last executing test programs: 3.974525403s ago: executing program 1 (id=1962): ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) pipe2$9p(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xfce) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="05000000820100000900000000000000", @ANYRES64=0x77359400, @ANYRESDEC=r6, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000400100e0faddf821685a2e0000040000e005010000c251541693f8cfd169db38774a57f20fed90d99a2c440f7a92a509d5bb70c2c6f2ce08b0ba05b19b8e49a2de589e1083927ac85a2e3012d50c1a31652afc9859a6078e738f27dccf3f7e857806f2d393d9d185cc8e6ee6d2c4057b8ff9526852edbd6d48b262dcf041b27516438455ee832e6ade6bd90dc2"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) connect$can_bcm(r6, &(0x7f0000000000)={0x1d, r9}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 3.230773428s ago: executing program 1 (id=1969): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") socket(0x2a, 0x3, 0x7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) unshare(0x68040200) (fail_nth: 5) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x25, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) fallocate(r0, 0x0, 0x0, 0x4e50bb1c) 2.975550273s ago: executing program 1 (id=1971): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r3, 0x5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) 2.908147264s ago: executing program 4 (id=1974): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0xb, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7", @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) unshare(0x62040200) 2.479784172s ago: executing program 2 (id=1976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="5953fcfffffffddbdf256b00000088000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000ec0)={0x1}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xbc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) lstat(&(0x7f00000021c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000031c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {r7, r8+10000000}}, &(0x7f0000000e00)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/zoneinfo\x00', 0x0, 0x0) 2.366657604s ago: executing program 0 (id=1977): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000100)=0x4f, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) 2.257202796s ago: executing program 0 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) (fail_nth: 2) 2.226998257s ago: executing program 2 (id=1979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) ppoll(&(0x7f0000000000)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1.950701862s ago: executing program 4 (id=1980): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x4ed2, &(0x7f00000002c0)={0x0, 0x35d6, 0x8000, 0x3, 0x15b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ec2000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x71, 0xc3, &(0x7f0000000500)="ba39d3d88ffdd510be35760120f64f80338936573f20918dcec044a28ca2bb4a6c7a851314b90de501807132f2970fcc394b07537b99671ceaa6f2eb8a44bdffae7eb2e0e39850af1ac3efd6ae6ae73cec89418e127f0e98f21667b33db6159aaeca4e2b6b824a1829b6220dbc61845650", &(0x7f0000000680)=""/195, 0x6, 0x0, 0xcc, 0x67, &(0x7f0000000780)="fe76a7bef958c90818b21ce9d56a02ba9ab2a2fad5ea3a0fd9b038609eba078fa0c5a2e9290d0c95d3ee40cef83dfad588573d5c9086248accf27613f7080d14a54d5bbca3de6f14a152966b36a8eb69467a67e5fea5ee492466eb7bf0172dec892c8a80e8c5683c0ca89a7b1b05b661f44145256647dd36700a758f35fac7f6306ef224e82390e8697bfd00db344dbea800d571a97bedcf6a87e4e07ef24729facef081955e24ce4168f1c7e4f37ba84bf4f48f95dca21a95fe373d6a3f92036b34823b1c3eccee352a6a1b", &(0x7f0000000880)="533716b4086a10d136b58b6750c719b3145e8f5d7c4e3856bc60f577556afacb0b639eb517d3211da1c92bb894ef046e10a39a69f104dd2b83be62c68d76bb9265dfef61254f5a1ae39da79a4fe6801b18508d362901aa422f77c634ffc4d69c4f0639e9d21a94", 0x7, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) fcntl$lock(r4, 0x24, &(0x7f00000002c0)={0x2, 0x3, 0x10001, 0x2}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x91ea6c1af182532) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000000)={0x2, r7}) pwritev2(r5, &(0x7f0000022e80)=[{&(0x7f0000000240)="8a", 0x1}], 0x2b8, 0x0, 0x8000, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="0000000000000000db0000000001000018000000010000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) close(r3) 1.906616993s ago: executing program 0 (id=1981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) ioperm(0x2, 0x7, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15", 0x2}], 0x1, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 1.888805933s ago: executing program 3 (id=1982): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x2, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) symlink(0x0, &(0x7f0000000480)='./file0\x00') r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x3, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast1}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000180)=[{0x28, 0x111, 0x7fffffff, "152ad1b30a2dc12d46674e5121df5231b1"}, {0xb8, 0x6, 0x6012f253, "23f7c2c44a14c9a4765fbeb47398a1feed88ab1b7c3eb890d65bf93a42f37416c8390c448f1494c8d4ca5744846e2d7b8c4557e2c8a59c6390c7fbed7380da40410d37c686fb6da9b68bb2c7a16dc7b59df60b75b4cd1f7973471765cef61ffab51344eb3f29544b2a6d8c75b707ee812a11f232a04595c054232a82850c134ca1c01e82ea5cffb5a8aa30a0dc8793c96273689f64aa58e26446553d7adf9e9e2d0da89a2df3"}, {0x88, 0x10f, 0xf5, "f5f00a8e10fdd194f7d70fce2d85fdd35a7dce26390347861b8e8ea128f68fa35e62f032fde04811560c8f15c45eaa4b3e668f11728ec98adb58f59449dee12b22dde5c0a5a4ae00d189f308af374840ec6a4cc51e71f8ce4b812ccb07419eff7f612f82ea0b095903b78c150c76ef949c7e3e0762"}, {0x20, 0x102, 0x8, "310462e6325bb695851eee0a"}, {0xf0, 0x1, 0x10000, "cfde1128168fea9f76c8d9a8ab20fbdaaa98fa99dc2ef33cff82d944c0996997a77e58fb4f31f3f3528e9fceb8fec3c420d6d9f21e46890a6a0246cee531344bd3be92aea1cc69fae4ba70d0908a2847855100d22199cd72c2e7cae079c2fb1f9ff88862e69f5c64cb6978332593a0ccc55a12fce3271e07616f451a232f1a5029d5a8795c27139ee90bb382ed1e6e7f57eb3481b07f8a901f61648ffb6daab243d9401d5cfc43c2d54f2c220dd0d3a916280e149c4139a5508157aba726c67a24caf6d38bf805b3d666ed0378464d0af4ca7d81f31d9bda2ae9274980c7d0"}, {0xa8, 0xff, 0x80000001, "e2086295680aa7e594f758f7d63603b76d13f389fdfcd4700feae21d3bc252dc2b9e3668893b1da98b34bcb3e1623a13ed7250965b995e0b923bda1c7ce81afe18fc5070c591e2c04b7066fa2d00961db46280d28e1c645a471f99d2cf624ccaec6b49c2fc47c0321389e10d7731ab406c3e3940b4fa4cf36d99d636c37e389b9700f235423605c77e82e05570a9b6a8a18870be"}, {0x20, 0x10b, 0xffffffff, "8aafe3833e7bac5ab58ca9c8d4bd6b"}, {0xd0, 0x116, 0x3, "1579e2fdf9bec50ee8ded2f008815320bbfa29516a6f7d20f7c9981c20fbc4da5511b6ae9a408ce5bca5f85b72fbd9c40010f5d80e5334143d7c8dd42583591eaaeaac3f388dd95a466110e1da10be6bdb961eb2ccdfd2a654962b1f43639c79ddd63a23f914e87712b7a289cf86c778bf222a5e282d9fa14a102f36d5bc4a7592755bb261c36a96d87e59ef5f50eb209fb2cab0196758067be276d8a6e9eb503232732b31627c500f191557ad0a6fea34a9b93b1561439480d229"}, {0x68, 0x110, 0x101, "eb8c3a14ea4cf4e6cf9c8d133645587c5b31698addc08f0117b075d3a7fe488461a04c35dee4332d3060746fbc314062f5bce42f57fd0e5bfb81f6a3ad8e2e3c879aa9eb4c6ab0cae954e2eca5e4c39f3ed1e3fd"}], 0x478}}, {{&(0x7f0000000600)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000680)="5e7633f7a7027319171ddf5aaf14d6f621301b7535ec13afdee4c1d52232abfce4bf59050a9d357acca09d1dd4c8f01454bb1b2d1a681f59f302f902df7728404248517839bb167b8aa550c0909ed932c653c5595371c4d500c4153017e7971a2401523e3e922e50869b890ceb5ea9025d1eb5682495064044f3ad496169104a80808b7ee3a92a09a92fe9d090449916122b1d1a59", 0x95}, {&(0x7f0000000740)="7c8df18de2cae85b64b085e41d055655e3be52f9c73c2396ad48578722aab909fb50447079aca12e1bbf81da727daaa2d33d1cfde7e172da51433f7b4dca3244d109fc2cce3e7fe176173021e4dd8e6dd558ce9a7ac1da5ee6995d1e63bf8ba56bdd805a9f3106253377b00f661a158808ab63842b1372a6ef99884ce20c54a313ab2d6a0a93981571cd8bd001dfb5e76d49dbd256c6f9c3acdc87141a848033748a65ab05b29ae01cd50e3be8159171c3638019faa80f44613d0d2bcd4b72c515ca31367c369634a5c22d8a5963669de354f92a6d94756b40a85a71e9283f6d881474e352", 0xe5}, {&(0x7f0000000840)="dc6ddc2143bbb3b80c23c5549ef894308ee31c055bb9e34d02bd1861e348e722e698f396d97bf7b00da92d93d7f2fa1f3121fafb76936109b7a629e8d1459513f5fe347826d5756a2362a94beb5b2279d505abd20da4f0d6d436b96d0d00f7ca875cb229aff7846d59324c90ada16811bdcf0078c5585e12ace0adba27b5d5c5aadb802dbbf0d2c1ebc3", 0x8a}, {&(0x7f0000000900)="09bbe4e6c279c7bfdbeebc87512fc4247749518b22c7b9ac567b10d5540e2326efc2ef127f288751f88262759b85626d00b2462e5da77069fc702518372aa47de8b00dc9acb948fb0074862ba60623cd923e6eba9435b42d416489e3f525e14a532cb865c03863766c134581a5291c5d19905a2b99ad650f1ea30b0d263149ac4360c346f79bf6896314a7bb", 0x8c}, {&(0x7f00000009c0)="cbc639d779e05c56c172346df2537da8ffbc7aae76abf146079d51f87523d9457a6e0d1e208460388da4e3e8a440b314467b47f331ab66580d2c16b95dd1ac0ab4fba6a2f960838e7b37ae9a05bd064ab1a61709f6a5770bf601dc00fb4bbf2e5b95fcccc142b31e7e1bae41d0ffd974f64b4b830d0262a3d774face123033d2872d38d7a4679deb456a7ec2faa44e16a697529b94ca9e1583df9a4c1ad281dd62a5d13907", 0xa5}, {&(0x7f00000000c0)="65e06557bb44360024485e98e0", 0xd}], 0x6, &(0x7f0000000b00)=[{0xd0, 0x113, 0xf51030aa, "1f6211897d318f2a323640382e0843e117c082e57735115f3074e3689e85f1903a422b54808f5d7880e257dd3d37b2aec7e98f52179673d237fb47237d985432840b1bd4d70b3b1f204edb0b9a15860c29a133384a382489fadf95f12070a3354baa6e3b354c6e4d47d9f0da4dc67bf64960cd126cfc19240661b50523610dccaa13c1e522dd23254a03492c35861666df485e84b0581d1ee99298c9fda2e93b5187eeb2eaaa28de972155b42eeebb3e2ab2df2465e8f9e8abb98c"}, {0x30, 0x1, 0x3, "31bb7b1f2eaaa70ddc4f39aa90364152f8b4115b179d61d9f747f44d0c"}, {0x20, 0x10a, 0x10000, "07bb6665c3f2123768"}, {0x48, 0x0, 0x7fffffff, "fb03b68d9f5c741ed39168f4a6fe427bfb51cd11cf61544fa98091c450cffc8e6d3b93bbcb4334861f37d27b1eae79e232c48ec91c15bf"}, {0x80, 0x3a, 0x3, "4ec1184f20ab54ed2a529d2e8580a2007d115eecb28c49c62f4a3b3a6b06bd1b3f5d05d44d0c4d57e0a806abb8bdb3bcda768bab606a4a06e674e0056803d91f922e62d049c2794b1afc04560d2769a12803c9f0113c20a515e36d27527ccc7704d6c61ea60d463fa894"}, {0x70, 0x10b, 0x6, "062e74d5b34ef4cccf95c7c9a59c0e2f26008090ece89a89b68e063ceeddc62f1bd44da16e60deb4e23ed0460ffffec2022ea7577e6f53eb4fe908483f3e95bec47b9779d1bc2639821404c31211dcf5a9007d1b0cd60390ac"}, {0x1010, 0x1, 0x0, "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"}, {0xf0, 0xff, 0x100, "075b6734684a3174a2bebd595fd54298ee8dbc02a124c0696ff41aaadd67aa832fd76151a8bc833160bc67ae85855e2a2831b87ea20d683ab966dc3da75ce1eb6514586249316ab3e5fa9802cd0174c6cef51534587889d173c35527c5908f4db9e585fcf36b6de9f76a7beb7c881424ab01f860a6f55fdb2258d17d59786cf6f2a458cab96427ce02ece1bab3f23d307bf2181a7c995c1c669d828f633d61e624b15cefb598185731f8555c5c481822320ef02c040cbd77652a6466b2d0d5f23acc5157182c42bef7362fff37a4317d69fcc703ad34fea9cdc2"}], 0x1358}}], 0x2, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}}, 0x24040084) socket$caif_stream(0x25, 0x1, 0x4) 1.888238623s ago: executing program 4 (id=1983): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0xfffffffd, 0x80000000, 0x0, 0x2, 0x89b}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000140)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@journal_async_commit}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400000000000200128408000100736974001400028000090004000000060008fce872e46d46"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000340)=0x718d, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r4 = memfd_create(0x0, 0x3) fcntl$addseals(r4, 0x409, 0xb) r5 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) clock_gettime(0x0, &(0x7f00000002c0)) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c110000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25090000000500050002000000080004000900000004000680140001800600010002000000060001000a0000004000068014000400ff0200000000000000000000000000010800030000000000060001000a000000060005004e20000008000600000000000800030064010101"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x40080) 1.851999774s ago: executing program 3 (id=1984): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async, rerun: 32) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async, rerun: 64) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) (rerun: 64) keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0) (async) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@local, @empty, 0xffffffffffffffff, "d8bc726fdbcf6461b66c1541a8f5afe6c6d77721ad1d84e663f58c49e780a3a5", 0x9, 0x0, 0x9, 0x1}, 0x3c) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r8 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async, rerun: 32) waitid(0x0, 0x0, 0xfffffffffffffffd, 0x2, &(0x7f0000002600)) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000340)=0x1) (async) setreuid(0x0, 0xee00) 1.714589337s ago: executing program 3 (id=1985): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x4}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000880)=0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) ptrace(0x10, r9) 1.627140078s ago: executing program 1 (id=1986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget(0x0, 0x2, 0x2b) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="00c02201d15f60e700000000d7ba20a8"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x800, &(0x7f0000002040), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") unshare(0x2040400) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0) 1.56464827s ago: executing program 4 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) ioperm(0x2, 0x7, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15", 0x2}], 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x218, 0x148, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@empty, @multicast1, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan0\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@inet=@set4={{0x50}, {{0x3, 0x1, 0x1}, {{0xffffffffffffff00}, 0x15}, {{0x24000000000000}, 0x2}, 0x8001}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 0x4e21, 0x4e21, 0x4e23, 0x4e23, 0x400, 0x5, 0x1, 0xffffff00, 0x5}}}, {{@ip={@local, @loopback, 0xff000000, 0xffffff00, 'ip_vti0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2f, 0x0, 0xc}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x3, [0x3a, 0x36, 0x2d, 0x1c, 0x3f, 0x2d, 0x3, 0x24, 0xb, 0x29, 0x33, 0x33, 0x3c, 0x3, 0x2b, 0x3c], 0x2, 0x52dfa6c6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x91, 0x8, [0xc, 0x8, 0x1a, 0x1, 0x30, 0x2f, 0x14, 0x1b, 0x7, 0x16, 0x39, 0x14, 0x3f, 0x17, 0x11, 0x38], 0x1, 0x2, 0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1.366593693s ago: executing program 2 (id=1988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2}}}}]}, 0x4c}}, 0x20000000) (fail_nth: 5) 1.132027268s ago: executing program 2 (id=1989): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) timer_create(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @private2, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x10) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000020000000000000950000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) r3 = syz_io_uring_setup(0x102e, &(0x7f0000000180)={0x0, 0x7a99, 0x800, 0x3, 0x5b, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000300)) syz_io_uring_setup(0x38dc, &(0x7f0000000340)={0x0, 0xd269, 0x0, 0x0, 0x14f, 0x0, r3}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) ioctl$TCXONC(r2, 0x540a, 0x3) r5 = accept$unix(r2, &(0x7f0000000500)=@abs, &(0x7f00000005c0)=0x6e) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000600)={'syzkaller1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r4, @ANYRES16=r2, @ANYRES32, @ANYRES16=0x0], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x113940, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r7, &(0x7f0000000240)='./file0\x00', 0x200) r8 = dup(r1) write$UHID_INPUT(r8, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r9}, 0x18) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x0, 0x0, 0x4, 0x1, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000000)='cpu<=0||!') sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.110947199s ago: executing program 0 (id=1990): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="cc2f68e74934e320b8960920edf7f26e03ee681a5d9e73a3630da2a16ba9c3d2c3a1fcc6686e2c8d4d27e18d66b4dac036c0999cecfcd93d8189323297b23f3bf1d97f5fcac2de9d133d6de7a665a5fd15a22b6cfad0c0bd2a4846e10a8b9049e4985a1d6d6be831144926ba1d5dde2408832e3348a690b474ac374c8ab2ede617a5ade80dc556e42fde700f12aa5a156613d016872e0cd4ebbd2bf79cb7dcce5d23dc4a3af7f7ee", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0xd80d, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106000200000000000008000000", @ANYRES32=0xee01, @ANYBLOB="b7000000"], 0x1c}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x80003, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000"], 0xe4}}, 0x0) 1.04922445s ago: executing program 2 (id=1991): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0xb, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7", @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) unshare(0x62040200) 1.04843423s ago: executing program 0 (id=1992): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$read(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000780)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x480002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="24000000530400030000fedb4907df2501e883cff35843afab94590e413b615e9e000000"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) 866.513873ms ago: executing program 0 (id=1993): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x7007}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r5, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r3) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 865.785603ms ago: executing program 3 (id=1994): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0x14000}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 'lblcr\x00'}, 0x2c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010100, 0x0, 0xfffffffc, 'lc\x00'}, 0x2c) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x8) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, 0x0}, 0x4000040) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b5030200000000008500000090000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 652.547797ms ago: executing program 1 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 646.714377ms ago: executing program 4 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x68, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x59}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x48, 0x1}, {0x36}, {0x16}, {0x36, 0x1}, {0x36}, {0x12}, {0x16}, {0xb, 0x1}, {0x30}, {0x1, 0x1}, {0x60}, {0x30}, {0x2, 0x1}, {0x48}, {0x60, 0x1}, {0x9, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x9}, {0x24, 0x1}, {0x5e, 0x1}, {0x2}, {0x9}, {0x6c}, {0x24}, {0x12}, {0x16}, {0x1b, 0x1}, {0x1, 0x1}, {0x6c, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0xe}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x28b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7d3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40851}, 0x40800) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x2, 0x4, 0x10, 0x0, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_io_uring_complete(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x60) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000004640)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004600)={&(0x7f0000003fc0)={0x63c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffffc, 0x1b}}}}, [@NL80211_ATTR_FRAME={0x420, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @random="acd040dcb5b5", {0x4, 0xe5}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x304, 0x7, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x7, 0x7, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x0, 0x71}}, [{0xdd, 0x4b, "6b7b8f1d9cf8342ab661525b613fc5d124729863c503ac5ed7814dd25ee80cd24903983c926c61ae7daf943892156451fe8282a52a14fef25873d74eb5d37199edf56eefb6d5babd5439f8"}, {0xdd, 0x75, "f48152e109c304dc22c775603455ae111654e386717c51a440001fa45f462c790c988785ebd672ce0e668b5656d9d448e10b807bd0feba0ac65c0fed8ec29a12ee0dbd27d223ac9520102552d728dd0ec4bc08f72fc1cc670d192ee97c9bbfbe6ad782cbfa86e95dfaca2a582043b031c8ccfa944d"}, {0xdd, 0xc1, "1bad05802a8a5370aa4dfa4e329c98f53d8cd4802a90097037b3117d229b5d0da789a434eaf7807a5b5a13717d6ac846d3f284dccdaa80b86931c4e6269ba2aad6bdc59f0eda03418505cae289600c09e0ac476da4385d45495a2407dc383fdcc406b811efa009e24b6cc35a19f895f0304cb107fa817b05c5255feb966263c0ac6ccd83ecd36c4cafa49b798595e74b5ad43d0c6191d8fde13ea3acd9a67729da700190ea47667a5d0d8545850b142bda19d4110efd1d52c3acb9f68b627338df"}, {0xdd, 0xa7, "a59adafb3bb716053d595136bfaa12443ebe6b75e6597ad52ad67a1a2378b1f4eedf675d643c5aee04405c0a8958d3e6b28e7e0ee51a13678e5cdb28c1c8ef89c184e73c568718edcd0a6b2f73933f1a2261c5d36b0c6c5e6fc317e5d0403af78752e24f1d07f4ee32d7aceaf628cd476145f262a2656998c3d7d2a0dd15ebea0cc43bc483aca82ca38a29936b5e74e6016615fa08790f779c3d17044c16ad289ff1fc8cfb7622"}, {0xdd, 0x65, "cf21f0651f2b9f02d42bdb96015a01f9b24507ae28004c56c51f549d4691f00133f62c93e8ffe6b05e33811b1f2b96228d1c7510359068c3d09dce05b13c109fa92387b1f24e63492f724da7101e81177776d957c9684aa11281a3c12e3b9cb677712b37d4"}, {0xdd, 0x7f, "6d4c9429ad84f5f32e0bf314e40b36721a60f7383b83982eb39de199d8e5499cf07eb248c3cb6a55e59d0ba8fd332ddf078aa66c9fff3d012aea8f4d1f456295ccc948d703e8ec8714328c8280ceddbc74b3e128343e811c5937f6f59312206561a60c25fe24affe3fb904241149e221045d3a2531641ead34cc6a076e0c2d"}, {0xdd, 0xbe, "907d40f52f7643454071df9f7154d6bf4803c84214343355902196d8b9a86233400df34576e8df77aa959a0a22207c3085ef077fc4c93f85388c8af5abcc0e2e5119846d2c92ac0ab3f132f7d9e9f2e3384bfea98ba22b6ec9bc7ddac8c60919f8f30d8d744f7c6d2a3fc2e2ef6d2b7adf11022a161608a8c28b5ec4eac6a7d8a703adc59eff7624ddf8bac1da80a81cf030a23319dd3e88df3121469c0e6ffb9e9ae514290f588d0ee32ac32caf174e8b378d48d77f81bfb6e0ba0c304a"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x2, @from_mac=@device_b}}, @NL80211_ATTR_FRAME={0x1ba, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4348}, @device_a, @device_b, @initial, {0x5, 0x9}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x62, 0x32, @default, @void, @void, [{0xdd, 0xcb, "37062b190395cb191d2a9cf87f3a34fb251d22d2d5a078ddfc5014821f96ee87cb5696691c9b247697bae79192dbf94627f75625186828d7345eefe3fb5d48c39ae6a3a6788577e51dcbc55205901bcd985f44716cd34a6b62e4c4980611e16b0324c85b1056ea8cab1aafe5fb75ee949dc6d2f6a3b7c6f8a07239b329380f5b3955a7f9b49915c1890a6dac3e004fd6f5b3d233df3f00328d0c5c2265f59c550e604ef65a17804805ad43ccd48c669bffe2d92265411fc526204d8925322ee3d2347148b1e8c2aafd31a6"}, {0xdd, 0xb, "47de968dc8991917888d33"}, {0xdd, 0xb8, "740ea6317e584aa914720f0b38a3e0ebd557174dcac1ebe46443b49ff4c55ddf42248f91579514cd3239594d69be75e9096a01f2e3545f630ff928dd39828c4204a43958ab245ddbd6fab1c2bf1d5472bd44c753a5788b63d4240930a454b0eb21101cef759e3b9b668948c7488934ae2bfe258bd8ce1af837991b4f9ec62ef89212846143803ebb1c026e558d8261f41ef619602fcc634e949ce1df377829de3715f95bc03073dca994eabed289641dec7536b9e7db8116"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x63c}, 0x1, 0x0, 0x0, 0x4080}, 0x40040) sendmsg$rds(r5, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)=""/201, 0xc9}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000280)}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000580)=""/235, 0xeb}], 0x7, &(0x7f0000003c00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x6}, {&(0x7f0000000780)=""/233, 0xe9}, &(0x7f0000000700)=[{&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x2, 0x4, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x2}, &(0x7f0000000880)=0x2, &(0x7f00000008c0), 0x7, 0x10000, 0xffffffffffffb2a3, 0x29f08e21, 0x0, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0xf, 0x8001}, &(0x7f0000000900)=0x8000000000000001, &(0x7f0000000940)=0x6, 0x8000000000000001, 0x40, 0x7, 0x1, 0x11, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7576, 0x8}, &(0x7f0000000980)=0xffffffff, &(0x7f00000009c0)=0xde69, 0x3, 0x1000, 0x8000000000000001, 0x7, 0x2, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x51d, 0x80000000}, &(0x7f0000000a00)=0xfffffffffffffff8, &(0x7f0000000a40)=0x5, 0x6a, 0xcd, 0x1ff, 0x8, 0x44, 0x80}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x1d8, 0x44040}, 0x4044d04) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@mpls_getnetconf={0x2c, 0x52, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x99c3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8a6d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 478.519261ms ago: executing program 1 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) io_setup(0x543, &(0x7f00000002c0)=0x0) io_getevents(r2, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], &(0x7f0000000400)={0x0, 0x989680}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x1000, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 399.457802ms ago: executing program 3 (id=1998): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 70.799908ms ago: executing program 3 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000016c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x800000009) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00', 0x2000}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r5}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 59.661859ms ago: executing program 2 (id=2000): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0xd}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r3, 0x0, 0xbf5, 0x2000402) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000080030fee04000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRESHEX=r4, @ANYRES16=r9, @ANYRES16=0x0, @ANYRESOCT=r9, @ANYRES64=r10, @ANYRES64=r8, @ANYRES32=r2, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRESHEX=r4, @ANYRES16=r9, @ANYRES16=0x0, @ANYRESOCT=r9, @ANYRES64=r10, @ANYRES64=r8, @ANYRES32=r2, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x3}, 0x18) (async) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x3}, 0x18) r13 = gettid() process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x8, 0xca, 0x5, 0x7, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x73, 0x7fffffffffffffff}, 0x493177c15965dfe9, 0x0, 0x5, 0x0, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0x7}, r13, 0xf, r12, 0x0) stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)) statx(0xffffffffffffffff, &(0x7f00000019c0)='./file0\x00', 0x800, 0x1, &(0x7f0000001a00)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b00), 0x228501) socket(0x2, 0x80805, 0xfffffffe) (async) r14 = socket(0x2, 0x80805, 0xfffffffe) sendmmsg$inet(r14, &(0x7f0000000f80)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd9a}}], 0x18}}], 0x2, 0x8000080) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r15}, 0x18) 0s ago: executing program 4 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) ioperm(0x2, 0x7, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15", 0x2}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): nux_transaction_write+0xc6/0x110 [ 136.602589][ T8188] ? __pfx_selinux_transaction_write+0x10/0x10 [ 136.602619][ T8188] vfs_write+0x266/0x960 [ 136.602651][ T8188] ? __rcu_read_unlock+0x4f/0x70 [ 136.602743][ T8188] ? __fget_files+0x184/0x1c0 [ 136.602805][ T8188] ksys_write+0xda/0x1a0 [ 136.602834][ T8188] __x64_sys_write+0x40/0x50 [ 136.602857][ T8188] x64_sys_call+0x27fe/0x2ff0 [ 136.602879][ T8188] do_syscall_64+0xd2/0x200 [ 136.603002][ T8188] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.603027][ T8188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.603105][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.603126][ T8188] RIP: 0033:0x7fb9bcc3eec9 [ 136.603144][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.603164][ T8188] RSP: 002b:00007fb9bb69f038 EFLAGS: 00000246 [ 136.603229][ T8191] lo speed is unknown, defaulting to 1000 [ 136.603248][ T8188] ORIG_RAX: 0000000000000001 [ 136.603257][ T8188] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3eec9 [ 136.603273][ T8188] RDX: 0000000000000041 RSI: 0000200000000400 RDI: 000000000000000b [ 136.603297][ T8188] RBP: 00007fb9bb69f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.603314][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.603331][ T8188] R13: 00007fb9bce96038 R14: 00007fb9bce95fa0 R15: 00007fffb8fd3a88 [ 136.603358][ T8188] [ 136.866576][ C1] hrtimer: interrupt took 47513 ns [ 136.885071][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.925741][ T8194] loop2: detected capacity change from 0 to 1024 [ 136.938763][ T8194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.953115][ T8194] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.013284][ T8209] FAULT_INJECTION: forcing a failure. [ 137.013284][ T8209] name failslab, interval 1, probability 0, space 0, times 0 [ 137.025958][ T8209] CPU: 0 UID: 0 PID: 8209 Comm: syz.3.1742 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.025989][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.026044][ T8209] Call Trace: [ 137.026052][ T8209] [ 137.026062][ T8209] __dump_stack+0x1d/0x30 [ 137.026085][ T8209] dump_stack_lvl+0xe8/0x140 [ 137.026103][ T8209] dump_stack+0x15/0x1b [ 137.026131][ T8209] should_fail_ex+0x265/0x280 [ 137.026157][ T8209] should_failslab+0x8c/0xb0 [ 137.026180][ T8209] kmem_cache_alloc_noprof+0x50/0x310 [ 137.026249][ T8209] ? alloc_empty_file+0x76/0x200 [ 137.026359][ T8209] ? mntput+0x4b/0x80 [ 137.026413][ T8209] alloc_empty_file+0x76/0x200 [ 137.026443][ T8209] path_openat+0x68/0x2170 [ 137.026490][ T8209] ? _parse_integer_limit+0x170/0x190 [ 137.026516][ T8209] ? kstrtoull+0x111/0x140 [ 137.026546][ T8209] ? kstrtouint+0x76/0xc0 [ 137.026577][ T8209] do_filp_open+0x109/0x230 [ 137.026614][ T8209] do_sys_openat2+0xa6/0x110 [ 137.026686][ T8209] __x64_sys_openat+0xf2/0x120 [ 137.026821][ T8209] x64_sys_call+0x2e9c/0x2ff0 [ 137.026842][ T8209] do_syscall_64+0xd2/0x200 [ 137.026900][ T8209] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.026932][ T8209] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.027178][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.027205][ T8209] RIP: 0033:0x7ff3946aeec9 [ 137.027224][ T8209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.027248][ T8209] RSP: 002b:00007ff3930cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.027294][ T8209] RAX: ffffffffffffffda RBX: 00007ff394906180 RCX: 00007ff3946aeec9 [ 137.027306][ T8209] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 137.027322][ T8209] RBP: 00007ff3930cd090 R08: 0000000000000000 R09: 0000000000000000 [ 137.027337][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.027352][ T8209] R13: 00007ff394906218 R14: 00007ff394906180 R15: 00007ffccb937688 [ 137.027376][ T8209] [ 137.242819][ T8209] lo speed is unknown, defaulting to 1000 [ 137.277452][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 137.277466][ T29] audit: type=1400 audit(2000000324.467:19081): avc: denied { setcheckreqprot } for pid=8195 comm="syz.3.1742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.313698][ T8194] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 137.375474][ T8194] EXT4-fs (loop2): Remounting filesystem read-only [ 137.420833][ T29] audit: type=1400 audit(2000000324.509:19082): avc: denied { create } for pid=8207 comm="syz.1.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.442448][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.463057][ T8214] FAULT_INJECTION: forcing a failure. [ 137.463057][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.477943][ T8214] CPU: 0 UID: 0 PID: 8214 Comm: syz.1.1747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.478031][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.478044][ T8214] Call Trace: [ 137.478062][ T8214] [ 137.478071][ T8214] __dump_stack+0x1d/0x30 [ 137.478096][ T8214] dump_stack_lvl+0xe8/0x140 [ 137.478140][ T8214] dump_stack+0x15/0x1b [ 137.478155][ T8214] should_fail_ex+0x265/0x280 [ 137.478225][ T8214] should_fail+0xb/0x20 [ 137.478329][ T8214] should_fail_usercopy+0x1a/0x20 [ 137.478359][ T8214] _copy_to_user+0x20/0xa0 [ 137.478398][ T8214] simple_read_from_buffer+0xb5/0x130 [ 137.478443][ T8214] proc_fail_nth_read+0x10e/0x150 [ 137.478476][ T8214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.478519][ T8214] vfs_read+0x1a5/0x770 [ 137.478544][ T8214] ? __rcu_read_unlock+0x4f/0x70 [ 137.478634][ T8214] ? __fget_files+0x184/0x1c0 [ 137.478664][ T8214] ksys_read+0xda/0x1a0 [ 137.478717][ T8214] __x64_sys_read+0x40/0x50 [ 137.478744][ T8214] x64_sys_call+0x27bc/0x2ff0 [ 137.478766][ T8214] do_syscall_64+0xd2/0x200 [ 137.478797][ T8214] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.478860][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.478887][ T8214] RIP: 0033:0x7fdcca69d8dc [ 137.478903][ T8214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 137.478920][ T8214] RSP: 002b:00007fdcc90de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.478938][ T8214] RAX: ffffffffffffffda RBX: 00007fdcca8f6090 RCX: 00007fdcca69d8dc [ 137.478955][ T8214] RDX: 000000000000000f RSI: 00007fdcc90de0a0 RDI: 0000000000000005 [ 137.479020][ T8214] RBP: 00007fdcc90de090 R08: 0000000000000000 R09: 0000000000000000 [ 137.479034][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.479059][ T8214] R13: 00007fdcca8f6128 R14: 00007fdcca8f6090 R15: 00007ffd3ee1cc28 [ 137.479107][ T8214] [ 137.735717][ T8220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8220 comm=syz.3.1750 [ 137.791703][ T29] audit: type=1400 audit(2000000325.013:19083): avc: denied { setopt } for pid=8225 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.845168][ T29] audit: type=1400 audit(2000000325.045:19084): avc: denied { ioctl } for pid=8225 comm="syz.1.1752" path="socket:[20903]" dev="sockfs" ino=20903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.902125][ T8234] loop3: detected capacity change from 0 to 1024 [ 137.909101][ T8234] EXT4-fs: Ignoring removed orlov option [ 137.914841][ T8234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.975843][ T8234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.041236][ T8235] lo speed is unknown, defaulting to 1000 [ 138.129196][ T8234] EXT4-fs (loop3): shut down requested (1) [ 138.218180][ T8249] futex_wake_op: syz.3.1753 tries to shift op by -1; fix this program [ 138.247812][ T8248] 9pnet_fd: p9_fd_create_unix (8248): problem connecting socket: ./file0: -2 [ 138.270666][ T8248] tipc: Started in network mode [ 138.275576][ T8248] tipc: Node identity ac14140f, cluster identity 4711 [ 138.284702][ T29] audit: type=1400 audit(2000000325.433:19085): avc: denied { ioctl } for pid=8244 comm="+}[@" path="socket:[21710]" dev="sockfs" ino=21710 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.301906][ T8248] tipc: New replicast peer: 255.255.255.255 [ 138.309700][ T29] audit: type=1400 audit(2000000325.538:19086): avc: denied { create } for pid=8244 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.315683][ T8248] tipc: Enabled bearer , priority 10 [ 138.317262][ T8253] FAULT_INJECTION: forcing a failure. [ 138.317262][ T8253] name failslab, interval 1, probability 0, space 0, times 0 [ 138.334921][ T29] audit: type=1400 audit(2000000325.538:19087): avc: denied { read } for pid=8244 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.341134][ T8253] CPU: 1 UID: 0 PID: 8253 Comm: syz.0.1758 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.341167][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.341183][ T8253] Call Trace: [ 138.341191][ T8253] [ 138.341201][ T8253] __dump_stack+0x1d/0x30 [ 138.341298][ T8253] dump_stack_lvl+0xe8/0x140 [ 138.341398][ T8253] dump_stack+0x15/0x1b [ 138.341431][ T8253] should_fail_ex+0x265/0x280 [ 138.341467][ T8253] should_failslab+0x8c/0xb0 [ 138.341500][ T8253] kmem_cache_alloc_noprof+0x50/0x310 [ 138.341576][ T8253] ? getname_flags+0x80/0x3b0 [ 138.341619][ T8253] getname_flags+0x80/0x3b0 [ 138.341695][ T8253] do_sys_openat2+0x60/0x110 [ 138.341743][ T8253] __x64_sys_openat+0xf2/0x120 [ 138.341872][ T8253] x64_sys_call+0x2e9c/0x2ff0 [ 138.341934][ T8253] do_syscall_64+0xd2/0x200 [ 138.341981][ T8253] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.342064][ T8253] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.342107][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.342130][ T8253] RIP: 0033:0x7fb9bcc3eec9 [ 138.342145][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.342235][ T8253] RSP: 002b:00007fb9bb67e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.342332][ T8253] RAX: ffffffffffffffda RBX: 00007fb9bce96090 RCX: 00007fb9bcc3eec9 [ 138.342350][ T8253] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 138.342367][ T8253] RBP: 00007fb9bb67e090 R08: 0000000000000000 R09: 0000000000000000 [ 138.342385][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.342403][ T8253] R13: 00007fb9bce96128 R14: 00007fb9bce96090 R15: 00007fffb8fd3a88 [ 138.342429][ T8253] [ 138.548870][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.623292][ T8264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8264 comm=syz.1.1760 [ 138.654720][ T8265] loop4: detected capacity change from 0 to 2048 [ 138.662087][ T29] audit: type=1400 audit(2000000325.916:19088): avc: denied { read } for pid=8266 comm="syz.0.1763" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.722425][ T8265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.736665][ T29] audit: type=1400 audit(2000000325.958:19089): avc: denied { write } for pid=8256 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.765299][ T8270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8270 comm=syz.3.1764 [ 138.779364][ T8265] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 138.838495][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.843915][ T8283] loop0: detected capacity change from 0 to 2048 [ 138.875468][ T8290] FAULT_INJECTION: forcing a failure. [ 138.875468][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 138.888312][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.4.1767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.888347][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.888365][ T8290] Call Trace: [ 138.888377][ T8290] [ 138.888454][ T8290] __dump_stack+0x1d/0x30 [ 138.888475][ T8290] dump_stack_lvl+0xe8/0x140 [ 138.888529][ T8290] dump_stack+0x15/0x1b [ 138.888554][ T8290] should_fail_ex+0x265/0x280 [ 138.888580][ T8290] should_failslab+0x8c/0xb0 [ 138.888605][ T8290] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 138.888638][ T8290] ? __d_alloc+0x3d/0x340 [ 138.888732][ T8290] __d_alloc+0x3d/0x340 [ 138.888807][ T8290] ? mpol_shared_policy_init+0xbd/0x4c0 [ 138.888871][ T8290] d_alloc_pseudo+0x1e/0x80 [ 138.888909][ T8290] alloc_file_pseudo+0x71/0x160 [ 138.888966][ T8290] ? __se_sys_memfd_create+0x1cc/0x590 [ 138.889004][ T8290] __shmem_file_setup+0x1de/0x210 [ 138.889071][ T8290] shmem_file_setup+0x3b/0x50 [ 138.889093][ T8290] __se_sys_memfd_create+0x2c3/0x590 [ 138.889122][ T8290] __x64_sys_memfd_create+0x31/0x40 [ 138.889177][ T8290] x64_sys_call+0x2abe/0x2ff0 [ 138.889203][ T8290] do_syscall_64+0xd2/0x200 [ 138.889243][ T8290] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.889267][ T8290] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.889351][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.889378][ T8290] RIP: 0033:0x7f88dea1eec9 [ 138.889394][ T8290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.889477][ T8290] RSP: 002b:00007f88dd486e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 138.889502][ T8290] RAX: ffffffffffffffda RBX: 0000000000000295 RCX: 00007f88dea1eec9 [ 138.889517][ T8290] RDX: 00007f88dd486ef0 RSI: 0000000000000000 RDI: 00007f88deaa2960 [ 138.889532][ T8290] RBP: 0000200000000640 R08: 00007f88dd486bb7 R09: 00007f88dd486e40 [ 138.889546][ T8290] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 138.889560][ T8290] R13: 00007f88dd486ef0 R14: 00007f88dd486eb0 R15: 0000200000000540 [ 138.889658][ T8290] [ 139.103631][ T8283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.121083][ T8298] loop1: detected capacity change from 0 to 1024 [ 139.132309][ T8298] EXT4-fs: Ignoring removed orlov option [ 139.138135][ T8298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.150519][ T8301] loop4: detected capacity change from 0 to 512 [ 139.174879][ T8301] EXT4-fs: dax option not supported [ 139.181604][ T8298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.210737][ T8295] EXT4-fs (loop1): shut down requested (1) [ 139.245628][ T29] audit: type=1400 audit(2000000326.525:19090): avc: denied { bind } for pid=8302 comm="syz.3.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.274657][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 139.297710][ T8295] futex_wake_op: syz.1.1769 tries to shift op by -1; fix this program [ 139.309041][ T8317] loop3: detected capacity change from 0 to 128 [ 139.319960][ T8299] lo speed is unknown, defaulting to 1000 [ 139.354726][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.365289][ T8317] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.377400][ T3386] tipc: Node number set to 2886997007 [ 139.384236][ T8317] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.419945][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.437002][ T8329] loop1: detected capacity change from 0 to 164 [ 139.444069][ T8329] iso9660: Unknown parameter '' [ 139.450877][ T8329] siw: device registration error -23 [ 139.568336][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.620010][ T8340] loop1: detected capacity change from 0 to 512 [ 139.718416][ T8340] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1779: corrupted in-inode xattr: invalid ea_ino [ 139.742122][ T8340] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1779: couldn't read orphan inode 15 (err -117) [ 139.756690][ T8344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8344 comm=syz.0.1775 [ 139.802469][ T8340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.252731][ T8345] lo speed is unknown, defaulting to 1000 [ 140.314076][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.326492][ T8355] netlink: 'syz.0.1782': attribute type 60 has an invalid length. [ 140.387993][ T8357] loop0: detected capacity change from 0 to 1024 [ 140.405784][ T8357] EXT4-fs: Ignoring removed orlov option [ 140.411521][ T8357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.434990][ T8361] netlink: 'syz.2.1785': attribute type 60 has an invalid length. [ 140.461714][ T8361] FAULT_INJECTION: forcing a failure. [ 140.461714][ T8361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.474949][ T8361] CPU: 0 UID: 0 PID: 8361 Comm: syz.2.1785 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.475017][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.475033][ T8361] Call Trace: [ 140.475040][ T8361] [ 140.475047][ T8361] __dump_stack+0x1d/0x30 [ 140.475068][ T8361] dump_stack_lvl+0xe8/0x140 [ 140.475142][ T8361] dump_stack+0x15/0x1b [ 140.475194][ T8361] should_fail_ex+0x265/0x280 [ 140.475287][ T8361] should_fail+0xb/0x20 [ 140.475313][ T8361] should_fail_usercopy+0x1a/0x20 [ 140.475389][ T8361] _copy_to_user+0x20/0xa0 [ 140.475427][ T8361] simple_read_from_buffer+0xb5/0x130 [ 140.475456][ T8361] proc_fail_nth_read+0x10e/0x150 [ 140.475501][ T8361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.475530][ T8361] vfs_read+0x1a5/0x770 [ 140.475553][ T8361] ? __rcu_read_unlock+0x4f/0x70 [ 140.475653][ T8361] ? __fget_files+0x184/0x1c0 [ 140.475689][ T8361] ksys_read+0xda/0x1a0 [ 140.475769][ T8361] __x64_sys_read+0x40/0x50 [ 140.475798][ T8361] x64_sys_call+0x27bc/0x2ff0 [ 140.475826][ T8361] do_syscall_64+0xd2/0x200 [ 140.475860][ T8361] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.475885][ T8361] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.475919][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.476012][ T8361] RIP: 0033:0x7fcfe389d8dc [ 140.476033][ T8361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.476103][ T8361] RSP: 002b:00007fcfe22ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.476128][ T8361] RAX: ffffffffffffffda RBX: 00007fcfe3af5fa0 RCX: 00007fcfe389d8dc [ 140.476186][ T8361] RDX: 000000000000000f RSI: 00007fcfe22ff0a0 RDI: 0000000000000008 [ 140.476198][ T8361] RBP: 00007fcfe22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 140.476210][ T8361] R10: 0000000000000d81 R11: 0000000000000246 R12: 0000000000000001 [ 140.476224][ T8361] R13: 00007fcfe3af6038 R14: 00007fcfe3af5fa0 R15: 00007ffe366b85a8 [ 140.476247][ T8361] [ 140.703017][ T8357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.718502][ T8357] EXT4-fs (loop0): shut down requested (1) [ 140.727019][ T8357] futex_wake_op: syz.0.1783 tries to shift op by -1; fix this program [ 140.738422][ T8363] netlink: 'syz.3.1786': attribute type 60 has an invalid length. [ 140.749303][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.766295][ T8369] loop4: detected capacity change from 0 to 164 [ 140.773088][ T8369] iso9660: Unknown parameter '' [ 140.780137][ T8369] siw: device registration error -23 [ 140.785530][ T8372] loop2: detected capacity change from 0 to 128 [ 140.817731][ T9] Process accounting resumed [ 140.825082][ T8377] process 'syz.4.1790' launched '/dev/fd/13' with NULL argv: empty string added [ 140.836537][ T8377] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.866001][ T8377] loop4: detected capacity change from 0 to 1024 [ 140.867964][ T8383] loop0: detected capacity change from 0 to 512 [ 140.879862][ T8377] EXT4-fs: Ignoring removed nobh option [ 140.880285][ T8383] EXT4-fs: journaled quota format not specified [ 140.885919][ T8377] EXT4-fs: dax option not supported [ 140.923297][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1792'. [ 140.938637][ T8383] netlink: 'syz.0.1792': attribute type 13 has an invalid length. [ 140.949089][ T328] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.959973][ T328] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.970248][ T328] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.979907][ T328] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.994221][ T8386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8386 comm=syz.2.1793 [ 141.026227][ T8396] FAULT_INJECTION: forcing a failure. [ 141.026227][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.039313][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.039416][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.039429][ T8396] Call Trace: [ 141.039436][ T8396] [ 141.039444][ T8396] __dump_stack+0x1d/0x30 [ 141.039467][ T8396] dump_stack_lvl+0xe8/0x140 [ 141.039489][ T8396] dump_stack+0x15/0x1b [ 141.039508][ T8396] should_fail_ex+0x265/0x280 [ 141.039579][ T8396] should_fail+0xb/0x20 [ 141.039602][ T8396] should_fail_usercopy+0x1a/0x20 [ 141.039629][ T8396] strncpy_from_user+0x25/0x230 [ 141.039680][ T8396] keyctl_restrict_keyring+0x80/0x1b0 [ 141.039713][ T8396] __se_sys_keyctl+0x1ed/0xb80 [ 141.039740][ T8396] ? __rcu_read_unlock+0x4f/0x70 [ 141.039764][ T8396] ? __fget_files+0x184/0x1c0 [ 141.039836][ T8396] ? fput+0x8f/0xc0 [ 141.039928][ T8396] __x64_sys_keyctl+0x67/0x80 [ 141.039972][ T8396] x64_sys_call+0x2f6d/0x2ff0 [ 141.040014][ T8396] do_syscall_64+0xd2/0x200 [ 141.040049][ T8396] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.040095][ T8396] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.040124][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.040142][ T8396] RIP: 0033:0x7fcfe389eec9 [ 141.040155][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.040258][ T8396] RSP: 002b:00007fcfe22ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 141.040279][ T8396] RAX: ffffffffffffffda RBX: 00007fcfe3af5fa0 RCX: 00007fcfe389eec9 [ 141.040294][ T8396] RDX: 0000200000000200 RSI: 000000003bae686c RDI: 000000000000001d [ 141.040308][ T8396] RBP: 00007fcfe22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 141.040326][ T8396] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 141.040341][ T8396] R13: 00007fcfe3af6038 R14: 00007fcfe3af5fa0 R15: 00007ffe366b85a8 [ 141.040364][ T8396] [ 141.301983][ T8401] FAULT_INJECTION: forcing a failure. [ 141.301983][ T8401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.315326][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.0.1799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.315364][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.315376][ T8401] Call Trace: [ 141.315456][ T8401] [ 141.315463][ T8401] __dump_stack+0x1d/0x30 [ 141.315504][ T8401] dump_stack_lvl+0xe8/0x140 [ 141.315523][ T8401] dump_stack+0x15/0x1b [ 141.315539][ T8401] should_fail_ex+0x265/0x280 [ 141.315572][ T8401] should_fail+0xb/0x20 [ 141.315654][ T8401] should_fail_usercopy+0x1a/0x20 [ 141.315677][ T8401] _copy_to_user+0x20/0xa0 [ 141.315723][ T8401] simple_read_from_buffer+0xb5/0x130 [ 141.315752][ T8401] proc_fail_nth_read+0x10e/0x150 [ 141.315813][ T8401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.315841][ T8401] vfs_read+0x1a5/0x770 [ 141.315887][ T8401] ? __rcu_read_unlock+0x4f/0x70 [ 141.315910][ T8401] ? __fget_files+0x184/0x1c0 [ 141.315942][ T8401] ksys_read+0xda/0x1a0 [ 141.315970][ T8401] __x64_sys_read+0x40/0x50 [ 141.315998][ T8401] x64_sys_call+0x27bc/0x2ff0 [ 141.316018][ T8401] do_syscall_64+0xd2/0x200 [ 141.316086][ T8401] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.316108][ T8401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.316136][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.316225][ T8401] RIP: 0033:0x7fb9bcc3d8dc [ 141.316241][ T8401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.316271][ T8401] RSP: 002b:00007fb9bb69f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.316294][ T8401] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3d8dc [ 141.316343][ T8401] RDX: 000000000000000f RSI: 00007fb9bb69f0a0 RDI: 0000000000000006 [ 141.316358][ T8401] RBP: 00007fb9bb69f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.316373][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.316388][ T8401] R13: 00007fb9bce96038 R14: 00007fb9bce95fa0 R15: 00007fffb8fd3a88 [ 141.316412][ T8401] [ 141.547874][ T8406] loop0: detected capacity change from 0 to 164 [ 141.554534][ T8406] iso9660: Unknown parameter '' [ 141.555929][ T8408] loop3: detected capacity change from 0 to 1024 [ 141.562581][ T8406] siw: device registration error -23 [ 141.605374][ T8408] EXT4-fs: Ignoring removed orlov option [ 141.611077][ T8408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.634259][ T8410] lo speed is unknown, defaulting to 1000 [ 141.814363][ T8408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.899472][ T8408] EXT4-fs (loop3): shut down requested (1) [ 141.941162][ T8408] futex_wake_op: syz.3.1801 tries to shift op by -1; fix this program [ 141.968220][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.020603][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.029150][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.093069][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 142.093087][ T29] audit: type=1326 audit(2000000329.527:19390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.123445][ T29] audit: type=1326 audit(2000000329.538:19391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.125258][ T8438] loop2: detected capacity change from 0 to 512 [ 142.146962][ T29] audit: type=1326 audit(2000000329.538:19392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.176867][ T29] audit: type=1326 audit(2000000329.538:19393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.211899][ T29] audit: type=1326 audit(2000000329.643:19394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.235471][ T29] audit: type=1326 audit(2000000329.643:19395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.249750][ T8438] EXT4-fs: journaled quota format not specified [ 142.259083][ T29] audit: type=1326 audit(2000000329.643:19396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.288738][ T29] audit: type=1326 audit(2000000329.643:19397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.312266][ T29] audit: type=1326 audit(2000000329.643:19398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.377238][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1810'. [ 142.389350][ T29] audit: type=1326 audit(2000000329.842:19399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.3.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 142.417039][ T8442] FAULT_INJECTION: forcing a failure. [ 142.417039][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 142.429738][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.3.1811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.429802][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.429821][ T8442] Call Trace: [ 142.429829][ T8442] [ 142.429901][ T8442] __dump_stack+0x1d/0x30 [ 142.429962][ T8442] dump_stack_lvl+0xe8/0x140 [ 142.429984][ T8442] dump_stack+0x15/0x1b [ 142.430003][ T8442] should_fail_ex+0x265/0x280 [ 142.430063][ T8442] should_failslab+0x8c/0xb0 [ 142.430096][ T8442] kmem_cache_alloc_noprof+0x50/0x310 [ 142.430133][ T8442] ? audit_log_start+0x365/0x6c0 [ 142.430268][ T8442] audit_log_start+0x365/0x6c0 [ 142.430305][ T8442] audit_seccomp+0x48/0x100 [ 142.430332][ T8442] ? __seccomp_filter+0x68c/0x10d0 [ 142.430353][ T8442] __seccomp_filter+0x69d/0x10d0 [ 142.430450][ T8442] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 142.430481][ T8442] ? vfs_write+0x7e8/0x960 [ 142.430508][ T8442] ? __rcu_read_unlock+0x4f/0x70 [ 142.430537][ T8442] ? __fget_files+0x184/0x1c0 [ 142.430574][ T8442] __secure_computing+0x82/0x150 [ 142.430639][ T8442] syscall_trace_enter+0xcf/0x1e0 [ 142.430671][ T8442] do_syscall_64+0xac/0x200 [ 142.430751][ T8442] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.430782][ T8442] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.430822][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.430867][ T8442] RIP: 0033:0x7ff3946aeec9 [ 142.430953][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.430978][ T8442] RSP: 002b:00007ff39310f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 142.431080][ T8442] RAX: ffffffffffffffda RBX: 00007ff394905fa0 RCX: 00007ff3946aeec9 [ 142.431097][ T8442] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000003000 [ 142.431113][ T8442] RBP: 00007ff39310f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.431129][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.431145][ T8442] R13: 00007ff394906038 R14: 00007ff394905fa0 R15: 00007ffccb937688 [ 142.431170][ T8442] [ 142.641608][ T8443] vti0: entered promiscuous mode [ 142.646706][ T8438] netlink: 'syz.2.1810': attribute type 13 has an invalid length. [ 142.874689][ T8453] siw: device registration error -23 [ 143.053724][ T8459] loop1: detected capacity change from 0 to 512 [ 143.103988][ T8459] EXT4-fs: Ignoring removed oldalloc option [ 143.146538][ T8462] FAULT_INJECTION: forcing a failure. [ 143.146538][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 143.159275][ T8462] CPU: 1 UID: 0 PID: 8462 Comm: syz.0.1816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.159338][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.159361][ T8462] Call Trace: [ 143.159370][ T8462] [ 143.159380][ T8462] __dump_stack+0x1d/0x30 [ 143.159406][ T8462] dump_stack_lvl+0xe8/0x140 [ 143.159476][ T8462] dump_stack+0x15/0x1b [ 143.159561][ T8462] should_fail_ex+0x265/0x280 [ 143.159588][ T8462] should_failslab+0x8c/0xb0 [ 143.159620][ T8462] kmem_cache_alloc_noprof+0x50/0x310 [ 143.159656][ T8462] ? audit_log_start+0x365/0x6c0 [ 143.159775][ T8462] audit_log_start+0x365/0x6c0 [ 143.159888][ T8462] ? trace_reschedule_exit+0xd/0xc0 [ 143.159918][ T8462] audit_seccomp+0x48/0x100 [ 143.159952][ T8462] ? __seccomp_filter+0x68c/0x10d0 [ 143.159980][ T8462] __seccomp_filter+0x69d/0x10d0 [ 143.160051][ T8462] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 143.160088][ T8462] ? perf_cgroup_switch+0x10c/0x480 [ 143.160121][ T8462] __secure_computing+0x82/0x150 [ 143.160149][ T8462] syscall_trace_enter+0xcf/0x1e0 [ 143.160236][ T8462] do_syscall_64+0xac/0x200 [ 143.160272][ T8462] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.160296][ T8462] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.160334][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.160418][ T8462] RIP: 0033:0x7fb9bcc3eec9 [ 143.160435][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.160453][ T8462] RSP: 002b:00007fb9bb69efc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 143.160524][ T8462] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3eec9 [ 143.160537][ T8462] RDX: 0000200000000200 RSI: 0000200000000380 RDI: 0000000000001238 [ 143.160553][ T8462] RBP: 0000200000000380 R08: 0000000000000000 R09: 0000200000000200 [ 143.160569][ T8462] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 143.160585][ T8462] R13: 0000200000000040 R14: 0000000000001238 R15: 0000200000000200 [ 143.160610][ T8462] [ 143.393593][ T8459] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1815: bad orphan inode 15 [ 143.404796][ T8459] ext4_test_bit(bit=14, block=254) = 0 [ 143.417962][ T8459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.451229][ T8459] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 143.566177][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.611859][ T8477] FAULT_INJECTION: forcing a failure. [ 143.611859][ T8477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.625153][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.2.1819 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.625183][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.625197][ T8477] Call Trace: [ 143.625204][ T8477] [ 143.625212][ T8477] __dump_stack+0x1d/0x30 [ 143.625308][ T8477] dump_stack_lvl+0xe8/0x140 [ 143.625347][ T8477] dump_stack+0x15/0x1b [ 143.625365][ T8477] should_fail_ex+0x265/0x280 [ 143.625405][ T8477] should_fail+0xb/0x20 [ 143.625428][ T8477] should_fail_usercopy+0x1a/0x20 [ 143.625456][ T8477] _copy_from_user+0x1c/0xb0 [ 143.625526][ T8477] ___sys_recvmsg+0xaa/0x370 [ 143.625557][ T8477] ? _parse_integer+0x27/0x40 [ 143.625592][ T8477] do_recvmmsg+0x1ef/0x540 [ 143.625637][ T8477] ? fput+0x8f/0xc0 [ 143.625671][ T8477] __x64_sys_recvmmsg+0xe5/0x170 [ 143.625704][ T8477] x64_sys_call+0x27a6/0x2ff0 [ 143.625777][ T8477] do_syscall_64+0xd2/0x200 [ 143.625812][ T8477] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.625914][ T8477] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.625944][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.626044][ T8477] RIP: 0033:0x7fcfe389eec9 [ 143.626077][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.626098][ T8477] RSP: 002b:00007fcfe22de038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.626119][ T8477] RAX: ffffffffffffffda RBX: 00007fcfe3af6090 RCX: 00007fcfe389eec9 [ 143.626134][ T8477] RDX: 0000000000000001 RSI: 0000200000002c80 RDI: 0000000000000004 [ 143.626149][ T8477] RBP: 00007fcfe22de090 R08: 0000000000000000 R09: 0000000000000000 [ 143.626247][ T8477] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 143.626262][ T8477] R13: 00007fcfe3af6128 R14: 00007fcfe3af6090 R15: 00007ffe366b85a8 [ 143.626295][ T8477] [ 143.827170][ T8479] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 143.959059][ T8476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8476 comm=syz.1.1821 [ 144.314600][ T8510] siw: device registration error -23 [ 144.395891][ T8513] loop0: detected capacity change from 0 to 164 [ 144.634766][ T8518] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 144.673041][ T8518] SELinux: failed to load policy [ 144.798043][ T8524] FAULT_INJECTION: forcing a failure. [ 144.798043][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 144.810803][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.1.1836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.810888][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.810904][ T8524] Call Trace: [ 144.810911][ T8524] [ 144.810920][ T8524] __dump_stack+0x1d/0x30 [ 144.810940][ T8524] dump_stack_lvl+0xe8/0x140 [ 144.810958][ T8524] dump_stack+0x15/0x1b [ 144.810975][ T8524] should_fail_ex+0x265/0x280 [ 144.811073][ T8524] should_failslab+0x8c/0xb0 [ 144.811103][ T8524] __kmalloc_cache_node_noprof+0x54/0x320 [ 144.811151][ T8524] ? __get_vm_area_node+0x106/0x1d0 [ 144.811184][ T8524] __get_vm_area_node+0x106/0x1d0 [ 144.811275][ T8524] __vmalloc_node_range_noprof+0x273/0xe00 [ 144.811307][ T8524] ? sel_write_load+0x158/0x380 [ 144.811420][ T8524] ? __rcu_read_unlock+0x4f/0x70 [ 144.811448][ T8524] ? sel_write_load+0x158/0x380 [ 144.811482][ T8524] vmalloc_noprof+0x82/0xc0 [ 144.811550][ T8524] ? sel_write_load+0x158/0x380 [ 144.811580][ T8524] sel_write_load+0x158/0x380 [ 144.811609][ T8524] ? __pfx_sel_write_load+0x10/0x10 [ 144.811657][ T8524] vfs_write+0x266/0x960 [ 144.811728][ T8524] ? __rcu_read_unlock+0x4f/0x70 [ 144.811810][ T8524] ? __fget_files+0x184/0x1c0 [ 144.811844][ T8524] ksys_write+0xda/0x1a0 [ 144.811886][ T8524] __x64_sys_write+0x40/0x50 [ 144.811974][ T8524] x64_sys_call+0x27fe/0x2ff0 [ 144.811995][ T8524] do_syscall_64+0xd2/0x200 [ 144.812048][ T8524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.812118][ T8524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.812153][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.812178][ T8524] RIP: 0033:0x7fdcca69eec9 [ 144.812254][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.812274][ T8524] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.812295][ T8524] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 144.812312][ T8524] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000006 [ 144.812327][ T8524] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 144.812346][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.812358][ T8524] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 144.812405][ T8524] [ 144.812415][ T8524] syz.1.1836: vmalloc error: size 17648, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 145.056250][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.1.1836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.056331][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.056346][ T8524] Call Trace: [ 145.056355][ T8524] [ 145.056363][ T8524] __dump_stack+0x1d/0x30 [ 145.056385][ T8524] dump_stack_lvl+0xe8/0x140 [ 145.056460][ T8524] dump_stack+0x15/0x1b [ 145.056480][ T8524] warn_alloc+0x12b/0x1a0 [ 145.056521][ T8524] __vmalloc_node_range_noprof+0x297/0xe00 [ 145.056563][ T8524] ? __rcu_read_unlock+0x4f/0x70 [ 145.056585][ T8524] ? sel_write_load+0x158/0x380 [ 145.056614][ T8524] vmalloc_noprof+0x82/0xc0 [ 145.056704][ T8524] ? sel_write_load+0x158/0x380 [ 145.056841][ T8524] sel_write_load+0x158/0x380 [ 145.056866][ T8524] ? __pfx_sel_write_load+0x10/0x10 [ 145.056888][ T8524] vfs_write+0x266/0x960 [ 145.056912][ T8524] ? __rcu_read_unlock+0x4f/0x70 [ 145.056945][ T8524] ? __fget_files+0x184/0x1c0 [ 145.056969][ T8524] ksys_write+0xda/0x1a0 [ 145.056995][ T8524] __x64_sys_write+0x40/0x50 [ 145.057022][ T8524] x64_sys_call+0x27fe/0x2ff0 [ 145.057095][ T8524] do_syscall_64+0xd2/0x200 [ 145.057127][ T8524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.057148][ T8524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.057218][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.057244][ T8524] RIP: 0033:0x7fdcca69eec9 [ 145.057339][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.057360][ T8524] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.057381][ T8524] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 145.057395][ T8524] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000006 [ 145.057407][ T8524] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 145.057441][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.057488][ T8524] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 145.057506][ T8524] [ 145.057513][ T8524] Mem-Info: [ 145.264233][ T8524] active_anon:17295 inactive_anon:12 isolated_anon:0 [ 145.264233][ T8524] active_file:24258 inactive_file:2563 isolated_file:0 [ 145.264233][ T8524] unevictable:0 dirty:553 writeback:0 [ 145.264233][ T8524] slab_reclaimable:3306 slab_unreclaimable:154633 [ 145.264233][ T8524] mapped:39315 shmem:11655 pagetables:1450 [ 145.264233][ T8524] sec_pagetables:0 bounce:0 [ 145.264233][ T8524] kernel_misc_reclaimable:0 [ 145.264233][ T8524] free:1672156 free_pcp:70126 free_cma:0 [ 145.309657][ T8524] Node 0 active_anon:69180kB inactive_anon:48kB active_file:97032kB inactive_file:10252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157260kB dirty:2212kB writeback:0kB shmem:46620kB kernel_stack:3632kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 145.337185][ T8524] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.365971][ T8524] lowmem_reserve[]: 0 2883 7862 7862 [ 145.371310][ T8524] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 145.401545][ T8524] lowmem_reserve[]: 0 0 4978 4978 [ 145.406875][ T8524] Node 0 Normal free:3736604kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52708kB inactive_anon:48kB active_file:97032kB inactive_file:10252kB unevictable:0kB writepending:2212kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:280524kB local_pcp:246940kB free_cma:0kB [ 145.439242][ T8524] lowmem_reserve[]: 0 0 0 0 [ 145.443811][ T8524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 145.456801][ T8524] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 145.472945][ T8524] Node 0 Normal: 877*4kB (UM) 1181*8kB (UME) 1083*16kB (UME) 640*32kB (UME) 461*64kB (UME) 248*128kB (UME) 107*256kB (UM) 38*512kB (UM) 14*1024kB (UM) 10*2048kB (UME) 865*4096kB (UM) = 3736716kB [ 145.492637][ T8524] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 145.502071][ T8524] 35646 total pagecache pages [ 145.507073][ T8524] 16 pages in swap cache [ 145.511470][ T8524] Free swap = 124932kB [ 145.515635][ T8524] Total swap = 124996kB [ 145.519979][ T8524] 2097051 pages RAM [ 145.523986][ T8524] 0 pages HighMem/MovableOnly [ 145.528710][ T8524] 80446 pages reserved [ 145.628266][ T8542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8542 comm=syz.2.1838 [ 145.652557][ T8540] loop0: detected capacity change from 0 to 164 [ 145.674172][ T8540] iso9660: Unknown parameter '' [ 145.682588][ T8540] siw: device registration error -23 [ 145.712145][ T8541] lo speed is unknown, defaulting to 1000 [ 145.929181][ T8559] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.965804][ T8559] SELinux: failed to load policy [ 146.035636][ T8562] netlink: 'syz.1.1845': attribute type 10 has an invalid length. [ 146.043605][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'. [ 146.070759][ T8564] FAULT_INJECTION: forcing a failure. [ 146.070759][ T8564] name failslab, interval 1, probability 0, space 0, times 0 [ 146.083429][ T8564] CPU: 1 UID: 0 PID: 8564 Comm: syz.1.1846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.083457][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.083519][ T8564] Call Trace: [ 146.083527][ T8564] [ 146.083535][ T8564] __dump_stack+0x1d/0x30 [ 146.083595][ T8564] dump_stack_lvl+0xe8/0x140 [ 146.083613][ T8564] dump_stack+0x15/0x1b [ 146.083627][ T8564] should_fail_ex+0x265/0x280 [ 146.083649][ T8564] should_failslab+0x8c/0xb0 [ 146.083686][ T8564] __kmalloc_cache_node_noprof+0x54/0x320 [ 146.083716][ T8564] ? __get_vm_area_node+0x106/0x1d0 [ 146.083786][ T8564] __get_vm_area_node+0x106/0x1d0 [ 146.083863][ T8564] __vmalloc_node_range_noprof+0x273/0xe00 [ 146.083893][ T8564] ? sel_write_load+0x158/0x380 [ 146.083920][ T8564] ? __rcu_read_unlock+0x4f/0x70 [ 146.084009][ T8564] ? sel_write_load+0x158/0x380 [ 146.084031][ T8564] vmalloc_noprof+0x82/0xc0 [ 146.084091][ T8564] ? sel_write_load+0x158/0x380 [ 146.084113][ T8564] sel_write_load+0x158/0x380 [ 146.084136][ T8564] ? __pfx_sel_write_load+0x10/0x10 [ 146.084158][ T8564] vfs_write+0x266/0x960 [ 146.084244][ T8564] ? __rcu_read_unlock+0x4f/0x70 [ 146.084265][ T8564] ? __fget_files+0x184/0x1c0 [ 146.084304][ T8564] ksys_write+0xda/0x1a0 [ 146.084324][ T8564] __x64_sys_write+0x40/0x50 [ 146.084395][ T8564] x64_sys_call+0x27fe/0x2ff0 [ 146.084412][ T8564] do_syscall_64+0xd2/0x200 [ 146.084437][ T8564] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.084456][ T8564] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.084523][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.084539][ T8564] RIP: 0033:0x7fdcca69eec9 [ 146.084551][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.084613][ T8564] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.084628][ T8564] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 146.084645][ T8564] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000008 [ 146.084655][ T8564] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 146.084665][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.084675][ T8564] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 146.084719][ T8564] [ 146.352666][ T8569] loop1: detected capacity change from 0 to 1024 [ 146.359665][ T8569] EXT4-fs: Ignoring removed orlov option [ 146.365547][ T8569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.376685][ T8569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.389701][ T8569] EXT4-fs (loop1): shut down requested (1) [ 146.398941][ T8569] futex_wake_op: syz.1.1848 tries to shift op by -1; fix this program [ 146.420151][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.687925][ T8590] lo speed is unknown, defaulting to 1000 [ 146.799612][ T8591] FAULT_INJECTION: forcing a failure. [ 146.799612][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.812740][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.0.1851 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.812772][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.812789][ T8591] Call Trace: [ 146.812798][ T8591] [ 146.812808][ T8591] __dump_stack+0x1d/0x30 [ 146.812834][ T8591] dump_stack_lvl+0xe8/0x140 [ 146.812859][ T8591] dump_stack+0x15/0x1b [ 146.812886][ T8591] should_fail_ex+0x265/0x280 [ 146.812911][ T8591] should_fail+0xb/0x20 [ 146.812933][ T8591] should_fail_usercopy+0x1a/0x20 [ 146.812979][ T8591] _copy_from_user+0x1c/0xb0 [ 146.813018][ T8591] __sys_bpf+0x178/0x7b0 [ 146.813114][ T8591] __x64_sys_bpf+0x41/0x50 [ 146.813144][ T8591] x64_sys_call+0x2aea/0x2ff0 [ 146.813191][ T8591] do_syscall_64+0xd2/0x200 [ 146.813232][ T8591] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.813324][ T8591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.813355][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.813403][ T8591] RIP: 0033:0x7fb9bcc3eec9 [ 146.813423][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.813442][ T8591] RSP: 002b:00007fb9bb67e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.813461][ T8591] RAX: ffffffffffffffda RBX: 00007fb9bce96090 RCX: 00007fb9bcc3eec9 [ 146.813473][ T8591] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 146.813547][ T8591] RBP: 00007fb9bb67e090 R08: 0000000000000000 R09: 0000000000000000 [ 146.813561][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.813624][ T8591] R13: 00007fb9bce96128 R14: 00007fb9bce96090 R15: 00007fffb8fd3a88 [ 146.813646][ T8591] [ 147.026974][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 147.026989][ T29] audit: type=1326 audit(2000000334.713:19732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.073041][ T29] audit: type=1326 audit(2000000334.713:19733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.096562][ T29] audit: type=1326 audit(2000000334.713:19734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.120181][ T29] audit: type=1326 audit(2000000334.713:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.143609][ T29] audit: type=1326 audit(2000000334.713:19736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.167111][ T29] audit: type=1326 audit(2000000334.713:19737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.190616][ T29] audit: type=1326 audit(2000000334.713:19738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.214032][ T29] audit: type=1326 audit(2000000334.713:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.237549][ T29] audit: type=1326 audit(2000000334.713:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.260944][ T29] audit: type=1326 audit(2000000334.713:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 147.339467][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1853'. [ 147.375619][ T8604] FAULT_INJECTION: forcing a failure. [ 147.375619][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 147.388366][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.1.1856 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.388392][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.388404][ T8604] Call Trace: [ 147.388411][ T8604] [ 147.388420][ T8604] __dump_stack+0x1d/0x30 [ 147.388446][ T8604] dump_stack_lvl+0xe8/0x140 [ 147.388556][ T8604] dump_stack+0x15/0x1b [ 147.388579][ T8604] should_fail_ex+0x265/0x280 [ 147.388608][ T8604] ? pagemap_read+0x184/0x5e0 [ 147.388632][ T8604] should_failslab+0x8c/0xb0 [ 147.388657][ T8604] __kmalloc_cache_noprof+0x4c/0x320 [ 147.388760][ T8604] pagemap_read+0x184/0x5e0 [ 147.388790][ T8604] ? __pfx_pagemap_read+0x10/0x10 [ 147.388817][ T8604] vfs_read+0x1a5/0x770 [ 147.388922][ T8604] ? __fget_files+0x184/0x1c0 [ 147.388945][ T8604] ? __rcu_read_unlock+0x4f/0x70 [ 147.388967][ T8604] ? __fget_files+0x184/0x1c0 [ 147.389000][ T8604] __x64_sys_pread64+0xfd/0x150 [ 147.389236][ T8604] x64_sys_call+0x29e2/0x2ff0 [ 147.389267][ T8604] do_syscall_64+0xd2/0x200 [ 147.389307][ T8604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.389337][ T8604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.389443][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.389468][ T8604] RIP: 0033:0x7fdcca69eec9 [ 147.389485][ T8604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.389506][ T8604] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 147.389524][ T8604] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 147.389536][ T8604] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000006 [ 147.389616][ T8604] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 147.389679][ T8604] R10: 007ffffffffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 147.389695][ T8604] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 147.389719][ T8604] [ 147.599838][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1855'. [ 147.770718][ T8616] loop4: detected capacity change from 0 to 1024 [ 147.777706][ T8616] EXT4-fs: Ignoring removed orlov option [ 147.783424][ T8616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.790154][ T10] IPVS: starting estimator thread 0... [ 147.799014][ T8623] loop1: detected capacity change from 0 to 512 [ 147.815377][ T8616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.829468][ T8623] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1861: missing EA_INODE flag [ 147.847000][ T8628] netlink: 'syz.3.1862': attribute type 21 has an invalid length. [ 147.853128][ T8616] EXT4-fs (loop4): shut down requested (1) [ 147.866634][ T8623] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1861: error while reading EA inode 11 err=-117 [ 147.880455][ T8622] IPVS: using max 2016 ests per chain, 100800 per kthread [ 147.892770][ T8616] futex_wake_op: syz.4.1860 tries to shift op by -1; fix this program [ 147.902049][ T8634] FAULT_INJECTION: forcing a failure. [ 147.902049][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 147.914881][ T8634] CPU: 1 UID: 0 PID: 8634 Comm: syz.3.1863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.914903][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.914915][ T8634] Call Trace: [ 147.914922][ T8634] [ 147.914930][ T8634] __dump_stack+0x1d/0x30 [ 147.914955][ T8634] dump_stack_lvl+0xe8/0x140 [ 147.914979][ T8634] dump_stack+0x15/0x1b [ 147.915088][ T8634] should_fail_ex+0x265/0x280 [ 147.915118][ T8634] should_failslab+0x8c/0xb0 [ 147.915148][ T8634] kmem_cache_alloc_noprof+0x50/0x310 [ 147.915187][ T8634] ? audit_log_start+0x365/0x6c0 [ 147.915223][ T8634] audit_log_start+0x365/0x6c0 [ 147.915273][ T8634] audit_seccomp+0x48/0x100 [ 147.915304][ T8634] ? __seccomp_filter+0x68c/0x10d0 [ 147.915331][ T8634] __seccomp_filter+0x69d/0x10d0 [ 147.915358][ T8634] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.915424][ T8634] ? vfs_write+0x7e8/0x960 [ 147.915456][ T8634] __secure_computing+0x82/0x150 [ 147.915506][ T8634] syscall_trace_enter+0xcf/0x1e0 [ 147.915535][ T8634] do_syscall_64+0xac/0x200 [ 147.915574][ T8634] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.915600][ T8634] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.915696][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.915740][ T8634] RIP: 0033:0x7ff3946aeec9 [ 147.915758][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.915779][ T8634] RSP: 002b:00007ff39310f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 147.915802][ T8634] RAX: ffffffffffffffda RBX: 00007ff394905fa0 RCX: 00007ff3946aeec9 [ 147.915823][ T8634] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000001000 [ 147.915838][ T8634] RBP: 00007ff39310f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.915878][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.915893][ T8634] R13: 00007ff394906038 R14: 00007ff394905fa0 R15: 00007ffccb937688 [ 147.915915][ T8634] [ 147.924853][ T8623] EXT4-fs (loop1): 1 orphan inode deleted [ 147.925379][ T8623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.926213][ T8623] FAULT_INJECTION: forcing a failure. [ 147.926213][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.926245][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.1.1861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.926273][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.926286][ T8623] Call Trace: [ 147.926291][ T8623] [ 147.926298][ T8623] __dump_stack+0x1d/0x30 [ 147.926388][ T8623] dump_stack_lvl+0xe8/0x140 [ 147.926474][ T8623] dump_stack+0x15/0x1b [ 147.926495][ T8623] should_fail_ex+0x265/0x280 [ 147.926524][ T8623] should_fail+0xb/0x20 [ 147.926549][ T8623] should_fail_usercopy+0x1a/0x20 [ 147.926590][ T8623] _copy_from_user+0x1c/0xb0 [ 147.926628][ T8623] ___sys_sendmsg+0xc1/0x1d0 [ 147.926705][ T8623] __x64_sys_sendmsg+0xd4/0x160 [ 147.926800][ T8623] x64_sys_call+0x191e/0x2ff0 [ 147.926880][ T8623] do_syscall_64+0xd2/0x200 [ 147.926909][ T8623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.926958][ T8623] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.926993][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.927020][ T8623] RIP: 0033:0x7fdcca69eec9 [ 147.927038][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.927120][ T8623] RSP: 002b:00007fdcc90de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.927137][ T8623] RAX: ffffffffffffffda RBX: 00007fdcca8f6090 RCX: 00007fdcca69eec9 [ 147.927153][ T8623] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000004 [ 147.927168][ T8623] RBP: 00007fdcc90de090 R08: 0000000000000000 R09: 0000000000000000 [ 147.927182][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.927197][ T8623] R13: 00007fdcca8f6128 R14: 00007fdcca8f6090 R15: 00007ffd3ee1cc28 [ 147.927220][ T8623] [ 147.973987][ T8636] loop3: detected capacity change from 0 to 1024 [ 148.350123][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.421201][ T8650] lo speed is unknown, defaulting to 1000 [ 148.496033][ T8650] loop4: detected capacity change from 0 to 512 [ 148.505073][ T8650] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1868: error while reading EA inode 32 err=-116 [ 148.518922][ T8650] EXT4-fs (loop4): Remounting filesystem read-only [ 148.525564][ T8650] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 148.539302][ T8665] FAULT_INJECTION: forcing a failure. [ 148.539302][ T8665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.546185][ T8650] EXT4-fs (loop4): 1 orphan inode deleted [ 148.552443][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.0.1872 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.552483][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.552579][ T8665] Call Trace: [ 148.552588][ T8665] [ 148.552598][ T8665] __dump_stack+0x1d/0x30 [ 148.552629][ T8665] dump_stack_lvl+0xe8/0x140 [ 148.552656][ T8665] dump_stack+0x15/0x1b [ 148.552679][ T8665] should_fail_ex+0x265/0x280 [ 148.552719][ T8665] should_fail+0xb/0x20 [ 148.552760][ T8665] should_fail_usercopy+0x1a/0x20 [ 148.552796][ T8665] _copy_from_user+0x1c/0xb0 [ 148.552842][ T8665] __sys_bind+0x106/0x2a0 [ 148.552888][ T8665] __x64_sys_bind+0x3f/0x50 [ 148.552916][ T8665] x64_sys_call+0x2b6e/0x2ff0 [ 148.552948][ T8665] do_syscall_64+0xd2/0x200 [ 148.552993][ T8665] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.553029][ T8665] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.553081][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.553119][ T8665] RIP: 0033:0x7fb9bcc3eec9 [ 148.553141][ T8665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.553167][ T8665] RSP: 002b:00007fb9bb69f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 148.553194][ T8665] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3eec9 [ 148.553212][ T8665] RDX: 0000000000000074 RSI: 0000200000000000 RDI: 0000000000000004 [ 148.553250][ T8665] RBP: 00007fb9bb69f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.553268][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.553323][ T8665] R13: 00007fb9bce96038 R14: 00007fb9bce95fa0 R15: 00007fffb8fd3a88 [ 148.553349][ T8665] [ 148.606516][ T8661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.607517][ T8650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.613390][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.682469][ T8650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.958784][ T8680] loop0: detected capacity change from 0 to 1024 [ 148.981283][ T8680] EXT4-fs: Ignoring removed orlov option [ 148.987076][ T8680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.059045][ T8683] loop4: detected capacity change from 0 to 512 [ 149.070177][ T8683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.082438][ T8683] EXT4-fs (loop4): 1 truncate cleaned up [ 149.089086][ T8683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.219371][ T8683] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.1879: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 149.343823][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.467909][ T8680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.486280][ T8680] EXT4-fs (loop0): shut down requested (1) [ 149.496430][ T8680] futex_wake_op: syz.0.1878 tries to shift op by -1; fix this program [ 149.515375][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.525605][ T8698] loop4: detected capacity change from 0 to 512 [ 149.548035][ T8698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.567860][ T8702] uprobe: syz.2.1883:8702 failed to unregister, leaking uprobe [ 149.575898][ T8702] uprobe: syz.2.1883:8702 failed to unregister, leaking uprobe [ 149.583991][ T8698] EXT4-fs (loop4): 1 truncate cleaned up [ 149.590373][ T8698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.615248][ T8698] FAULT_INJECTION: forcing a failure. [ 149.615248][ T8698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.628365][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.4.1881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.628391][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.628403][ T8698] Call Trace: [ 149.628449][ T8698] [ 149.628458][ T8698] __dump_stack+0x1d/0x30 [ 149.628484][ T8698] dump_stack_lvl+0xe8/0x140 [ 149.628509][ T8698] dump_stack+0x15/0x1b [ 149.628526][ T8698] should_fail_ex+0x265/0x280 [ 149.628556][ T8698] should_fail+0xb/0x20 [ 149.628616][ T8698] should_fail_usercopy+0x1a/0x20 [ 149.628642][ T8698] _copy_from_user+0x1c/0xb0 [ 149.628679][ T8698] do_vfs_ioctl+0x537/0xe10 [ 149.628781][ T8698] ? selinux_file_ioctl+0x308/0x3a0 [ 149.628806][ T8698] ? __fget_files+0x184/0x1c0 [ 149.628891][ T8698] __se_sys_ioctl+0x82/0x140 [ 149.628911][ T8698] __x64_sys_ioctl+0x43/0x50 [ 149.628928][ T8698] x64_sys_call+0x1816/0x2ff0 [ 149.628964][ T8698] do_syscall_64+0xd2/0x200 [ 149.628996][ T8698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.629020][ T8698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.629052][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.629150][ T8698] RIP: 0033:0x7f88dea1eec9 [ 149.629164][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.629254][ T8698] RSP: 002b:00007f88dd487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.629275][ T8698] RAX: ffffffffffffffda RBX: 00007f88dec75fa0 RCX: 00007f88dea1eec9 [ 149.629290][ T8698] RDX: 0000200000000600 RSI: 00000000c020660b RDI: 0000000000000009 [ 149.629306][ T8698] RBP: 00007f88dd487090 R08: 0000000000000000 R09: 0000000000000000 [ 149.629359][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.629374][ T8698] R13: 00007f88dec76038 R14: 00007f88dec75fa0 R15: 00007ffe7d816518 [ 149.629397][ T8698] [ 149.829769][ T8706] FAULT_INJECTION: forcing a failure. [ 149.829769][ T8706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.842903][ T8706] CPU: 1 UID: 0 PID: 8706 Comm: syz.1.1884 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.842964][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.842980][ T8706] Call Trace: [ 149.842988][ T8706] [ 149.842997][ T8706] __dump_stack+0x1d/0x30 [ 149.843025][ T8706] dump_stack_lvl+0xe8/0x140 [ 149.843050][ T8706] dump_stack+0x15/0x1b [ 149.843125][ T8706] should_fail_ex+0x265/0x280 [ 149.843157][ T8706] should_fail+0xb/0x20 [ 149.843185][ T8706] should_fail_usercopy+0x1a/0x20 [ 149.843291][ T8706] _copy_from_user+0x1c/0xb0 [ 149.843333][ T8706] snd_seq_ioctl+0x127/0x2e0 [ 149.843382][ T8706] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 149.843413][ T8706] __se_sys_ioctl+0xce/0x140 [ 149.843439][ T8706] __x64_sys_ioctl+0x43/0x50 [ 149.843457][ T8706] x64_sys_call+0x1816/0x2ff0 [ 149.843483][ T8706] do_syscall_64+0xd2/0x200 [ 149.843579][ T8706] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.843658][ T8706] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.843695][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.843721][ T8706] RIP: 0033:0x7fdcca69eec9 [ 149.843826][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.843843][ T8706] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.843915][ T8706] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 149.843930][ T8706] RDX: 0000200000000580 RSI: 00000000408c5333 RDI: 0000000000000005 [ 149.843945][ T8706] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 149.844020][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.844033][ T8706] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 149.844051][ T8706] [ 149.847957][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.934610][ T8708] loop2: detected capacity change from 0 to 164 [ 150.045760][ T8708] iso9660: Unknown parameter '' [ 150.202660][ T8718] lo speed is unknown, defaulting to 1000 [ 150.218412][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.245826][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.452972][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.461517][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.610988][ T8736] siw: device registration error -23 [ 150.923317][ T8740] loop0: detected capacity change from 0 to 1024 [ 150.960887][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 150.970920][ T8740] EXT4-fs: Ignoring removed orlov option [ 150.976667][ T8740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.033141][ T8740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.085934][ T8740] EXT4-fs (loop0): shut down requested (1) [ 151.178030][ T8740] futex_wake_op: syz.0.1896 tries to shift op by -1; fix this program [ 151.193158][ T8755] loop3: detected capacity change from 0 to 164 [ 151.265744][ T8757] FAULT_INJECTION: forcing a failure. [ 151.265744][ T8757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.278908][ T8757] CPU: 1 UID: 0 PID: 8757 Comm: syz.1.1900 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.278936][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.278949][ T8757] Call Trace: [ 151.278955][ T8757] [ 151.278963][ T8757] __dump_stack+0x1d/0x30 [ 151.279007][ T8757] dump_stack_lvl+0xe8/0x140 [ 151.279027][ T8757] dump_stack+0x15/0x1b [ 151.279043][ T8757] should_fail_ex+0x265/0x280 [ 151.279070][ T8757] should_fail+0xb/0x20 [ 151.279120][ T8757] should_fail_usercopy+0x1a/0x20 [ 151.279151][ T8757] _copy_from_user+0x1c/0xb0 [ 151.279207][ T8757] __sys_bind+0x106/0x2a0 [ 151.279232][ T8757] __x64_sys_bind+0x3f/0x50 [ 151.279252][ T8757] x64_sys_call+0x2b6e/0x2ff0 [ 151.279277][ T8757] do_syscall_64+0xd2/0x200 [ 151.279367][ T8757] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.279394][ T8757] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.279424][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.279452][ T8757] RIP: 0033:0x7fdcca69eec9 [ 151.279497][ T8757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.279518][ T8757] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 151.279559][ T8757] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 151.279571][ T8757] RDX: 0000000000000074 RSI: 0000200000000000 RDI: 0000000000000004 [ 151.279583][ T8757] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 151.279598][ T8757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.279613][ T8757] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 151.279663][ T8757] [ 151.349846][ T8755] iso9660: Unknown parameter '' [ 151.510962][ T8755] siw: device registration error -23 [ 151.518034][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.573003][ T8767] FAULT_INJECTION: forcing a failure. [ 151.573003][ T8767] name failslab, interval 1, probability 0, space 0, times 0 [ 151.585730][ T8767] CPU: 0 UID: 0 PID: 8767 Comm: syz.2.1905 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.585801][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.585818][ T8767] Call Trace: [ 151.585827][ T8767] [ 151.585836][ T8767] __dump_stack+0x1d/0x30 [ 151.585896][ T8767] dump_stack_lvl+0xe8/0x140 [ 151.585921][ T8767] dump_stack+0x15/0x1b [ 151.585943][ T8767] should_fail_ex+0x265/0x280 [ 151.585975][ T8767] should_failslab+0x8c/0xb0 [ 151.586073][ T8767] __kvmalloc_node_noprof+0x123/0x4e0 [ 151.586112][ T8767] ? io_sqe_buffers_register+0xc2/0x530 [ 151.586153][ T8767] io_sqe_buffers_register+0xc2/0x530 [ 151.586267][ T8767] ? __fget_files+0x184/0x1c0 [ 151.586361][ T8767] __se_sys_io_uring_register+0xa9f/0xeb0 [ 151.586402][ T8767] ? fput+0x8f/0xc0 [ 151.586440][ T8767] ? ksys_write+0x192/0x1a0 [ 151.586515][ T8767] __x64_sys_io_uring_register+0x55/0x70 [ 151.586557][ T8767] x64_sys_call+0x18a3/0x2ff0 [ 151.586585][ T8767] do_syscall_64+0xd2/0x200 [ 151.586625][ T8767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.586659][ T8767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.586689][ T8767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.586715][ T8767] RIP: 0033:0x7fcfe389eec9 [ 151.586734][ T8767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.586781][ T8767] RSP: 002b:00007fcfe22ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 151.586805][ T8767] RAX: ffffffffffffffda RBX: 00007fcfe3af5fa0 RCX: 00007fcfe389eec9 [ 151.586823][ T8767] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 151.586859][ T8767] RBP: 00007fcfe22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 151.586875][ T8767] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 151.586890][ T8767] R13: 00007fcfe3af6038 R14: 00007fcfe3af5fa0 R15: 00007ffe366b85a8 [ 151.586915][ T8767] [ 151.888465][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 151.888483][ T29] audit: type=1326 audit(2000000339.805:20052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 151.919448][ T8781] FAULT_INJECTION: forcing a failure. [ 151.919448][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 151.932135][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.0.1911 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.932170][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.932186][ T8781] Call Trace: [ 151.932193][ T8781] [ 151.932272][ T8781] __dump_stack+0x1d/0x30 [ 151.932293][ T8781] dump_stack_lvl+0xe8/0x140 [ 151.932376][ T8781] dump_stack+0x15/0x1b [ 151.932414][ T8781] should_fail_ex+0x265/0x280 [ 151.932452][ T8781] should_failslab+0x8c/0xb0 [ 151.932484][ T8781] kmem_cache_alloc_node_noprof+0x57/0x320 [ 151.932588][ T8781] ? __alloc_skb+0x101/0x320 [ 151.932693][ T8781] __alloc_skb+0x101/0x320 [ 151.932713][ T8781] ? audit_log_start+0x365/0x6c0 [ 151.932744][ T8781] audit_log_start+0x380/0x6c0 [ 151.932815][ T8781] audit_seccomp+0x48/0x100 [ 151.932847][ T8781] ? __seccomp_filter+0x68c/0x10d0 [ 151.932869][ T8781] __seccomp_filter+0x69d/0x10d0 [ 151.932891][ T8781] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.932963][ T8781] ? vfs_write+0x7e8/0x960 [ 151.932989][ T8781] ? __rcu_read_unlock+0x4f/0x70 [ 151.933094][ T8781] ? __fget_files+0x184/0x1c0 [ 151.933129][ T8781] __secure_computing+0x82/0x150 [ 151.933193][ T8781] syscall_trace_enter+0xcf/0x1e0 [ 151.933218][ T8781] do_syscall_64+0xac/0x200 [ 151.933256][ T8781] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.933374][ T8781] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.933474][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.933500][ T8781] RIP: 0033:0x7fb9bcc3eec9 [ 151.933514][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.933532][ T8781] RSP: 002b:00007fb9bb69f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 151.933626][ T8781] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3eec9 [ 151.933638][ T8781] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 151.933649][ T8781] RBP: 00007fb9bb69f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.933662][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.933675][ T8781] R13: 00007fb9bce96038 R14: 00007fb9bce95fa0 R15: 00007fffb8fd3a88 [ 151.933693][ T8781] [ 151.933704][ T8781] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 151.967955][ T8786] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 151.968853][ T8781] audit: out of memory in audit_log_start [ 151.985126][ T8786] team0: Port device dummy0 added [ 151.992184][ T29] audit: type=1326 audit(2000000339.847:20053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9bcc3eec9 code=0x7ffc0000 [ 152.199554][ T29] audit: type=1326 audit(2000000339.847:20054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9bcc3d710 code=0x7ffc0000 [ 152.223156][ T29] audit: type=1326 audit(2000000339.847:20055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9bcc3d97f code=0x7ffc0000 [ 152.246800][ T29] audit: type=1400 audit(2000000339.889:20056): avc: denied { sqpoll } for pid=8785 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.266343][ T29] audit: type=1400 audit(2000000339.920:20057): avc: denied { ioctl } for pid=8782 comm="syz.1.1910" path="socket:[22654]" dev="sockfs" ino=22654 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.291248][ T29] audit: type=1400 audit(2000000339.920:20058): avc: denied { read } for pid=2980 comm="acpid" name="mouse5" dev="devtmpfs" ino=635 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 152.313257][ T29] audit: type=1400 audit(2000000339.920:20059): avc: denied { open } for pid=2980 comm="acpid" path="/dev/input/mouse5" dev="devtmpfs" ino=635 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 152.349899][ T8798] loop1: detected capacity change from 0 to 164 [ 152.356791][ T8798] iso9660: Unknown parameter '' [ 152.363593][ T8798] siw: device registration error -23 [ 152.444026][ T8800] loop1: detected capacity change from 0 to 1024 [ 152.452300][ T8800] EXT4-fs: Ignoring removed orlov option [ 152.458035][ T8800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.472870][ T8800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.485905][ T8800] EXT4-fs (loop1): shut down requested (1) [ 152.652119][ T8800] futex_wake_op: syz.1.1915 tries to shift op by -1; fix this program [ 152.735556][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.954852][ T8820] lo speed is unknown, defaulting to 1000 [ 153.343777][ T8836] SELinux: ebitmap: map size 4294449787 does not match my size 64 (high bit was 0) [ 153.380889][ T8836] SELinux: failed to load policy [ 153.387008][ T8838] loop0: detected capacity change from 0 to 512 [ 153.402241][ T8838] EXT4-fs: Ignoring removed bh option [ 153.428820][ T8838] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.451124][ T8836] loop3: detected capacity change from 0 to 512 [ 153.461057][ T8838] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 153.471774][ T8836] EXT4-fs: Ignoring removed bh option [ 153.477440][ T8836] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.486855][ T8838] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 153.497755][ T8836] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 153.509684][ T8838] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.545373][ T8836] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 153.562049][ T8838] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1924: Failed to acquire dquot type 1 [ 153.577415][ T8836] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.585333][ T8836] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1923: Failed to acquire dquot type 1 [ 153.599219][ T8838] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1924: Invalid block bitmap block 0 in block_group 0 [ 153.613383][ T8836] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1923: Invalid block bitmap block 0 in block_group 0 [ 153.638456][ T8838] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1924: Invalid block bitmap block 0 in block_group 0 [ 153.663123][ T8836] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1923: Invalid block bitmap block 0 in block_group 0 [ 153.681425][ T8838] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1924: Invalid block bitmap block 0 in block_group 0 [ 153.706869][ T8836] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1923: Invalid block bitmap block 0 in block_group 0 [ 153.726339][ T8838] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1924: Failed to acquire dquot type 1 [ 153.744201][ T8847] loop1: detected capacity change from 0 to 164 [ 153.752986][ T8836] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1923: Failed to acquire dquot type 1 [ 153.764705][ T8838] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1924: Failed to acquire dquot type 1 [ 153.777961][ T8847] iso9660: Unknown parameter '' [ 153.784821][ T8847] siw: device registration error -23 [ 153.793325][ T8836] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1923: Failed to acquire dquot type 1 [ 153.807498][ T8838] EXT4-fs (loop0): 1 orphan inode deleted [ 153.817401][ T8836] EXT4-fs (loop3): 1 orphan inode deleted [ 153.931124][ T8838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.944136][ T8836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.962981][ T8852] loop4: detected capacity change from 0 to 1024 [ 153.970021][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 153.970987][ T8852] EXT4-fs: Ignoring removed orlov option [ 153.977486][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 153.977511][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 153.983210][ T8852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.990568][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 154.003444][ T1040] hid-generic 0000:0000:0009.0002: unknown main item tag 0x0 [ 154.004548][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 154.011990][ T1040] hid-generic 0000:0000:0009.0002: unknown main item tag 0x0 [ 154.019422][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 154.026777][ T1040] hid-generic 0000:0000:0009.0002: unknown main item tag 0x0 [ 154.034194][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 154.054540][ T8852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.062051][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 154.074860][ T8852] EXT4-fs (loop4): shut down requested (1) [ 154.085967][ T1040] hid-generic 0000:0000:0009.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 154.094014][ T8838] syz.0.1924 (8838) used greatest stack depth: 9072 bytes left [ 154.099709][ T8852] futex_wake_op: syz.4.1928 tries to shift op by -1; fix this program [ 154.105694][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.133341][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.144832][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.171948][ T8868] loop4: detected capacity change from 0 to 512 [ 154.183024][ T8868] ext4: Unknown parameter 'subj_type' [ 154.542887][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.564260][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.629957][ T1040] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 154.682225][ T8886] loop4: detected capacity change from 0 to 164 [ 154.689094][ T8886] iso9660: Unknown parameter '' [ 154.697182][ T8886] siw: device registration error -23 [ 154.828848][ T8892] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1940'. [ 154.950729][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.959560][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.969483][ T8888] IPVS: Unknown mcast interface: pimreg0 [ 155.037892][ T8901] loop0: detected capacity change from 0 to 1024 [ 155.044657][ T8901] EXT4-fs: Ignoring removed orlov option [ 155.050375][ T8901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.063830][ T8901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.076586][ T8901] EXT4-fs (loop0): shut down requested (1) [ 155.086862][ T8901] futex_wake_op: syz.0.1943 tries to shift op by -1; fix this program [ 155.104215][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.112757][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.113177][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.122858][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.138653][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.165520][ T8906] FAULT_INJECTION: forcing a failure. [ 155.165520][ T8906] name failslab, interval 1, probability 0, space 0, times 0 [ 155.168739][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.178191][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.2.1944 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.178292][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.178310][ T8906] Call Trace: [ 155.178318][ T8906] [ 155.178327][ T8906] __dump_stack+0x1d/0x30 [ 155.178357][ T8906] dump_stack_lvl+0xe8/0x140 [ 155.178435][ T8906] dump_stack+0x15/0x1b [ 155.178456][ T8906] should_fail_ex+0x265/0x280 [ 155.178496][ T8906] should_failslab+0x8c/0xb0 [ 155.178526][ T8906] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 155.178579][ T8906] ? __d_alloc+0x3d/0x340 [ 155.178614][ T8906] __d_alloc+0x3d/0x340 [ 155.178727][ T8906] ? mpol_shared_policy_init+0xbd/0x4c0 [ 155.178751][ T8906] d_alloc_pseudo+0x1e/0x80 [ 155.178817][ T8906] alloc_file_pseudo+0x71/0x160 [ 155.178856][ T8906] __shmem_file_setup+0x1de/0x210 [ 155.178898][ T8906] shmem_file_setup+0x3b/0x50 [ 155.178947][ T8906] __se_sys_memfd_create+0x2c3/0x590 [ 155.178971][ T8906] __x64_sys_memfd_create+0x31/0x40 [ 155.179053][ T8906] x64_sys_call+0x2abe/0x2ff0 [ 155.179079][ T8906] do_syscall_64+0xd2/0x200 [ 155.179232][ T8906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.179260][ T8906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.179295][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.179320][ T8906] RIP: 0033:0x7fcfe389eec9 [ 155.179337][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.179393][ T8906] RSP: 002b:00007fcfe22fee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 155.179416][ T8906] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007fcfe389eec9 [ 155.179431][ T8906] RDX: 00007fcfe22feef0 RSI: 0000000000000000 RDI: 00007fcfe3922960 [ 155.179447][ T8906] RBP: 0000200000000b00 R08: 00007fcfe22febb7 R09: 00007fcfe22fee40 [ 155.179462][ T8906] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 155.179525][ T8906] R13: 00007fcfe22feef0 R14: 00007fcfe22feeb0 R15: 0000200000000040 [ 155.179592][ T8906] [ 155.249622][ T8913] FAULT_INJECTION: forcing a failure. [ 155.249622][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 155.255621][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.259847][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.3.1947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.259910][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.259929][ T8913] Call Trace: [ 155.259938][ T8913] [ 155.259949][ T8913] __dump_stack+0x1d/0x30 [ 155.259979][ T8913] dump_stack_lvl+0xe8/0x140 [ 155.260006][ T8913] dump_stack+0x15/0x1b [ 155.260029][ T8913] should_fail_ex+0x265/0x280 [ 155.260062][ T8913] should_failslab+0x8c/0xb0 [ 155.260115][ T8913] kmem_cache_alloc_noprof+0x50/0x310 [ 155.260153][ T8913] ? getname_kernel+0x3c/0x1f0 [ 155.260194][ T8913] getname_kernel+0x3c/0x1f0 [ 155.260304][ T8913] kern_path+0x23/0x130 [ 155.260345][ T8913] create_local_trace_uprobe+0x53/0x2c0 [ 155.260380][ T8913] perf_uprobe_init+0xc0/0x150 [ 155.260424][ T8913] perf_uprobe_event_init+0xc4/0x140 [ 155.260490][ T8913] perf_try_init_event+0xd9/0x540 [ 155.260529][ T8913] ? perf_event_alloc+0xb1c/0x1740 [ 155.260605][ T8913] perf_event_alloc+0xb27/0x1740 [ 155.260651][ T8913] __se_sys_perf_event_open+0x4a5/0x11c0 [ 155.260753][ T8913] ? __rcu_read_unlock+0x4f/0x70 [ 155.260791][ T8913] __x64_sys_perf_event_open+0x67/0x80 [ 155.260950][ T8913] x64_sys_call+0x7bd/0x2ff0 [ 155.260979][ T8913] do_syscall_64+0xd2/0x200 [ 155.261023][ T8913] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.261056][ T8913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.261108][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.261137][ T8913] RIP: 0033:0x7ff3946aeec9 [ 155.261158][ T8913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.261184][ T8913] RSP: 002b:00007ff39310f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 155.261210][ T8913] RAX: ffffffffffffffda RBX: 00007ff394905fa0 RCX: 00007ff3946aeec9 [ 155.261244][ T8913] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 155.261269][ T8913] RBP: 00007ff39310f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.261287][ T8913] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 155.261304][ T8913] R13: 00007ff394906038 R14: 00007ff394905fa0 R15: 00007ffccb937688 [ 155.261332][ T8913] [ 155.467582][ T8914] lo speed is unknown, defaulting to 1000 [ 155.502504][ T8911] FAULT_INJECTION: forcing a failure. [ 155.502504][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 155.642723][ T8911] CPU: 0 UID: 0 PID: 8911 Comm: syz.0.1945 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.642790][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.642807][ T8911] Call Trace: [ 155.642815][ T8911] [ 155.642825][ T8911] __dump_stack+0x1d/0x30 [ 155.642850][ T8911] dump_stack_lvl+0xe8/0x140 [ 155.642875][ T8911] dump_stack+0x15/0x1b [ 155.642895][ T8911] should_fail_ex+0x265/0x280 [ 155.642987][ T8911] ? rtm_new_nexthop+0x1512/0x4530 [ 155.643067][ T8911] should_failslab+0x8c/0xb0 [ 155.643094][ T8911] __kmalloc_cache_noprof+0x4c/0x320 [ 155.643151][ T8911] rtm_new_nexthop+0x1512/0x4530 [ 155.643194][ T8911] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 155.643374][ T8911] ? vsnprintf+0x829/0x890 [ 155.643447][ T8911] ? xas_load+0x413/0x430 [ 155.643492][ T8911] ? selinux_capable+0x31/0x40 [ 155.643541][ T8911] ? security_capable+0x83/0x90 [ 155.643572][ T8911] ? ns_capable+0x7d/0xb0 [ 155.643669][ T8911] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 155.643703][ T8911] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 155.643765][ T8911] ? avc_has_perm_noaudit+0x1b1/0x200 [ 155.643793][ T8911] netlink_rcv_skb+0x123/0x220 [ 155.643815][ T8911] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.643931][ T8911] rtnetlink_rcv+0x1c/0x30 [ 155.643977][ T8911] netlink_unicast+0x5bd/0x690 [ 155.644006][ T8911] netlink_sendmsg+0x58b/0x6b0 [ 155.644037][ T8911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.644071][ T8911] __sock_sendmsg+0x142/0x180 [ 155.644105][ T8911] ____sys_sendmsg+0x31e/0x4e0 [ 155.644129][ T8911] ___sys_sendmsg+0x17b/0x1d0 [ 155.644212][ T8911] __x64_sys_sendmsg+0xd4/0x160 [ 155.644335][ T8911] x64_sys_call+0x191e/0x2ff0 [ 155.644353][ T8911] do_syscall_64+0xd2/0x200 [ 155.644380][ T8911] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.644401][ T8911] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.644455][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.644473][ T8911] RIP: 0033:0x7fb9bcc3eec9 [ 155.644485][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.644519][ T8911] RSP: 002b:00007fb9bb69f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.644536][ T8911] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3eec9 [ 155.644589][ T8911] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 155.644641][ T8911] RBP: 00007fb9bb69f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.644651][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.644662][ T8911] R13: 00007fb9bce96038 R14: 00007fb9bce95fa0 R15: 00007fffb8fd3a88 [ 155.644679][ T8911] [ 155.941877][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1949'. [ 155.973029][ T8924] loop2: detected capacity change from 0 to 164 [ 155.980879][ T8924] iso9660: Unknown parameter '' [ 156.032605][ T8928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1952'. [ 156.042009][ T8928] FAULT_INJECTION: forcing a failure. [ 156.042009][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 156.054697][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.2.1952 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.054798][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.054811][ T8928] Call Trace: [ 156.054817][ T8928] [ 156.054824][ T8928] __dump_stack+0x1d/0x30 [ 156.054845][ T8928] dump_stack_lvl+0xe8/0x140 [ 156.054867][ T8928] dump_stack+0x15/0x1b [ 156.054888][ T8928] should_fail_ex+0x265/0x280 [ 156.055001][ T8928] should_failslab+0x8c/0xb0 [ 156.055127][ T8928] __kmalloc_noprof+0xa5/0x3e0 [ 156.055222][ T8928] ? pneigh_create+0xd0/0x300 [ 156.055261][ T8928] pneigh_create+0xd0/0x300 [ 156.055299][ T8928] neigh_add+0x556/0xa70 [ 156.055335][ T8928] ? __pfx_neigh_add+0x10/0x10 [ 156.055430][ T8928] rtnetlink_rcv_msg+0x657/0x6d0 [ 156.055470][ T8928] ? avc_has_perm_noaudit+0x1b1/0x200 [ 156.055584][ T8928] netlink_rcv_skb+0x123/0x220 [ 156.055608][ T8928] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.055708][ T8928] rtnetlink_rcv+0x1c/0x30 [ 156.055736][ T8928] netlink_unicast+0x5bd/0x690 [ 156.055764][ T8928] netlink_sendmsg+0x58b/0x6b0 [ 156.055854][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.055885][ T8928] __sock_sendmsg+0x142/0x180 [ 156.055954][ T8928] ____sys_sendmsg+0x31e/0x4e0 [ 156.055990][ T8928] ___sys_sendmsg+0x17b/0x1d0 [ 156.056059][ T8928] __x64_sys_sendmsg+0xd4/0x160 [ 156.056165][ T8928] x64_sys_call+0x191e/0x2ff0 [ 156.056192][ T8928] do_syscall_64+0xd2/0x200 [ 156.056223][ T8928] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.056331][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.056356][ T8928] RIP: 0033:0x7fcfe389eec9 [ 156.056371][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.056389][ T8928] RSP: 002b:00007fcfe22ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.056406][ T8928] RAX: ffffffffffffffda RBX: 00007fcfe3af5fa0 RCX: 00007fcfe389eec9 [ 156.056418][ T8928] RDX: 0000000000048090 RSI: 0000200000000100 RDI: 0000000000000006 [ 156.056494][ T8928] RBP: 00007fcfe22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 156.056510][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.056525][ T8928] R13: 00007fcfe3af6038 R14: 00007fcfe3af5fa0 R15: 00007ffe366b85a8 [ 156.056597][ T8928] [ 156.316610][ T8934] FAULT_INJECTION: forcing a failure. [ 156.316610][ T8934] name failslab, interval 1, probability 0, space 0, times 0 [ 156.329304][ T8934] CPU: 1 UID: 0 PID: 8934 Comm: syz.2.1954 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.329367][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.329446][ T8934] Call Trace: [ 156.329454][ T8934] [ 156.329463][ T8934] __dump_stack+0x1d/0x30 [ 156.329489][ T8934] dump_stack_lvl+0xe8/0x140 [ 156.329509][ T8934] dump_stack+0x15/0x1b [ 156.329557][ T8934] should_fail_ex+0x265/0x280 [ 156.329580][ T8934] ? rtnl_newlink+0x5c/0x12d0 [ 156.329618][ T8934] should_failslab+0x8c/0xb0 [ 156.329664][ T8934] __kmalloc_cache_noprof+0x4c/0x320 [ 156.329700][ T8934] rtnl_newlink+0x5c/0x12d0 [ 156.329773][ T8934] ? xas_load+0x413/0x430 [ 156.329805][ T8934] ? xas_load+0x413/0x430 [ 156.329833][ T8934] ? __rcu_read_unlock+0x4f/0x70 [ 156.329934][ T8934] ? xa_load+0xb1/0xe0 [ 156.329951][ T8934] ? __rcu_read_unlock+0x4f/0x70 [ 156.329976][ T8934] ? avc_has_perm_noaudit+0x1b1/0x200 [ 156.330004][ T8934] ? cred_has_capability+0x210/0x280 [ 156.330045][ T8934] ? selinux_capable+0x31/0x40 [ 156.330150][ T8934] ? security_capable+0x83/0x90 [ 156.330176][ T8934] ? ns_capable+0x7d/0xb0 [ 156.330230][ T8934] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.330269][ T8934] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 156.330311][ T8934] ? avc_has_perm_noaudit+0x1b1/0x200 [ 156.330347][ T8934] netlink_rcv_skb+0x123/0x220 [ 156.330370][ T8934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.330526][ T8934] rtnetlink_rcv+0x1c/0x30 [ 156.330561][ T8934] netlink_unicast+0x5bd/0x690 [ 156.330587][ T8934] netlink_sendmsg+0x58b/0x6b0 [ 156.330618][ T8934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.330664][ T8934] __sock_sendmsg+0x142/0x180 [ 156.330790][ T8934] ____sys_sendmsg+0x31e/0x4e0 [ 156.330845][ T8934] ___sys_sendmsg+0x17b/0x1d0 [ 156.330887][ T8934] __x64_sys_sendmsg+0xd4/0x160 [ 156.330947][ T8934] x64_sys_call+0x191e/0x2ff0 [ 156.331045][ T8934] do_syscall_64+0xd2/0x200 [ 156.331154][ T8934] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.331178][ T8934] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.331209][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.331229][ T8934] RIP: 0033:0x7fcfe389eec9 [ 156.331247][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.331284][ T8934] RSP: 002b:00007fcfe22ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.331307][ T8934] RAX: ffffffffffffffda RBX: 00007fcfe3af5fa0 RCX: 00007fcfe389eec9 [ 156.331323][ T8934] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 156.331340][ T8934] RBP: 00007fcfe22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 156.331356][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.331434][ T8934] R13: 00007fcfe3af6038 R14: 00007fcfe3af5fa0 R15: 00007ffe366b85a8 [ 156.331459][ T8934] [ 156.640798][ T1040] IPVS: starting estimator thread 0... [ 156.656333][ T8937] loop2: detected capacity change from 0 to 1024 [ 156.664766][ T8932] siw: device registration error -23 [ 156.671251][ T8937] EXT4-fs: Ignoring removed orlov option [ 156.676946][ T8937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.704478][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 156.704490][ T29] audit: type=1400 audit(2000000344.854:20319): avc: denied { read write } for pid=8939 comm="syz.4.1956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.735568][ T29] audit: type=1400 audit(2000000344.854:20320): avc: denied { open } for pid=8939 comm="syz.4.1956" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.762801][ T8937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.788815][ T8937] EXT4-fs (loop2): shut down requested (1) [ 156.823471][ T8937] futex_wake_op: syz.2.1955 tries to shift op by -1; fix this program [ 156.845354][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.855131][ T8938] IPVS: using max 2352 ests per chain, 117600 per kthread [ 156.875215][ T8945] loop4: detected capacity change from 0 to 1024 [ 156.885342][ T8945] EXT4-fs: Ignoring removed orlov option [ 156.904444][ T8945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.936391][ T8945] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.972414][ T8945] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.1958: lblock 0 mapped to illegal pblock 0 (length 4) [ 156.996590][ T8945] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.1958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 157.024026][ T8949] tipc: Started in network mode [ 157.029092][ T8949] tipc: Node identity ac14140f, cluster identity 4711 [ 157.037981][ T8949] tipc: New replicast peer: 255.255.255.255 [ 157.044123][ T8949] tipc: Enabled bearer , priority 10 [ 157.054907][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1957'. [ 157.081757][ T29] audit: type=1400 audit(2000000345.264:20321): avc: denied { create } for pid=8955 comm="syz.3.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 157.101604][ T29] audit: type=1326 audit(2000000345.264:20322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 157.129341][ T8961] binfmt_misc: register: failed to install interpreter file ./file2 [ 157.131328][ T29] audit: type=1326 audit(2000000345.306:20323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 157.167776][ T8958] syzkaller1: entered promiscuous mode [ 157.173139][ T29] audit: type=1326 audit(2000000345.348:20324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 157.173891][ T8958] syzkaller1: entered allmulticast mode [ 157.196850][ T29] audit: type=1326 audit(2000000345.348:20325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 157.196882][ T29] audit: type=1326 audit(2000000345.348:20326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 157.196930][ T29] audit: type=1326 audit(2000000345.348:20327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff3946aeec9 code=0x7ffc0000 [ 157.252088][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.272998][ T29] audit: type=1400 audit(2000000345.348:20328): avc: denied { create } for pid=8957 comm="syz.1.1962" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.284127][ T8960] loop2: detected capacity change from 0 to 512 [ 157.314409][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.329293][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.339283][ T8968] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 157.341116][ T8960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.347492][ T8968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1965'. [ 157.363989][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.376928][ T8960] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.377090][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.390092][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'. [ 157.406902][ T8964] loop0: detected capacity change from 0 to 512 [ 157.413813][ T8960] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.1963: iget: bad i_size value: 2533274857506816 [ 157.427569][ T8960] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.1963: iget: bad i_size value: 2533274857506816 [ 157.440484][ T8961] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.1963: iget: bad i_size value: 2533274857506816 [ 157.443885][ T8964] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 157.461109][ T8964] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.468086][ T8964] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 157.483459][ T8974] FAULT_INJECTION: forcing a failure. [ 157.483459][ T8974] name failslab, interval 1, probability 0, space 0, times 0 [ 157.496218][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.4.1965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.496303][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.496316][ T8974] Call Trace: [ 157.496321][ T8974] [ 157.496328][ T8974] __dump_stack+0x1d/0x30 [ 157.496374][ T8974] dump_stack_lvl+0xe8/0x140 [ 157.496396][ T8974] dump_stack+0x15/0x1b [ 157.496414][ T8974] should_fail_ex+0x265/0x280 [ 157.496450][ T8974] ? audit_log_d_path+0x8d/0x150 [ 157.496516][ T8974] should_failslab+0x8c/0xb0 [ 157.496542][ T8974] __kmalloc_cache_noprof+0x4c/0x320 [ 157.496578][ T8974] audit_log_d_path+0x8d/0x150 [ 157.496623][ T8974] audit_log_d_path_exe+0x42/0x70 [ 157.496744][ T8974] audit_log_task+0x1e9/0x250 [ 157.496792][ T8974] audit_seccomp+0x61/0x100 [ 157.496820][ T8974] ? __seccomp_filter+0x68c/0x10d0 [ 157.496844][ T8974] __seccomp_filter+0x69d/0x10d0 [ 157.496865][ T8974] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.497032][ T8974] ? vfs_write+0x7e8/0x960 [ 157.497055][ T8974] ? __rcu_read_unlock+0x4f/0x70 [ 157.497150][ T8974] ? __fget_files+0x184/0x1c0 [ 157.497179][ T8974] __secure_computing+0x82/0x150 [ 157.497202][ T8974] syscall_trace_enter+0xcf/0x1e0 [ 157.497229][ T8974] do_syscall_64+0xac/0x200 [ 157.497343][ T8974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.497438][ T8974] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.497468][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.497491][ T8974] RIP: 0033:0x7f88dea1eec9 [ 157.497507][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.497562][ T8974] RSP: 002b:00007f88dd465d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 157.497577][ T8974] RAX: ffffffffffffffda RBX: 0000000000000611 RCX: 00007f88dea1eec9 [ 157.497588][ T8974] RDX: 00007f88dd465dec RSI: 0000000000000000 RDI: 00007f88deaa2960 [ 157.497602][ T8974] RBP: 00002000000007c0 R08: 00007f88dd465b07 R09: 0000000000000000 [ 157.497688][ T8974] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 157.497702][ T8974] R13: 00007f88dd465dec R14: 00007f88dd465df0 R15: 00007ffe7d816518 [ 157.497725][ T8974] [ 157.499054][ T8964] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 157.522601][ T8974] loop4: detected capacity change from 0 to 2048 [ 157.527235][ T8964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1964: bg 0: block 40: padding at end of block bitmap is not set [ 157.533380][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.534605][ T8964] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 157.767194][ T8964] EXT4-fs (loop0): 1 truncate cleaned up [ 157.773312][ T8964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.781540][ T8974] loop4: p1 < > p4 [ 157.786839][ T8964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.797229][ T8974] loop4: p4 size 8388608 extends beyond EOD, truncated [ 157.860056][ T8983] loop1: detected capacity change from 0 to 128 [ 157.868804][ T8983] FAULT_INJECTION: forcing a failure. [ 157.868804][ T8983] name failslab, interval 1, probability 0, space 0, times 0 [ 157.881515][ T8983] CPU: 1 UID: 0 PID: 8983 Comm: syz.1.1969 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.881592][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.881643][ T8983] Call Trace: [ 157.881650][ T8983] [ 157.881656][ T8983] __dump_stack+0x1d/0x30 [ 157.881758][ T8983] dump_stack_lvl+0xe8/0x140 [ 157.881778][ T8983] dump_stack+0x15/0x1b [ 157.881807][ T8983] should_fail_ex+0x265/0x280 [ 157.881831][ T8983] ? mqueue_init_fs_context+0x38/0x230 [ 157.881884][ T8983] should_failslab+0x8c/0xb0 [ 157.881912][ T8983] __kmalloc_cache_noprof+0x4c/0x320 [ 157.881988][ T8983] mqueue_init_fs_context+0x38/0x230 [ 157.882020][ T8983] alloc_fs_context+0x3ef/0x4e0 [ 157.882064][ T8983] fs_context_for_mount+0x22/0x30 [ 157.882141][ T8983] mq_init_ns+0xab/0x2f0 [ 157.882170][ T8983] copy_ipcs+0x214/0x3b0 [ 157.882203][ T8983] create_new_namespaces+0x12a/0x3d0 [ 157.882318][ T8983] unshare_nsproxy_namespaces+0xe8/0x120 [ 157.882364][ T8983] ksys_unshare+0x3d0/0x6d0 [ 157.882415][ T8983] ? ksys_write+0x192/0x1a0 [ 157.882447][ T8983] __x64_sys_unshare+0x1f/0x30 [ 157.882504][ T8983] x64_sys_call+0x2911/0x2ff0 [ 157.882557][ T8983] do_syscall_64+0xd2/0x200 [ 157.882595][ T8983] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.882624][ T8983] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.882660][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.882718][ T8983] RIP: 0033:0x7fdcca69eec9 [ 157.882733][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.882766][ T8983] RSP: 002b:00007fdcc90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.882812][ T8983] RAX: ffffffffffffffda RBX: 00007fdcca8f5fa0 RCX: 00007fdcca69eec9 [ 157.882829][ T8983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 157.882846][ T8983] RBP: 00007fdcc90ff090 R08: 0000000000000000 R09: 0000000000000000 [ 157.882873][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.882889][ T8983] R13: 00007fdcca8f6038 R14: 00007fdcca8f5fa0 R15: 00007ffd3ee1cc28 [ 157.882915][ T8983] [ 158.094720][ T3386] tipc: Node number set to 2886997007 [ 158.163583][ T8994] netlink: 'syz.3.1973': attribute type 13 has an invalid length. [ 158.288088][ T9002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 158.294653][ T9002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.302159][ T9002] vhci_hcd vhci_hcd.0: Device attached [ 158.313087][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 158.345780][ T9002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.420876][ T9007] lo speed is unknown, defaulting to 1000 [ 158.548409][ T1040] vhci_hcd: vhci_device speed not set [ 158.608702][ T9004] vhci_hcd: connection closed [ 158.609244][ T37] vhci_hcd: stop threads [ 158.618249][ T37] vhci_hcd: release socket [ 158.622704][ T37] vhci_hcd: disconnect device [ 158.627853][ T1040] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 158.650555][ T1040] usb 7-1: enqueue for inactive port 0 [ 158.719863][ T1040] usb 7-1: enqueue for inactive port 0 [ 158.726998][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 158.778489][ T1040] usb 7-1: enqueue for inactive port 0 [ 158.862043][ T9014] FAULT_INJECTION: forcing a failure. [ 158.862043][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.875190][ T9014] CPU: 0 UID: 0 PID: 9014 Comm: syz.0.1978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.875216][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.875229][ T9014] Call Trace: [ 158.875235][ T9014] [ 158.875241][ T9014] __dump_stack+0x1d/0x30 [ 158.875336][ T9014] dump_stack_lvl+0xe8/0x140 [ 158.875356][ T9014] dump_stack+0x15/0x1b [ 158.875372][ T9014] should_fail_ex+0x265/0x280 [ 158.875403][ T9014] should_fail+0xb/0x20 [ 158.875438][ T9014] should_fail_usercopy+0x1a/0x20 [ 158.875522][ T9014] strncpy_from_user+0x25/0x230 [ 158.875624][ T9014] ? kmem_cache_alloc_noprof+0x186/0x310 [ 158.875668][ T9014] ? getname_flags+0x80/0x3b0 [ 158.875706][ T9014] getname_flags+0xae/0x3b0 [ 158.875744][ T9014] do_sys_openat2+0x60/0x110 [ 158.875800][ T9014] __x64_sys_openat+0xf2/0x120 [ 158.875873][ T9014] x64_sys_call+0x2e9c/0x2ff0 [ 158.875900][ T9014] do_syscall_64+0xd2/0x200 [ 158.875933][ T9014] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.876004][ T9014] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 158.876036][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.876063][ T9014] RIP: 0033:0x7fb9bcc3eec9 [ 158.876081][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.876179][ T9014] RSP: 002b:00007fb9bb69f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.876202][ T9014] RAX: ffffffffffffffda RBX: 00007fb9bce95fa0 RCX: 00007fb9bcc3eec9 [ 158.876218][ T9014] RDX: 0000000000044040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 158.876233][ T9014] RBP: 00007fb9bb69f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.876248][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.876263][ T9014] R13: 00007fb9bce96038 R14: 00007fb9bce95fa0 R15: 00007fffb8fd3a88 [ 158.876286][ T9014] [ 158.930737][ T1040] vhci_hcd: vhci_device speed not set [ 159.205387][ T9023] loop4: detected capacity change from 0 to 512 [ 159.215504][ T9023] EXT4-fs: journaled quota format not specified [ 159.224280][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1983'. [ 159.241539][ T9029] pimreg: entered allmulticast mode [ 159.247657][ T9029] pimreg: left allmulticast mode [ 159.256916][ T9023] netlink: 'syz.4.1983': attribute type 13 has an invalid length. [ 159.266100][ T9023] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 159.679656][ T9049] FAULT_INJECTION: forcing a failure. [ 159.679656][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 159.692507][ T9049] CPU: 1 UID: 0 PID: 9049 Comm: syz.2.1988 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.692538][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.692589][ T9049] Call Trace: [ 159.692597][ T9049] [ 159.692606][ T9049] __dump_stack+0x1d/0x30 [ 159.692645][ T9049] dump_stack_lvl+0xe8/0x140 [ 159.692664][ T9049] dump_stack+0x15/0x1b [ 159.692684][ T9049] should_fail_ex+0x265/0x280 [ 159.692716][ T9049] should_failslab+0x8c/0xb0 [ 159.692791][ T9049] __kmalloc_node_noprof+0xa9/0x410 [ 159.692827][ T9049] ? qdisc_alloc+0x65/0x440 [ 159.692875][ T9049] qdisc_alloc+0x65/0x440 [ 159.692900][ T9049] ? nla_strcmp+0xc3/0xe0 [ 159.692934][ T9049] qdisc_create+0xf5/0x9e0 [ 159.692981][ T9049] tc_modify_qdisc+0xf2e/0x1420 [ 159.693036][ T9049] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 159.693075][ T9049] rtnetlink_rcv_msg+0x657/0x6d0 [ 159.693165][ T9049] ? avc_has_perm_noaudit+0x1b1/0x200 [ 159.693204][ T9049] netlink_rcv_skb+0x123/0x220 [ 159.693254][ T9049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.693350][ T9049] rtnetlink_rcv+0x1c/0x30 [ 159.693450][ T9049] netlink_unicast+0x5bd/0x690 [ 159.693527][ T9049] netlink_sendmsg+0x58b/0x6b0 [ 159.693585][ T9049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.693625][ T9049] __sock_sendmsg+0x142/0x180 [ 159.693659][ T9049] ____sys_sendmsg+0x31e/0x4e0 [ 159.693711][ T9049] ___sys_sendmsg+0x17b/0x1d0 [ 159.693756][ T9049] __x64_sys_sendmsg+0xd4/0x160 [ 159.693784][ T9049] x64_sys_call+0x191e/0x2ff0 [ 159.693804][ T9049] do_syscall_64+0xd2/0x200 [ 159.693841][ T9049] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.693927][ T9049] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 159.693965][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.693988][ T9049] RIP: 0033:0x7fcfe389eec9 [ 159.694006][ T9049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.694092][ T9049] RSP: 002b:00007fcfe22ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.694190][ T9049] RAX: ffffffffffffffda RBX: 00007fcfe3af5fa0 RCX: 00007fcfe389eec9 [ 159.694280][ T9049] RDX: 0000000020000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 159.694292][ T9049] RBP: 00007fcfe22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 159.694305][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.694321][ T9049] R13: 00007fcfe3af6038 R14: 00007fcfe3af5fa0 R15: 00007ffe366b85a8 [ 159.694366][ T9049] [ 159.997676][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 160.255657][ T9062] lo speed is unknown, defaulting to 1000 [ 160.551120][ T9069] 9pnet_fd: p9_fd_create_unix (9069): problem connecting socket: ./file0: -2 [ 160.593246][ T9067] pimreg: entered allmulticast mode [ 160.599962][ T9067] netlink: 'syz.4.1996': attribute type 1 has an invalid length. [ 160.611921][ T9067] pimreg: left allmulticast mode [ 160.627793][ T9073] loop3: detected capacity change from 0 to 1024 [ 160.634550][ T9073] EXT4-fs: Ignoring removed orlov option [ 160.640211][ T9073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.656027][ T9073] EXT4-fs (loop3): shut down requested (1) [ 160.666011][ T9073] futex_wake_op: syz.3.1994 tries to shift op by -1; fix this program [ 160.700166][ T9080] FAULT_INJECTION: forcing a failure. [ 160.700166][ T9080] name failslab, interval 1, probability 0, space 0, times 0 [ 160.712861][ T9080] CPU: 1 UID: 0 PID: 9080 Comm: syz.3.1998 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.712895][ T9080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.712911][ T9080] Call Trace: [ 160.712918][ T9080] [ 160.712971][ T9080] __dump_stack+0x1d/0x30 [ 160.712997][ T9080] dump_stack_lvl+0xe8/0x140 [ 160.713021][ T9080] dump_stack+0x15/0x1b [ 160.713038][ T9080] should_fail_ex+0x265/0x280 [ 160.713063][ T9080] ? genl_start+0x117/0x390 [ 160.713171][ T9080] should_failslab+0x8c/0xb0 [ 160.713202][ T9080] __kmalloc_cache_noprof+0x4c/0x320 [ 160.713243][ T9080] genl_start+0x117/0x390 [ 160.713364][ T9080] __netlink_dump_start+0x334/0x520 [ 160.713398][ T9080] genl_family_rcv_msg_dumpit+0x115/0x180 [ 160.713437][ T9080] ? __pfx_genl_start+0x10/0x10 [ 160.713488][ T9080] ? __pfx_genl_dumpit+0x10/0x10 [ 160.713552][ T9080] ? __pfx_genl_done+0x10/0x10 [ 160.713589][ T9080] genl_rcv_msg+0x3f0/0x460 [ 160.713619][ T9080] ? __pfx_nl80211_dump_station+0x10/0x10 [ 160.713668][ T9080] netlink_rcv_skb+0x123/0x220 [ 160.713741][ T9080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.713780][ T9080] genl_rcv+0x28/0x40 [ 160.713891][ T9080] netlink_unicast+0x5bd/0x690 [ 160.713920][ T9080] netlink_sendmsg+0x58b/0x6b0 [ 160.713952][ T9080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.714059][ T9080] __sock_sendmsg+0x142/0x180 [ 160.714097][ T9080] ____sys_sendmsg+0x31e/0x4e0 [ 160.714130][ T9080] ___sys_sendmsg+0x17b/0x1d0 [ 160.714201][ T9080] __x64_sys_sendmsg+0xd4/0x160 [ 160.714229][ T9080] x64_sys_call+0x191e/0x2ff0 [ 160.714248][ T9080] do_syscall_64+0xd2/0x200 [ 160.714307][ T9080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.714335][ T9080] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.714377][ T9080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.714397][ T9080] RIP: 0033:0x7ff3946aeec9 [ 160.714414][ T9080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.714470][ T9080] RSP: 002b:00007ff39310f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.714489][ T9080] RAX: ffffffffffffffda RBX: 00007ff394905fa0 RCX: 00007ff3946aeec9 [ 160.714500][ T9080] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 160.714517][ T9080] RBP: 00007ff39310f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.714528][ T9080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.714607][ T9080] R13: 00007ff394906038 R14: 00007ff394905fa0 R15: 00007ffccb937688 [ 160.714628][ T9080] [ 161.053247][ T9085] loop3: detected capacity change from 0 to 1024 [ 161.059739][ T9082] loop2: detected capacity change from 0 to 512 [ 161.074845][ T9082] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.082283][ T9085] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1999: Allocating blocks 449-513 which overlap fs metadata [ 161.113358][ T9084] ================================================================== [ 161.121482][ T9084] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 161.128898][ T9084] [ 161.131222][ T9084] write to 0xffff88811eef6000 of 4096 bytes by task 9082 on cpu 0: [ 161.139114][ T9084] _copy_from_iter+0x133/0xe80 [ 161.143891][ T9084] copy_page_from_iter+0x178/0x2a0 [ 161.149055][ T9084] process_vm_rw+0x659/0x960 [ 161.153654][ T9084] __x64_sys_process_vm_writev+0x78/0x90 [ 161.159301][ T9084] x64_sys_call+0x2a7c/0x2ff0 [ 161.163983][ T9084] do_syscall_64+0xd2/0x200 [ 161.168513][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.174423][ T9084] [ 161.176750][ T9084] write to 0xffff88811eef6000 of 4096 bytes by task 9084 on cpu 1: [ 161.184645][ T9084] _copy_from_iter+0x133/0xe80 [ 161.189431][ T9084] copy_page_from_iter+0x178/0x2a0 [ 161.194563][ T9084] process_vm_rw+0x659/0x960 [ 161.199161][ T9084] __x64_sys_process_vm_writev+0x78/0x90 [ 161.204804][ T9084] x64_sys_call+0x2a7c/0x2ff0 [ 161.209513][ T9084] do_syscall_64+0xd2/0x200 [ 161.214038][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.219934][ T9084] [ 161.222258][ T9084] Reported by Kernel Concurrency Sanitizer on: [ 161.228417][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.2.2000 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.238140][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.248195][ T9084] ================================================================== [ 161.291938][ T3305] EXT4-fs unmount: 4 callbacks suppressed [ 161.291957][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.309505][ T9083] EXT4-fs (loop3): pa ffff888100498150: logic 48, phys. 177, len 21 [ 161.317584][ T9083] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 161.338020][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.