30378] RBP: 00007fa721035fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 697.883197][T30378] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 697.883211][T30378] R13: 00007fa721036038 R14: 00007fff81424680 R15: 00007fff81424768 [ 697.883231][T30378] [ 698.101576][T30388] FAULT_INJECTION: forcing a failure. [ 698.101576][T30388] name failslab, interval 1, probability 0, space 0, times 0 [ 698.101605][T30388] CPU: 1 UID: 0 PID: 30388 Comm: syz.3.5322 Not tainted syzkaller #0 PREEMPT(lazy) [ 698.101634][T30388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.101650][T30388] Call Trace: [ 698.101658][T30388] [ 698.101667][T30388] __dump_stack+0x1d/0x30 [ 698.101698][T30388] dump_stack_lvl+0x95/0xd0 [ 698.101729][T30388] dump_stack+0x15/0x1b [ 698.101750][T30388] should_fail_ex+0x262/0x280 [ 698.101781][T30388] ? security_prepare_creds+0x52/0x120 [ 698.101843][T30388] should_failslab+0x8c/0xb0 [ 698.101877][T30388] __kmalloc_noprof+0xd0/0x4d0 [ 698.101949][T30388] ? security_prepare_creds+0x52/0x120 [ 698.102008][T30388] security_prepare_creds+0x52/0x120 [ 698.102035][T30388] prepare_creds+0x385/0x550 [ 698.102129][T30388] __sys_setresuid+0x47f/0x6f0 [ 698.102270][T30388] __x64_sys_setresuid+0x3f/0x50 [ 698.102301][T30388] x64_sys_call+0x216c/0x2550 [ 698.102372][T30388] do_syscall_64+0x112/0x360 [ 698.102454][T30388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.102477][T30388] RIP: 0033:0x7fa720dae159 [ 698.102496][T30388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.102540][T30388] RSP: 002b:00007fa71f807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 698.102561][T30388] RAX: ffffffffffffffda RBX: 00007fa721035fa0 RCX: 00007fa720dae159 [ 698.102575][T30388] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 698.102623][T30388] RBP: 00007fa720e4506b R08: 0000000000000000 R09: 0000000000000000 [ 698.102638][T30388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.102704][T30388] R13: 00007fa721036038 R14: 00007fa721035fa0 R15: 00007fff81424768 [ 698.102738][T30388] [ 698.146756][T30390] syzkaller0: entered promiscuous mode [ 698.146811][T30390] syzkaller0: entered allmulticast mode [ 698.418080][T30398] FAULT_INJECTION: forcing a failure. [ 698.418080][T30398] name failslab, interval 1, probability 0, space 0, times 0 [ 698.418109][T30398] CPU: 1 UID: 0 PID: 30398 Comm: syz.6.5326 Not tainted syzkaller #0 PREEMPT(lazy) [ 698.418140][T30398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.418154][T30398] Call Trace: [ 698.418161][T30398] [ 698.418170][T30398] __dump_stack+0x1d/0x30 [ 698.418238][T30398] dump_stack_lvl+0x95/0xd0 [ 698.418263][T30398] dump_stack+0x15/0x1b [ 698.418333][T30398] should_fail_ex+0x262/0x280 [ 698.418399][T30398] ? prepare_creds+0x38/0x550 [ 698.418434][T30398] should_failslab+0x8c/0xb0 [ 698.418470][T30398] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 698.418530][T30398] ? prepare_creds+0x38/0x550 [ 698.418560][T30398] prepare_creds+0x38/0x550 [ 698.418590][T30398] __sys_setresuid+0x47f/0x6f0 [ 698.418628][T30398] __x64_sys_setresuid+0x3f/0x50 [ 698.418712][T30398] x64_sys_call+0x216c/0x2550 [ 698.418739][T30398] do_syscall_64+0x112/0x360 [ 698.418774][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.418798][T30398] RIP: 0033:0x7f26defce159 [ 698.418815][T30398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.418964][T30398] RSP: 002b:00007f26dda27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 698.418985][T30398] RAX: ffffffffffffffda RBX: 00007f26df255fa0 RCX: 00007f26defce159 [ 698.419001][T30398] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 698.419015][T30398] RBP: 00007f26df06506b R08: 0000000000000000 R09: 0000000000000000 [ 698.419029][T30398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.419051][T30398] R13: 00007f26df256038 R14: 00007f26df255fa0 R15: 00007fffce99ade8 [ 698.419119][T30398] [ 698.817766][T30415] FAULT_INJECTION: forcing a failure. [ 698.817766][T30415] name fail_futex, interval 1, probability 0, space 0, times 0 [ 698.817797][T30415] CPU: 1 UID: 0 PID: 30415 Comm: syz.7.5331 Not tainted syzkaller #0 PREEMPT(lazy) [ 698.817822][T30415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.817834][T30415] Call Trace: [ 698.817841][T30415] [ 698.817848][T30415] __dump_stack+0x1d/0x30 [ 698.817885][T30415] dump_stack_lvl+0x95/0xd0 [ 698.817948][T30415] dump_stack+0x15/0x1b [ 698.818067][T30415] should_fail_ex+0x262/0x280 [ 698.818173][T30415] should_fail+0xb/0x20 [ 698.818200][T30415] get_futex_key+0x12d/0xb10 [ 698.818229][T30415] futex_wake+0x89/0x400 [ 698.818250][T30415] do_futex+0x3f8/0x460 [ 698.818341][T30415] __se_sys_futex+0x2f6/0x370 [ 698.818385][T30415] __x64_sys_futex+0x78/0x90 [ 698.818487][T30415] x64_sys_call+0x22e2/0x2550 [ 698.818524][T30415] do_syscall_64+0x112/0x360 [ 698.818548][T30415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.818570][T30415] RIP: 0033:0x7f3de992e159 [ 698.818587][T30415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.818607][T30415] RSP: 002b:00007f3de83870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 698.818635][T30415] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa8 RCX: 00007f3de992e159 [ 698.818649][T30415] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3de9bb5fac [ 698.818698][T30415] RBP: 00007f3de9bb5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 698.818715][T30415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 698.818732][T30415] R13: 00007f3de9bb6038 R14: 00007ffe9d96f970 R15: 00007ffe9d96fa58 [ 698.818817][T30415] [ 698.820052][T30413] syzkaller0: entered promiscuous mode [ 698.820145][T30413] syzkaller0: entered allmulticast mode [ 698.828755][T30420] FAULT_INJECTION: forcing a failure. [ 698.828755][T30420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.828785][T30420] CPU: 1 UID: 0 PID: 30420 Comm: syz.5.5332 Not tainted syzkaller #0 PREEMPT(lazy) [ 698.828813][T30420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.828828][T30420] Call Trace: [ 698.828835][T30420] [ 698.828847][T30420] __dump_stack+0x1d/0x30 [ 698.828951][T30420] dump_stack_lvl+0x95/0xd0 [ 698.828971][T30420] dump_stack+0x15/0x1b [ 698.828990][T30420] should_fail_ex+0x262/0x280 [ 698.829020][T30420] should_fail+0xb/0x20 [ 698.829110][T30420] should_fail_usercopy+0x1a/0x20 [ 698.829190][T30420] _copy_from_user+0x1c/0xb0 [ 698.829267][T30420] __se_sys_capset+0x1f3/0x480 [ 698.829288][T30420] ? switch_fpu_return+0xe7/0x1b0 [ 698.829315][T30420] __x64_sys_capset+0x31/0x40 [ 698.829393][T30420] x64_sys_call+0x1515/0x2550 [ 698.829421][T30420] do_syscall_64+0x112/0x360 [ 698.829445][T30420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.829466][T30420] RIP: 0033:0x7fd8af28e159 [ 698.829480][T30420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.829572][T30420] RSP: 002b:00007fd8adce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 698.829591][T30420] RAX: ffffffffffffffda RBX: 00007fd8af515fa0 RCX: 00007fd8af28e159 [ 698.829747][T30420] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 698.829812][T30420] RBP: 00007fd8af32506b R08: 0000000000000000 R09: 0000000000000000 [ 698.829827][T30420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.829842][T30420] R13: 00007fd8af516038 R14: 00007fd8af515fa0 R15: 00007ffdf16188b8 [ 698.829864][T30420] [ 698.935947][T30427] FAULT_INJECTION: forcing a failure. [ 698.935947][T30427] name failslab, interval 1, probability 0, space 0, times 0 [ 698.935977][T30427] CPU: 1 UID: 0 PID: 30427 Comm: syz.5.5333 Not tainted syzkaller #0 PREEMPT(lazy) [ 698.936022][T30427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.936036][T30427] Call Trace: [ 698.936043][T30427] [ 698.936051][T30427] __dump_stack+0x1d/0x30 [ 698.936075][T30427] dump_stack_lvl+0x95/0xd0 [ 698.936099][T30427] dump_stack+0x15/0x1b [ 698.936182][T30427] should_fail_ex+0x262/0x280 [ 698.936207][T30427] ? prepare_creds+0x38/0x550 [ 698.936231][T30427] should_failslab+0x8c/0xb0 [ 698.936298][T30427] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 698.936368][T30427] ? prepare_creds+0x38/0x550 [ 698.936396][T30427] prepare_creds+0x38/0x550 [ 698.936420][T30427] __sys_setresuid+0x47f/0x6f0 [ 698.936500][T30427] __x64_sys_setresuid+0x3f/0x50 [ 698.936532][T30427] x64_sys_call+0x216c/0x2550 [ 698.936627][T30427] do_syscall_64+0x112/0x360 [ 698.936657][T30427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.936724][T30427] RIP: 0033:0x7fd8af28e159 [ 698.936742][T30427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.936763][T30427] RSP: 002b:00007fd8adce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 698.936837][T30427] RAX: ffffffffffffffda RBX: 00007fd8af515fa0 RCX: 00007fd8af28e159 [ 698.936863][T30427] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 698.936878][T30427] RBP: 00007fd8af32506b R08: 0000000000000000 R09: 0000000000000000 [ 698.936893][T30427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.936909][T30427] R13: 00007fd8af516038 R14: 00007fd8af515fa0 R15: 00007ffdf16188b8 [ 698.936938][T30427] [ 699.060277][T30437] syzkaller0: entered promiscuous mode [ 699.060298][T30437] syzkaller0: entered allmulticast mode [ 699.086426][T30444] FAULT_INJECTION: forcing a failure. [ 699.086426][T30444] name failslab, interval 1, probability 0, space 0, times 0 [ 699.086513][T30444] CPU: 1 UID: 0 PID: 30444 Comm: syz.7.5339 Not tainted syzkaller #0 PREEMPT(lazy) [ 699.086576][T30444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.086588][T30444] Call Trace: [ 699.086595][T30444] [ 699.086604][T30444] __dump_stack+0x1d/0x30 [ 699.086633][T30444] dump_stack_lvl+0x95/0xd0 [ 699.086710][T30444] dump_stack+0x15/0x1b [ 699.086733][T30444] should_fail_ex+0x262/0x280 [ 699.086768][T30444] ? prepare_creds+0x38/0x550 [ 699.086793][T30444] should_failslab+0x8c/0xb0 [ 699.086858][T30444] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 699.086887][T30444] ? prepare_creds+0x38/0x550 [ 699.086992][T30444] prepare_creds+0x38/0x550 [ 699.087095][T30444] __sys_setresuid+0x47f/0x6f0 [ 699.087133][T30444] __x64_sys_setresuid+0x3f/0x50 [ 699.087239][T30444] x64_sys_call+0x216c/0x2550 [ 699.087268][T30444] do_syscall_64+0x112/0x360 [ 699.087297][T30444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.087412][T30444] RIP: 0033:0x7f3de992e159 [ 699.087430][T30444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.087448][T30444] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 699.087467][T30444] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 699.087484][T30444] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 699.087499][T30444] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 699.087514][T30444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.087530][T30444] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 699.087552][T30444] [ 699.301912][T30468] FAULT_INJECTION: forcing a failure. [ 699.301912][T30468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.301944][T30468] CPU: 1 UID: 0 PID: 30468 Comm: syz.7.5343 Not tainted syzkaller #0 PREEMPT(lazy) [ 699.301967][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.302048][T30468] Call Trace: [ 699.302055][T30468] [ 699.302064][T30468] __dump_stack+0x1d/0x30 [ 699.302093][T30468] dump_stack_lvl+0x95/0xd0 [ 699.302113][T30468] dump_stack+0x15/0x1b [ 699.302152][T30468] should_fail_ex+0x262/0x280 [ 699.302257][T30468] should_fail+0xb/0x20 [ 699.302309][T30468] should_fail_usercopy+0x1a/0x20 [ 699.302339][T30468] _copy_from_user+0x1c/0xb0 [ 699.302373][T30468] __se_sys_capset+0x1f3/0x480 [ 699.302456][T30468] ? switch_fpu_return+0xe7/0x1b0 [ 699.302489][T30468] __x64_sys_capset+0x31/0x40 [ 699.302547][T30468] x64_sys_call+0x1515/0x2550 [ 699.302577][T30468] do_syscall_64+0x112/0x360 [ 699.302603][T30468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.302679][T30468] RIP: 0033:0x7f3de992e159 [ 699.302781][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.302800][T30468] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 699.302818][T30468] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 699.302895][T30468] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 699.302908][T30468] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 699.302921][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.302933][T30468] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 699.302950][T30468] [ 699.350398][T30463] loop6: detected capacity change from 0 to 164 [ 699.360473][T30473] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 699.360473][T30473] program syz.1.5338 not setting count and/or reply_len properly [ 699.395542][T30475] FAULT_INJECTION: forcing a failure. [ 699.395542][T30475] name fail_futex, interval 1, probability 0, space 0, times 0 [ 699.395573][T30475] CPU: 1 UID: 0 PID: 30475 Comm: syz.7.5345 Not tainted syzkaller #0 PREEMPT(lazy) [ 699.395640][T30475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.395656][T30475] Call Trace: [ 699.395664][T30475] [ 699.395674][T30475] __dump_stack+0x1d/0x30 [ 699.395738][T30475] dump_stack_lvl+0x95/0xd0 [ 699.395759][T30475] dump_stack+0x15/0x1b [ 699.395882][T30475] should_fail_ex+0x262/0x280 [ 699.395907][T30475] should_fail+0xb/0x20 [ 699.395997][T30475] get_futex_key+0x12d/0xb10 [ 699.396170][T30475] futex_wake+0x89/0x400 [ 699.396271][T30475] do_futex+0x3f8/0x460 [ 699.396307][T30475] __se_sys_futex+0x2f6/0x370 [ 699.396450][T30475] __x64_sys_futex+0x78/0x90 [ 699.396478][T30475] x64_sys_call+0x22e2/0x2550 [ 699.396516][T30475] do_syscall_64+0x112/0x360 [ 699.396579][T30475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.396602][T30475] RIP: 0033:0x7f3de992e159 [ 699.396638][T30475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.396655][T30475] RSP: 002b:00007f3de83870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 699.396739][T30475] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa8 RCX: 00007f3de992e159 [ 699.396754][T30475] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3de9bb5fac [ 699.396781][T30475] RBP: 00007f3de9bb5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 699.396796][T30475] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 699.396872][T30475] R13: 00007f3de9bb6038 R14: 00007ffe9d96f970 R15: 00007ffe9d96fa58 [ 699.396892][T30475] [ 699.701320][T30499] FAULT_INJECTION: forcing a failure. [ 699.701320][T30499] name failslab, interval 1, probability 0, space 0, times 0 [ 699.701418][T30499] CPU: 1 UID: 0 PID: 30499 Comm: syz.7.5348 Not tainted syzkaller #0 PREEMPT(lazy) [ 699.701455][T30499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.701469][T30499] Call Trace: [ 699.701486][T30499] [ 699.701494][T30499] __dump_stack+0x1d/0x30 [ 699.701569][T30499] dump_stack_lvl+0x95/0xd0 [ 699.701615][T30499] dump_stack+0x15/0x1b [ 699.701713][T30499] should_fail_ex+0x262/0x280 [ 699.701742][T30499] ? prepare_creds+0x38/0x550 [ 699.701770][T30499] should_failslab+0x8c/0xb0 [ 699.701805][T30499] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 699.701901][T30499] ? prepare_creds+0x38/0x550 [ 699.701992][T30499] prepare_creds+0x38/0x550 [ 699.702019][T30499] __sys_setresuid+0x47f/0x6f0 [ 699.702092][T30499] __x64_sys_setresuid+0x3f/0x50 [ 699.702127][T30499] x64_sys_call+0x216c/0x2550 [ 699.702158][T30499] do_syscall_64+0x112/0x360 [ 699.702185][T30499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.702219][T30499] RIP: 0033:0x7f3de992e159 [ 699.702236][T30499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.702255][T30499] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 699.702277][T30499] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 699.702292][T30499] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 699.702353][T30499] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 699.702367][T30499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.702381][T30499] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 699.702401][T30499] [ 699.801427][T30511] FAULT_INJECTION: forcing a failure. [ 699.801427][T30511] name failslab, interval 1, probability 0, space 0, times 0 [ 699.801458][T30511] CPU: 1 UID: 0 PID: 30511 Comm: syz.7.5351 Not tainted syzkaller #0 PREEMPT(lazy) [ 699.801484][T30511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.801498][T30511] Call Trace: [ 699.801506][T30511] [ 699.801515][T30511] __dump_stack+0x1d/0x30 [ 699.801601][T30511] dump_stack_lvl+0x95/0xd0 [ 699.801706][T30511] dump_stack+0x15/0x1b [ 699.801728][T30511] should_fail_ex+0x262/0x280 [ 699.801756][T30511] ? prepare_creds+0x38/0x550 [ 699.801788][T30511] should_failslab+0x8c/0xb0 [ 699.801823][T30511] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 699.801922][T30511] ? prepare_creds+0x38/0x550 [ 699.801951][T30511] prepare_creds+0x38/0x550 [ 699.801979][T30511] __sys_setresuid+0x47f/0x6f0 [ 699.802048][T30511] __x64_sys_setresuid+0x3f/0x50 [ 699.802084][T30511] x64_sys_call+0x216c/0x2550 [ 699.802111][T30511] do_syscall_64+0x112/0x360 [ 699.802223][T30511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.802244][T30511] RIP: 0033:0x7f3de992e159 [ 699.802258][T30511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.802310][T30511] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 699.802356][T30511] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 699.802387][T30511] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 699.802401][T30511] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 699.802421][T30511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.802434][T30511] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 699.802530][T30511] [ 700.173694][T30542] FAULT_INJECTION: forcing a failure. [ 700.173694][T30542] name fail_futex, interval 1, probability 0, space 0, times 0 [ 700.173725][T30542] CPU: 1 UID: 0 PID: 30542 Comm: syz.1.5356 Not tainted syzkaller #0 PREEMPT(lazy) [ 700.173824][T30542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.173843][T30542] Call Trace: [ 700.173852][T30542] [ 700.173862][T30542] __dump_stack+0x1d/0x30 [ 700.173902][T30542] dump_stack_lvl+0x95/0xd0 [ 700.173923][T30542] dump_stack+0x15/0x1b [ 700.174051][T30542] should_fail_ex+0x262/0x280 [ 700.174116][T30542] should_fail+0xb/0x20 [ 700.174206][T30542] get_futex_key+0x12d/0xb10 [ 700.174238][T30542] futex_wake+0x89/0x400 [ 700.174263][T30542] do_futex+0x3f8/0x460 [ 700.174297][T30542] __se_sys_futex+0x2f6/0x370 [ 700.174391][T30542] __x64_sys_futex+0x78/0x90 [ 700.174424][T30542] x64_sys_call+0x22e2/0x2550 [ 700.174583][T30542] do_syscall_64+0x112/0x360 [ 700.174612][T30542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.174639][T30542] RIP: 0033:0x7fc893b2e159 [ 700.174657][T30542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.174689][T30542] RSP: 002b:00007fc8925870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 700.174776][T30542] RAX: ffffffffffffffda RBX: 00007fc893db5fa8 RCX: 00007fc893b2e159 [ 700.174791][T30542] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc893db5fac [ 700.174806][T30542] RBP: 00007fc893db5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 700.174823][T30542] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 700.174838][T30542] R13: 00007fc893db6038 R14: 00007fff75619df0 R15: 00007fff75619ed8 [ 700.174860][T30542] [ 700.176333][T30544] FAULT_INJECTION: forcing a failure. [ 700.176333][T30544] name failslab, interval 1, probability 0, space 0, times 0 [ 700.176360][T30544] CPU: 1 UID: 0 PID: 30544 Comm: syz.6.5355 Not tainted syzkaller #0 PREEMPT(lazy) [ 700.176443][T30544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.176517][T30544] Call Trace: [ 700.176524][T30544] [ 700.176533][T30544] __dump_stack+0x1d/0x30 [ 700.176560][T30544] dump_stack_lvl+0x95/0xd0 [ 700.176585][T30544] dump_stack+0x15/0x1b [ 700.176624][T30544] should_fail_ex+0x262/0x280 [ 700.176648][T30544] ? prepare_creds+0x38/0x550 [ 700.176675][T30544] should_failslab+0x8c/0xb0 [ 700.176736][T30544] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 700.176882][T30544] ? prepare_creds+0x38/0x550 [ 700.176919][T30544] prepare_creds+0x38/0x550 [ 700.176948][T30544] __se_sys_capset+0x2da/0x480 [ 700.176972][T30544] ? switch_fpu_return+0xe7/0x1b0 [ 700.176995][T30544] __x64_sys_capset+0x31/0x40 [ 700.177077][T30544] x64_sys_call+0x1515/0x2550 [ 700.177139][T30544] do_syscall_64+0x112/0x360 [ 700.177164][T30544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.177190][T30544] RIP: 0033:0x7f26defce159 [ 700.177207][T30544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.177228][T30544] RSP: 002b:00007f26dda27028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 700.177306][T30544] RAX: ffffffffffffffda RBX: 00007f26df255fa0 RCX: 00007f26defce159 [ 700.177321][T30544] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 700.177334][T30544] RBP: 00007f26df06506b R08: 0000000000000000 R09: 0000000000000000 [ 700.177347][T30544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.177359][T30544] R13: 00007f26df256038 R14: 00007f26df255fa0 R15: 00007fffce99ade8 [ 700.177376][T30544] [ 700.452224][ T29] audit: type=1326 audit(1791118387.278:19701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452263][ T29] audit: type=1326 audit(1791118387.278:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452314][ T29] audit: type=1326 audit(1791118387.278:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452345][ T29] audit: type=1326 audit(1791118387.278:19704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452415][ T29] audit: type=1326 audit(1791118387.278:19705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452446][ T29] audit: type=1326 audit(1791118387.278:19706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452476][ T29] audit: type=1326 audit(1791118387.278:19707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452507][ T29] audit: type=1326 audit(1791118387.278:19708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452585][ T29] audit: type=1326 audit(1791118387.278:19709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.452654][ T29] audit: type=1326 audit(1791118387.278:19710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.1.5361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc893b2e159 code=0x7ffc0000 [ 700.512870][T30573] FAULT_INJECTION: forcing a failure. [ 700.512870][T30573] name failslab, interval 1, probability 0, space 0, times 0 [ 700.512900][T30573] CPU: 1 UID: 0 PID: 30573 Comm: syz.6.5362 Not tainted syzkaller #0 PREEMPT(lazy) [ 700.512928][T30573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.513004][T30573] Call Trace: [ 700.513012][T30573] [ 700.513022][T30573] __dump_stack+0x1d/0x30 [ 700.513047][T30573] dump_stack_lvl+0x95/0xd0 [ 700.513112][T30573] dump_stack+0x15/0x1b [ 700.513136][T30573] should_fail_ex+0x262/0x280 [ 700.513164][T30573] ? prepare_creds+0x38/0x550 [ 700.513215][T30573] should_failslab+0x8c/0xb0 [ 700.513250][T30573] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 700.513284][T30573] ? prepare_creds+0x38/0x550 [ 700.513324][T30573] prepare_creds+0x38/0x550 [ 700.513350][T30573] __sys_setresuid+0x47f/0x6f0 [ 700.513443][T30573] __x64_sys_setresuid+0x3f/0x50 [ 700.513475][T30573] x64_sys_call+0x216c/0x2550 [ 700.513521][T30573] do_syscall_64+0x112/0x360 [ 700.513549][T30573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.513570][T30573] RIP: 0033:0x7f26defce159 [ 700.513584][T30573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.513603][T30573] RSP: 002b:00007f26dda27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 700.513644][T30573] RAX: ffffffffffffffda RBX: 00007f26df255fa0 RCX: 00007f26defce159 [ 700.513661][T30573] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 700.513676][T30573] RBP: 00007f26df06506b R08: 0000000000000000 R09: 0000000000000000 [ 700.513692][T30573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.513707][T30573] R13: 00007f26df256038 R14: 00007f26df255fa0 R15: 00007fffce99ade8 [ 700.513725][T30573] [ 700.767568][T30600] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 700.767568][T30600] program syz.6.5363 not setting count and/or reply_len properly [ 700.947502][T30609] FAULT_INJECTION: forcing a failure. [ 700.947502][T30609] name fail_futex, interval 1, probability 0, space 0, times 0 [ 700.947533][T30609] CPU: 1 UID: 0 PID: 30609 Comm: syz.7.5368 Not tainted syzkaller #0 PREEMPT(lazy) [ 700.947563][T30609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.947577][T30609] Call Trace: [ 700.947596][T30609] [ 700.947605][T30609] __dump_stack+0x1d/0x30 [ 700.947633][T30609] dump_stack_lvl+0x95/0xd0 [ 700.947657][T30609] dump_stack+0x15/0x1b [ 700.947727][T30609] should_fail_ex+0x262/0x280 [ 700.947756][T30609] should_fail+0xb/0x20 [ 700.947781][T30609] get_futex_key+0x12d/0xb10 [ 700.947813][T30609] futex_wake+0x89/0x400 [ 700.947838][T30609] do_futex+0x3f8/0x460 [ 700.947877][T30609] __se_sys_futex+0x2f6/0x370 [ 700.947912][T30609] __x64_sys_futex+0x78/0x90 [ 700.947944][T30609] x64_sys_call+0x22e2/0x2550 [ 700.948018][T30609] do_syscall_64+0x112/0x360 [ 700.948047][T30609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.948071][T30609] RIP: 0033:0x7f3de992e159 [ 700.948088][T30609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.948107][T30609] RSP: 002b:00007f3de83870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 700.948130][T30609] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa8 RCX: 00007f3de992e159 [ 700.948185][T30609] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3de9bb5fac [ 700.948200][T30609] RBP: 00007f3de9bb5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 700.948215][T30609] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 700.948274][T30609] R13: 00007f3de9bb6038 R14: 00007ffe9d96f970 R15: 00007ffe9d96fa58 [ 700.948294][T30609] [ 701.047198][T30612] syzkaller0: entered promiscuous mode [ 701.047220][T30612] syzkaller0: entered allmulticast mode [ 701.063199][T30614] FAULT_INJECTION: forcing a failure. [ 701.063199][T30614] name failslab, interval 1, probability 0, space 0, times 0 [ 701.063232][T30614] CPU: 1 UID: 0 PID: 30614 Comm: syz.3.5367 Not tainted syzkaller #0 PREEMPT(lazy) [ 701.063269][T30614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.063284][T30614] Call Trace: [ 701.063292][T30614] [ 701.063301][T30614] __dump_stack+0x1d/0x30 [ 701.063328][T30614] dump_stack_lvl+0x95/0xd0 [ 701.063354][T30614] dump_stack+0x15/0x1b [ 701.063445][T30614] should_fail_ex+0x262/0x280 [ 701.063471][T30614] ? prepare_creds+0x38/0x550 [ 701.063572][T30614] should_failslab+0x8c/0xb0 [ 701.063652][T30614] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 701.063705][T30614] ? prepare_creds+0x38/0x550 [ 701.063759][T30614] prepare_creds+0x38/0x550 [ 701.063790][T30614] __se_sys_capset+0x2da/0x480 [ 701.063816][T30614] ? switch_fpu_return+0xe7/0x1b0 [ 701.063847][T30614] __x64_sys_capset+0x31/0x40 [ 701.063866][T30614] x64_sys_call+0x1515/0x2550 [ 701.064040][T30614] do_syscall_64+0x112/0x360 [ 701.064069][T30614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.064095][T30614] RIP: 0033:0x7fa720dae159 [ 701.064114][T30614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.064227][T30614] RSP: 002b:00007fa71f807028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 701.064251][T30614] RAX: ffffffffffffffda RBX: 00007fa721035fa0 RCX: 00007fa720dae159 [ 701.064298][T30614] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000500 [ 701.064312][T30614] RBP: 00007fa720e4506b R08: 0000000000000000 R09: 0000000000000000 [ 701.064349][T30614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.064364][T30614] R13: 00007fa721036038 R14: 00007fa721035fa0 R15: 00007fff81424768 [ 701.064386][T30614] [ 701.291187][T30613] loop1: detected capacity change from 0 to 164 [ 701.448867][T30622] FAULT_INJECTION: forcing a failure. [ 701.448867][T30622] name failslab, interval 1, probability 0, space 0, times 0 [ 701.449143][T30622] CPU: 1 UID: 0 PID: 30622 Comm: syz.3.5373 Not tainted syzkaller #0 PREEMPT(lazy) [ 701.449183][T30622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.449196][T30622] Call Trace: [ 701.449205][T30622] [ 701.449214][T30622] __dump_stack+0x1d/0x30 [ 701.449243][T30622] dump_stack_lvl+0x95/0xd0 [ 701.449268][T30622] dump_stack+0x15/0x1b [ 701.449319][T30622] should_fail_ex+0x262/0x280 [ 701.449349][T30622] ? prepare_creds+0x38/0x550 [ 701.449377][T30622] should_failslab+0x8c/0xb0 [ 701.449414][T30622] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 701.449584][T30622] ? prepare_creds+0x38/0x550 [ 701.449664][T30622] prepare_creds+0x38/0x550 [ 701.449694][T30622] __sys_setresuid+0x47f/0x6f0 [ 701.449749][T30622] __x64_sys_setresuid+0x3f/0x50 [ 701.449784][T30622] x64_sys_call+0x216c/0x2550 [ 701.449808][T30622] do_syscall_64+0x112/0x360 [ 701.449831][T30622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.449936][T30622] RIP: 0033:0x7fa720dae159 [ 701.449954][T30622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.449974][T30622] RSP: 002b:00007fa71f807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 701.449996][T30622] RAX: ffffffffffffffda RBX: 00007fa721035fa0 RCX: 00007fa720dae159 [ 701.450056][T30622] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 701.450069][T30622] RBP: 00007fa720e4506b R08: 0000000000000000 R09: 0000000000000000 [ 701.450081][T30622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.450093][T30622] R13: 00007fa721036038 R14: 00007fa721035fa0 R15: 00007fff81424768 [ 701.450111][T30622] [ 701.852189][T30637] syzkaller0: entered promiscuous mode [ 701.852210][T30637] syzkaller0: entered allmulticast mode [ 701.883438][T30641] FAULT_INJECTION: forcing a failure. [ 701.883438][T30641] name fail_futex, interval 1, probability 0, space 0, times 0 [ 701.883535][T30641] CPU: 1 UID: 0 PID: 30641 Comm: syz.3.5379 Not tainted syzkaller #0 PREEMPT(lazy) [ 701.883559][T30641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.883596][T30641] Call Trace: [ 701.883603][T30641] [ 701.883612][T30641] __dump_stack+0x1d/0x30 [ 701.883639][T30641] dump_stack_lvl+0x95/0xd0 [ 701.883693][T30641] dump_stack+0x15/0x1b [ 701.883717][T30641] should_fail_ex+0x262/0x280 [ 701.883749][T30641] should_fail+0xb/0x20 [ 701.883843][T30641] get_futex_key+0x12d/0xb10 [ 701.883871][T30641] futex_wake+0x89/0x400 [ 701.883958][T30641] do_futex+0x3f8/0x460 [ 701.883988][T30641] __se_sys_futex+0x2f6/0x370 [ 701.884083][T30641] __x64_sys_futex+0x78/0x90 [ 701.884167][T30641] x64_sys_call+0x22e2/0x2550 [ 701.884202][T30641] do_syscall_64+0x112/0x360 [ 701.884231][T30641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.884254][T30641] RIP: 0033:0x7fa720dae159 [ 701.884341][T30641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.884365][T30641] RSP: 002b:00007fa71f8070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 701.884386][T30641] RAX: ffffffffffffffda RBX: 00007fa721035fa8 RCX: 00007fa720dae159 [ 701.884400][T30641] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa721035fac [ 701.884413][T30641] RBP: 00007fa721035fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 701.884427][T30641] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 701.884499][T30641] R13: 00007fa721036038 R14: 00007fff81424680 R15: 00007fff81424768 [ 701.884521][T30641] [ 702.165824][T30660] FAULT_INJECTION: forcing a failure. [ 702.165824][T30660] name failslab, interval 1, probability 0, space 0, times 0 [ 702.165853][T30660] CPU: 1 UID: 0 PID: 30660 Comm: syz.3.5384 Not tainted syzkaller #0 PREEMPT(lazy) [ 702.165880][T30660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.165973][T30660] Call Trace: [ 702.165981][T30660] [ 702.165990][T30660] __dump_stack+0x1d/0x30 [ 702.166078][T30660] dump_stack_lvl+0x95/0xd0 [ 702.166101][T30660] dump_stack+0x15/0x1b [ 702.166123][T30660] should_fail_ex+0x262/0x280 [ 702.166152][T30660] ? prepare_creds+0x38/0x550 [ 702.166214][T30660] should_failslab+0x8c/0xb0 [ 702.166249][T30660] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 702.166356][T30660] ? prepare_creds+0x38/0x550 [ 702.166385][T30660] prepare_creds+0x38/0x550 [ 702.166414][T30660] __sys_setresuid+0x47f/0x6f0 [ 702.166543][T30660] __x64_sys_setresuid+0x3f/0x50 [ 702.166577][T30660] x64_sys_call+0x216c/0x2550 [ 702.166622][T30660] do_syscall_64+0x112/0x360 [ 702.166648][T30660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.166672][T30660] RIP: 0033:0x7fa720dae159 [ 702.166689][T30660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.166709][T30660] RSP: 002b:00007fa71f807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 702.166810][T30660] RAX: ffffffffffffffda RBX: 00007fa721035fa0 RCX: 00007fa720dae159 [ 702.166826][T30660] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 702.166916][T30660] RBP: 00007fa720e4506b R08: 0000000000000000 R09: 0000000000000000 [ 702.166931][T30660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.166987][T30660] R13: 00007fa721036038 R14: 00007fa721035fa0 R15: 00007fff81424768 [ 702.167008][T30660] [ 702.422873][T30687] FAULT_INJECTION: forcing a failure. [ 702.422873][T30687] name failslab, interval 1, probability 0, space 0, times 0 [ 702.422985][T30687] CPU: 1 UID: 0 PID: 30687 Comm: syz.5.5370 Not tainted syzkaller #0 PREEMPT(lazy) [ 702.423066][T30687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.423080][T30687] Call Trace: [ 702.423087][T30687] [ 702.423115][T30687] __dump_stack+0x1d/0x30 [ 702.423164][T30687] dump_stack_lvl+0x95/0xd0 [ 702.423188][T30687] dump_stack+0x15/0x1b [ 702.423210][T30687] should_fail_ex+0x262/0x280 [ 702.423239][T30687] ? prepare_creds+0x38/0x550 [ 702.423315][T30687] should_failslab+0x8c/0xb0 [ 702.423350][T30687] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 702.423383][T30687] ? prepare_creds+0x38/0x550 [ 702.423458][T30687] prepare_creds+0x38/0x550 [ 702.423530][T30687] __sys_setresuid+0x47f/0x6f0 [ 702.423566][T30687] __x64_sys_setresuid+0x3f/0x50 [ 702.423684][T30687] x64_sys_call+0x216c/0x2550 [ 702.423711][T30687] do_syscall_64+0x112/0x360 [ 702.423739][T30687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.423763][T30687] RIP: 0033:0x7fd8af28e159 [ 702.423834][T30687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.423854][T30687] RSP: 002b:00007fd8adce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 702.423897][T30687] RAX: ffffffffffffffda RBX: 00007fd8af515fa0 RCX: 00007fd8af28e159 [ 702.423978][T30687] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 702.423993][T30687] RBP: 00007fd8af32506b R08: 0000000000000000 R09: 0000000000000000 [ 702.424007][T30687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.424021][T30687] R13: 00007fd8af516038 R14: 00007fd8af515fa0 R15: 00007ffdf16188b8 [ 702.424119][T30687] [ 702.638041][T30699] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 702.638041][T30699] program syz.3.5386 not setting count and/or reply_len properly [ 703.186095][T30718] FAULT_INJECTION: forcing a failure. [ 703.186095][T30718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 703.186211][T30718] CPU: 1 UID: 0 PID: 30718 Comm: syz.3.5392 Not tainted syzkaller #0 PREEMPT(lazy) [ 703.186239][T30718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.186253][T30718] Call Trace: [ 703.186261][T30718] [ 703.186269][T30718] __dump_stack+0x1d/0x30 [ 703.186297][T30718] dump_stack_lvl+0x95/0xd0 [ 703.186359][T30718] dump_stack+0x15/0x1b [ 703.186381][T30718] should_fail_ex+0x262/0x280 [ 703.186409][T30718] should_fail+0xb/0x20 [ 703.186434][T30718] get_futex_key+0x12d/0xb10 [ 703.186487][T30718] futex_wake+0x89/0x400 [ 703.186507][T30718] ? _raw_spin_lock_irq+0x54/0xb0 [ 703.186539][T30718] do_futex+0x3f8/0x460 [ 703.186622][T30718] __se_sys_futex+0x2f6/0x370 [ 703.186728][T30718] __x64_sys_futex+0x78/0x90 [ 703.186770][T30718] x64_sys_call+0x22e2/0x2550 [ 703.186798][T30718] do_syscall_64+0x112/0x360 [ 703.186840][T30718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.186865][T30718] RIP: 0033:0x7fa720dae159 [ 703.186882][T30718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.186902][T30718] RSP: 002b:00007fa71f8070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 703.187001][T30718] RAX: ffffffffffffffda RBX: 00007fa721035fa8 RCX: 00007fa720dae159 [ 703.187016][T30718] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa721035fac [ 703.187031][T30718] RBP: 00007fa721035fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 703.187046][T30718] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 703.187061][T30718] R13: 00007fa721036038 R14: 00007fff81424680 R15: 00007fff81424768 [ 703.187139][T30718] [ 703.924354][T30745] FAULT_INJECTION: forcing a failure. [ 703.924354][T30745] name failslab, interval 1, probability 0, space 0, times 0 [ 703.924384][T30745] CPU: 1 UID: 0 PID: 30745 Comm: syz.5.5396 Not tainted syzkaller #0 PREEMPT(lazy) [ 703.924410][T30745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.924424][T30745] Call Trace: [ 703.924431][T30745] [ 703.924439][T30745] __dump_stack+0x1d/0x30 [ 703.924513][T30745] dump_stack_lvl+0x95/0xd0 [ 703.924612][T30745] dump_stack+0x15/0x1b [ 703.924635][T30745] should_fail_ex+0x262/0x280 [ 703.924721][T30745] ? security_prepare_creds+0x52/0x120 [ 703.924747][T30745] should_failslab+0x8c/0xb0 [ 703.924784][T30745] __kmalloc_noprof+0xd0/0x4d0 [ 703.924888][T30745] ? security_prepare_creds+0x52/0x120 [ 703.924909][T30745] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 703.924940][T30745] security_prepare_creds+0x52/0x120 [ 703.924983][T30745] prepare_creds+0x385/0x550 [ 703.925012][T30745] __sys_setresuid+0x47f/0x6f0 [ 703.925048][T30745] __x64_sys_setresuid+0x3f/0x50 [ 703.925182][T30745] x64_sys_call+0x216c/0x2550 [ 703.925212][T30745] do_syscall_64+0x112/0x360 [ 703.925302][T30745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.925394][T30745] RIP: 0033:0x7fd8af28e159 [ 703.925412][T30745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.925515][T30745] RSP: 002b:00007fd8adce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 703.925537][T30745] RAX: ffffffffffffffda RBX: 00007fd8af515fa0 RCX: 00007fd8af28e159 [ 703.925553][T30745] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 703.925567][T30745] RBP: 00007fd8af32506b R08: 0000000000000000 R09: 0000000000000000 [ 703.925581][T30745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.925595][T30745] R13: 00007fd8af516038 R14: 00007fd8af515fa0 R15: 00007ffdf16188b8 [ 703.925671][T30745] [ 704.301976][T30776] FAULT_INJECTION: forcing a failure. [ 704.301976][T30776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.302008][T30776] CPU: 1 UID: 0 PID: 30776 Comm: syz.1.5403 Not tainted syzkaller #0 PREEMPT(lazy) [ 704.302037][T30776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.302053][T30776] Call Trace: [ 704.302083][T30776] [ 704.302092][T30776] __dump_stack+0x1d/0x30 [ 704.302174][T30776] dump_stack_lvl+0x95/0xd0 [ 704.302281][T30776] dump_stack+0x15/0x1b [ 704.302304][T30776] should_fail_ex+0x262/0x280 [ 704.302335][T30776] should_fail+0xb/0x20 [ 704.302361][T30776] should_fail_usercopy+0x1a/0x20 [ 704.302472][T30776] _copy_from_user+0x1c/0xb0 [ 704.302541][T30776] __sys_bpf+0x1e2/0xc30 [ 704.302571][T30776] ? _raw_spin_unlock+0x9/0x30 [ 704.302602][T30776] ? finish_task_switch+0x121/0x340 [ 704.302632][T30776] ? do_futex+0x370/0x460 [ 704.302746][T30776] __x64_sys_bpf+0x69/0x80 [ 704.302770][T30776] x64_sys_call+0xf26/0x2550 [ 704.302794][T30776] do_syscall_64+0x112/0x360 [ 704.302823][T30776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.302874][T30776] RIP: 0033:0x7fc893b2e159 [ 704.302892][T30776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.302913][T30776] RSP: 002b:00007fc892587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 704.302991][T30776] RAX: ffffffffffffffda RBX: 00007fc893db5fa0 RCX: 00007fc893b2e159 [ 704.303008][T30776] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 704.303126][T30776] RBP: 00007fc893bc506b R08: 0000000000000000 R09: 0000000000000000 [ 704.303141][T30776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.303156][T30776] R13: 00007fc893db6038 R14: 00007fc893db5fa0 R15: 00007fff75619ed8 [ 704.303225][T30776] [ 705.254963][T30813] syzkaller1: entered promiscuous mode [ 705.254984][T30813] syzkaller1: entered allmulticast mode [ 705.502057][T30835] syzkaller0: entered promiscuous mode [ 705.502121][T30835] syzkaller0: entered allmulticast mode [ 705.511693][T30840] syzkaller0: entered promiscuous mode [ 705.511713][T30840] syzkaller0: entered allmulticast mode [ 706.201047][T30872] tipc: Started in network mode [ 706.201062][T30872] tipc: Node identity 4, cluster identity 4711 [ 706.201072][T30872] tipc: Node number set to 4 [ 706.577289][T30902] FAULT_INJECTION: forcing a failure. [ 706.577289][T30902] name fail_futex, interval 1, probability 0, space 0, times 0 [ 706.577322][T30902] CPU: 1 UID: 0 PID: 30902 Comm: syz.1.5423 Not tainted syzkaller #0 PREEMPT(lazy) [ 706.577349][T30902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.577362][T30902] Call Trace: [ 706.577370][T30902] [ 706.577437][T30902] __dump_stack+0x1d/0x30 [ 706.577466][T30902] dump_stack_lvl+0x95/0xd0 [ 706.577492][T30902] dump_stack+0x15/0x1b [ 706.577516][T30902] should_fail_ex+0x262/0x280 [ 706.577611][T30902] should_fail+0xb/0x20 [ 706.577638][T30902] get_futex_key+0x12d/0xb10 [ 706.577678][T30902] futex_wake+0x89/0x400 [ 706.577713][T30902] do_futex+0x3f8/0x460 [ 706.577741][T30902] __se_sys_futex+0x2f6/0x370 [ 706.577890][T30902] __x64_sys_futex+0x78/0x90 [ 706.577931][T30902] x64_sys_call+0x22e2/0x2550 [ 706.577961][T30902] do_syscall_64+0x112/0x360 [ 706.578057][T30902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.578157][T30902] RIP: 0033:0x7fc893b2e159 [ 706.578175][T30902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.578192][T30902] RSP: 002b:00007fc8925870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 706.578214][T30902] RAX: ffffffffffffffda RBX: 00007fc893db5fa8 RCX: 00007fc893b2e159 [ 706.578294][T30902] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc893db5fac [ 706.578310][T30902] RBP: 00007fc893db5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 706.578326][T30902] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 706.578375][T30902] R13: 00007fc893db6038 R14: 00007fff75619df0 R15: 00007fff75619ed8 [ 706.578393][T30902] [ 706.802269][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 706.802294][ T29] audit: type=1400 audit(1791118393.638:19834): avc: denied { getopt } for pid=30897 comm="syz.3.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 706.934739][T30925] FAULT_INJECTION: forcing a failure. [ 706.934739][T30925] name failslab, interval 1, probability 0, space 0, times 0 [ 706.934767][T30925] CPU: 0 UID: 0 PID: 30925 Comm: syz.1.5426 Not tainted syzkaller #0 PREEMPT(lazy) [ 706.934798][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.934817][T30925] Call Trace: [ 706.934825][T30925] [ 706.934835][T30925] __dump_stack+0x1d/0x30 [ 706.934942][T30925] dump_stack_lvl+0x95/0xd0 [ 706.934964][T30925] dump_stack+0x15/0x1b [ 706.934987][T30925] should_fail_ex+0x262/0x280 [ 706.935019][T30925] should_failslab+0x8c/0xb0 [ 706.935074][T30925] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 706.935104][T30925] ? sock_alloc_inode+0x36/0xf0 [ 706.935229][T30925] ? sock_alloc_inode+0x36/0xf0 [ 706.935306][T30925] ? selinux_socket_create+0xfd/0x180 [ 706.935340][T30925] ? __pfx_sock_alloc_inode+0x10/0x10 [ 706.935390][T30925] sock_alloc_inode+0x36/0xf0 [ 706.935420][T30925] alloc_inode+0x40/0x170 [ 706.935444][T30925] __sock_create+0x121/0x580 [ 706.935535][T30925] __sys_socket+0xaf/0x180 [ 706.935571][T30925] __x64_sys_socket+0x3f/0x50 [ 706.935636][T30925] x64_sys_call+0x246e/0x2550 [ 706.935666][T30925] do_syscall_64+0x112/0x360 [ 706.935810][T30925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.935836][T30925] RIP: 0033:0x7fc893b2e159 [ 706.935852][T30925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.935870][T30925] RSP: 002b:00007fc892587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 706.935905][T30925] RAX: ffffffffffffffda RBX: 00007fc893db5fa0 RCX: 00007fc893b2e159 [ 706.935926][T30925] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 706.935945][T30925] RBP: 00007fc893bc506b R08: 0000000000000000 R09: 0000000000000000 [ 706.936012][T30925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.936024][T30925] R13: 00007fc893db6038 R14: 00007fc893db5fa0 R15: 00007fff75619ed8 [ 706.936043][T30925] [ 706.939026][T30925] socket: no more sockets [ 707.037932][T30929] syzkaller0: entered promiscuous mode [ 707.037976][T30929] syzkaller0: entered allmulticast mode [ 707.343715][T30938] FAULT_INJECTION: forcing a failure. [ 707.343715][T30938] name failslab, interval 1, probability 0, space 0, times 0 [ 707.343753][T30938] CPU: 0 UID: 0 PID: 30938 Comm: syz.1.5428 Not tainted syzkaller #0 PREEMPT(lazy) [ 707.343845][T30938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.343859][T30938] Call Trace: [ 707.343868][T30938] [ 707.343877][T30938] __dump_stack+0x1d/0x30 [ 707.343977][T30938] dump_stack_lvl+0x95/0xd0 [ 707.344014][T30938] dump_stack+0x15/0x1b [ 707.344037][T30938] should_fail_ex+0x262/0x280 [ 707.344066][T30938] ? fanout_add+0x1bc/0xad0 [ 707.344150][T30938] should_failslab+0x8c/0xb0 [ 707.344255][T30938] __kmalloc_cache_noprof+0x7a/0x400 [ 707.344353][T30938] ? fanout_add+0x1bc/0xad0 [ 707.344387][T30938] fanout_add+0x1bc/0xad0 [ 707.344441][T30938] ? _copy_from_user+0x89/0xb0 [ 707.344474][T30938] packet_setsockopt+0x981/0xfd0 [ 707.344507][T30938] ? __pfx_packet_setsockopt+0x10/0x10 [ 707.344551][T30938] __sys_setsockopt+0x184/0x200 [ 707.344579][T30938] __x64_sys_setsockopt+0x64/0x80 [ 707.344650][T30938] x64_sys_call+0x248f/0x2550 [ 707.344678][T30938] do_syscall_64+0x112/0x360 [ 707.344762][T30938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.344865][T30938] RIP: 0033:0x7fc893b2e159 [ 707.344882][T30938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.344901][T30938] RSP: 002b:00007fc892587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 707.344923][T30938] RAX: ffffffffffffffda RBX: 00007fc893db5fa0 RCX: 00007fc893b2e159 [ 707.344939][T30938] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 707.344954][T30938] RBP: 00007fc893bc506b R08: 0000000000000004 R09: 0000000000000000 [ 707.345004][T30938] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.345017][T30938] R13: 00007fc893db6038 R14: 00007fc893db5fa0 R15: 00007fff75619ed8 [ 707.345037][T30938] [ 707.887756][T31009] FAULT_INJECTION: forcing a failure. [ 707.887756][T31009] name failslab, interval 1, probability 0, space 0, times 0 [ 707.887788][T31009] CPU: 0 UID: 0 PID: 31009 Comm: syz.7.5444 Not tainted syzkaller #0 PREEMPT(lazy) [ 707.887884][T31009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.887899][T31009] Call Trace: [ 707.887908][T31009] [ 707.887915][T31009] __dump_stack+0x1d/0x30 [ 707.887983][T31009] dump_stack_lvl+0x95/0xd0 [ 707.888042][T31009] dump_stack+0x15/0x1b [ 707.888069][T31009] should_fail_ex+0x262/0x280 [ 707.888096][T31009] ? fanout_add+0x1bc/0xad0 [ 707.888135][T31009] should_failslab+0x8c/0xb0 [ 707.888173][T31009] __kmalloc_cache_noprof+0x7a/0x400 [ 707.888222][T31009] ? fanout_add+0x1bc/0xad0 [ 707.888257][T31009] fanout_add+0x1bc/0xad0 [ 707.888319][T31009] ? _copy_from_user+0x89/0xb0 [ 707.888348][T31009] packet_setsockopt+0x981/0xfd0 [ 707.888380][T31009] ? __pfx_packet_setsockopt+0x10/0x10 [ 707.888471][T31009] __sys_setsockopt+0x184/0x200 [ 707.888500][T31009] __x64_sys_setsockopt+0x64/0x80 [ 707.888554][T31009] x64_sys_call+0x248f/0x2550 [ 707.888578][T31009] do_syscall_64+0x112/0x360 [ 707.888604][T31009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.888631][T31009] RIP: 0033:0x7f3de992e159 [ 707.888686][T31009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.888704][T31009] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 707.888727][T31009] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 707.888803][T31009] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 707.888818][T31009] RBP: 00007f3de99c506b R08: 0000000000000004 R09: 0000000000000000 [ 707.888832][T31009] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.888844][T31009] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 707.888862][T31009] [ 709.169967][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5451'. [ 709.475774][T31040] tipc: Started in network mode [ 709.475788][T31040] tipc: Node identity 4, cluster identity 4711 [ 709.475798][T31040] tipc: Node number set to 4 [ 709.796972][T31047] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5456'. [ 709.816386][T31047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31047 comm=syz.5.5456 [ 710.357449][T31062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5463'. [ 710.666134][T31066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5461'. [ 710.901518][T31085] FAULT_INJECTION: forcing a failure. [ 710.901518][T31085] name fail_futex, interval 1, probability 0, space 0, times 0 [ 710.901551][T31085] CPU: 1 UID: 0 PID: 31085 Comm: syz.1.5472 Not tainted syzkaller #0 PREEMPT(lazy) [ 710.901631][T31085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.901646][T31085] Call Trace: [ 710.901654][T31085] [ 710.901663][T31085] __dump_stack+0x1d/0x30 [ 710.901692][T31085] dump_stack_lvl+0x95/0xd0 [ 710.901765][T31085] dump_stack+0x15/0x1b [ 710.901789][T31085] should_fail_ex+0x262/0x280 [ 710.901821][T31085] should_fail+0xb/0x20 [ 710.901847][T31085] get_futex_key+0x12d/0xb10 [ 710.901959][T31085] futex_wake+0x89/0x400 [ 710.902066][T31085] do_futex+0x3f8/0x460 [ 710.902101][T31085] ? strncpy_from_user+0x21d/0x250 [ 710.902129][T31085] __se_sys_futex+0x2f6/0x370 [ 710.902241][T31085] __x64_sys_futex+0x78/0x90 [ 710.902275][T31085] x64_sys_call+0x22e2/0x2550 [ 710.902323][T31085] do_syscall_64+0x112/0x360 [ 710.902346][T31085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.902367][T31085] RIP: 0033:0x7fc893b2e159 [ 710.902402][T31085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.902418][T31085] RSP: 002b:00007fc8925870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.902436][T31085] RAX: ffffffffffffffda RBX: 00007fc893db5fa8 RCX: 00007fc893b2e159 [ 710.902449][T31085] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc893db5fac [ 710.902462][T31085] RBP: 00007fc893db5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 710.902476][T31085] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 710.902488][T31085] R13: 00007fc893db6038 R14: 00007fff75619df0 R15: 00007fff75619ed8 [ 710.902505][T31085] [ 710.942070][T31087] syzkaller0: entered promiscuous mode [ 710.942089][T31087] syzkaller0: entered allmulticast mode [ 711.096667][T31089] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5475'. [ 711.230662][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5478'. [ 712.186717][T31127] tipc: Started in network mode [ 712.186732][T31127] tipc: Node identity 4, cluster identity 4711 [ 712.186754][T31127] tipc: Node number set to 4 [ 712.443355][T31135] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5486'. [ 712.605112][T31138] FAULT_INJECTION: forcing a failure. [ 712.605112][T31138] name failslab, interval 1, probability 0, space 0, times 0 [ 712.605190][T31138] CPU: 1 UID: 0 PID: 31138 Comm: syz.1.5487 Not tainted syzkaller #0 PREEMPT(lazy) [ 712.605265][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.605278][T31138] Call Trace: [ 712.605286][T31138] [ 712.605297][T31138] __dump_stack+0x1d/0x30 [ 712.605325][T31138] dump_stack_lvl+0x95/0xd0 [ 712.605349][T31138] dump_stack+0x15/0x1b [ 712.605368][T31138] should_fail_ex+0x262/0x280 [ 712.605427][T31138] ? security_prepare_creds+0x52/0x120 [ 712.605511][T31138] should_failslab+0x8c/0xb0 [ 712.605542][T31138] __kmalloc_noprof+0xd0/0x4d0 [ 712.605575][T31138] ? security_prepare_creds+0x52/0x120 [ 712.605600][T31138] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 712.605651][T31138] security_prepare_creds+0x52/0x120 [ 712.605672][T31138] prepare_creds+0x385/0x550 [ 712.605740][T31138] __sys_setresuid+0x47f/0x6f0 [ 712.605776][T31138] __x64_sys_setresuid+0x3f/0x50 [ 712.605815][T31138] x64_sys_call+0x216c/0x2550 [ 712.605923][T31138] do_syscall_64+0x112/0x360 [ 712.605953][T31138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.605980][T31138] RIP: 0033:0x7fc893b2e159 [ 712.605995][T31138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.606052][T31138] RSP: 002b:00007fc892587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 712.606076][T31138] RAX: ffffffffffffffda RBX: 00007fc893db5fa0 RCX: 00007fc893b2e159 [ 712.606093][T31138] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 712.606141][T31138] RBP: 00007fc893bc506b R08: 0000000000000000 R09: 0000000000000000 [ 712.606204][T31138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.606219][T31138] R13: 00007fc893db6038 R14: 00007fc893db5fa0 R15: 00007fff75619ed8 [ 712.606241][T31138] [ 713.800195][T31197] FAULT_INJECTION: forcing a failure. [ 713.800195][T31197] name failslab, interval 1, probability 0, space 0, times 0 [ 713.800226][T31197] CPU: 1 UID: 0 PID: 31197 Comm: syz.3.5498 Not tainted syzkaller #0 PREEMPT(lazy) [ 713.800280][T31197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.800295][T31197] Call Trace: [ 713.800302][T31197] [ 713.800310][T31197] __dump_stack+0x1d/0x30 [ 713.800334][T31197] dump_stack_lvl+0x95/0xd0 [ 713.800356][T31197] dump_stack+0x15/0x1b [ 713.800400][T31197] should_fail_ex+0x262/0x280 [ 713.800428][T31197] ? prepare_creds+0x38/0x550 [ 713.800456][T31197] should_failslab+0x8c/0xb0 [ 713.800547][T31197] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 713.800579][T31197] ? prepare_creds+0x38/0x550 [ 713.800604][T31197] prepare_creds+0x38/0x550 [ 713.800686][T31197] __sys_setresuid+0x47f/0x6f0 [ 713.800721][T31197] __x64_sys_setresuid+0x3f/0x50 [ 713.800757][T31197] x64_sys_call+0x216c/0x2550 [ 713.800795][T31197] do_syscall_64+0x112/0x360 [ 713.800822][T31197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.800862][T31197] RIP: 0033:0x7fa720dae159 [ 713.800880][T31197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.800901][T31197] RSP: 002b:00007fa71f807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 713.800924][T31197] RAX: ffffffffffffffda RBX: 00007fa721035fa0 RCX: 00007fa720dae159 [ 713.800986][T31197] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 713.801002][T31197] RBP: 00007fa720e4506b R08: 0000000000000000 R09: 0000000000000000 [ 713.801076][T31197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.801089][T31197] R13: 00007fa721036038 R14: 00007fa721035fa0 R15: 00007fff81424768 [ 713.801111][T31197] [ 715.171415][T31265] FAULT_INJECTION: forcing a failure. [ 715.171415][T31265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.171444][T31265] CPU: 1 UID: 0 PID: 31265 Comm: syz.7.5504 Not tainted syzkaller #0 PREEMPT(lazy) [ 715.171520][T31265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.171535][T31265] Call Trace: [ 715.171544][T31265] [ 715.171553][T31265] __dump_stack+0x1d/0x30 [ 715.171577][T31265] dump_stack_lvl+0x95/0xd0 [ 715.171599][T31265] dump_stack+0x15/0x1b [ 715.171624][T31265] should_fail_ex+0x262/0x280 [ 715.171649][T31265] should_fail+0xb/0x20 [ 715.171674][T31265] should_fail_usercopy+0x1a/0x20 [ 715.171784][T31265] strncpy_from_user+0x27/0x250 [ 715.171811][T31265] __se_sys_add_key+0x86/0x360 [ 715.171904][T31265] __x64_sys_add_key+0x67/0x80 [ 715.171930][T31265] x64_sys_call+0x1fa9/0x2550 [ 715.171959][T31265] do_syscall_64+0x112/0x360 [ 715.172054][T31265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.172081][T31265] RIP: 0033:0x7f3de992e159 [ 715.172100][T31265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.172118][T31265] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 715.172137][T31265] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 715.172152][T31265] RDX: 0000200000000780 RSI: 0000200000000180 RDI: 0000000000000000 [ 715.172186][T31265] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 715.172202][T31265] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 715.172217][T31265] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 715.172262][T31265] [ 715.414400][T31275] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5509'. [ 715.416982][T31275] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5509'. [ 716.409160][T31299] FAULT_INJECTION: forcing a failure. [ 716.409160][T31299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.409188][T31299] CPU: 1 UID: 0 PID: 31299 Comm: syz.7.5516 Not tainted syzkaller #0 PREEMPT(lazy) [ 716.409214][T31299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.409228][T31299] Call Trace: [ 716.409237][T31299] [ 716.409244][T31299] __dump_stack+0x1d/0x30 [ 716.409269][T31299] dump_stack_lvl+0x95/0xd0 [ 716.409305][T31299] dump_stack+0x15/0x1b [ 716.409326][T31299] should_fail_ex+0x262/0x280 [ 716.409351][T31299] should_fail+0xb/0x20 [ 716.409390][T31299] should_fail_usercopy+0x1a/0x20 [ 716.409493][T31299] strncpy_from_user+0x27/0x250 [ 716.409519][T31299] __se_sys_add_key+0x86/0x360 [ 716.409546][T31299] __x64_sys_add_key+0x67/0x80 [ 716.409571][T31299] x64_sys_call+0x1fa9/0x2550 [ 716.409662][T31299] do_syscall_64+0x112/0x360 [ 716.409691][T31299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.409716][T31299] RIP: 0033:0x7f3de992e159 [ 716.409732][T31299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.409749][T31299] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 716.409772][T31299] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 716.409798][T31299] RDX: 0000200000000780 RSI: 0000200000000180 RDI: 0000000000000000 [ 716.409814][T31299] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 716.409829][T31299] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 716.409858][T31299] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 716.409876][T31299] [ 716.519610][T31286] syzkaller0: entered promiscuous mode [ 716.519631][T31286] syzkaller0: entered allmulticast mode [ 716.576214][T31286] tipc: Enabled bearer , priority 0 [ 716.584372][T31286] tipc: Resetting bearer [ 716.604511][T31285] tipc: Resetting bearer [ 716.616152][T31285] tipc: Disabling bearer [ 716.630407][T31301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5517'. [ 717.541906][T31329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5525'. [ 717.561408][T31331] FAULT_INJECTION: forcing a failure. [ 717.561408][T31331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.561542][T31331] CPU: 1 UID: 0 PID: 31331 Comm: syz.7.5529 Not tainted syzkaller #0 PREEMPT(lazy) [ 717.561570][T31331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.561585][T31331] Call Trace: [ 717.561673][T31331] [ 717.561680][T31331] __dump_stack+0x1d/0x30 [ 717.561754][T31331] dump_stack_lvl+0x95/0xd0 [ 717.561821][T31331] dump_stack+0x15/0x1b [ 717.561858][T31331] should_fail_ex+0x262/0x280 [ 717.561890][T31331] should_fail+0xb/0x20 [ 717.561914][T31331] should_fail_usercopy+0x1a/0x20 [ 717.561972][T31331] strncpy_from_user+0x27/0x250 [ 717.561998][T31331] __se_sys_add_key+0x86/0x360 [ 717.562025][T31331] __x64_sys_add_key+0x67/0x80 [ 717.562059][T31331] x64_sys_call+0x1fa9/0x2550 [ 717.562087][T31331] do_syscall_64+0x112/0x360 [ 717.562111][T31331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.562158][T31331] RIP: 0033:0x7f3de992e159 [ 717.562176][T31331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.562196][T31331] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 717.562220][T31331] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 717.562236][T31331] RDX: 0000200000000780 RSI: 0000200000000180 RDI: 0000000000000000 [ 717.562249][T31331] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 717.562316][T31331] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 717.562329][T31331] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 717.562366][T31331] [ 717.922617][T31339] syzkaller0: entered promiscuous mode [ 717.922634][T31339] syzkaller0: entered allmulticast mode [ 718.140850][T31351] syzkaller0: entered promiscuous mode [ 718.140872][T31351] syzkaller0: entered allmulticast mode [ 718.149809][T31353] FAULT_INJECTION: forcing a failure. [ 718.149809][T31353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.149837][T31353] CPU: 0 UID: 0 PID: 31353 Comm: syz.7.5541 Not tainted syzkaller #0 PREEMPT(lazy) [ 718.149864][T31353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.149878][T31353] Call Trace: [ 718.149885][T31353] [ 718.149893][T31353] __dump_stack+0x1d/0x30 [ 718.149963][T31353] dump_stack_lvl+0x95/0xd0 [ 718.150059][T31353] dump_stack+0x15/0x1b [ 718.150080][T31353] should_fail_ex+0x262/0x280 [ 718.150108][T31353] should_fail+0xb/0x20 [ 718.150134][T31353] should_fail_usercopy+0x1a/0x20 [ 718.150165][T31353] strncpy_from_user+0x27/0x250 [ 718.150196][T31353] __se_sys_add_key+0x86/0x360 [ 718.150224][T31353] __x64_sys_add_key+0x67/0x80 [ 718.150249][T31353] x64_sys_call+0x1fa9/0x2550 [ 718.150329][T31353] do_syscall_64+0x112/0x360 [ 718.150356][T31353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.150380][T31353] RIP: 0033:0x7f3de992e159 [ 718.150396][T31353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.150418][T31353] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 718.150440][T31353] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 718.150455][T31353] RDX: 0000200000000780 RSI: 0000200000000180 RDI: 0000000000000000 [ 718.150473][T31353] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 718.150535][T31353] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 718.150549][T31353] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 718.150568][T31353] [ 719.130394][T31382] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5551'. [ 719.168041][T31390] FAULT_INJECTION: forcing a failure. [ 719.168041][T31390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.168108][T31390] CPU: 1 UID: 0 PID: 31390 Comm: syz.7.5555 Not tainted syzkaller #0 PREEMPT(lazy) [ 719.168132][T31390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 719.168146][T31390] Call Trace: [ 719.168153][T31390] [ 719.168161][T31390] __dump_stack+0x1d/0x30 [ 719.168219][T31390] dump_stack_lvl+0x95/0xd0 [ 719.168244][T31390] dump_stack+0x15/0x1b [ 719.168263][T31390] should_fail_ex+0x262/0x280 [ 719.168309][T31390] should_fail+0xb/0x20 [ 719.168335][T31390] should_fail_usercopy+0x1a/0x20 [ 719.168377][T31390] strncpy_from_user+0x27/0x250 [ 719.168404][T31390] __se_sys_add_key+0x86/0x360 [ 719.168438][T31390] __x64_sys_add_key+0x67/0x80 [ 719.168541][T31390] x64_sys_call+0x1fa9/0x2550 [ 719.168569][T31390] do_syscall_64+0x112/0x360 [ 719.168594][T31390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.168690][T31390] RIP: 0033:0x7f3de992e159 [ 719.168709][T31390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.168731][T31390] RSP: 002b:00007f3de8387028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 719.168756][T31390] RAX: ffffffffffffffda RBX: 00007f3de9bb5fa0 RCX: 00007f3de992e159 [ 719.168801][T31390] RDX: 0000200000000780 RSI: 0000200000000180 RDI: 0000000000000000 [ 719.168817][T31390] RBP: 00007f3de99c506b R08: 0000000000000000 R09: 0000000000000000 [ 719.168833][T31390] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 719.168865][T31390] R13: 00007f3de9bb6038 R14: 00007f3de9bb5fa0 R15: 00007ffe9d96fa58 [ 719.168887][T31390] [ 719.193104][T31394] syzkaller0: entered promiscuous mode [ 719.193125][T31394] syzkaller0: entered allmulticast mode [ 719.283505][T31400] loop3: detected capacity change from 0 to 164 [ 719.925694][T31416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5564'. [ 720.381206][T31435] syzkaller0: entered promiscuous mode [ 720.381228][T31435] syzkaller0: entered allmulticast mode [ 721.603856][ T29] audit: type=1326 audit(1791118408.448:19835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.603957][ T29] audit: type=1326 audit(1791118408.448:19836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.603988][ T29] audit: type=1326 audit(1791118408.448:19837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.604015][ T29] audit: type=1326 audit(1791118408.448:19838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.604073][ T29] audit: type=1326 audit(1791118408.448:19839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.604319][ T29] audit: type=1326 audit(1791118408.458:19840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.610959][ T29] audit: type=1326 audit(1791118408.468:19841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.611070][ T29] audit: type=1326 audit(1791118408.468:19842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.611100][ T29] audit: type=1326 audit(1791118408.468:19843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 721.611191][ T29] audit: type=1326 audit(1791118408.468:19844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31461 comm="syz.3.5580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa720dae159 code=0x7ffc0000 [ 722.050997][T31472] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 722.050997][T31472] program syz.7.5583 not setting count and/or reply_len properly [ 722.072305][T30221] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.072422][T30221] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.131129][T30221] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.131163][T30221] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.217459][T30221] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.217494][T30221] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.264257][T30221] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.264298][T30221] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.270648][T31455] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.270774][T31455] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.270895][T31455] bridge_slave_0: entered allmulticast mode [ 722.271427][T31455] bridge_slave_0: entered promiscuous mode [ 722.276771][T31455] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.276802][T31455] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.276927][T31455] bridge_slave_1: entered allmulticast mode [ 722.277478][T31455] bridge_slave_1: entered promiscuous mode [ 722.289594][T31455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.290547][T31455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.302071][T31455] team0: Port device team_slave_0 added [ 722.303229][T31455] team0: Port device team_slave_1 added [ 722.313915][T31455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.313927][T31455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.314013][T31455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.314545][T31455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.314557][T31455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.314591][T31455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.331652][T31455] hsr_slave_0: entered promiscuous mode [ 722.332131][T31455] hsr_slave_1: entered promiscuous mode [ 722.337164][T31455] debugfs: 'hsr0' already exists in 'hsr' [ 722.337178][T31455] Cannot create hsr debugfs directory [ 722.488746][T30221] bridge_slave_1: left allmulticast mode [ 722.488766][T30221] bridge_slave_1: left promiscuous mode [ 722.488977][T30221] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.489677][T30221] bridge_slave_0: left allmulticast mode [ 722.489701][T30221] bridge_slave_0: left promiscuous mode [ 722.489861][T30221] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.599878][T30221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.601096][T30221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.601874][T30221] bond0 (unregistering): Released all slaves [ 722.701604][T30221] hsr_slave_0: left promiscuous mode [ 722.702679][T30221] hsr_slave_1: left promiscuous mode [ 722.703174][T30221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.703188][T30221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.708776][T30221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.708834][T30221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.721683][T30221] veth1_macvtap: left promiscuous mode [ 722.721711][T30221] veth0_macvtap: left promiscuous mode [ 722.721752][T30221] veth1_vlan: left promiscuous mode [ 722.721838][T30221] veth0_vlan: left promiscuous mode [ 723.078974][T30221] team0 (unregistering): Port device team_slave_1 removed [ 723.092785][T30221] team0 (unregistering): Port device team_slave_0 removed [ 723.325704][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 723.370976][T31527] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 723.370976][T31527] program syz.3.5593 not setting count and/or reply_len properly [ 723.520416][T31540] loop3: detected capacity change from 0 to 512 [ 723.585541][T30221] IPVS: stop unused estimator thread 0... [ 723.748995][ T1699] IPVS: starting estimator thread 0... [ 723.832242][T31557] IPVS: using max 2400 ests per chain, 120000 per kthread [ 724.046907][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b4fb600: rx timeout, send abort [ 724.046994][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b4fb600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 724.114149][T31455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 724.121453][T31455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.142874][T31455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 724.149172][T31455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.172886][T31455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 724.179626][T31455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.181639][T31455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.210410][T31455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.226873][T31572] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 724.226873][T31572] program syz.5.5603 not setting count and/or reply_len properly [ 724.320038][T31455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.335588][T31455] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.340881][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.340913][ T1699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.342609][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.342638][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.674958][T31455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.859854][T31455] veth0_vlan: entered promiscuous mode [ 725.865084][T31455] veth1_vlan: entered promiscuous mode [ 725.889552][T31455] veth0_macvtap: entered promiscuous mode [ 725.895751][T31455] veth1_macvtap: entered promiscuous mode [ 725.918501][T31455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.925117][T31455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.003016][ T1699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.003084][ T1699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.003167][ T1699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.003259][ T1699] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.107032][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5577'. [ 726.405902][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b1be000: rx timeout, send abort [ 726.405978][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b1be000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.476831][T31687] syzkaller0: entered promiscuous mode [ 726.476850][T31687] syzkaller0: entered allmulticast mode [ 726.478788][T31687] tipc: Enabled bearer , priority 0 [ 726.480388][T31687] tipc: Resetting bearer [ 726.485889][T31685] tipc: Resetting bearer [ 726.684277][T31685] tipc: Disabling bearer [ 727.288817][T31697] FAULT_INJECTION: forcing a failure. [ 727.288817][T31697] name failslab, interval 1, probability 0, space 0, times 0 [ 727.288850][T31697] CPU: 1 UID: 0 PID: 31697 Comm: syz.1.5627 Not tainted syzkaller #0 PREEMPT(lazy) [ 727.288898][T31697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.288913][T31697] Call Trace: [ 727.288921][T31697] [ 727.288931][T31697] __dump_stack+0x1d/0x30 [ 727.288961][T31697] dump_stack_lvl+0x95/0xd0 [ 727.288983][T31697] dump_stack+0x15/0x1b [ 727.289055][T31697] should_fail_ex+0x262/0x280 [ 727.289151][T31697] ? __send_signal_locked+0x1ca/0x7a0 [ 727.289183][T31697] should_failslab+0x8c/0xb0 [ 727.289250][T31697] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 727.289288][T31697] ? __send_signal_locked+0x1ca/0x7a0 [ 727.289385][T31697] __send_signal_locked+0x1ca/0x7a0 [ 727.289415][T31697] send_signal_locked+0x3b0/0x430 [ 727.289591][T31697] force_sig_info_to_task+0x1de/0x270 [ 727.289626][T31697] force_sig_fault+0x91/0xc0 [ 727.289655][T31697] exc_page_fault+0x62/0xa0 [ 727.289711][T31697] asm_exc_page_fault+0x26/0x30 [ 727.289789][T31697] RIP: 0033:0x7ff86f0f72df [ 727.289807][T31697] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 727.289829][T31697] RSP: 002b:00007ff86db66bd8 EFLAGS: 00010283 [ 727.289846][T31697] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 727.289857][T31697] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007ff86db66c00 [ 727.289870][T31697] RBP: 00007ff86db66c00 R08: 0000000000000000 R09: 0000000000000000 [ 727.289915][T31697] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 727.289930][T31697] R13: 00007ff86f396038 R14: 00007ff86f395fa0 R15: 00007fffdbc80ff8 [ 727.289951][T31697] [ 727.790337][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881052e4400: rx timeout, send abort [ 727.790425][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881052e4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 727.988090][T31729] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5636'. [ 728.232310][T31736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31736 comm=syz.3.5639 [ 728.491030][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 728.491147][ T29] audit: type=1400 audit(1791118415.348:19866): avc: denied { read write } for pid=31741 comm="syz.6.5641" name="dynamic_events" dev="tracefs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 729.531080][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810d498600: rx timeout, send abort [ 729.531149][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d498600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 729.848485][T31784] FAULT_INJECTION: forcing a failure. [ 729.848485][T31784] name fail_futex, interval 1, probability 0, space 0, times 0 [ 729.848581][T31784] CPU: 0 UID: 0 PID: 31784 Comm: syz.1.5655 Not tainted syzkaller #0 PREEMPT(lazy) [ 729.848605][T31784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.848621][T31784] Call Trace: [ 729.848628][T31784] [ 729.848637][T31784] __dump_stack+0x1d/0x30 [ 729.848661][T31784] dump_stack_lvl+0x95/0xd0 [ 729.848738][T31784] dump_stack+0x15/0x1b [ 729.848759][T31784] should_fail_ex+0x262/0x280 [ 729.848784][T31784] should_fail+0xb/0x20 [ 729.848806][T31784] get_futex_key+0x12d/0xb10 [ 729.848877][T31784] futex_wake+0x89/0x400 [ 729.848898][T31784] do_futex+0x3f8/0x460 [ 729.848930][T31784] __se_sys_futex+0x2f6/0x370 [ 729.848968][T31784] __x64_sys_futex+0x78/0x90 [ 729.849030][T31784] x64_sys_call+0x22e2/0x2550 [ 729.849057][T31784] do_syscall_64+0x112/0x360 [ 729.849112][T31784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.849136][T31784] RIP: 0033:0x7ff86f10e159 [ 729.849151][T31784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.849312][T31784] RSP: 002b:00007ff86db670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 729.849407][T31784] RAX: ffffffffffffffda RBX: 00007ff86f395fa8 RCX: 00007ff86f10e159 [ 729.849489][T31784] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff86f395fac [ 729.849505][T31784] RBP: 00007ff86f395fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 729.849520][T31784] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 729.849532][T31784] R13: 00007ff86f396038 R14: 00007fffdbc80f10 R15: 00007fffdbc80ff8 [ 729.849554][T31784] [ 732.526901][T31995] loop7: detected capacity change from 0 to 164 [ 732.975198][T32040] FAULT_INJECTION: forcing a failure. [ 732.975198][T32040] name fail_futex, interval 1, probability 0, space 0, times 0 [ 732.975227][T32040] CPU: 0 UID: 0 PID: 32040 Comm: syz.5.5715 Not tainted syzkaller #0 PREEMPT(lazy) [ 732.975316][T32040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.975367][T32040] Call Trace: [ 732.975415][T32040] [ 732.975423][T32040] __dump_stack+0x1d/0x30 [ 732.975599][T32040] dump_stack_lvl+0x95/0xd0 [ 732.975625][T32040] dump_stack+0x15/0x1b [ 732.975649][T32040] should_fail_ex+0x262/0x280 [ 732.975704][T32040] should_fail+0xb/0x20 [ 732.975727][T32040] get_futex_key+0x12d/0xb10 [ 732.975754][T32040] futex_wait_setup+0x49/0x3e0 [ 732.975841][T32040] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 732.975865][T32040] ? hrtimer_active+0xe4/0x110 [ 732.975914][T32040] __futex_wait+0xa9/0x260 [ 732.975967][T32040] ? __pfx_futex_wake_mark+0x10/0x10 [ 732.976037][T32040] futex_wait+0x98/0x1c0 [ 732.976064][T32040] do_futex+0x391/0x460 [ 732.976100][T32040] __se_sys_futex+0x2f6/0x370 [ 732.976165][T32040] __x64_sys_futex+0x78/0x90 [ 732.976217][T32040] x64_sys_call+0x22e2/0x2550 [ 732.976318][T32040] do_syscall_64+0x112/0x360 [ 732.976342][T32040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.976368][T32040] RIP: 0033:0x7fd8af28e159 [ 732.976387][T32040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.976429][T32040] RSP: 002b:00007fd8adce70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 732.976450][T32040] RAX: ffffffffffffffda RBX: 00007fd8af515fa8 RCX: 00007fd8af28e159 [ 732.976464][T32040] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8af515fa8 [ 732.976509][T32040] RBP: 00007fd8af515fa0 R08: 0000000000000000 R09: 0000000000000000 [ 732.976525][T32040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.976591][T32040] R13: 00007fd8af516038 R14: 00007ffdf16187d0 R15: 00007ffdf16188b8 [ 732.976634][T32040] [ 733.026358][T32042] syzkaller0: entered promiscuous mode [ 733.026378][T32042] syzkaller0: entered allmulticast mode [ 733.033592][T32042] tipc: Enabled bearer , priority 0 [ 733.037792][T32041] tipc: Resetting bearer [ 733.048781][T32041] tipc: Disabling bearer [ 733.550883][T32053] syzkaller0: entered promiscuous mode [ 733.551209][T32053] syzkaller0: entered allmulticast mode [ 733.591605][T32053] tipc: Enabled bearer , priority 0 [ 733.617746][T32053] tipc: Resetting bearer [ 733.641911][T32052] tipc: Resetting bearer [ 733.788692][T32052] tipc: Disabling bearer [ 734.105418][ T29] audit: type=1400 audit(1791118420.968:19867): avc: denied { connect } for pid=32078 comm="syz.7.5729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 734.173898][T32081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 734.522723][T32120] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 734.522723][T32120] program syz.5.5741 not setting count and/or reply_len properly [ 734.569702][T32113] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.569985][T32113] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.718243][T32113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.720444][T32113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.902195][ T1699] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.902310][ T1699] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.902347][ T1699] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.902379][ T1699] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.412286][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5751'. [ 736.205400][T32241] syzkaller0: entered promiscuous mode [ 736.205422][T32241] syzkaller0: entered allmulticast mode [ 736.209580][T32241] tipc: Started in network mode [ 736.209604][T32241] tipc: Node identity 4610d96591e1, cluster identity 4711 [ 736.209708][T32241] tipc: Enabled bearer , priority 0 [ 736.213898][T32240] tipc: Resetting bearer [ 736.226110][T32240] tipc: Disabling bearer [ 736.313605][T32244] FAULT_INJECTION: forcing a failure. [ 736.313605][T32244] name fail_futex, interval 1, probability 0, space 0, times 0 [ 736.313639][T32244] CPU: 0 UID: 60928 PID: 32244 Comm: syz.1.5755 Not tainted syzkaller #0 PREEMPT(lazy) [ 736.313713][T32244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.313728][T32244] Call Trace: [ 736.313736][T32244] [ 736.313746][T32244] __dump_stack+0x1d/0x30 [ 736.313772][T32244] dump_stack_lvl+0x95/0xd0 [ 736.313797][T32244] dump_stack+0x15/0x1b [ 736.313816][T32244] should_fail_ex+0x262/0x280 [ 736.313844][T32244] should_fail+0xb/0x20 [ 736.313871][T32244] get_futex_key+0x12d/0xb10 [ 736.313983][T32244] futex_wake+0x89/0x400 [ 736.314005][T32244] do_futex+0x3f8/0x460 [ 736.314039][T32244] __se_sys_futex+0x2f6/0x370 [ 736.314171][T32244] __x64_sys_futex+0x78/0x90 [ 736.314271][T32244] x64_sys_call+0x22e2/0x2550 [ 736.314301][T32244] do_syscall_64+0x112/0x360 [ 736.314331][T32244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.314358][T32244] RIP: 0033:0x7ff86f10e159 [ 736.314374][T32244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.314414][T32244] RSP: 002b:00007ff86db670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 736.314435][T32244] RAX: ffffffffffffffda RBX: 00007ff86f395fa8 RCX: 00007ff86f10e159 [ 736.314449][T32244] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff86f395fac [ 736.314462][T32244] RBP: 00007ff86f395fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 736.314475][T32244] R10: 0000000024c47dd7 R11: 0000000000000246 R12: 0000000000000000 [ 736.314490][T32244] R13: 00007ff86f396038 R14: 00007fffdbc80f10 R15: 00007fffdbc80ff8 [ 736.314586][T32244] [ 737.625179][T32284] batman_adv: batadv0: Adding interface: syzkaller0 [ 737.625245][T32284] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.632361][T32284] batman_adv: batadv0: Interface activated: syzkaller0 [ 737.894722][T32283] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 737.900002][T32283] batman_adv: batadv0: Removing interface: syzkaller0 [ 739.020362][T32308] ================================================================== [ 739.020399][T32308] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 739.020433][T32308] [ 739.020439][T32308] write to 0xffffea0004a5eb18 of 8 bytes by task 32301 on cpu 0: [ 739.020456][T32308] __filemap_remove_folio+0x201/0x2e0 [ 739.020475][T32308] filemap_remove_folio+0x6d/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 739.020492][T32308] truncate_inode_folio+0x42/0x50 [ 739.020522][T32308] shmem_undo_range+0x27f/0xb60 [ 739.020553][T32308] shmem_evict_inode+0x12d/0x580 [ 739.020571][T32308] evict+0x2a5/0x510 [ 739.020608][T32308] iput+0x430/0x5a0 [ 739.020627][T32308] dentry_unlink_inode+0x24a/0x260 [ 739.020656][T32308] dentry_kill+0x184/0x500 [ 739.020671][T32308] finish_dput+0x16/0x1d0 [ 739.020691][T32308] dput+0x48/0x50 [ 739.020715][T32308] __fput+0x43e/0x630 [ 739.020735][T32308] ____fput+0x1c/0x30 [ 739.020756][T32308] task_work_run+0x130/0x1a0 [ 739.020777][T32308] do_exit+0x4a4/0x1510 [ 739.020802][T32308] do_group_exit+0xfe/0x140 [ 739.020827][T32308] get_signal+0xe07/0xf10 [ 739.020856][T32308] arch_do_signal_or_restart+0x96/0x480 [ 739.020883][T32308] irqentry_exit+0x14d/0x610 [ 739.020900][T32308] asm_exc_page_fault+0x26/0x30 [ 739.020919][T32308] [ 739.020924][T32308] read to 0xffffea0004a5eb18 of 8 bytes by task 32308 on cpu 1: [ 739.020940][T32308] folio_mapping+0xa1/0xe0 [ 739.020963][T32308] evict_folios+0xd80/0x2830 [ 739.020984][T32308] try_to_shrink_lruvec+0x8fd/0xb30 [ 739.021009][T32308] shrink_lruvec+0x252/0x1d40 [ 739.021025][T32308] shrink_node+0x67c/0x2000 [ 739.021048][T32308] do_try_to_free_pages+0x408/0xca0 [ 739.021070][T32308] try_to_free_mem_cgroup_pages+0x201/0x420 [ 739.021089][T32308] mem_cgroup_resize_max+0x13d/0x290 [ 739.021117][T32308] mem_cgroup_write+0x132/0x1c0 [ 739.021140][T32308] cgroup_file_write+0x197/0x350 [ 739.021169][T32308] kernfs_fop_write_iter+0x1d2/0x2e0 [ 739.021194][T32308] vfs_write+0x57f/0x9a0 [ 739.021221][T32308] ksys_write+0xdc/0x1a0 [ 739.021247][T32308] __x64_sys_write+0x40/0x50 [ 739.021274][T32308] x64_sys_call+0x154e/0x2550 [ 739.021303][T32308] do_syscall_64+0x112/0x360 [ 739.021337][T32308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.021362][T32308] [ 739.021366][T32308] value changed: 0xffff88811b5d8a10 -> 0x0000000000000000 [ 739.021378][T32308] [ 739.021382][T32308] Reported by Kernel Concurrency Sanitizer on: [ 739.021392][T32308] CPU: 1 UID: 0 PID: 32308 Comm: syz.1.5777 Not tainted syzkaller #0 PREEMPT(lazy) [ 739.021422][T32308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.021438][T32308] ================================================================== [ 739.547297][ T1699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.598145][ T1699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.635473][ T1699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.716951][ T1699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.805714][ T1699] bridge_slave_1: left allmulticast mode [ 739.805741][ T1699] bridge_slave_1: left promiscuous mode [ 739.806017][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.808478][ T1699] bridge_slave_0: left allmulticast mode [ 739.808498][ T1699] bridge_slave_0: left promiscuous mode [ 739.808642][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.927955][ T29] audit: type=1400 audit(1791118426.788:19868): avc: denied { write } for pid=32319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.963945][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.965213][ T29] audit: type=1400 audit(1791118426.828:19869): avc: denied { write } for pid=32330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.966757][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.968882][ T1699] bond0 (unregistering): Released all slaves [ 739.980353][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 740.029591][ T1699] tipc: Left network mode [ 740.036820][ T1699] hsr_slave_0: left promiscuous mode [ 740.037229][ T1699] hsr_slave_1: left promiscuous mode [ 740.037701][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.037717][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.038050][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.038065][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.040592][ T1699] veth1_macvtap: left promiscuous mode [ 740.040617][ T1699] veth0_macvtap: left promiscuous mode [ 740.040660][ T1699] veth1_vlan: left promiscuous mode [ 740.040753][ T1699] veth0_vlan: left promiscuous mode [ 740.067864][ T29] audit: type=1400 audit(1791118426.928:19870): avc: denied { write } for pid=32333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.085189][ T29] audit: type=1400 audit(1791118426.938:19871): avc: denied { write } for pid=32344 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.170856][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 740.179737][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 740.201917][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 740.262682][ T29] audit: type=1400 audit(1791118427.128:19872): avc: denied { write } for pid=32347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.295814][ T29] audit: type=1400 audit(1791118427.138:19873): avc: denied { write } for pid=32358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.328767][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 740.388299][ T29] audit: type=1400 audit(1791118427.248:19874): avc: denied { write } for pid=32361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.420376][ T29] audit: type=1400 audit(1791118427.278:19875): avc: denied { write } for pid=32372 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.447858][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 740.525398][ T1699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.574662][ T1699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.614592][ T1699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.654713][ T1699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.772070][ T29] audit: type=1400 audit(1791118427.628:19876): avc: denied { write } for pid=32379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.785689][ T29] audit: type=1400 audit(1791118427.648:19877): avc: denied { write } for pid=32390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.818887][ T3024] 8021q: adding VLAN 0 to HW filter on device eth25 [ 740.932713][ T1699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.933884][ T3024] 8021q: adding VLAN 0 to HW filter on device eth26 [ 740.975244][ T1699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.015618][ T1699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.041366][ T3024] 8021q: adding VLAN 0 to HW filter on device eth27 [ 741.065008][ T1699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.136739][ T1699] bridge_slave_1: left allmulticast mode [ 741.136761][ T1699] bridge_slave_1: left promiscuous mode [ 741.136839][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.137652][ T1699] bridge_slave_0: left allmulticast mode [ 741.137671][ T1699] bridge_slave_0: left promiscuous mode [ 741.137793][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.157776][ T1699] bridge_slave_1: left allmulticast mode [ 741.157797][ T1699] bridge_slave_1: left promiscuous mode [ 741.157913][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.170163][ T1699] bridge_slave_0: left allmulticast mode [ 741.170184][ T1699] bridge_slave_0: left promiscuous mode [ 741.170272][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.185189][ T1699] bridge_slave_1: left allmulticast mode [ 741.185278][ T1699] bridge_slave_1: left promiscuous mode [ 741.185396][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.197195][ T1699] bridge_slave_0: left allmulticast mode [ 741.197272][ T1699] bridge_slave_0: left promiscuous mode [ 741.197396][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.281274][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.290967][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.291848][ T1699] bond0 (unregistering): Released all slaves [ 741.309451][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.310272][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.310615][ T1699] bond0 (unregistering): Released all slaves [ 741.336843][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.337743][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.338614][ T1699] bond0 (unregistering): Released all slaves [ 741.339992][ T3024] 8021q: adding VLAN 0 to HW filter on device eth28 [ 741.374825][ T1699] tipc: Left network mode [ 741.375987][ T1699] tipc: Left network mode [ 741.387870][ T1699] hsr_slave_0: left promiscuous mode [ 741.388109][ T1699] hsr_slave_1: left promiscuous mode [ 741.388380][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.388390][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.388640][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.388714][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.390201][ T1699] hsr_slave_0: left promiscuous mode [ 741.390448][ T1699] hsr_slave_1: left promiscuous mode [ 741.390821][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.391040][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.397615][ T1699] hsr_slave_0: left promiscuous mode [ 741.402936][ T1699] hsr_slave_1: left promiscuous mode [ 741.403341][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.403356][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.410703][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.410717][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.425168][ T1699] veth1_macvtap: left promiscuous mode [ 741.425195][ T1699] veth0_macvtap: left promiscuous mode [ 741.425255][ T1699] veth1_vlan: left promiscuous mode [ 741.425308][ T1699] veth0_vlan: left promiscuous mode [ 741.442858][ T1699] veth1_macvtap: left promiscuous mode [ 741.442940][ T1699] veth0_macvtap: left promiscuous mode [ 741.443052][ T1699] veth1_vlan: left promiscuous mode [ 741.443086][ T1699] veth0_vlan: left promiscuous mode [ 741.558549][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 741.560402][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 741.605638][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 741.607631][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 741.654503][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 741.656607][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 741.763376][ T3024] 8021q: adding VLAN 0 to HW filter on device eth29 [ 741.860776][ T3024] 8021q: adding VLAN 0 to HW filter on device eth30 [ 741.948183][ T3024] 8021q: adding VLAN 0 to HW filter on device eth31 [ 742.035705][ T3024] 8021q: adding VLAN 0 to HW filter on device eth32 [ 742.129251][ T3024] 8021q: adding VLAN 0 to HW filter on device eth33 [ 742.129919][ T1699] IPVS: stop unused estimator thread 0... [ 742.228517][ T3024] 8021q: adding VLAN 0 to HW filter on device eth34 [ 742.325528][ T3024] 8021q: adding VLAN 0 to HW filter on device eth35 [ 742.411471][ T3024] 8021q: adding VLAN 0 to HW filter on device eth36