last executing test programs: 3.176750616s ago: executing program 2 (id=1632): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.871398996s ago: executing program 3 (id=1635): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x608a80, 0xc4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x401f, 0x120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x2e, 0x7, 0x4, 0x6, 0x8001, 0x8002, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10010}, 0x4008054) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x6}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) socket$inet(0x2, 0x2, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001a240)=ANY=[@ANYBLOB="3800000003bc00edf47b020a8b39241450bcc3188b4cd3df250900023100000000080041007369770014003300626f6e643000000008009cc265000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") 2.484056149s ago: executing program 2 (id=1638): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$eJzs3M1vVFUbAPDnTqel5eOlLy+vCgGtgpH40dLyIQsTo9GEhUajLjCu6rQQpICBmgghWl1gjAtD4t64NPEvcGF0Y9SViS5xb0iIYQO6uubOvbcfwwxt6dApzO+XXOac+8E5z5x7Zs49904D6FpD2T9JxMaIuBwRmyOi2rjDUP5y49qF2t/XLtSSSNPX/0qyw+L6tQu14r+oL5kN+Yo0LfLrmpR78a2I8ampyTNFfmT65LsjZ8+df+r4yfFjk8cmT40dOrR/386+g2MH2hJnFtf17R+c3rHt8JuXXq4dufT2z99k9d1YbC/jaKeh/N1t6tF2F9Zhm+alk2oHK8KyZO3WWyyXI+3piYHZbZvjxY87WjngTqs2+34uzKTAPSwbqAPdqPyiz65/y2Wx8UIbxx4dd/W5PKIs7hvFkm+pRqXYp7fh+rad+iPiyMw/X2ZL3KF5CACA+b7Pxj9PNhv/VeK+efv9p7iHMhgR/42ILRHxv4jYGhH/j6jve39EPLDM8hvvkNw8/qlcWZBNe5ZZwq1l479nintbC8d/5egvBnuK3KZ6/L3J0eNTk3uL92RP9K7L8qMLDlnohxd++7xx3WfFNPvQvPFftmTlL4ywcqVxgm5ifHp85ZHnrn4Usb3aLP5kdqCfRMS2iNh+m2Ucf/zrHa22NYu/HAsvqg1XIulXEY/l7T8TDfGXkpb3J0efPjh2YKQ/pib3jpRnxYLD6n759eKrrcpfUfxtkLX/+qbnf1797Box6Y84e+78ifr92rO3Ucgfn9SSFpu2FvH3toz/5vO/tjuiL3mjnu4r9ype+5KXspeBcv3749PTZ8bmji3z9dfRPP49u+biH4+5/r8lvzyL5PfXZo/fGREPRsRDRds9HBGPRMSuW4T/0/O732m1rXX732JWvo2y+Cdatv93aZrGYJaaa//lJ3pO/Phtq/LTRc//rP3311N7ijVL+fxbagVX/AYCAADAXaBSfwY+qQzPpiuV4eH8Gf6tsb5SjYgnjp5+79RE/qz8YPRWypmuzfPmQ0eLueEyP9aQ31fMG3/RM1DPD9dOT010Onjochsa+n9a9P/Mn+291QKsRffUE33Asuj/0L30f+he+j90r2frT/vNdLoawGrra776w9WuB9ARyx//99+RegCrz/U/dK96/7/e6VoAneD7H7pSy9/GV1b0k/+7NVFdG9VomhhYG9UoE1FZdJ/KGqnq0hKvfJp3ibVSnzJRXfIfs7jNxLqmm5p+XBzeuLofTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2bwAAAP//3Irhpw==") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[], 0x7c}}, 0xc000) (fail_nth: 1) 2.14265211s ago: executing program 2 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 1.912612948s ago: executing program 4 (id=1644): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x164) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) (async) fsopen(&(0x7f0000000080)='iso9660\x00', 0x0) (async) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_emit_ethernet(0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6151be0000612f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a80090000b003e000086dd000986dd", @ANYBLOB="36ed"], 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 1.912153788s ago: executing program 4 (id=1645): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000280)=0x10) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001800110149000000000000000a000000000076f94ade105895ce85c671c0dc9aa23e7ded00060000f6000c001680080002060000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="99711365a2d21c668a0c038d193026e869c63361", 0x14}, {&(0x7f0000000500)="3440efcf74f612cac7404f535ce3b2efb34b9964b179fd582129c35617d1a68d6441fc97c3bd4ea5c5fbce1370d70cac4200c988715e3c08eef6c2c94af4a60c7d6f8703bcf2f6f38b622cc5a1dcc3973700067518d4fe4da562e263aa1f729ea3da402c3051b0f75a11c2e195b050b46a6f309014ada70cf935d6857b8c", 0x7e}, {&(0x7f0000000580)="49cbb1504eb516126d2f7047d36e45972c721e9dae082946aa0dd5bc2684e41a64aab9f26d3dae4fe3ed306a0b0a985e", 0x30}, {0x0}, {&(0x7f00000006c0)="a8a39e1b556d272d", 0x8}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000840)="831fea8ba560016022581d7cd0244bc0f313429b09be2500cbd4d17b7f7beeb6d13b79c883c363501a3a9612267f7e", 0x2f}], 0x8, &(0x7f0000000940)=[@ip_retopts={{0x78, 0x0, 0x7, {[@generic={0x94, 0xc, "95799b33f570dbcbf02c"}, @lsrr={0x83, 0xf, 0x87, [@remote, @remote, @remote]}, @cipso={0x86, 0x4b, 0x1, [{0x5, 0x9, "e4c4bfc033a432"}, {0x2, 0x4, "ce91"}, {0x7, 0x4, "b385"}, {0x1, 0x8, "c8b986f8bfc1"}, {0x0, 0x4, "c53a"}, {0x1, 0x6, "5148842f"}, {0x0, 0x10, "aff59b3eb10c9f7e16b26c3b6ba2"}, {0x2, 0xc, "e0b96f21f8bf3e43b87d"}, {0x0, 0x6, "ba703163"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@rr={0x7, 0x17, 0xd9, [@loopback, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1]}, @lsrr={0x83, 0x1f, 0xe8, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @local, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @end, @timestamp_addr={0x44, 0x54, 0xc, 0x1, 0x2, [{@loopback, 0x5}, {@private=0xa010101, 0x1}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x693}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0xc3}, {@private=0xa010102, 0x8000}, {@multicast1, 0x1000}, {@multicast1, 0x6}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x170}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu<=0||!') setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xe, 0xa60}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x40) 1.567192159s ago: executing program 0 (id=1650): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) io_uring_setup(0x23d6, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8002000000000001, 0xe0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x15, 0x12, 0x1cc, &(0x7f0000000440)}) 1.52953011s ago: executing program 1 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.52871052s ago: executing program 3 (id=1653): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c25000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0xff20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0xce8, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x82, 0x0, &(0x7f0000000040)) 1.436872293s ago: executing program 0 (id=1654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x20, 0x4855}, 0x24000052) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d1}, 0x1095) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000ce1daec05401c1663a00000000009748ff6a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x202101, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r4 = gettid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=r4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x7, [0x4e24, 0x4e20, 0x4e24, 0x4e21, 0x4e23, 0x4e20, 0x4e22, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e21, 0x4e21, 0x4e20, 0x4e20], [0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1cff2ce7318bb263ab2072eb7d4416bcbf6a3eb8b89df48f5827db650e0e"}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x7fffffff, 0x8, 'snmp\x00', {0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000840)=ANY=[@ANYBLOB="4604a3e8702dd94d00", @ANYRESDEC=0x0, @ANYBLOB="ff830500000700ffffff", @ANYBLOB="9bd6e64a89753654cc344dd1a72e91fdc800f36692fcb12cfa444bb35632c674f1b3eed786eb0d3b62c276d8fa93e4685d431ce3ae73d627725129299a66c4e7b2e5c19bbca2334ceb33f04bde7bd90b77945fee10c833c92da3a890ba94cbe8deebf46d06bb7270f625233cfa7c92"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r6, 0x200, 0x70bd29, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2dd6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000840) io_uring_setup(0x48f2, &(0x7f0000000700)={0x0, 0xc89f, 0x80, 0x7, 0x2000af9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x800) r8 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r9, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) chmod(&(0x7f0000000100)='./file0\x00', 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 1.434747443s ago: executing program 1 (id=1655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) fcntl$dupfd(r1, 0x0, r1) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300080000000903000038000000ce0000000e0000000b0020002ee2480728c421edbb0100050005"], 0x58) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x52000a11) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = mq_open(&(0x7f0000000040)='\xd8T\xd1\xb8-\xf7', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x9}) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r6, 0x10, 0x800, 0x8000) fallocate(r5, 0x0, 0x1, 0x8ffff) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x4e20, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) 1.415152244s ago: executing program 0 (id=1656): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4010) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.394986725s ago: executing program 3 (id=1657): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x15, 0x0, 0x1, 0xfffffffe}]}) pipe2$9p(&(0x7f0000001900), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 1.332886997s ago: executing program 3 (id=1658): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0xe86, 0x40401, 0x4, 0x5, 0x0, "0d693e0100003700"}) fcntl$setlease(r2, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.321436677s ago: executing program 0 (id=1659): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x20, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d2713060120"}]}], {0x14}}, 0x68}}, 0x0) write$selinux_load(r1, 0x0, 0x65) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J{', 0x2}], 0x1}, 0x2000c8c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0xfffffffffffffffa}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8a, &(0x7f0000000240)={[{@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}], [{@appraise_type}, {@uid_lt={'uid<', r4}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x1, 0x471, &(0x7f0000000500)="$eJzs3MtvG0UYAPDPmzhJXySU8mhpIVAQFY+kSR/0wKUIJA4gIcGhiFNI3KrUbVAdJFpVUDiUI6rEHXFE4i/gVC4IOCFxhTtCqlAvFE5Ga+/aSWo7ievGpf79JNczO+POfDu76/GOnQAG1mT6TyFie0T8FhHj9ezKCpP1p5s3Ls3/c+PSfCGq1bf+KtTq/X3j0nxeNX/dtnqmWu3Q7pV3I+bK5dL5LD+9dPaD6cqFiy+cPjt3qnSqdG72WOXwoX0jR2eP9CTOHWlf93y8uHf3a+9cfWP+xNX3fvo27e/2rHx5HL0yWd+7LT3d68b6bMeydGG4jx1hQ4YiIh2uYu38H4+h2NIoG49XP+tr54A7qlpNqqPtiy9XgXtYOlEHBlH+Rp9+/s0fmzT1uCtcPx6N+xg3s0e9ZDiSrE4x+4x0J0xGxInL/351YqyeH7T9DwBsvmvHI+L5VvO/JB5aVu++bG1oIiLuj4idEfFAROyKiAcjanUfjohHNtj+6hWSW+c/1fGuAlundP73Ura2tXL+l8/+YmIoy+2oxV8snDxdLh3M9smBKI6m+ZkObXz/yq9ftCtrzP+yR9p++tyskfw5vOoG3cLc0lysXqfr0vVPI/YMN+Mfa8RfaMx503Z2R8SeLts4/ew3e9uVrR1/Bz2YlFe/jnimPv6XY8X4N/duofX65LHDh2ZePDp7ZHosyqWD0/lRcauff7nyZrv2byv+Hrh+rRpbWx7/jfgnCmMRlQsXz9TWaysbb+PK75+3/UzTjD/Nrf/4Hym8XUuPZNs+mltaOj8TMVJ4/dbts83X5vm8fnr8H9jf+vzfGc098WhEpAfxvoh4LCIez/r+REQ8GRH7O8T/48tPvb92/KvHv8Nd+R5K419Ya/xj+fivmbgYESu2DJ354buNx59Lx/9wLXUg25Jf/zpZV0+7OpoBAADg/yepfQe+kEw10kkyNVX/Dv+u2JqUFytLz51c/PDcQv278hNRTJbf6crvh85k94bz/Oyq/KHsvvGXQ1tq+an5xfJCn2OHQbetzfmf+mOo370D7rgu1tFcGuAe4feaADB4vP/D4HL+w+Bqdf5/0od+AJtvjff/LZvVD2Dzmf/D4HL+w+By/sNAavvb+CQtSmuUzldG1/3bf4muEiM9+n+Knce0p4lI7opddw8litGyaHjdf8yiy8Roy6LGJWKsf1cnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2/dfAAAA///cB9iJ") getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, 0x0, 0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 1.197770871s ago: executing program 2 (id=1660): pipe2(&(0x7f0000001cc0), 0x800) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r4, &(0x7f0000000040)=@random={'security.', '.[[[-%N\'.(\x00'}, &(0x7f0000000080)=""/40, 0x28) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x88880, 0x81) inotify_init1(0x0) getdents(r6, &(0x7f00000010c0)=""/90, 0x5a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x3, 0x3, 0x6369, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0xe43f, 0xc0, 0x5, 0x1000}}, @TCA_NETEM_LOSS={0x84, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x2, 0x10, 0x7, 0x1c6b000}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x1, 0x2, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4d, 0x0, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x7, 0xb, 0xb717}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x2, 0x40, 0x5, 0x16d1}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfe, 0x314, 0x4dc, 0x43af}}]}]}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x240048c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1.148580063s ago: executing program 0 (id=1661): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000000000140601fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50180000907800008cce192a21ceaa3388f3695b7983"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x14, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000440)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b00)=0x24) r8 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r8, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff8e, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x6a, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000400)='./file2\x00', 0x2008800, &(0x7f0000000000), 0x3, 0x651, &(0x7f00000014c0)="$eJzs3c9vFG0dAPDvTLdLaV9tIUZ9jfFt8sa8JEqhBQwxJsKdEPxx00ulhSALJbRGS0goCV5MvHkg8eRB/Bc8KQlX/gEPJsYTMSFGOYghsmamu9thO9tuf+xuu/18kmmfZ2Z3nmcWvn1mnn2emQCOrOmImImIjyPiXhIxWdhWyX+m+Yuy173518Pr2ZJEvf6Dfybx8FGyVtxX0vg90Xjz/ybXV50c2Vzu8uqD2/O12uL9Rv7Myp17Z5ZXH5y+dWf+5uLNxbtz35q7eOH8hYuzZ/d0fCcK6StPfvrz9FdXf/T7375LZv/w16tJXMqOLpcdV/t7j+2p5Owzm476urfF9dnnenGP+z4o/jPZ/H+yIWlfwYGWxcBoRHwpJmOk8K85Gb/8XiuTDKhyQM/Uk2i2Udv5Y7XrlwKHQ7KroB7b/4oAfdY8D2he25ddB5couaIHDpvXl9c7pNZjfzQimvFfyfv8IsbyvoHxN8kH/TxJROytZ25dVsbLF1efZEt06IcDemPtcbOXu739T/LYnIqxPDf+Jv0g/tPCkq3//k4Kraat5HTbJvEP/bP2OCK+3Gj/q7GT+K9EIf5/ssvyxT8AAAAAAADsn+eXI+KbZeP/0tb4n2rJ+J+JiLi0D+Vv//1f2hwsYAYS7LPXlyO+Uzr+tzVGZ2qkkftcPh5gNLlxq7p4NiI+HxGnYvTYjVu1xdm2/aaF9Olfn3zaqfzi+L9sycp/+aI4vDj9R6VtIu7C/Mq8vwawd68fR3wlH//7SWPNh+N/svY/KWn/s/i+12UZJ7/+7FoxX6/XHzXT5fG/Pha4VLX7YwO2Vv9dxGel7f9GA5tsfX+OM1n73/hZWsbX3hUmGrXZcfwD+yZr/8c7x3/rzLt1v57lne0/a67PrVY6hX8X8V9+/l9NfjgShdOBX8yvrNyfjagmVzavn9tZnWFYNeOhGS9Z/J/6dOv+v9b5fyEOj0fEWpdlfvH9xN87bdP+w+Bk8b+w9fn/VNJo/yNv/1snAtslxhrvr809m/pzniq5L9y1rtr/83mbfqqxJu//AxrSTWu6jdSBVBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrk0Ij6KJJ1ppdN0ZiZiIiK+EONpbWl55Rs3ln52dyHblj//P20+6XdyPZ80n/8/VcjPteXPRcSJiPjNyPE8P3N9qbYw6IMHAAAAAAAAAAAAAAAAAACAA2IiIj769NWfvto2/z/zamTQtQN6rtL4vU28j/WjLkB/VXb9zvqxfa0I0He7j3/gsOs+/kd7Wg+g/zrH/9t39VwznyTFrf/ucb2A3nP+D0fXLuPf14MwBErif3oQ9QD6bcs+vaetlG//YSi5/gcAAAAAgKFy4pPnf0kiYu3bx/MlU21sM9gfhls66AoAA2MMLxxdlaVB1wAYFNf4wMa8/v/Wy7Z3Hv2f9KZCAAAAAAAAAAAAAMAmn31s/j8cVVvP/ze2H4bZFvP/y4Lf7QJgiHR+9Ie2H4ada3wgKU1uMP8fAAAAAAAAAAAAAA6AsQe352u1xfvLq3tMRMTf6knEXvfTIfHjkk3f7VFZPU2szR+Iauxr4n1v9jwaEX07ivcH5cPMEs1bcAywGgP+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT8PwAA///M+SNf") getpid() r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r10 = syz_usbip_server_init(0x7ffffffe) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r12 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r10, {r11, r12}}, './file0/file0\x00'}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r13 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00007f2000/0x1000)=nil, 0x9, 0x0, 0x0, 0x100000c03, 0x17, 0x0, 0x28, 0xe}) 978.035878ms ago: executing program 2 (id=1662): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x4580, 0x5, 0x9, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fstat(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3032abd70fafddb"], 0x14}, 0x1, 0x0, 0x0, 0x8851}, 0x4000) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) syz_pidfd_open(0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000280)) 977.305018ms ago: executing program 3 (id=1663): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYRES64=r8], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4010) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r9 = gettid() r10 = getpid() rt_tgsigqueueinfo(r10, r9, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0xc64]}, 0x0, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 458.719385ms ago: executing program 0 (id=1664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000104010400000000000000000100000705000100010000000a00020000000007"], 0x28}}, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4006, 0x0, 0x800000, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB='c\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000004300000000f8030000da01f36a0000070000e200"], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delsa={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {@in6=@mcast1, 0x4d5, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x12}]}]}, 0xc8}}, 0x20000000) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_procs(r9, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r10, {0xfffd, 0x7}, {0x3, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 369.201348ms ago: executing program 4 (id=1665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$cgroup_int(r1, &(0x7f0000000000)='memory.oom.group\x00', 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 325.06436ms ago: executing program 1 (id=1666): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001ffc800000000000000020080000003c809001b0000060015000400000014001680100008800c000280"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x9c00, 0x0, 0x3) socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x9, 0x12) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") 321.64613ms ago: executing program 4 (id=1667): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c25000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0xff20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0xce8, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x82, 0x0, &(0x7f0000000040)) 200.828143ms ago: executing program 2 (id=1668): socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0xb, 0x6, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x15548}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r0 = syz_open_dev$loop(0x0, 0x10, 0x8200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket(0x28, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'gre0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf97e17e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad08c60ebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) unshare(0x6020400) pidfd_send_signal(r4, 0x2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x3, 0x42f, &(0x7f0000000100)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x200, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000101010200000000000000000a0000000c001980080001002d0a00003c0001802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) 200.613463ms ago: executing program 1 (id=1669): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4010) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 200.347723ms ago: executing program 1 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000000000000008100464000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRESHEX=r0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000007c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0x2, 0x44e, &(0x7f00000002c0)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01002af5f1b284250e65fa8cbd7000fbdbdf0900000000040006805f77c2e13b08b8257ef17f83f75054c6e8b79c717e0e8c0164d8099616d3984603948f467b5e737c92bee5"], 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000ffdbdf2503000000480001801400040020010000000000000000000000000000050002000e000000060005004e200000060005004e2100000800060005000000060005004e21001c060005004e210000"], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x800) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000940)=ANY=[@ANYRES64=r8, @ANYRESOCT=r5, @ANYRESHEX=r7], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e465155455545"], 0xd0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {}, {0xfff1, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 164.190495ms ago: executing program 1 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 163.468235ms ago: executing program 4 (id=1672): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0xfffffffd, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @link_local}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r2) request_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/nfsfs\x00') getdents(r4, &(0x7f0000000000)=""/34, 0x22) getdents(r4, 0xffffffffffffffff, 0x5a) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)) syz_emit_ethernet(0xdf, &(0x7f0000000100)={@random="e33fa2074eeb", @link_local, @void, {@generic={0x892f, "413a0dc1353b81d104fb73126c63a800f5a1aa0a9aa1653cc13ca9a230ecd9babdaec2f36e8cd78fd6818dec42bce95ed320e13ade3a2260e0d72991a0f495438c07bbadd170200b50104988de3daa82d84c47ae72884d711797baf3fe6daa5dc57b052e6d51d49263bad7b7c9befa4471dd9dbaa423591e2c771a34b920874e048e585114bf6e24efe1e45af3af03a7fc55ed362d2af98b2ab6813860ed9456e7e4e15a904f223871e575f9b37642687526313eb613c0a55a1dccda3bd30a65a44114d174dfdbcf53c3d865a15d14f8f1"}}}, &(0x7f0000000200)={0x1, 0x2, [0xe87, 0xd39, 0x98, 0xe64]}) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x0, 0xff, 0x0, 0xfc, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x1000b0, 0x0, 0x6, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000340)=0x3, 0x4) close(r5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x8}, 0x18) remap_file_pages(&(0x7f000053f000/0x1000)=nil, 0x3f, 0x0, 0x20, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001000)) 16.84155ms ago: executing program 3 (id=1673): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES16=r1], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES16=r1], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5402030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@deltaction={0xa0, 0x31, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xa0}}, 0x800) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r2, 0x1, 0xf6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) (async) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004018}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00a43d001a00"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket(0x2c, 0x3, 0x0) 0s ago: executing program 4 (id=1674): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000100)='./file0/../file0\x00', 0x122) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001eefdffffff0200000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) kernel console output (not intermixed with test programs): [ 145.999689][ T28] audit: type=1326 audit(1780364866.247:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6025 comm="syz.1.819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 146.099516][ T28] audit: type=1326 audit(1780364866.247:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6025 comm="syz.1.819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 146.109626][ T6046] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 146.165702][ T28] audit: type=1326 audit(1780364866.247:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6025 comm="syz.1.819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 146.481940][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 146.533705][ T6053] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 146.692940][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 146.869960][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.057532][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.171564][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.184189][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.254054][ T6079] tmpfs: Bad value for 'mpol' [ 147.315903][ T6085] netlink: 124 bytes leftover after parsing attributes in process `syz.4.835'. [ 147.546815][ T6089] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.753302][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 147.773301][ T6093] --map-set only usable from mangle table [ 147.789711][ T6094] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.871161][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.838'. [ 147.974109][ T3385] IPVS: starting estimator thread 0... [ 148.069640][ T6102] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.840'. [ 148.081958][ T6100] IPVS: using max 1776 ests per chain, 88800 per kthread [ 148.099594][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 148.951658][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8030 sclass=netlink_route_socket pid=6111 comm=syz.1.843 [ 148.978256][ T6113] netlink: 'syz.4.844': attribute type 21 has an invalid length. [ 149.021550][ T6113] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.040304][ T6113] IPv6: Can't replace route, no match found [ 149.082876][ T6118] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 149.157532][ T6118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.717408][ T6128] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 149.828594][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.863144][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 149.885499][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.975784][ T6134] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.045528][ T6136] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.245675][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 151.853257][ T6162] tmpfs: Bad value for 'mpol' [ 151.875340][ T6163] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.876146][ T6156] FAULT_INJECTION: forcing a failure. [ 151.876146][ T6156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.918769][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 151.918786][ T28] audit: type=1326 audit(1780364872.897:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 151.943345][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.0.859 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.943510][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.943551][ T6156] Call Trace: [ 151.943625][ T6156] [ 151.943653][ T6156] __dump_stack+0x1d/0x30 [ 151.943758][ T6156] dump_stack_lvl+0x95/0xd0 [ 151.943835][ T6156] dump_stack+0x15/0x1b [ 151.943918][ T6156] should_fail_ex+0x263/0x280 [ 151.943981][ T6156] should_fail+0xb/0x20 [ 151.944034][ T6156] should_fail_usercopy+0x1a/0x20 [ 151.944109][ T6156] _copy_from_user+0x1c/0xb0 [ 151.944186][ T6156] ___sys_sendmsg+0xc1/0x1e0 [ 151.944410][ T6156] __x64_sys_sendmsg+0xd4/0x160 [ 151.944502][ T6156] x64_sys_call+0x194c/0x3020 [ 151.944582][ T6156] do_syscall_64+0x12c/0x3b0 [ 151.944734][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.944806][ T6156] RIP: 0033:0x7fa42477ce59 [ 151.944860][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.944907][ T6156] RSP: 002b:00007fa4231d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.944981][ T6156] RAX: ffffffffffffffda RBX: 00007fa4249f5fa0 RCX: 00007fa42477ce59 [ 151.945041][ T6156] RDX: 0000000020040854 RSI: 0000200000000180 RDI: 0000000000000006 [ 151.945099][ T6156] RBP: 00007fa4231d7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.945193][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.945227][ T6156] R13: 00007fa4249f6038 R14: 00007fa4249f5fa0 R15: 00007fff45c5ebb8 [ 151.945294][ T6156] [ 152.115345][ T28] audit: type=1326 audit(1780364872.957:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.142770][ T28] audit: type=1326 audit(1780364872.957:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.173921][ T28] audit: type=1326 audit(1780364873.007:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.180777][ T6158] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.200234][ T28] audit: type=1326 audit(1780364873.007:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.200277][ T28] audit: type=1326 audit(1780364873.007:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.200339][ T28] audit: type=1326 audit(1780364873.007:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.200369][ T28] audit: type=1326 audit(1780364873.007:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.200404][ T28] audit: type=1326 audit(1780364873.007:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.200520][ T28] audit: type=1326 audit(1780364873.007:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 152.673598][ T6163] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.773137][ T6158] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.115108][ T6163] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.128675][ T6158] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.141657][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 153.659557][ T6158] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.705951][ T6163] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.754170][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.775961][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.818926][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.862793][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.886084][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.916915][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.949098][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 153.967913][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.976983][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.014509][ T6195] FAULT_INJECTION: forcing a failure. [ 154.014509][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 154.028502][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.1.871 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.028572][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.028589][ T6195] Call Trace: [ 154.028598][ T6195] [ 154.028606][ T6195] __dump_stack+0x1d/0x30 [ 154.028631][ T6195] dump_stack_lvl+0x95/0xd0 [ 154.028718][ T6195] dump_stack+0x15/0x1b [ 154.028742][ T6195] should_fail_ex+0x263/0x280 [ 154.028848][ T6195] should_failslab+0x8c/0xb0 [ 154.028881][ T6195] kmem_cache_alloc_noprof+0x66/0x3f0 [ 154.028925][ T6195] ? skb_clone+0x151/0x1f0 [ 154.028964][ T6195] skb_clone+0x151/0x1f0 [ 154.028992][ T6195] __netlink_deliver_tap+0x2c9/0x500 [ 154.029036][ T6195] netlink_unicast+0x653/0x680 [ 154.029073][ T6195] netlink_sendmsg+0x5c8/0x6f0 [ 154.029146][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.029240][ T6195] ____sys_sendmsg+0x563/0x5b0 [ 154.029277][ T6195] ___sys_sendmsg+0x195/0x1e0 [ 154.029352][ T6195] __x64_sys_sendmsg+0xd4/0x160 [ 154.029389][ T6195] x64_sys_call+0x194c/0x3020 [ 154.029471][ T6195] do_syscall_64+0x12c/0x3b0 [ 154.029510][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.029531][ T6195] RIP: 0033:0x7f9d3431ce59 [ 154.029548][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.029646][ T6195] RSP: 002b:00007f9d32d6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.029672][ T6195] RAX: ffffffffffffffda RBX: 00007f9d34595fa0 RCX: 00007f9d3431ce59 [ 154.029686][ T6195] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 000000000000000a [ 154.029701][ T6195] RBP: 00007f9d32d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.029717][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.029732][ T6195] R13: 00007f9d34596038 R14: 00007f9d34595fa0 R15: 00007fffed4ea1f8 [ 154.029767][ T6195] [ 154.253925][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 154.263456][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.278218][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.763771][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 154.956588][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 155.613146][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.625358][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.633638][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.643168][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.651022][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.658559][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x6 [ 155.666608][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x2 [ 155.675643][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.699216][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.706830][ T3415] hid-generic 8FED:0800:0002.0001: unknown main item tag 0x0 [ 155.716879][ T3415] hid-generic 8FED:0800:0002.0001: hidraw0: HID v0.07 Device [syz0] on syz1 [ 155.770501][ T6225] fido_id[6225]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.041329][ T6233] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.255823][ T6233] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.372894][ T6233] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.405069][ T6248] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.577639][ T6233] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.724402][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.732677][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.743093][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.751673][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.944401][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 156.944419][ T28] audit: type=1400 audit(1780364877.927:1077): avc: denied { create } for pid=6249 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.000045][ T28] audit: type=1400 audit(1780364877.927:1078): avc: denied { read } for pid=6249 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.100272][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 157.445912][ T6274] FAULT_INJECTION: forcing a failure. [ 157.445912][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.461181][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.0.896 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.461214][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.461230][ T6274] Call Trace: [ 157.461239][ T6274] [ 157.461249][ T6274] __dump_stack+0x1d/0x30 [ 157.461287][ T6274] dump_stack_lvl+0x95/0xd0 [ 157.461413][ T6274] dump_stack+0x15/0x1b [ 157.461436][ T6274] should_fail_ex+0x263/0x280 [ 157.461462][ T6274] should_fail+0xb/0x20 [ 157.461478][ T6274] should_fail_usercopy+0x1a/0x20 [ 157.461690][ T6274] _copy_from_iter+0xcf/0xea0 [ 157.461740][ T6274] ? __account_obj_stock+0x3ba/0x5f0 [ 157.461768][ T6274] ? skb_set_owner_w+0x19b/0x200 [ 157.461879][ T6274] ? sock_alloc_send_pskb+0x469/0x500 [ 157.462000][ T6274] skb_copy_datagram_from_iter+0xb2/0x480 [ 157.462040][ T6274] ? __rcu_read_unlock+0x4e/0x70 [ 157.462074][ T6274] ? skb_put+0xa9/0xf0 [ 157.462102][ T6274] packet_sendmsg+0x2564/0x3240 [ 157.462145][ T6274] ? strlen+0x19/0x40 [ 157.462225][ T6274] ? __rcu_read_unlock+0x4e/0x70 [ 157.462254][ T6274] ? avc_has_perm_noaudit+0xab/0x130 [ 157.462301][ T6274] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 157.462376][ T6274] ? __pfx_packet_sendmsg+0x10/0x10 [ 157.462422][ T6274] ____sys_sendmsg+0x563/0x5b0 [ 157.462476][ T6274] ___sys_sendmsg+0x195/0x1e0 [ 157.462507][ T6274] ? path_openat+0x1b01/0x2050 [ 157.462624][ T6274] __sys_sendmmsg+0x185/0x320 [ 157.462706][ T6274] __x64_sys_sendmmsg+0x57/0x70 [ 157.462751][ T6274] x64_sys_call+0x27aa/0x3020 [ 157.462784][ T6274] do_syscall_64+0x12c/0x3b0 [ 157.462820][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.462912][ T6274] RIP: 0033:0x7fa42477ce59 [ 157.462935][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.462957][ T6274] RSP: 002b:00007fa4231d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.462983][ T6274] RAX: ffffffffffffffda RBX: 00007fa4249f5fa0 RCX: 00007fa42477ce59 [ 157.462999][ T6274] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000009 [ 157.463014][ T6274] RBP: 00007fa4231d7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.463051][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.463076][ T6274] R13: 00007fa4249f6038 R14: 00007fa4249f5fa0 R15: 00007fff45c5ebb8 [ 157.463102][ T6274] [ 157.725989][ T6276] tmpfs: Bad value for 'mpol' [ 157.758420][ T28] audit: type=1326 audit(1780364878.737:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 157.805609][ T28] audit: type=1326 audit(1780364878.737:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 157.834409][ T28] audit: type=1326 audit(1780364878.737:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 157.875655][ T6282] netlink: 208 bytes leftover after parsing attributes in process `syz.2.900'. [ 158.432714][ T28] audit: type=1326 audit(1780364878.737:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 158.464347][ T28] audit: type=1326 audit(1780364878.737:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 158.502025][ T28] audit: type=1326 audit(1780364878.737:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 158.532893][ T28] audit: type=1326 audit(1780364878.737:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 158.560749][ T28] audit: type=1326 audit(1780364878.737:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.0.897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 158.597217][ T6295] FAULT_INJECTION: forcing a failure. [ 158.597217][ T6295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.614579][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.2.904 Not tainted syzkaller #0 PREEMPT(lazy) [ 158.614605][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.614695][ T6295] Call Trace: [ 158.614703][ T6295] [ 158.614751][ T6295] __dump_stack+0x1d/0x30 [ 158.614782][ T6295] dump_stack_lvl+0x95/0xd0 [ 158.614808][ T6295] dump_stack+0x15/0x1b [ 158.614833][ T6295] should_fail_ex+0x263/0x280 [ 158.614917][ T6295] should_fail+0xb/0x20 [ 158.614935][ T6295] should_fail_usercopy+0x1a/0x20 [ 158.614963][ T6295] _copy_from_user+0x1c/0xb0 [ 158.615107][ T6295] kstrtouint_from_user+0x69/0xf0 [ 158.615229][ T6295] ? 0xffffffff81000000 [ 158.615245][ T6295] ? selinux_file_permission+0x1e1/0x320 [ 158.615300][ T6295] proc_fail_nth_write+0x50/0x160 [ 158.615334][ T6295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.615372][ T6295] vfs_write+0x269/0x9f0 [ 158.615526][ T6295] ? __rcu_read_unlock+0x4e/0x70 [ 158.615547][ T6295] ? __fget_files+0x184/0x1c0 [ 158.615569][ T6295] ? mutex_lock+0x57/0x90 [ 158.615601][ T6295] ksys_write+0xdc/0x1a0 [ 158.615759][ T6295] __x64_sys_write+0x40/0x50 [ 158.615791][ T6295] x64_sys_call+0x27e1/0x3020 [ 158.615865][ T6295] do_syscall_64+0x12c/0x3b0 [ 158.615907][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.615933][ T6295] RIP: 0033:0x7fa813acd68e [ 158.615948][ T6295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.616109][ T6295] RSP: 002b:00007fa81255efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.616132][ T6295] RAX: ffffffffffffffda RBX: 00007fa81255f6c0 RCX: 00007fa813acd68e [ 158.616149][ T6295] RDX: 0000000000000001 RSI: 00007fa81255f0a0 RDI: 0000000000000004 [ 158.616162][ T6295] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.616174][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.616215][ T6295] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 158.616241][ T6295] [ 159.240518][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 159.262803][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.281678][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.349801][ T6344] tmpfs: Bad value for 'mpol' [ 160.520022][ T6343] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.666684][ T6343] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.827079][ T6351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.924'. [ 160.827952][ T6343] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.156445][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 161.187947][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.255485][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.333589][ T6343] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.407842][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.424807][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.433826][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.455715][ T2321] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.484210][ T6364] netlink: 124 bytes leftover after parsing attributes in process `syz.4.929'. [ 161.686431][ T6373] FAULT_INJECTION: forcing a failure. [ 161.686431][ T6373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.701501][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.0.928 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.701532][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.701546][ T6373] Call Trace: [ 161.701554][ T6373] [ 161.701564][ T6373] __dump_stack+0x1d/0x30 [ 161.701593][ T6373] dump_stack_lvl+0x95/0xd0 [ 161.701676][ T6373] dump_stack+0x15/0x1b [ 161.701697][ T6373] should_fail_ex+0x263/0x280 [ 161.701720][ T6373] should_fail+0xb/0x20 [ 161.701786][ T6373] should_fail_usercopy+0x1a/0x20 [ 161.701809][ T6373] _copy_from_user+0x1c/0xb0 [ 161.701840][ T6373] kstrtouint_from_user+0x69/0xf0 [ 161.701885][ T6373] ? 0xffffffff81000000 [ 161.701928][ T6373] ? selinux_file_permission+0x1e1/0x320 [ 161.701962][ T6373] proc_fail_nth_write+0x50/0x160 [ 161.702005][ T6373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.702116][ T6373] vfs_write+0x269/0x9f0 [ 161.702154][ T6373] ? __rcu_read_unlock+0x4e/0x70 [ 161.702253][ T6373] ? __fget_files+0x184/0x1c0 [ 161.702273][ T6373] ? mutex_lock+0x57/0x90 [ 161.702297][ T6373] ksys_write+0xdc/0x1a0 [ 161.702333][ T6373] __x64_sys_write+0x40/0x50 [ 161.702417][ T6373] x64_sys_call+0x27e1/0x3020 [ 161.702442][ T6373] do_syscall_64+0x12c/0x3b0 [ 161.702488][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.702516][ T6373] RIP: 0033:0x7fa42473d68e [ 161.702572][ T6373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.702593][ T6373] RSP: 002b:00007fa4231d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.702662][ T6373] RAX: ffffffffffffffda RBX: 00007fa4231d76c0 RCX: 00007fa42473d68e [ 161.702743][ T6373] RDX: 0000000000000001 RSI: 00007fa4231d70a0 RDI: 0000000000000004 [ 161.702756][ T6373] RBP: 00007fa4231d7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.702768][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.702780][ T6373] R13: 00007fa4249f6038 R14: 00007fa4249f5fa0 R15: 00007fff45c5ebb8 [ 161.702843][ T6373] [ 161.998653][ T6364] syz.4.929 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 162.014633][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.4.929 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.014675][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.014693][ T6364] Call Trace: [ 162.014700][ T6364] [ 162.014707][ T6364] __dump_stack+0x1d/0x30 [ 162.014733][ T6364] dump_stack_lvl+0x95/0xd0 [ 162.014762][ T6364] dump_stack+0x15/0x1b [ 162.014785][ T6364] dump_header+0x80/0x240 [ 162.014812][ T6364] oom_kill_process+0x295/0x350 [ 162.014855][ T6364] out_of_memory+0x97d/0xb80 [ 162.014898][ T6364] try_charge_memcg+0x62f/0xa10 [ 162.014960][ T6364] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 162.015009][ T6364] __alloc_frozen_pages_noprof+0x18a/0x350 [ 162.015044][ T6364] alloc_pages_mpol+0xb3/0x260 [ 162.015073][ T6364] alloc_pages_noprof+0x8f/0x140 [ 162.015098][ T6364] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 162.015217][ T6364] __kvmalloc_node_noprof+0x3d4/0x640 [ 162.015248][ T6364] ? futex_hash_allocate+0x190/0x9a0 [ 162.015362][ T6364] ? futex_hash_allocate+0x190/0x9a0 [ 162.015406][ T6364] futex_hash_allocate+0x190/0x9a0 [ 162.015445][ T6364] ? __schedule+0x951/0xd40 [ 162.015465][ T6364] ? cap_task_prctl+0x13f/0x6b0 [ 162.015536][ T6364] futex_hash_prctl+0xd8/0xf0 [ 162.015600][ T6364] __se_sys_prctl+0x4f4/0x1400 [ 162.015689][ T6364] __x64_sys_prctl+0x67/0x80 [ 162.015752][ T6364] x64_sys_call+0x2533/0x3020 [ 162.015781][ T6364] do_syscall_64+0x12c/0x3b0 [ 162.015831][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.015907][ T6364] RIP: 0033:0x7f585605ce59 [ 162.015923][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.016010][ T6364] RSP: 002b:00007f5854aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 162.016038][ T6364] RAX: ffffffffffffffda RBX: 00007f58562d5fa0 RCX: 00007f585605ce59 [ 162.016058][ T6364] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 162.016076][ T6364] RBP: 00007f58560f2d6f R08: 0000000000000000 R09: 0000000000000000 [ 162.016091][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.016250][ T6364] R13: 00007f58562d6038 R14: 00007f58562d5fa0 R15: 00007fffffa4c358 [ 162.016279][ T6364] [ 162.016486][ T6364] memory: usage 307200kB, limit 307200kB, failcnt 2119 [ 162.578016][ T6364] memory+swap: usage 268708kB, limit 9007199254740988kB, failcnt 0 [ 162.587453][ T6364] kmem: usage 261976kB, limit 9007199254740988kB, failcnt 0 [ 162.617425][ T6364] Memory cgroup stats for /syz4: [ 162.623167][ T6364] cache 4096 [ 162.685805][ T6364] rss 0 [ 162.711504][ T6364] shmem 0 [ 162.724540][ T6382] FAULT_INJECTION: forcing a failure. [ 162.724540][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 162.741724][ T6364] mapped_file 0 [ 162.756818][ T6364] dirty 0 [ 162.765776][ T6364] writeback 0 [ 162.771367][ T6364] workingset_refault_anon 74 [ 162.777152][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.777183][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.777196][ T6382] Call Trace: [ 162.777204][ T6382] [ 162.777213][ T6382] __dump_stack+0x1d/0x30 [ 162.777238][ T6382] dump_stack_lvl+0x95/0xd0 [ 162.777263][ T6382] dump_stack+0x15/0x1b [ 162.777285][ T6382] should_fail_ex+0x263/0x280 [ 162.777309][ T6382] should_failslab+0x8c/0xb0 [ 162.777340][ T6382] kmem_cache_alloc_noprof+0x66/0x3f0 [ 162.777382][ T6382] ? mas_alloc_nodes+0x1a2/0x210 [ 162.777422][ T6382] mas_alloc_nodes+0x1a2/0x210 [ 162.777459][ T6382] mas_preallocate+0x2ca/0x510 [ 162.777493][ T6382] __split_vma+0x240/0x640 [ 162.777527][ T6382] vms_gather_munmap_vmas+0x2bc/0x850 [ 162.777568][ T6382] mmap_region+0x7cd/0x20d0 [ 162.777607][ T6382] ? lapic_next_event+0x11/0x20 [ 162.777632][ T6382] ? ktime_get+0x212/0x240 [ 162.777667][ T6382] ? ktime_get+0x212/0x240 [ 162.777698][ T6382] ? lapic_next_event+0x11/0x20 [ 162.777719][ T6382] ? ktime_get+0x212/0x240 [ 162.777779][ T6382] do_mmap+0x9b2/0xbd0 [ 162.777811][ T6382] __se_sys_remap_file_pages+0x54d/0x5e0 [ 162.777847][ T6382] ? tick_program_event+0x79/0xc0 [ 162.777875][ T6382] ? _raw_spin_unlock+0x9/0x30 [ 162.777893][ T6382] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 162.777919][ T6382] __x64_sys_remap_file_pages+0x67/0x80 [ 162.777947][ T6382] x64_sys_call+0x2e53/0x3020 [ 162.777978][ T6382] do_syscall_64+0x12c/0x3b0 [ 162.778015][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.778037][ T6382] RIP: 0033:0x7fa813b0ce59 [ 162.778053][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.778076][ T6382] RSP: 002b:00007fa81255f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 162.778109][ T6382] RAX: ffffffffffffffda RBX: 00007fa813d85fa0 RCX: 00007fa813b0ce59 [ 162.778127][ T6382] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 000020000051c000 [ 162.778144][ T6382] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.778161][ T6382] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 162.778177][ T6382] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 162.778201][ T6382] [ 162.821984][ T6389] tmpfs: Bad value for 'mpol' [ 162.827201][ T6364] workingset_refault_file 874 [ 162.924893][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 162.924913][ T28] audit: type=1326 audit(1780364883.827:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 162.924952][ T28] audit: type=1326 audit(1780364883.827:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.008238][ T6364] swap 1318912 [ 163.016154][ T28] audit: type=1326 audit(1780364883.827:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.024549][ T6364] swapcached 1654784 [ 163.024566][ T6364] pgpgin 141426 [ 163.024575][ T6364] pgpgout 141425 [ 163.024582][ T6364] pgfault 101585 [ 163.024590][ T6364] pgmajfault 51 [ 163.024598][ T6364] inactive_anon 0 [ 163.024606][ T6364] active_anon 0 [ 163.024626][ T6364] inactive_file 0 [ 163.028197][ T28] audit: type=1326 audit(1780364883.827:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.032474][ T6364] active_file 4096 [ 163.032486][ T6364] unevictable 0 [ 163.032497][ T6364] hierarchical_memory_limit 314572800 [ 163.037270][ T28] audit: type=1326 audit(1780364883.827:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.043886][ T6364] hierarchical_memsw_limit 9223372036854771712 [ 163.043903][ T6364] total_cache 4096 [ 163.043911][ T6364] total_rss 0 [ 163.043920][ T6364] total_shmem 0 [ 163.043946][ T6364] total_mapped_file 0 [ 163.071357][ T28] audit: type=1326 audit(1780364883.827:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.071401][ T28] audit: type=1326 audit(1780364883.827:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.071456][ T28] audit: type=1326 audit(1780364883.827:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.071564][ T28] audit: type=1326 audit(1780364883.827:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.071600][ T28] audit: type=1326 audit(1780364883.827:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.1.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 163.281628][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.942'. [ 163.351266][ T6364] total_dirty 0 [ 163.423271][ T6364] total_writeback 0 [ 163.430231][ T6364] total_workingset_refault_anon 74 [ 163.437190][ T6364] total_workingset_refault_file 874 [ 163.445720][ T6364] total_swap 1318912 [ 163.450894][ T6364] total_swapcached 1654784 [ 163.455934][ T6364] total_pgpgin 141426 [ 163.498254][ T6364] total_pgpgout 141425 [ 163.503587][ T6364] total_pgfault 101585 [ 163.509373][ T6364] total_pgmajfault 51 [ 163.514380][ T6364] total_inactive_anon 0 [ 163.521636][ T6364] total_active_anon 0 [ 163.551070][ T6364] total_inactive_file 0 [ 163.555419][ T6364] total_active_file 4096 [ 163.559783][ T6364] total_unevictable 0 [ 163.563976][ T6364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.103,pid=3834,uid=0 [ 163.578636][ T6364] Memory cgroup out of memory: Killed process 3834 (syz.4.103) total-vm:96216kB, anon-rss:1228kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 163.635647][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 163.683076][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.766487][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.985442][ T6414] loop7: detected capacity change from 0 to 7 [ 163.992499][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.010471][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.020292][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.029447][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.037317][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.046499][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 164.054634][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.064064][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 164.072014][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.081197][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 164.089453][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.098856][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 164.106727][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.115982][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 164.123975][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.133166][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 164.143158][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.152764][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.161272][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 164.169396][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 164.272125][ T6424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6424 comm=syz.3.949 [ 164.491683][ T6436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.954'. [ 164.611562][ T6441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.955'. [ 164.620585][ T6442] netlink: 1348 bytes leftover after parsing attributes in process `syz.4.956'. [ 164.637916][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 164.974550][ T6465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'. [ 166.190377][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.210680][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.234571][ T6507] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.245715][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 166.278087][ T6511] 9p: Bad value for 'rfdno' [ 166.375874][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 166.389552][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 166.654206][ T6516] netlink: 'syz.1.985': attribute type 5 has an invalid length. [ 166.663503][ T6516] netlink: 'syz.1.985': attribute type 11 has an invalid length. [ 166.815444][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 166.835353][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.846027][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.396459][ T6565] tmpfs: Bad value for 'mpol' [ 167.653663][ T6568] netlink: 316 bytes leftover after parsing attributes in process `syz.2.999'. [ 168.149282][ T6580] FAULT_INJECTION: forcing a failure. [ 168.149282][ T6580] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.194646][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.0.1004 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.194684][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.194701][ T6580] Call Trace: [ 168.194710][ T6580] [ 168.194721][ T6580] __dump_stack+0x1d/0x30 [ 168.194746][ T6580] dump_stack_lvl+0x95/0xd0 [ 168.194803][ T6580] dump_stack+0x15/0x1b [ 168.194827][ T6580] should_fail_ex+0x263/0x280 [ 168.194853][ T6580] should_fail_alloc_page+0xf2/0x100 [ 168.194888][ T6580] __alloc_frozen_pages_noprof+0x108/0x350 [ 168.194997][ T6580] alloc_pages_mpol+0xb3/0x260 [ 168.195028][ T6580] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 168.195063][ T6580] handle_mm_fault+0x1040/0x2e70 [ 168.195099][ T6580] do_user_addr_fault+0x3fd/0x1050 [ 168.195153][ T6580] exc_page_fault+0x62/0xa0 [ 168.195179][ T6580] asm_exc_page_fault+0x26/0x30 [ 168.195262][ T6580] RIP: 0010:__put_user_4+0xd/0x20 [ 168.195296][ T6580] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 168.195319][ T6580] RSP: 0018:ffffc90001073e48 EFLAGS: 00050202 [ 168.195338][ T6580] RAX: 0000000000000200 RBX: 0000000000000000 RCX: 0000200000001040 [ 168.195419][ T6580] RDX: 000000000000068f RSI: 0000000000000000 RDI: ffff888100489646 [ 168.195435][ T6580] RBP: 0000000080081270 R08: ffff888104478000 R09: 0000000000000000 [ 168.195448][ T6580] R10: 00000000c0c0128e R11: 0000000000000000 R12: ffff88812d3e9d80 [ 168.195461][ T6580] R13: ffffffff81f08ad0 R14: ffff888100489200 R15: 000000000000000b [ 168.195481][ T6580] ? __pfx_blkdev_ioctl+0x10/0x10 [ 168.195526][ T6580] blkdev_ioctl+0x1fb/0x460 [ 168.195572][ T6580] ? __pfx_blkdev_ioctl+0x10/0x10 [ 168.195661][ T6580] __se_sys_ioctl+0xce/0x140 [ 168.195697][ T6580] __x64_sys_ioctl+0x43/0x50 [ 168.195724][ T6580] x64_sys_call+0x1563/0x3020 [ 168.195748][ T6580] do_syscall_64+0x12c/0x3b0 [ 168.195830][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.195904][ T6580] RIP: 0033:0x7fa42477ce59 [ 168.195935][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.195958][ T6580] RSP: 002b:00007fa4231d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.195979][ T6580] RAX: ffffffffffffffda RBX: 00007fa4249f5fa0 RCX: 00007fa42477ce59 [ 168.195992][ T6580] RDX: 0000200000001040 RSI: 0000000080081270 RDI: 0000000000000003 [ 168.196067][ T6580] RBP: 00007fa4231d7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.196081][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.196093][ T6580] R13: 00007fa4249f6038 R14: 00007fa4249f5fa0 R15: 00007fff45c5ebb8 [ 168.196112][ T6580] [ 168.616557][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 168.616576][ T28] audit: type=1400 audit(1780364889.597:1179): avc: denied { append } for pid=6583 comm="syz.2.1006" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.750208][ T28] audit: type=1400 audit(1780364889.667:1180): avc: denied { create } for pid=6581 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 169.474904][ T6588] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.274064][ T6604] __nla_validate_parse: 1 callbacks suppressed [ 170.274221][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 170.373398][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.390146][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.472564][ T6615] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1017'. [ 170.544821][ T6619] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.561895][ T6609] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.702693][ T6619] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.983432][ T6627] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 171.000340][ T6619] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.045350][ T6631] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 171.154108][ T6619] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.184985][ T6639] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.285196][ T6642] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1028'. [ 171.295161][ T6642] netlink: zone id is out of range [ 171.300449][ T6642] netlink: zone id is out of range [ 171.305682][ T6642] netlink: zone id is out of range [ 171.310929][ T6642] netlink: zone id is out of range [ 171.316145][ T6642] netlink: zone id is out of range [ 171.321473][ T6642] netlink: zone id is out of range [ 171.326786][ T6642] netlink: zone id is out of range [ 171.349262][ T6513] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.358362][ T6642] netlink: zone id is out of range [ 171.364035][ T6642] netlink: zone id is out of range [ 171.369856][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 171.370469][ T6642] netlink: zone id is out of range [ 171.384589][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.397393][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.409284][ T6513] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.417735][ T6513] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.427585][ T6639] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.440914][ T6513] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.471388][ T28] audit: type=1400 audit(1780364892.457:1181): avc: denied { setopt } for pid=6646 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.523532][ T6639] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.662964][ T6639] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.807580][ T6522] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.817019][ T6522] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.825849][ T6522] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.837332][ T6522] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.064626][ T6672] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1037'. [ 172.153626][ T6671] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.275162][ T28] audit: type=1400 audit(1780364893.257:1182): avc: denied { setopt } for pid=6691 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.523055][ T6699] ipip0: entered promiscuous mode [ 172.528593][ T6699] ipip0: entered allmulticast mode [ 172.536089][ T6699] team0: Device ipip0 is of different type [ 172.615910][ T6701] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.695661][ T6701] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.775075][ T6701] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.810166][ T28] audit: type=1326 audit(1780364893.797:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.2.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 172.839178][ T28] audit: type=1326 audit(1780364893.797:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.2.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 172.866468][ T28] audit: type=1326 audit(1780364893.797:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.2.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 172.894878][ T28] audit: type=1326 audit(1780364893.797:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.2.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 172.923239][ T28] audit: type=1326 audit(1780364893.797:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.2.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 172.926666][ T6701] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.954394][ T28] audit: type=1326 audit(1780364893.797:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.2.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x7ffc0000 [ 173.577086][ T6729] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1061'. [ 173.754837][ T6733] netlink: 624 bytes leftover after parsing attributes in process `syz.2.1062'. [ 173.831782][ T6737] FAULT_INJECTION: forcing a failure. [ 173.831782][ T6737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.845228][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.2.1064 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.845256][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.845282][ T6737] Call Trace: [ 173.845290][ T6737] [ 173.845298][ T6737] __dump_stack+0x1d/0x30 [ 173.845324][ T6737] dump_stack_lvl+0x95/0xd0 [ 173.845387][ T6737] dump_stack+0x15/0x1b [ 173.845407][ T6737] should_fail_ex+0x263/0x280 [ 173.845428][ T6737] should_fail+0xb/0x20 [ 173.845445][ T6737] should_fail_usercopy+0x1a/0x20 [ 173.845469][ T6737] _copy_from_user+0x1c/0xb0 [ 173.845494][ T6737] input_event_from_user+0x5e/0x190 [ 173.845541][ T6737] ? input_inject_event+0xe3/0x100 [ 173.845569][ T6737] evdev_write+0x1b0/0x2b0 [ 173.845600][ T6737] ? __pfx_evdev_write+0x10/0x10 [ 173.845651][ T6737] vfs_write+0x269/0x9f0 [ 173.845681][ T6737] ? __rcu_read_unlock+0x4e/0x70 [ 173.845723][ T6737] ? __fget_files+0x184/0x1c0 [ 173.845746][ T6737] ksys_write+0xdc/0x1a0 [ 173.845844][ T6737] __x64_sys_write+0x40/0x50 [ 173.845874][ T6737] x64_sys_call+0x27e1/0x3020 [ 173.845979][ T6737] do_syscall_64+0x12c/0x3b0 [ 173.846021][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.846044][ T6737] RIP: 0033:0x7fa813b0ce59 [ 173.846061][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.846158][ T6737] RSP: 002b:00007fa81255f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.846180][ T6737] RAX: ffffffffffffffda RBX: 00007fa813d85fa0 RCX: 00007fa813b0ce59 [ 173.846194][ T6737] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 173.846208][ T6737] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.846221][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.846310][ T6737] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 173.846331][ T6737] [ 174.083980][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 174.084063][ T28] audit: type=1326 audit(1780364895.067:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x0 [ 174.340393][ T6749] FAULT_INJECTION: forcing a failure. [ 174.340393][ T6749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.355014][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.1.1069 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.355044][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.355057][ T6749] Call Trace: [ 174.355120][ T6749] [ 174.355129][ T6749] __dump_stack+0x1d/0x30 [ 174.355153][ T6749] dump_stack_lvl+0x95/0xd0 [ 174.355196][ T6749] dump_stack+0x15/0x1b [ 174.355215][ T6749] should_fail_ex+0x263/0x280 [ 174.355241][ T6749] should_fail+0xb/0x20 [ 174.355263][ T6749] should_fail_usercopy+0x1a/0x20 [ 174.355318][ T6749] _copy_from_user+0x1c/0xb0 [ 174.355343][ T6749] do_sock_getsockopt+0x122/0x570 [ 174.355430][ T6749] __x64_sys_getsockopt+0x11d/0x1a0 [ 174.355465][ T6749] x64_sys_call+0x2dcf/0x3020 [ 174.355492][ T6749] do_syscall_64+0x12c/0x3b0 [ 174.355588][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.355611][ T6749] RIP: 0033:0x7f9d3431ce59 [ 174.355632][ T6749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.355651][ T6749] RSP: 002b:00007f9d32d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 174.355690][ T6749] RAX: ffffffffffffffda RBX: 00007f9d34595fa0 RCX: 00007f9d3431ce59 [ 174.355749][ T6749] RDX: 0000000000000039 RSI: 0000000000000001 RDI: 0000000000000003 [ 174.355764][ T6749] RBP: 00007f9d32d6f090 R08: 0000200000000280 R09: 0000000000000000 [ 174.355780][ T6749] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 174.355797][ T6749] R13: 00007f9d34596038 R14: 00007f9d34595fa0 R15: 00007fffed4ea1f8 [ 174.355887][ T6749] [ 174.583763][ T6754] tmpfs: Bad value for 'mpol' [ 174.592054][ T28] audit: type=1400 audit(1780364895.557:1195): avc: denied { append } for pid=6750 comm="syz.2.1070" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 174.655358][ T28] audit: type=1400 audit(1780364895.607:1196): avc: denied { connect } for pid=6750 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.705443][ T28] audit: type=1326 audit(1780364895.687:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.1.1073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 174.787846][ T28] audit: type=1326 audit(1780364895.687:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.2.1074" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x0 [ 174.821041][ T6764] syzkaller0: entered promiscuous mode [ 174.837824][ T6764] syzkaller0: entered allmulticast mode [ 174.901812][ T28] audit: type=1326 audit(1780364895.727:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.1.1073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 174.927824][ T28] audit: type=1326 audit(1780364895.727:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.1.1073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 174.954011][ T28] audit: type=1326 audit(1780364895.727:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.1.1073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 174.983151][ T28] audit: type=1326 audit(1780364895.737:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.1.1073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 175.009226][ T28] audit: type=1326 audit(1780364895.747:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.1.1073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 175.631361][ T6776] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1080'. [ 175.795533][ T6786] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1083'. [ 176.161379][ T6790] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.275288][ T6801] syz.1.1090(6801): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 176.409940][ T6812] tmpfs: Bad value for 'mpol' [ 176.489772][ T6815] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1096'. [ 176.533496][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 177.492601][ T6834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1101'. [ 177.654616][ T6838] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 177.849850][ T6844] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1107'. [ 178.177650][ T6868] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1117'. [ 178.185624][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1118'. [ 178.187979][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1117'. [ 178.249645][ T6877] netlink: 1348 bytes leftover after parsing attributes in process `syz.1.1121'. [ 178.345800][ T6888] FAULT_INJECTION: forcing a failure. [ 178.345800][ T6888] name failslab, interval 1, probability 0, space 0, times 0 [ 178.359946][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.1.1125 Not tainted syzkaller #0 PREEMPT(lazy) [ 178.359975][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.359987][ T6888] Call Trace: [ 178.359993][ T6888] [ 178.360001][ T6888] __dump_stack+0x1d/0x30 [ 178.360022][ T6888] dump_stack_lvl+0x95/0xd0 [ 178.360106][ T6888] dump_stack+0x15/0x1b [ 178.360161][ T6888] should_fail_ex+0x263/0x280 [ 178.360180][ T6888] should_failslab+0x8c/0xb0 [ 178.360229][ T6888] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 178.360386][ T6888] ? __alloc_skb+0x2d6/0x690 [ 178.360407][ T6888] __alloc_skb+0x2d6/0x690 [ 178.360424][ T6888] ? __alloc_skb+0x200/0x690 [ 178.360499][ T6888] netlink_alloc_large_skb+0xbf/0xf0 [ 178.360524][ T6888] netlink_sendmsg+0x40c/0x6f0 [ 178.360553][ T6888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.360602][ T6888] ____sys_sendmsg+0x563/0x5b0 [ 178.360697][ T6888] ___sys_sendmsg+0x195/0x1e0 [ 178.360733][ T6888] __x64_sys_sendmsg+0xd4/0x160 [ 178.360820][ T6888] x64_sys_call+0x194c/0x3020 [ 178.360852][ T6888] do_syscall_64+0x12c/0x3b0 [ 178.360896][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.360932][ T6888] RIP: 0033:0x7f9d3431ce59 [ 178.360946][ T6888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.360992][ T6888] RSP: 002b:00007f9d32d6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.361011][ T6888] RAX: ffffffffffffffda RBX: 00007f9d34595fa0 RCX: 00007f9d3431ce59 [ 178.361023][ T6888] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 178.361034][ T6888] RBP: 00007f9d32d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.361045][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.361084][ T6888] R13: 00007f9d34596038 R14: 00007f9d34595fa0 R15: 00007fffed4ea1f8 [ 178.361128][ T6888] [ 178.747400][ T6893] netlink: 'syz.3.1127': attribute type 6 has an invalid length. [ 178.815647][ T6522] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.828914][ T6522] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.841423][ T6522] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.854119][ T6522] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.169113][ T6913] netlink: 'syz.0.1134': attribute type 1 has an invalid length. [ 179.199982][ T6913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.248023][ T6913] vlan3: entered allmulticast mode [ 179.253230][ T6913] bond3: entered allmulticast mode [ 180.380158][ T28] kauditd_printk_skb: 295 callbacks suppressed [ 180.380232][ T28] audit: type=1326 audit(1780364901.367:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 180.509799][ T28] audit: type=1400 audit(1780364901.407:1500): avc: denied { getopt } for pid=6917 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.567128][ T6929] netlink: 'syz.1.1141': attribute type 5 has an invalid length. [ 180.583059][ T28] audit: type=1326 audit(1780364901.407:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 180.635856][ T6929] xt_TCPMSS: Only works on TCP SYN packets [ 180.643997][ T6932] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.722924][ T28] audit: type=1326 audit(1780364901.407:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 180.771316][ T28] audit: type=1326 audit(1780364901.407:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 180.921673][ T28] audit: type=1326 audit(1780364901.407:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 180.976299][ T6932] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.990194][ T28] audit: type=1326 audit(1780364901.407:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 181.020051][ T28] audit: type=1326 audit(1780364901.407:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 181.048410][ T28] audit: type=1326 audit(1780364901.407:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 181.083005][ T28] audit: type=1326 audit(1780364901.407:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.1.1135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 181.152007][ T6932] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.271388][ T6941] __nla_validate_parse: 3 callbacks suppressed [ 181.271418][ T6941] netlink: 66512 bytes leftover after parsing attributes in process `syz.1.1144'. [ 181.438359][ T6941] net_ratelimit: 66 callbacks suppressed [ 181.438385][ T6941] netlink: zone id is out of range [ 181.451871][ T6941] netlink: zone id is out of range [ 181.458967][ T6941] netlink: zone id is out of range [ 181.464645][ T6941] netlink: zone id is out of range [ 181.471159][ T6941] netlink: zone id is out of range [ 181.478314][ T6941] netlink: zone id is out of range [ 181.485827][ T6941] netlink: zone id is out of range [ 181.492206][ T6941] netlink: zone id is out of range [ 181.501453][ T6941] netlink: zone id is out of range [ 181.508144][ T6941] netlink: zone id is out of range [ 181.513799][ T6949] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1145'. [ 181.517235][ T6932] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.764218][ T6951] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 181.851565][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 182.402607][ T6971] tmpfs: Bad value for 'mpol' [ 182.457064][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 182.466411][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 183.472831][ T6989] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.729784][ T7000] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 183.862343][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 184.568361][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 184.626358][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1187'. [ 185.257505][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 185.733471][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 185.733492][ T28] audit: type=1326 audit(1780364906.687:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.1193" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa813b0ce59 code=0x0 [ 185.753215][ T6520] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.835026][ T6513] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.853006][ T6513] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.869458][ T6513] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.146894][ T7072] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 186.336703][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 186.347664][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.357277][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.555301][ T7096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 186.566139][ T7100] SET target dimension over the limit! [ 186.603756][ T7103] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.654812][ T7110] vlan0: entered promiscuous mode [ 186.661647][ T7110] vlan0: entered allmulticast mode [ 186.668672][ T7110] veth0_vlan: entered allmulticast mode [ 186.757851][ T7103] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.912808][ T7103] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.025981][ T7103] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.160638][ T6512] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.174030][ T6512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.197132][ T6512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.209399][ T6512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.259149][ T28] audit: type=1400 audit(1780364908.247:1557): avc: denied { write } for pid=7134 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.871247][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1226'. [ 188.009292][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 188.023700][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'. [ 188.148739][ T7168] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.330335][ T7168] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.497652][ T7168] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.929374][ T7168] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.088016][ T6522] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.164707][ T6522] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.275048][ T6513] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.316657][ T6513] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.604289][ T28] audit: type=1400 audit(1780364910.547:1558): avc: denied { bind } for pid=7196 comm="syz.0.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.941023][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'. [ 190.210583][ T7212] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.280696][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 190.321606][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.414283][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.747778][ T28] audit: type=1400 audit(1780364911.727:1559): avc: denied { name_connect } for pid=7229 comm="syz.0.1251" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 190.774995][ T28] audit: type=1326 audit(1780364911.757:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.805850][ T28] audit: type=1326 audit(1780364911.757:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.842203][ T28] audit: type=1326 audit(1780364911.757:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.870268][ T28] audit: type=1326 audit(1780364911.757:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.898112][ T28] audit: type=1326 audit(1780364911.757:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.924288][ T28] audit: type=1326 audit(1780364911.757:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.950124][ T28] audit: type=1326 audit(1780364911.757:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 190.978516][ T28] audit: type=1326 audit(1780364911.757:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 191.004573][ T28] audit: type=1326 audit(1780364911.757:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 191.038468][ T7239] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1255'. [ 191.192417][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 191.227108][ T7247] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'. [ 191.545987][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 191.778383][ T7264] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1265'. [ 191.859406][ T7268] FAULT_INJECTION: forcing a failure. [ 191.859406][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.873801][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.2.1267 Not tainted syzkaller #0 PREEMPT(lazy) [ 191.873835][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.873848][ T7268] Call Trace: [ 191.873855][ T7268] [ 191.873863][ T7268] __dump_stack+0x1d/0x30 [ 191.873888][ T7268] dump_stack_lvl+0x95/0xd0 [ 191.873968][ T7268] dump_stack+0x15/0x1b [ 191.873986][ T7268] should_fail_ex+0x263/0x280 [ 191.874082][ T7268] should_fail+0xb/0x20 [ 191.874098][ T7268] should_fail_usercopy+0x1a/0x20 [ 191.874120][ T7268] _copy_from_user+0x1c/0xb0 [ 191.874147][ T7268] __sys_bpf+0x183/0x7e0 [ 191.874187][ T7268] __x64_sys_bpf+0x41/0x50 [ 191.874244][ T7268] x64_sys_call+0x10cb/0x3020 [ 191.874333][ T7268] do_syscall_64+0x12c/0x3b0 [ 191.874368][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.874396][ T7268] RIP: 0033:0x7fa813b0ce59 [ 191.874494][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.874516][ T7268] RSP: 002b:00007fa81255f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.874569][ T7268] RAX: ffffffffffffffda RBX: 00007fa813d85fa0 RCX: 00007fa813b0ce59 [ 191.874593][ T7268] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 191.874610][ T7268] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.874624][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.874635][ T7268] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 191.874655][ T7268] [ 192.377155][ T7291] tmpfs: Bad value for 'mpol' [ 192.460758][ T7294] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.1277'. [ 192.500286][ T7296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1278'. [ 192.595908][ T7289] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 192.938967][ T7313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1282'. [ 193.152497][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 193.166126][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 193.178542][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 193.190779][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 193.200692][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 193.456989][ T7326] tmpfs: Bad value for 'mpol' [ 194.385984][ T7335] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.856617][ T7351] netlink: 'syz.0.1294': attribute type 12 has an invalid length. [ 194.923136][ T7351] netlink: 'syz.0.1294': attribute type 29 has an invalid length. [ 194.949219][ T7351] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 194.983272][ T7351] netlink: 'syz.0.1294': attribute type 2 has an invalid length. [ 195.036587][ T7347] netlink: 'syz.3.1293': attribute type 5 has an invalid length. [ 195.067517][ T7347] netlink: 'syz.3.1293': attribute type 11 has an invalid length. [ 195.945201][ T7368] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 196.335133][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 196.335149][ T28] audit: type=1400 audit(1780364917.317:1635): avc: denied { setopt } for pid=7370 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.613477][ T7382] __nla_validate_parse: 7 callbacks suppressed [ 196.613535][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 196.631544][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 196.641832][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 196.652149][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 196.661565][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 197.275770][ T7393] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1309'. [ 197.604101][ T28] audit: type=1400 audit(1780364918.587:1636): avc: denied { getopt } for pid=7391 comm="syz.0.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.838229][ T28] audit: type=1400 audit(1780364918.817:1637): avc: denied { append } for pid=7412 comm="syz.0.1317" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.882321][ T7413] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1316'. [ 197.888220][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1317'. [ 197.901789][ T28] audit: type=1400 audit(1780364918.867:1638): avc: denied { bind } for pid=7412 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.922566][ T28] audit: type=1400 audit(1780364918.867:1639): avc: denied { connect } for pid=7412 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.942925][ T28] audit: type=1400 audit(1780364918.917:1640): avc: denied { map } for pid=7412 comm="syz.0.1317" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.969758][ T28] audit: type=1400 audit(1780364918.917:1641): avc: denied { execute } for pid=7412 comm="syz.0.1317" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.028513][ T28] audit: type=1326 audit(1780364919.007:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.0.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 198.055071][ T28] audit: type=1326 audit(1780364919.007:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.0.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 198.081048][ T28] audit: type=1326 audit(1780364919.007:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.0.1317" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42477ce59 code=0x7ffc0000 [ 198.474583][ T7450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 198.492376][ T7450] batman_adv: batadv0: Adding interface: gretap1 [ 198.498908][ T7450] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.524770][ T7450] batman_adv: batadv0: Interface activated: gretap1 [ 198.913889][ T7480] mmap: syz.0.1341 (7480): VmData 29335552 exceed data ulimit 124. Update limits or use boot option ignore_rlimit_data. [ 199.109732][ T7494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1343'. [ 199.197505][ T7498] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1348'. [ 199.459666][ T7515] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 199.466422][ T7515] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 199.474476][ T7515] vhci_hcd vhci_hcd.0: Device attached [ 199.491745][ T7516] vhci_hcd: connection closed [ 199.492119][ T6523] vhci_hcd vhci_hcd.1: stop threads [ 199.502928][ T6523] vhci_hcd vhci_hcd.1: release socket [ 199.508436][ T6523] vhci_hcd vhci_hcd.1: disconnect device [ 200.050092][ T7549] netlink: 'syz.2.1365': attribute type 12 has an invalid length. [ 200.058751][ T7549] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 200.066957][ T7549] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 200.074976][ T7549] netlink: 'syz.2.1365': attribute type 2 has an invalid length. [ 200.589777][ T7582] net_ratelimit: 1523 callbacks suppressed [ 200.589799][ T7582] sock: sock_set_timeout: `syz.3.1378' (pid 7582) tries to set negative timeout [ 201.055314][ T7607] netlink: 'syz.2.1387': attribute type 2 has an invalid length. [ 201.096213][ T7607] /dev/loop2: Can't open blockdev [ 201.545123][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.564362][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.708568][ T28] kauditd_printk_skb: 502 callbacks suppressed [ 201.708584][ T28] audit: type=1326 audit(1780364922.697:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 201.797961][ T28] audit: type=1326 audit(1780364922.697:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f804b00d68e code=0x7ffc0000 [ 201.826087][ T28] audit: type=1326 audit(1780364922.697:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 201.852781][ T28] audit: type=1326 audit(1780364922.697:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 201.881305][ T28] audit: type=1326 audit(1780364922.697:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f804b00d68e code=0x7ffc0000 [ 201.927605][ T28] audit: type=1326 audit(1780364922.697:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f804b00d68e code=0x7ffc0000 [ 201.956964][ T28] audit: type=1326 audit(1780364922.697:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7622 comm="syz.3.1391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f804b04ce59 code=0x7ffc0000 [ 202.210389][ T7664] __nla_validate_parse: 8 callbacks suppressed [ 202.210432][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1400'. [ 202.319843][ T7667] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 202.333803][ T7667] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 202.424918][ T7672] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 202.525087][ T7672] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.544583][ T7674] vlan2: entered allmulticast mode [ 202.550138][ T7674] bond4: entered allmulticast mode [ 203.750932][ T28] audit: type=1400 audit(1780364924.737:2154): avc: denied { create } for pid=7690 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 203.796572][ T7691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1408'. [ 203.822958][ T7691] hsr0: entered allmulticast mode [ 203.828415][ T7691] hsr_slave_0: entered allmulticast mode [ 203.834284][ T7691] hsr_slave_1: entered allmulticast mode [ 204.318303][ T7696] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 204.318303][ T7696] program syz.2.1405 not setting count and/or reply_len properly [ 204.407922][ T7708] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.589944][ T7708] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.680783][ T28] audit: type=1326 audit(1780364925.667:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.3.1419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f804b04ce59 code=0x0 [ 204.707590][ T7708] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.817765][ T7708] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.834347][ T7729] 9p: Unknown access argument c: -22 [ 204.900411][ T6518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.908662][ T6518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.916879][ T6518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.925566][ T6518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.038714][ T7732] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1422'. [ 205.192058][ T7741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1426'. [ 206.416685][ T28] audit: type=1400 audit(1780364927.157:2156): avc: denied { map } for pid=7770 comm="syz.0.1438" path="socket:[25648]" dev="sockfs" ino=25648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.145859][ T28] audit: type=1400 audit(1780364928.127:2157): avc: denied { read } for pid=7784 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.638248][ T7795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1443'. [ 207.835757][ T7798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7798 comm=syz.3.1443 [ 207.980237][ T7804] syzkaller0: entered promiscuous mode [ 207.993294][ T7804] syzkaller0: entered allmulticast mode [ 208.868578][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 208.878075][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'. [ 209.036847][ T7823] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1453'. [ 209.176729][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 209.260232][ T28] audit: type=1400 audit(1780364930.247:2158): avc: denied { setattr } for pid=7834 comm="syz.2.1459" path="/dev/ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 209.287505][ T28] audit: type=1400 audit(1780364930.247:2159): avc: denied { read } for pid=3022 comm="dhcpcd" name="n25" dev="tmpfs" ino=2187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.312259][ T28] audit: type=1400 audit(1780364930.247:2160): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.338295][ T28] audit: type=1400 audit(1780364930.247:2161): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.141972][ T7785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.358268][ T28] audit: type=1400 audit(1780364931.347:2162): avc: denied { write } for pid=7851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.401766][ T28] audit: type=1400 audit(1780364931.347:2163): avc: denied { create } for pid=7851 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.439937][ T28] audit: type=1400 audit(1780364931.367:2164): avc: denied { write } for pid=7851 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2190 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.480909][ T28] audit: type=1400 audit(1780364931.367:2165): avc: denied { append } for pid=7851 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2190 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.522427][ T28] audit: type=1400 audit(1780364931.417:2166): avc: denied { write } for pid=7862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.555931][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 210.632833][ T7877] --map-set only usable from mangle table [ 210.667861][ T7878] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.714139][ T7877] FAULT_INJECTION: forcing a failure. [ 210.714139][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 210.727911][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.2.1465 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.728010][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.728028][ T7877] Call Trace: [ 210.728039][ T7877] [ 210.728124][ T7877] __dump_stack+0x1d/0x30 [ 210.728167][ T7877] dump_stack_lvl+0x95/0xd0 [ 210.728194][ T7877] dump_stack+0x15/0x1b [ 210.728220][ T7877] should_fail_ex+0x263/0x280 [ 210.728270][ T7877] should_failslab+0x8c/0xb0 [ 210.728311][ T7877] kmem_cache_alloc_noprof+0x66/0x3f0 [ 210.728375][ T7877] ? skb_clone+0x151/0x1f0 [ 210.728414][ T7877] skb_clone+0x151/0x1f0 [ 210.728447][ T7877] __netlink_deliver_tap+0x2c9/0x500 [ 210.728543][ T7877] netlink_unicast+0x653/0x680 [ 210.728594][ T7877] netlink_sendmsg+0x5c8/0x6f0 [ 210.728637][ T7877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.728678][ T7877] ____sys_sendmsg+0x563/0x5b0 [ 210.728726][ T7877] ___sys_sendmsg+0x195/0x1e0 [ 210.728776][ T7877] __x64_sys_sendmsg+0xd4/0x160 [ 210.728816][ T7877] x64_sys_call+0x194c/0x3020 [ 210.728858][ T7877] do_syscall_64+0x12c/0x3b0 [ 210.728897][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.728926][ T7877] RIP: 0033:0x7fa813b0ce59 [ 210.728954][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.729051][ T7877] RSP: 002b:00007fa81255f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.729075][ T7877] RAX: ffffffffffffffda RBX: 00007fa813d85fa0 RCX: 00007fa813b0ce59 [ 210.729146][ T7877] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000007 [ 210.729163][ T7877] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.729179][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.729196][ T7877] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 210.729221][ T7877] [ 211.025316][ T7895] FAULT_INJECTION: forcing a failure. [ 211.025316][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.055859][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.1.1470 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.055898][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 211.055923][ T7895] Call Trace: [ 211.055932][ T7895] [ 211.055943][ T7895] __dump_stack+0x1d/0x30 [ 211.055974][ T7895] dump_stack_lvl+0x95/0xd0 [ 211.056070][ T7895] dump_stack+0x15/0x1b [ 211.056094][ T7895] should_fail_ex+0x263/0x280 [ 211.056117][ T7895] should_fail+0xb/0x20 [ 211.056191][ T7895] should_fail_usercopy+0x1a/0x20 [ 211.056220][ T7895] _copy_from_user+0x1c/0xb0 [ 211.056252][ T7895] sock_do_ioctl+0xe5/0x230 [ 211.056312][ T7895] sock_ioctl+0x41b/0x610 [ 211.056379][ T7895] ? mutex_lock+0x57/0x90 [ 211.056412][ T7895] ? __pfx_sock_ioctl+0x10/0x10 [ 211.056450][ T7895] __se_sys_ioctl+0xce/0x140 [ 211.056500][ T7895] __x64_sys_ioctl+0x43/0x50 [ 211.056538][ T7895] x64_sys_call+0x1563/0x3020 [ 211.056628][ T7895] do_syscall_64+0x12c/0x3b0 [ 211.056671][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.056700][ T7895] RIP: 0033:0x7f9d3431ce59 [ 211.056778][ T7895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.056804][ T7895] RSP: 002b:00007f9d32d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.056843][ T7895] RAX: ffffffffffffffda RBX: 00007f9d34595fa0 RCX: 00007f9d3431ce59 [ 211.056861][ T7895] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 000000000000000c [ 211.056877][ T7895] RBP: 00007f9d32d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.056890][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.056913][ T7895] R13: 00007f9d34596038 R14: 00007f9d34595fa0 R15: 00007fffed4ea1f8 [ 211.056941][ T7895] [ 211.236224][ T7899] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1469'. [ 211.254593][ T7899] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1469'. [ 211.263848][ T7899] netlink: 'syz.0.1469': attribute type 3 has an invalid length. [ 211.272246][ T7899] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1469'. [ 211.292640][ T7878] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.304814][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1465'. [ 211.490056][ T7878] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.630021][ T7920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 211.644166][ T7921] ªªªªªª: renamed from vlan0 (while UP) [ 212.733411][ T7878] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.959391][ T7925] ªªªªªª: renamed from vlan0 (while UP) [ 212.975041][ T7925] FAULT_INJECTION: forcing a failure. [ 212.975041][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.993675][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.2.1476 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.993817][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.993830][ T7925] Call Trace: [ 212.993837][ T7925] [ 212.993847][ T7925] __dump_stack+0x1d/0x30 [ 212.993878][ T7925] dump_stack_lvl+0x95/0xd0 [ 212.993904][ T7925] dump_stack+0x15/0x1b [ 212.993928][ T7925] should_fail_ex+0x263/0x280 [ 212.993964][ T7925] should_fail+0xb/0x20 [ 212.993985][ T7925] should_fail_usercopy+0x1a/0x20 [ 212.994076][ T7925] _copy_to_user+0x20/0xa0 [ 212.994109][ T7925] simple_read_from_buffer+0xb5/0x130 [ 212.994261][ T7925] proc_fail_nth_read+0x10e/0x150 [ 212.994292][ T7925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.994321][ T7925] vfs_read+0x1ab/0x7f0 [ 212.994418][ T7925] ? __rcu_read_unlock+0x4e/0x70 [ 212.994575][ T7925] ? __fget_files+0x184/0x1c0 [ 212.994602][ T7925] ? mutex_lock+0x57/0x90 [ 212.994635][ T7925] ksys_read+0xdc/0x1a0 [ 212.994691][ T7925] __x64_sys_read+0x40/0x50 [ 212.994735][ T7925] x64_sys_call+0x2886/0x3020 [ 212.994766][ T7925] do_syscall_64+0x12c/0x3b0 [ 212.994810][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.994863][ T7925] RIP: 0033:0x7fa813acd68e [ 212.994884][ T7925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.994908][ T7925] RSP: 002b:00007fa81255efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.994933][ T7925] RAX: ffffffffffffffda RBX: 00007fa81255f6c0 RCX: 00007fa813acd68e [ 212.994996][ T7925] RDX: 000000000000000f RSI: 00007fa81255f0a0 RDI: 000000000000000e [ 212.995013][ T7925] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.995030][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.995046][ T7925] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 212.995074][ T7925] [ 213.022620][ T7928] bridge_slave_0: left allmulticast mode [ 213.217342][ T7928] bridge_slave_0: left promiscuous mode [ 213.223828][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.242052][ T7928] bridge_slave_1: left allmulticast mode [ 213.248956][ T7928] bridge_slave_1: left promiscuous mode [ 213.255461][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.273375][ T7928] bond0: (slave bond_slave_0): Releasing backup interface [ 213.287443][ T7928] bond0: (slave bond_slave_1): Releasing backup interface [ 213.322595][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 213.332873][ T7928] team0: Port device team_slave_0 removed [ 213.342502][ T7928] team0: Port device team_slave_1 removed [ 213.351157][ T7928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.359639][ T7928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.369869][ T7928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.377673][ T7928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.391088][ T7928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.418552][ T6518] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.453520][ T6513] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.467085][ T6513] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.480224][ T6512] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.715028][ T7969] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1490'. [ 215.914077][ T7970] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1489'. [ 216.010680][ T7978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.302242][ T7984] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.593958][ T7984] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.034306][ T7984] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.151330][ T7984] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.186833][ T7995] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 217.203711][ T8002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=8002 comm=syz.2.1500 [ 217.294022][ T8006] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.1503'. [ 217.476209][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 217.486984][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.495735][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.338335][ T8023] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1509'. [ 218.425466][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1508'. [ 219.023975][ T938] hid_parser_main: 76 callbacks suppressed [ 219.023993][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.052193][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.069593][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.090921][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.103551][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.127687][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x6 [ 219.136907][ T8047] program syz.2.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.141610][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x2 [ 219.156827][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.165732][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.174036][ T938] hid-generic 8FED:0800:0002.0002: unknown main item tag 0x0 [ 219.268854][ T938] hid-generic 8FED:0800:0002.0002: hidraw0: HID v0.07 Device [syz0] on syz1 [ 219.272186][ T8047] netem: change failed [ 219.306673][ T8049] fido_id[8049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.366168][ T8051] syzkaller0: entered promiscuous mode [ 219.372179][ T8051] syzkaller0: entered allmulticast mode [ 219.429925][ T8045] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 219.470144][ T8055] syzkaller0: entered promiscuous mode [ 219.476050][ T8055] syzkaller0: entered allmulticast mode [ 219.513345][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 219.513362][ T28] audit: type=1400 audit(1780364940.497:2170): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 220.342384][ T8078] FAULT_INJECTION: forcing a failure. [ 220.342384][ T8078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.356053][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.1.1530 Not tainted syzkaller #0 PREEMPT(lazy) [ 220.356081][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.356094][ T8078] Call Trace: [ 220.356103][ T8078] [ 220.356115][ T28] audit: type=1400 audit(1780364941.327:2171): avc: denied { mount } for pid=8079 comm="syz.0.1531" name="/" dev="hugetlbfs" ino=26174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 220.356114][ T8078] __dump_stack+0x1d/0x30 [ 220.356155][ T8078] dump_stack_lvl+0x95/0xd0 [ 220.356238][ T8078] dump_stack+0x15/0x1b [ 220.356350][ T8078] should_fail_ex+0x263/0x280 [ 220.356433][ T8078] should_fail+0xb/0x20 [ 220.356492][ T8078] should_fail_usercopy+0x1a/0x20 [ 220.356550][ T8078] _copy_from_user+0x1c/0xb0 [ 220.356625][ T8078] do_ipv6_setsockopt+0x124/0x2130 [ 220.356779][ T8078] ? kstrtoull+0x111/0x140 [ 220.356874][ T8078] ? avc_has_perm_noaudit+0xab/0x130 [ 220.356980][ T8078] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 220.357103][ T8078] ipv6_setsockopt+0x59/0x130 [ 220.357187][ T8078] udpv6_setsockopt+0x89/0xa0 [ 220.357311][ T8078] sock_common_setsockopt+0x69/0x80 [ 220.357472][ T8078] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 220.357579][ T8078] __sys_setsockopt+0x184/0x200 [ 220.357693][ T8078] __x64_sys_setsockopt+0x64/0x80 [ 220.357806][ T8078] x64_sys_call+0x2327/0x3020 [ 220.357954][ T8078] do_syscall_64+0x12c/0x3b0 [ 220.358115][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.358159][ T8078] RIP: 0033:0x7f9d3431ce59 [ 220.358175][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.358193][ T8078] RSP: 002b:00007f9d32d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.358212][ T8078] RAX: ffffffffffffffda RBX: 00007f9d34595fa0 RCX: 00007f9d3431ce59 [ 220.358271][ T8078] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 220.358311][ T8078] RBP: 00007f9d32d6f090 R08: 0000000000000310 R09: 0000000000000000 [ 220.358354][ T8078] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 220.358395][ T8078] R13: 00007f9d34596038 R14: 00007f9d34595fa0 R15: 00007fffed4ea1f8 [ 220.358512][ T8078] [ 220.588508][ T28] audit: type=1400 audit(1780364941.327:2172): avc: denied { create } for pid=8079 comm="syz.0.1531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 220.636203][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 220.647717][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.656499][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.898079][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1535'. [ 220.925076][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 221.574796][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 221.588396][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.600433][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.626777][ T6518] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.643724][ T6518] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.673781][ T6518] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.707627][ T6518] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.991209][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 222.066805][ T8140] netlink: 1348 bytes leftover after parsing attributes in process `syz.4.1554'. [ 222.336265][ T8171] netlink: 1348 bytes leftover after parsing attributes in process `syz.1.1566'. [ 222.338613][ T8148] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.397649][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 222.474733][ T8148] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.510112][ T8187] FAULT_INJECTION: forcing a failure. [ 222.510112][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.527847][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.0.1573 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.527921][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.527939][ T8187] Call Trace: [ 222.527948][ T8187] [ 222.527963][ T8187] __dump_stack+0x1d/0x30 [ 222.527998][ T8187] dump_stack_lvl+0x95/0xd0 [ 222.528021][ T8187] dump_stack+0x15/0x1b [ 222.528041][ T8187] should_fail_ex+0x263/0x280 [ 222.528123][ T8187] should_fail+0xb/0x20 [ 222.528139][ T8187] should_fail_usercopy+0x1a/0x20 [ 222.528225][ T8187] _copy_from_user+0x1c/0xb0 [ 222.528257][ T8187] ___sys_sendmsg+0xc1/0x1e0 [ 222.528302][ T8187] __x64_sys_sendmsg+0xd4/0x160 [ 222.528332][ T8187] x64_sys_call+0x194c/0x3020 [ 222.528581][ T8187] do_syscall_64+0x12c/0x3b0 [ 222.528701][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.528730][ T8187] RIP: 0033:0x7fa42477ce59 [ 222.528751][ T8187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.528769][ T8187] RSP: 002b:00007fa4231d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.528789][ T8187] RAX: ffffffffffffffda RBX: 00007fa4249f5fa0 RCX: 00007fa42477ce59 [ 222.528846][ T8187] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 222.528939][ T8187] RBP: 00007fa4231d7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.528957][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.528973][ T8187] R13: 00007fa4249f6038 R14: 00007fa4249f5fa0 R15: 00007fff45c5ebb8 [ 222.529000][ T8187] [ 222.756179][ T8148] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.794003][ T8194] netlink: zone id is out of range [ 222.799992][ T8194] netlink: zone id is out of range [ 222.805901][ T8194] netlink: zone id is out of range [ 222.811245][ T8194] netlink: zone id is out of range [ 222.816889][ T8194] netlink: zone id is out of range [ 222.823503][ T8194] netlink: zone id is out of range [ 222.829503][ T8194] netlink: zone id is out of range [ 222.834859][ T8194] netlink: zone id is out of range [ 222.840235][ T8194] netlink: zone id is out of range [ 222.850857][ T8194] netlink: zone id is out of range [ 223.083709][ T8148] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.248851][ T6518] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.338063][ T6518] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.387500][ T6518] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.408039][ T8216] __nla_validate_parse: 1 callbacks suppressed [ 223.408067][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 223.437529][ T6518] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.691952][ T8228] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 223.744779][ T8228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.763167][ T8228] vlan3: entered allmulticast mode [ 223.769116][ T8228] bond5: entered allmulticast mode [ 223.843583][ T8230] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 225.678946][ T28] audit: type=1400 audit(1780364946.667:2173): avc: denied { execute } for pid=8239 comm="syz.1.1587" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.732561][ T8241] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.760563][ T28] audit: type=1400 audit(1780364946.727:2174): avc: denied { ioctl } for pid=8239 comm="syz.1.1587" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.794492][ T8245] FAULT_INJECTION: forcing a failure. [ 225.794492][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.807898][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.2.1588 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.808005][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.808019][ T8245] Call Trace: [ 225.808026][ T8245] [ 225.808034][ T8245] __dump_stack+0x1d/0x30 [ 225.808058][ T8245] dump_stack_lvl+0x95/0xd0 [ 225.808082][ T8245] dump_stack+0x15/0x1b [ 225.808106][ T8245] should_fail_ex+0x263/0x280 [ 225.808161][ T8245] should_fail+0xb/0x20 [ 225.808183][ T8245] should_fail_usercopy+0x1a/0x20 [ 225.808207][ T8245] _copy_from_user+0x1c/0xb0 [ 225.808230][ T8245] ___sys_sendmsg+0xc1/0x1e0 [ 225.808284][ T8245] __x64_sys_sendmsg+0xd4/0x160 [ 225.808357][ T8245] x64_sys_call+0x194c/0x3020 [ 225.808381][ T8245] do_syscall_64+0x12c/0x3b0 [ 225.808416][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.808445][ T8245] RIP: 0033:0x7fa813b0ce59 [ 225.808485][ T8245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.808504][ T8245] RSP: 002b:00007fa81251d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.808525][ T8245] RAX: ffffffffffffffda RBX: 00007fa813d86180 RCX: 00007fa813b0ce59 [ 225.808576][ T8245] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 225.808655][ T8245] RBP: 00007fa81251d090 R08: 0000000000000000 R09: 0000000000000000 [ 225.808733][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.808745][ T8245] R13: 00007fa813d86218 R14: 00007fa813d86180 R15: 00007ffceccd3ba8 [ 225.808766][ T8245] [ 226.493884][ T8260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'. [ 227.278980][ T8276] tipc: Started in network mode [ 227.284072][ T8276] tipc: Node identity 4, cluster identity 4711 [ 227.290428][ T8276] tipc: Node number set to 4 [ 228.555018][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 228.609484][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.619340][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.667083][ T8294] tipc: Started in network mode [ 228.672503][ T8294] tipc: Node identity 4, cluster identity 4711 [ 228.680602][ T8294] tipc: Node number set to 4 [ 228.696804][ T8295] netlink: 'syz.3.1602': attribute type 1 has an invalid length. [ 228.793318][ T8295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.813277][ T8296] vlan5: entered allmulticast mode [ 228.818875][ T8296] bond6: entered allmulticast mode [ 229.490511][ T8302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1606'. [ 229.816056][ T8317] FAULT_INJECTION: forcing a failure. [ 229.816056][ T8317] name failslab, interval 1, probability 0, space 0, times 0 [ 229.851816][ T8317] CPU: 1 UID: 0 PID: 8317 Comm: syz.1.1613 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.851846][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.851864][ T8317] Call Trace: [ 229.851873][ T8317] [ 229.851884][ T8317] __dump_stack+0x1d/0x30 [ 229.851951][ T8317] dump_stack_lvl+0x95/0xd0 [ 229.851971][ T8317] dump_stack+0x15/0x1b [ 229.851993][ T8317] should_fail_ex+0x263/0x280 [ 229.852020][ T8317] should_failslab+0x8c/0xb0 [ 229.852085][ T8317] __kmalloc_noprof+0xb8/0x4d0 [ 229.852202][ T8317] ? nla_strdup+0x78/0xc0 [ 229.852229][ T8317] nla_strdup+0x78/0xc0 [ 229.852257][ T8317] nf_tables_newtable+0x3ba/0xea0 [ 229.852432][ T8317] nfnetlink_rcv+0xc15/0x1720 [ 229.852490][ T8317] netlink_unicast+0x5a8/0x680 [ 229.852530][ T8317] netlink_sendmsg+0x5c8/0x6f0 [ 229.852593][ T8317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.852629][ T8317] ____sys_sendmsg+0x563/0x5b0 [ 229.852729][ T8317] ___sys_sendmsg+0x195/0x1e0 [ 229.852818][ T8317] __x64_sys_sendmsg+0xd4/0x160 [ 229.852856][ T8317] x64_sys_call+0x194c/0x3020 [ 229.852937][ T8317] do_syscall_64+0x12c/0x3b0 [ 229.853041][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.853066][ T8317] RIP: 0033:0x7f9d3431ce59 [ 229.853086][ T8317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.853177][ T8317] RSP: 002b:00007f9d32d6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.853197][ T8317] RAX: ffffffffffffffda RBX: 00007f9d34595fa0 RCX: 00007f9d3431ce59 [ 229.853213][ T8317] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 229.853290][ T8317] RBP: 00007f9d32d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.853303][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.853318][ T8317] R13: 00007f9d34596038 R14: 00007f9d34595fa0 R15: 00007fffed4ea1f8 [ 229.853343][ T8317] [ 230.115777][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 231.127541][ T8349] syzkaller0: entered promiscuous mode [ 231.217150][ T8349] syzkaller0: entered allmulticast mode [ 232.263811][ T28] audit: type=1326 audit(1780364953.247:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 232.337955][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 232.362648][ T28] audit: type=1326 audit(1780364953.287:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 232.456188][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 232.594863][ T28] audit: type=1326 audit(1780364953.287:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 232.628161][ T6513] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.039650][ T8362] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 233.048176][ T28] audit: type=1326 audit(1780364953.287:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.133858][ T8362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.143855][ T8367] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 233.159213][ T28] audit: type=1326 audit(1780364953.287:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.212344][ T8366] vlan0: entered allmulticast mode [ 233.238101][ T8366] bond4: entered allmulticast mode [ 233.243618][ T6513] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.310430][ T6513] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.391879][ T6513] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.421675][ T28] audit: type=1326 audit(1780364953.287:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.494120][ T8378] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.509304][ T8378] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.521355][ T28] audit: type=1326 audit(1780364953.287:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.570046][ T28] audit: type=1326 audit(1780364953.287:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.597374][ T28] audit: type=1326 audit(1780364953.287:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.634196][ T8378] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.650853][ T8378] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.665411][ T8383] netlink: 1348 bytes leftover after parsing attributes in process `syz.3.1634'. [ 233.694627][ T28] audit: type=1326 audit(1780364953.287:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.1.1628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3431ce59 code=0x7ffc0000 [ 233.744887][ T8378] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.760471][ T8378] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.832544][ T8378] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.844856][ T8378] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.887211][ T8389] SET target dimension over the limit! [ 233.911150][ T8389] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1635'. [ 233.932385][ T6514] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.940897][ T6514] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.955571][ T6514] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.979385][ T6514] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.125578][ T8389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.136611][ T8389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.150004][ T8389] bond0 (unregistering): Released all slaves [ 234.158004][ T6514] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.177642][ T8393] FAULT_INJECTION: forcing a failure. [ 234.177642][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.192312][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.2.1638 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.192368][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.192385][ T8393] Call Trace: [ 234.192395][ T8393] [ 234.192406][ T8393] __dump_stack+0x1d/0x30 [ 234.192582][ T8393] dump_stack_lvl+0x95/0xd0 [ 234.192602][ T8393] dump_stack+0x15/0x1b [ 234.192621][ T8393] should_fail_ex+0x263/0x280 [ 234.192645][ T8393] should_fail+0xb/0x20 [ 234.192667][ T8393] should_fail_usercopy+0x1a/0x20 [ 234.192824][ T8393] _copy_from_user+0x1c/0xb0 [ 234.192850][ T8393] ___sys_sendmsg+0xc1/0x1e0 [ 234.192967][ T8393] __x64_sys_sendmsg+0xd4/0x160 [ 234.193046][ T8393] x64_sys_call+0x194c/0x3020 [ 234.193073][ T8393] do_syscall_64+0x12c/0x3b0 [ 234.193106][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.193211][ T8393] RIP: 0033:0x7fa813b0ce59 [ 234.193233][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.193258][ T8393] RSP: 002b:00007fa81255f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.193284][ T8393] RAX: ffffffffffffffda RBX: 00007fa813d85fa0 RCX: 00007fa813b0ce59 [ 234.193301][ T8393] RDX: 000000000000c000 RSI: 000020000000c2c0 RDI: 0000000000000008 [ 234.193316][ T8393] RBP: 00007fa81255f090 R08: 0000000000000000 R09: 0000000000000000 [ 234.193329][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.193363][ T8393] R13: 00007fa813d86038 R14: 00007fa813d85fa0 R15: 00007ffceccd3ba8 [ 234.193390][ T8393] [ 234.195331][ T6514] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.403008][ T6514] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.411277][ T6514] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.579256][ T8402] netlink: 'syz.4.1641': attribute type 2 has an invalid length. [ 234.681045][ T8401] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1640'. [ 234.773128][ T8415] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.989526][ T8415] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.228493][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1658'. [ 235.229381][ T8415] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.249534][ T8446] tipc: Started in network mode [ 235.254453][ T8446] tipc: Node identity 4, cluster identity 4711 [ 235.260727][ T8446] tipc: Node number set to 4 [ 235.412380][ T8415] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.467075][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1661'. [ 235.484132][ T8460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 235.493589][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 235.508981][ T8460] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.585472][ T6514] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.593860][ T6514] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.602258][ T6514] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.611253][ T6514] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.242376][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 236.276258][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 236.316783][ T8471] veth1_macvtap: left promiscuous mode [ 236.598733][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 236.742046][ T8490] ================================================================== [ 236.750735][ T8490] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 236.759682][ T8490] [ 236.762076][ T8490] write to 0xffff888104bc4220 of 8 bytes by task 8491 on cpu 1: [ 236.770348][ T8490] filemap_splice_read+0x523/0x780 [ 236.776832][ T8490] splice_direct_to_actor+0x26e/0x670 [ 236.784041][ T8490] do_splice_direct+0x119/0x1a0 [ 236.790255][ T8490] do_sendfile+0x382/0x650 [ 236.795495][ T8490] __x64_sys_sendfile64+0x105/0x150 [ 236.800823][ T8490] x64_sys_call+0x2dc4/0x3020 [ 236.806156][ T8490] do_syscall_64+0x12c/0x3b0 [ 236.812309][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.823989][ T8490] [ 236.826628][ T8490] write to 0xffff888104bc4220 of 8 bytes by task 8490 on cpu 0: [ 236.836355][ T8490] filemap_splice_read+0x523/0x780 [ 236.842491][ T8490] splice_direct_to_actor+0x26e/0x670 [ 236.848976][ T8490] do_splice_direct+0x119/0x1a0 [ 236.854516][ T8490] do_sendfile+0x382/0x650 [ 236.859715][ T8490] __x64_sys_sendfile64+0x105/0x150 [ 236.865340][ T8490] x64_sys_call+0x2dc4/0x3020 [ 236.870942][ T8490] do_syscall_64+0x12c/0x3b0 [ 236.875613][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.881545][ T8490] [ 236.883920][ T8490] value changed: 0x000000000000130a -> 0x000000000000130f [ 236.891665][ T8490] [ 236.894298][ T8490] Reported by Kernel Concurrency Sanitizer on: [ 236.900486][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.3.1673 Not tainted syzkaller #0 PREEMPT(lazy) [ 236.909897][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.920677][ T8490] ==================================================================