last executing test programs: 2.378220715s ago: executing program 0 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001", @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) 2.223794718s ago: executing program 4 (id=2166): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x8000000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) unshare(0x42000000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x509a43) 1.986212122s ago: executing program 3 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") syz_emit_ethernet(0xd6, &(0x7f00000004c0)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r3}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x118, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) 1.826143625s ago: executing program 3 (id=2169): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x105140, 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000002c0)={0x0, 0xb358, 0x0, 0x210000, 0x3e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) 1.792083416s ago: executing program 3 (id=2170): syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3, 0x1}, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffef, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x0, 0x0, 0x65, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x7ff) lsetxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0x2d, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000380)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 1.744896327s ago: executing program 0 (id=2171): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) io_setup(0x4fb, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x10, 0xfff1}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20000000002}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.475889302s ago: executing program 4 (id=2173): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x10, 0xfff1}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='rpc_socket_nospace\x00'}, 0x2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r5, 0x0) 1.413520613s ago: executing program 2 (id=2174): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000000)=0x5, 0x20001) 1.378804684s ago: executing program 2 (id=2175): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.325792755s ago: executing program 3 (id=2176): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) open(0x0, 0x145142, 0x102) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) preadv(r5, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/237, 0xed}, {0x0}], 0x2, 0x3, 0x9b35) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 1.316471945s ago: executing program 0 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) close(0x4) 1.267172446s ago: executing program 0 (id=2178): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000700)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}], [{@seclabel}, {@euid_gt={'euid>', 0xee01}}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT], 0xfd, 0x2bc, &(0x7f0000000c40)="$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") open_tree(r0, &(0x7f00000002c0)='./file1\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x9, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100328, 0x7, 0x10000, 0x9, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x120000009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000040)="6361b3a8b7abf78b5bc7d8873e4fb11eb8c46fc0d45dfd4c4728d4261c808b752d3b864dec2ad42ed02881891c5dc4d12b7174df8cce8d4518a8f1d084e3", 0x3e) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x80}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) rt_sigaction(0x1b, 0x0, 0x0, 0x8, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18007a5c000000d0daf7000000000000000000000000000000008943e85f16169028fd78f93b377984829d06fe6729b57a4aa36edc344f0d67813140be94fe84fbf1d355534a"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_vlan\x00'}}, 0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r7, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 1.169151908s ago: executing program 4 (id=2181): bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001", @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) 819.940485ms ago: executing program 1 (id=2182): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dd) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) alarm(0x72) 764.969586ms ago: executing program 2 (id=2183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_io_uring_setup(0x773f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 751.369296ms ago: executing program 3 (id=2184): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 740.163547ms ago: executing program 1 (id=2185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB=' '], 0x38}}, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000001ff69000000000001000000aff6197700861f4104bf007d16dcdc2850b5000000000000008eb49c9179da48b7", 0x34, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000340)=0xe8) syz_open_dev$vcsn(&(0x7f0000000040), 0x368, 0x309d02) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800) sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x22000, 0x0) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000280)=0x14) read(r8, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 707.710067ms ago: executing program 2 (id=2186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x575, &(0x7f0000001d40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=0xee00, @ANYBLOB="040006000000000010000000000000002000000000000000"], 0x2c, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf25180000000e0001006e657464657673696d0000000f0002"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0x79c, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_CREATE2(r2, &(0x7f0000004500)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1009, 0x1, 0x4, 0x9, 0x2, 0x6, "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"}}, 0x1121) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000001822c8ff000a40000000020900020073790008405d5d1ab19f930e243d72a9b5227a3100000000050020000700000700000043348c418d7df63c817665af80e323ab01b707f2727c2d89baf8fd4dedb805727d3925628b6dc48eb91e08238485815a9e22ca8a3bc1f1a4970b03637d5df4dcd159076a0ae0bc"], 0x4c}}, 0x4000080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) 620.962599ms ago: executing program 0 (id=2187): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x6a63, 0x8, 0x200, 0xac}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) (fail_nth: 3) 619.898819ms ago: executing program 1 (id=2188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) close(0x4) 605.897319ms ago: executing program 1 (id=2189): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x818404, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX], 0x0, 0x300, &(0x7f0000000840)="$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") sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) r7 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1bc}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 588.419849ms ago: executing program 4 (id=2190): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x1100000, &(0x7f0000000540)={[{@dioread_nolock}, {@errors_remount}, {}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$eJzs3M9vFOUbAPBnpt0CX+DbiviDH2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tbXe7yH4+ycD77szs+zw78+6+M+9uA+hbo9k/ScSOiPg9Ioar1foNRqv/3Vi6OH1z6eJ0EuXym38lle2uL12cLjYt9tueV8bSiPTTJPY1aXfh/IXTU3Nzs+fy+sTimfcnFs5feObUmamTsydnzx4+duzokcnnnzv8bPPAh9aWZxbT9b0fze/f89o7X75+/PO6/Bvy6JDRdiufKJc73Fxv7awpJ4M9DIQ1GYiI7HCVKv1/OAZi5eANx6uf9DQ4oKvK5XJ5e+vVl8rAXSyJ+rouD/2i+KDPrn+LpXEQ8GL3hh89d+2l6gVQlveNfKmuGYw036bUcH3bSaMR8falv7/OlujOfQgAgDrfZ+Ofp5uN/9K4v2a7/+dzQyMRcU9E7IqIeyNid0TcF1HZ9oGIeLCyZyyPnVbTOEly6/gnvbqhBFeRjf9eyOe26sd/yxmMDOS1nZX8S8mJU3Ozh/LXZCxKW7L6ZJs2fnjlty9arasd/2VL1n4xFszjuDq4pX6fmanFqY3kXOva5Yi9g0WutfknyzMBSUTsiYi962zj1MFv97dat3r+bXRgnqn8TcST1eN/KZbq8y8k7ecnJ7bG3OyhieKsuNXPv155o1X7lfwPrjP/DsiO//+anv/L+Y8ktfO1C2tv48ofn7W8plnv+T+UvFUpF9PAH04tLp6bjBhKjleDrn388Mq+Rb3YPst/7EDz/r8rVl6JfRGRncQPRcTDEfFIHvujEfFYRBxok/9PLz/+XtMV6QbP/w7I8p9Z0/FfKQxF4yPNCwOnf/yurtGRlWKe/832x/9opTSWP3I773+3E9f6zmYAAAD470kjYkck6fhyOU3Hx6vfl98dkc7NLyw+dWL+g7Mz1d8IjEQpLe50DdfcD53ML+ur9csRUf1qQbH+SH7f+KuBbZX6+PT83Eyvk4c+t71F/8/8OdDr6ICu83st6F/6P/SvZv1/aw/iADafz3/oX036/7ZexAFsvmaf/x+33+WfbsUCbK6G/m/aD/rI2q//f3m3K4EAm65l/7+b//IPUOH+P/SlhW2x+o/k2xaKZ1rn7ndKIYmIjj5hlO6IvDZeKCdND26kWaF0J0So0IVCb9+XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuXfAAAA//+zott5") execveat$binfmt(r0, 0x0, &(0x7f0000000280)={[&(0x7f0000000000)='jqfmt=vfsv1', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='noblock_validity']}, &(0x7f00000003c0)={[&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00']}, 0x1000) socket(0x400000000010, 0x800, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000800)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x9}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) unlink(0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='sys_enter\x00', r10, 0x0, 0x8}, 0x18) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000066cb9e4596b72f849484857f63096f81124f4f53dc359ef222094c74aac5eab5fae20010313a362b524b05ced65b9e67c1b6b5e5ecbadf9c5481a711aa6b014304bc882e007fa5512bb57134c95743c056ccaaa3397cdc9f19584575f70893853289ccac5979b64a6"], 0xc4}}, 0x200048c4) mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r11, &(0x7f00000005c0)='./bus\x00', r11, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="7c04d4aba30eccec422613ab5d8e0731f6afaf62846da9d17f07302b0c7dc26aee60a5846f20a2885636c1a4a61a286020e5541bba8cc9cf234ae1fa652f991c1f5fb220cdcb46335528b22566ea73b65a1a6e42fdfe69ea2d282de2882a47cfc9942ddd6dafa332ea4d51d5", @ANYRES32=r2, @ANYRESOCT=r6, @ANYRESOCT=r3, @ANYRESDEC=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 541.96277ms ago: executing program 2 (id=2191): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x10, 0xfff1}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='rpc_socket_nospace\x00'}, 0x2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r5, 0x0) 541.50701ms ago: executing program 4 (id=2192): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x6a63, 0x8, 0x200, 0xac}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) 527.7409ms ago: executing program 1 (id=2193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5e, 0x2, @perf_config_ext={0x9, 0x6}, 0x1a401, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3, 0x0, 0xc6ff}, 0x0, 0xffffffffffffffff, r0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x80, 0xffffffffffffffff}) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e28, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) close(r3) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f00000001c0)='./file0\x00', 0x4c0, &(0x7f00000003c0)=ANY=[@ANYBLOB='session=0x0000000000000043,dmode=0x0000000000000006,map=acorn,mode=0x0000000000000007,sbsector=0x0000000004008001,check=strict,check=relaxed,overriderockperm,sbsector=0x0000000000000000,utf8,sbsector=0x0000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC=r3], 0x2, 0x976, &(0x7f0000000980)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f00)=ANY=[@ANYBLOB="38000000020103000000000000000000020000042400018014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4000860}, 0x40080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 517.371101ms ago: executing program 3 (id=2194): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000001c0)=""/11, 0x0, 0xb, 0x1, 0x1000, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() getpgid(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040), &(0x7f0000000300)) 76.840379ms ago: executing program 0 (id=2195): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) io_setup(0x4fb, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x10, 0xfff1}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20000000002}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 56.066859ms ago: executing program 1 (id=2196): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_secret(0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x4fff5000) 47.78173ms ago: executing program 4 (id=2197): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async, rerun: 64) r0 = memfd_secret(0x80000) (rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) (async) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x8}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000f89400000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) (async, rerun: 32) setreuid(0x0, 0xee00) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa", 0x4}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) listen(r2, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002c8f38000100feff0200000003000000970f000004000000000000000d00000000000000fdffffffffffffffe5"], 0x20e) (async, rerun: 32) close(r5) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) (async, rerun: 32) close(0x3) 0s ago: executing program 2 (id=2198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB=' '], 0x38}}, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000001ff69000000000001000000aff6197700861f4104bf007d16dcdc2850b5000000000000008eb49c9179da48b7", 0x34, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000340)=0xe8) syz_open_dev$vcsn(&(0x7f0000000040), 0x368, 0x309d02) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800) sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x22000, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): 0x433/0x6b0 [ 76.327403][ T5612] ? _parse_integer+0x27/0x40 [ 76.327432][ T5612] copy_process+0x399/0x2000 [ 76.327565][ T5612] ? kstrtouint+0x76/0xc0 [ 76.327587][ T5612] ? kstrtouint_from_user+0x9f/0xf0 [ 76.327630][ T5612] ? __rcu_read_unlock+0x4f/0x70 [ 76.327650][ T5612] kernel_clone+0x16c/0x5c0 [ 76.327672][ T5612] __x64_sys_clone+0xe6/0x120 [ 76.327715][ T5612] x64_sys_call+0x119c/0x3000 [ 76.327776][ T5612] do_syscall_64+0xd2/0x200 [ 76.327796][ T5612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.327815][ T5612] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.327833][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.327863][ T5612] RIP: 0033:0x7fa90812eec9 [ 76.327874][ T5612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.327886][ T5612] RSP: 002b:00007fa906b96fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 76.327900][ T5612] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 76.327983][ T5612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062008600 [ 76.327991][ T5612] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 76.328000][ T5612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 76.328008][ T5612] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 76.328022][ T5612] [ 76.328051][ T5612] syz.0.776: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 76.495291][ T5620] FAULT_INJECTION: forcing a failure. [ 76.495291][ T5620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.497004][ T5612] ,cpuset= [ 76.505419][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz.3.779 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.505499][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.505509][ T5620] Call Trace: [ 76.505514][ T5620] [ 76.505519][ T5620] __dump_stack+0x1d/0x30 [ 76.505548][ T5620] dump_stack_lvl+0xe8/0x140 [ 76.505605][ T5620] dump_stack+0x15/0x1b [ 76.505694][ T5620] should_fail_ex+0x265/0x280 [ 76.505734][ T5620] should_fail+0xb/0x20 [ 76.505768][ T5620] should_fail_usercopy+0x1a/0x20 [ 76.505828][ T5620] _copy_to_user+0x20/0xa0 [ 76.505862][ T5620] do_pipe2+0x89/0x130 [ 76.505959][ T5620] ? trace_sys_enter+0xd0/0xf0 [ 76.505987][ T5620] __x64_sys_pipe2+0x30/0x40 [ 76.506015][ T5620] x64_sys_call+0x2628/0x3000 [ 76.506038][ T5620] do_syscall_64+0xd2/0x200 [ 76.506101][ T5620] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.506209][ T5620] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.506236][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.506260][ T5620] RIP: 0033:0x7f801391eec9 [ 76.506279][ T5620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.506298][ T5620] RSP: 002b:00007f8012366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 76.506320][ T5620] RAX: ffffffffffffffda RBX: 00007f8013b76090 RCX: 00007f801391eec9 [ 76.506335][ T5620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 76.506377][ T5620] RBP: 00007f8012366090 R08: 0000000000000000 R09: 0000000000000000 [ 76.506514][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.506528][ T5620] R13: 00007f8013b76128 R14: 00007f8013b76090 R15: 00007ffc6353baa8 [ 76.506549][ T5620] [ 76.752348][ T5612] /,mems_allowed=0 [ 76.756160][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz.0.776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.756181][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.756192][ T5612] Call Trace: [ 76.756197][ T5612] [ 76.756202][ T5612] __dump_stack+0x1d/0x30 [ 76.756250][ T5612] dump_stack_lvl+0xe8/0x140 [ 76.756285][ T5612] dump_stack+0x15/0x1b [ 76.756318][ T5612] warn_alloc+0x12b/0x1a0 [ 76.756415][ T5612] ? should_failslab+0x8c/0xb0 [ 76.756528][ T5612] __vmalloc_node_range_noprof+0x4b9/0xed0 [ 76.756569][ T5612] __vmalloc_node_noprof+0x89/0xc0 [ 76.756598][ T5612] ? copy_process+0x399/0x2000 [ 76.756618][ T5612] ? copy_process+0x399/0x2000 [ 76.756717][ T5612] dup_task_struct+0x433/0x6b0 [ 76.756738][ T5612] ? _parse_integer+0x27/0x40 [ 76.756812][ T5612] copy_process+0x399/0x2000 [ 76.756842][ T5612] ? kstrtouint+0x76/0xc0 [ 76.756869][ T5612] ? kstrtouint_from_user+0x9f/0xf0 [ 76.756904][ T5612] ? __rcu_read_unlock+0x4f/0x70 [ 76.756932][ T5612] kernel_clone+0x16c/0x5c0 [ 76.757022][ T5612] __x64_sys_clone+0xe6/0x120 [ 76.757058][ T5612] x64_sys_call+0x119c/0x3000 [ 76.757086][ T5612] do_syscall_64+0xd2/0x200 [ 76.757181][ T5612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.757208][ T5612] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.757228][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.757245][ T5612] RIP: 0033:0x7fa90812eec9 [ 76.757257][ T5612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.757274][ T5612] RSP: 002b:00007fa906b96fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 76.757374][ T5612] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 76.757388][ T5612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062008600 [ 76.757479][ T5612] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 76.757493][ T5612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 76.757506][ T5612] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 76.757521][ T5612] [ 76.757526][ T5612] Mem-Info: [ 76.969234][ T5612] active_anon:31561 inactive_anon:0 isolated_anon:0 [ 76.969234][ T5612] active_file:9604 inactive_file:2451 isolated_file:0 [ 76.969234][ T5612] unevictable:15 dirty:1024 writeback:0 [ 76.969234][ T5612] slab_reclaimable:3126 slab_unreclaimable:85362 [ 76.969234][ T5612] mapped:30166 shmem:22744 pagetables:2352 [ 76.969234][ T5612] sec_pagetables:0 bounce:0 [ 76.969234][ T5612] kernel_misc_reclaimable:0 [ 76.969234][ T5612] free:1802710 free_pcp:3209 free_cma:0 [ 77.014342][ T5612] Node 0 active_anon:131232kB inactive_anon:0kB active_file:38416kB inactive_file:9804kB unevictable:60kB isolated(anon):0kB isolated(file):0kB mapped:120664kB dirty:4096kB writeback:0kB shmem:95964kB kernel_stack:5776kB pagetables:9408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.041901][ T5612] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.071647][ T5612] lowmem_reserve[]: 0 2883 7862 7862 [ 77.076991][ T5612] Node 0 DMA32 free:2949344kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952876kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 77.108482][ T5612] lowmem_reserve[]: 0 0 4978 4978 [ 77.113558][ T5612] Node 0 Normal free:4234304kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:138076kB inactive_anon:0kB active_file:38416kB inactive_file:9804kB unevictable:60kB writepending:4096kB zspages:0kB present:5242880kB managed:5098240kB mlocked:60kB bounce:0kB free_pcp:9312kB local_pcp:5172kB free_cma:0kB [ 77.146692][ T5612] lowmem_reserve[]: 0 0 0 0 [ 77.151258][ T5612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.164027][ T5612] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949344kB [ 77.180187][ T5612] Node 0 Normal: 287*4kB (UE) 411*8kB (UM) 160*16kB (U) 136*32kB (U) 92*64kB (U) 53*128kB (U) 25*256kB (UE) 15*512kB (UE) 14*1024kB (UM) 2*2048kB (UE) 1019*4096kB (M) = 4230356kB [ 77.198147][ T5612] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 77.207449][ T5612] 39377 total pagecache pages [ 77.212134][ T5612] 0 pages in swap cache [ 77.216277][ T5612] Free swap = 124996kB [ 77.220491][ T5612] Total swap = 124996kB [ 77.224642][ T5612] 2097051 pages RAM [ 77.228509][ T5612] 0 pages HighMem/MovableOnly [ 77.233218][ T5612] 80432 pages reserved [ 77.408242][ T5640] __nla_validate_parse: 1 callbacks suppressed [ 77.408310][ T5640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 77.832485][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 77.896302][ T5658] lo speed is unknown, defaulting to 1000 [ 77.939095][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 77.957851][ T5666] FAULT_INJECTION: forcing a failure. [ 77.957851][ T5666] name failslab, interval 1, probability 0, space 0, times 0 [ 77.967288][ T5668] netlink: 'syz.3.798': attribute type 10 has an invalid length. [ 77.970718][ T5666] CPU: 1 UID: 0 PID: 5666 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.970815][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.970830][ T5666] Call Trace: [ 77.970837][ T5666] [ 77.970847][ T5666] __dump_stack+0x1d/0x30 [ 77.970889][ T5666] dump_stack_lvl+0xe8/0x140 [ 77.971000][ T5666] dump_stack+0x15/0x1b [ 77.971098][ T5666] should_fail_ex+0x265/0x280 [ 77.971155][ T5666] should_failslab+0x8c/0xb0 [ 77.971197][ T5666] kmem_cache_alloc_noprof+0x50/0x480 [ 77.971240][ T5666] ? audit_log_start+0x342/0x720 [ 77.971304][ T5666] audit_log_start+0x342/0x720 [ 77.971414][ T5666] ? kstrtouint+0x76/0xc0 [ 77.971451][ T5666] audit_seccomp+0x48/0x100 [ 77.971483][ T5666] ? __seccomp_filter+0x82d/0x1250 [ 77.971551][ T5666] __seccomp_filter+0x83e/0x1250 [ 77.971579][ T5666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.971681][ T5666] ? vfs_write+0x7e8/0x960 [ 77.971773][ T5666] ? __rcu_read_unlock+0x4f/0x70 [ 77.971799][ T5666] ? __fget_files+0x184/0x1c0 [ 77.971831][ T5666] __secure_computing+0x82/0x150 [ 77.971859][ T5666] syscall_trace_enter+0xcf/0x1e0 [ 77.971953][ T5666] do_syscall_64+0xac/0x200 [ 77.971984][ T5666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.972018][ T5666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.972092][ T5666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.972116][ T5666] RIP: 0033:0x7f175032eec9 [ 77.972135][ T5666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.972155][ T5666] RSP: 002b:00007f174ed8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 77.972221][ T5666] RAX: ffffffffffffffda RBX: 00007f1750585fa0 RCX: 00007f175032eec9 [ 77.972237][ T5666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.972294][ T5666] RBP: 00007f174ed8f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.972308][ T5666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.972323][ T5666] R13: 00007f1750586038 R14: 00007f1750585fa0 R15: 00007ffe0ced24e8 [ 77.972344][ T5666] [ 78.026415][ T5672] batman_adv: batadv0: Adding interface: dummy0 [ 78.194818][ T5672] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.230978][ T5672] batman_adv: batadv0: Interface activated: dummy0 [ 78.240123][ T5668] bridge0: port 3(batadv0) entered disabled state [ 78.247216][ T5668] batadv0: left allmulticast mode [ 78.252316][ T5668] batadv0: left promiscuous mode [ 78.257365][ T5668] bridge0: port 3(batadv0) entered disabled state [ 78.265204][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.273426][ T5668] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 78.283874][ T5674] batadv0: mtu less than device minimum [ 78.289950][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.300660][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.311451][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.311978][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.312436][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.313087][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.313523][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.314125][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.314824][ T5674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.391957][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 78.467045][ T5693] netlink: 'syz.4.807': attribute type 10 has an invalid length. [ 78.474904][ T5693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.807'. [ 78.554331][ T5699] lo speed is unknown, defaulting to 1000 [ 78.617350][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 78.626349][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 78.822490][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 78.919294][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 79.087180][ T5735] lo speed is unknown, defaulting to 1000 [ 79.254114][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 79.254126][ T29] audit: type=1326 audit(1759637445.792:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.295667][ T29] audit: type=1326 audit(1759637445.822:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.319141][ T29] audit: type=1326 audit(1759637445.822:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.342622][ T29] audit: type=1326 audit(1759637445.822:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.482711][ T5749] lo speed is unknown, defaulting to 1000 [ 79.498510][ T5753] lo speed is unknown, defaulting to 1000 [ 79.512240][ T29] audit: type=1326 audit(1759637446.052:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.535559][ T29] audit: type=1326 audit(1759637446.052:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.558940][ T29] audit: type=1326 audit(1759637446.052:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.582199][ T29] audit: type=1326 audit(1759637446.052:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.601376][ T5763] lo speed is unknown, defaulting to 1000 [ 79.605694][ T29] audit: type=1326 audit(1759637446.052:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 79.634678][ T29] audit: type=1326 audit(1759637446.052:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 80.081287][ T5791] 9p: Unknown access argument 18446744073709551615: -34 [ 80.269673][ T5808] syzkaller0: entered allmulticast mode [ 80.275335][ T5797] lo speed is unknown, defaulting to 1000 [ 80.299734][ T5808] syzkaller0: entered promiscuous mode [ 80.313951][ T5808] syzkaller0 (unregistering): left allmulticast mode [ 80.320808][ T5808] syzkaller0 (unregistering): left promiscuous mode [ 80.336572][ T5813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 80.609058][ T5828] lo speed is unknown, defaulting to 1000 [ 80.692253][ T5832] 9p: Unknown access argument 18446744073709551615: -34 [ 80.738354][ T5835] lo speed is unknown, defaulting to 1000 [ 81.390834][ T5872] 9p: Unknown access argument 18446744073709551615: -34 [ 81.665130][ T5889] lo speed is unknown, defaulting to 1000 [ 82.989630][ T5937] __nla_validate_parse: 7 callbacks suppressed [ 82.989662][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 83.004877][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 83.075186][ T5939] lo speed is unknown, defaulting to 1000 [ 83.198793][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 83.273989][ T5951] lo speed is unknown, defaulting to 1000 [ 83.397502][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 83.520255][ T1742] net_ratelimit: 30 callbacks suppressed [ 83.520271][ T1742] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 83.540202][ T1742] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 83.616344][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'. [ 83.650635][ T23] kernel write not supported for file /392/attr/prev (pid: 23 comm: kworker/1:0) [ 84.059493][ T317] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 84.073855][ T317] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 84.337086][ T6014] lo speed is unknown, defaulting to 1000 [ 84.406087][ T6019] lo speed is unknown, defaulting to 1000 [ 84.411906][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 84.411921][ T29] audit: type=1326 audit(1759637450.952:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.441429][ T29] audit: type=1326 audit(1759637450.952:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.448313][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 84.464950][ T29] audit: type=1326 audit(1759637450.952:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.497062][ T29] audit: type=1326 audit(1759637450.952:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.520502][ T29] audit: type=1326 audit(1759637450.952:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.543960][ T29] audit: type=1326 audit(1759637450.952:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.567288][ T29] audit: type=1326 audit(1759637450.952:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.590752][ T29] audit: type=1326 audit(1759637450.952:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.590822][ T1742] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 84.615629][ T29] audit: type=1326 audit(1759637450.952:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.628314][ T1742] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 84.666007][ T29] audit: type=1326 audit(1759637450.952:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 84.707025][ T6021] lo speed is unknown, defaulting to 1000 [ 84.833318][ T6046] 9p: Unknown access argument 18446744073709551615: -34 [ 85.012221][ T6052] 9p: Unknown access argument 18446744073709551615: -34 [ 85.021373][ T6058] lo speed is unknown, defaulting to 1000 [ 85.125313][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 85.134523][ T1742] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 85.148810][ T1742] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 85.202387][ T6069] netlink: 'syz.4.958': attribute type 10 has an invalid length. [ 85.210154][ T6069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.958'. [ 85.265139][ T6067] lo speed is unknown, defaulting to 1000 [ 85.643552][ T6078] lo speed is unknown, defaulting to 1000 [ 85.669947][ T31] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 85.684317][ T31] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 85.749197][ T6083] lo speed is unknown, defaulting to 1000 [ 85.825741][ T6092] lo speed is unknown, defaulting to 1000 [ 85.909645][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 86.023054][ T6117] lo speed is unknown, defaulting to 1000 [ 86.116540][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 86.153257][ T6136] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 86.177551][ T6136] bridge0: port 3(batadv0) entered disabled state [ 86.196967][ T6136] batadv0: left allmulticast mode [ 86.202211][ T6136] batadv0: left promiscuous mode [ 86.207471][ T6136] bridge0: port 3(batadv0) entered disabled state [ 86.222877][ T6136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.236135][ T6136] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 86.295316][ T6153] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 86.325655][ T6140] lo speed is unknown, defaulting to 1000 [ 86.356186][ T6157] lo speed is unknown, defaulting to 1000 [ 86.582708][ T6192] lo speed is unknown, defaulting to 1000 [ 86.661611][ T6200] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 86.674340][ T6200] batadv0: entered promiscuous mode [ 86.679645][ T6200] batadv0: entered allmulticast mode [ 86.685253][ T6200] bridge0: port 4(batadv0) entered blocking state [ 86.691722][ T6200] bridge0: port 4(batadv0) entered disabled state [ 86.924906][ T6220] lo speed is unknown, defaulting to 1000 [ 87.205349][ T6234] FAULT_INJECTION: forcing a failure. [ 87.205349][ T6234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.218491][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.2.1027 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.218589][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.218598][ T6234] Call Trace: [ 87.218603][ T6234] [ 87.218608][ T6234] __dump_stack+0x1d/0x30 [ 87.218635][ T6234] dump_stack_lvl+0xe8/0x140 [ 87.218659][ T6234] dump_stack+0x15/0x1b [ 87.218702][ T6234] should_fail_ex+0x265/0x280 [ 87.218727][ T6234] should_fail+0xb/0x20 [ 87.218792][ T6234] should_fail_usercopy+0x1a/0x20 [ 87.218807][ T6234] _copy_to_user+0x20/0xa0 [ 87.218874][ T6234] simple_read_from_buffer+0xb5/0x130 [ 87.218891][ T6234] proc_fail_nth_read+0x10e/0x150 [ 87.218913][ T6234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.218933][ T6234] vfs_read+0x1a5/0x770 [ 87.218987][ T6234] ? __rcu_read_unlock+0x4f/0x70 [ 87.219049][ T6234] ? __fget_files+0x184/0x1c0 [ 87.219074][ T6234] ksys_read+0xda/0x1a0 [ 87.219095][ T6234] __x64_sys_read+0x40/0x50 [ 87.219112][ T6234] x64_sys_call+0x27c0/0x3000 [ 87.219127][ T6234] do_syscall_64+0xd2/0x200 [ 87.219147][ T6234] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.219165][ T6234] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.219193][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.219209][ T6234] RIP: 0033:0x7f64b71dd8dc [ 87.219219][ T6234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.219232][ T6234] RSP: 002b:00007f64b5c3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.219246][ T6234] RAX: ffffffffffffffda RBX: 00007f64b7435fa0 RCX: 00007f64b71dd8dc [ 87.219255][ T6234] RDX: 000000000000000f RSI: 00007f64b5c3f0a0 RDI: 0000000000000006 [ 87.219263][ T6234] RBP: 00007f64b5c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.219321][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.219331][ T6234] R13: 00007f64b7436038 R14: 00007f64b7435fa0 R15: 00007fff05eaf748 [ 87.219346][ T6234] [ 87.573590][ T6253] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 87.584458][ T6253] batadv0: entered promiscuous mode [ 87.589873][ T6253] batadv0: entered allmulticast mode [ 87.618434][ T6253] bond0: (slave batadv0): Releasing backup interface [ 87.637001][ T6253] bridge0: port 3(batadv0) entered blocking state [ 87.643516][ T6253] bridge0: port 3(batadv0) entered disabled state [ 87.852360][ T6274] lo speed is unknown, defaulting to 1000 [ 87.919456][ T317] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 87.928709][ T317] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 88.155423][ T6288] __nla_validate_parse: 11 callbacks suppressed [ 88.155494][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 88.480778][ T6293] lo speed is unknown, defaulting to 1000 [ 88.584998][ T6297] lo speed is unknown, defaulting to 1000 [ 88.635025][ T6307] lo speed is unknown, defaulting to 1000 [ 88.771342][ T6317] lo speed is unknown, defaulting to 1000 [ 88.796978][ T6313] lo speed is unknown, defaulting to 1000 [ 89.058274][ T6335] lo speed is unknown, defaulting to 1000 [ 89.392997][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 89.533728][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 89.533741][ T29] audit: type=1326 audit(1759637456.072:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 89.612384][ T29] audit: type=1326 audit(1759637456.102:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 89.635796][ T29] audit: type=1326 audit(1759637456.102:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 89.659224][ T29] audit: type=1326 audit(1759637456.102:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 89.966655][ T29] audit: type=1326 audit(1759637456.502:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175032eec9 code=0x7ffc0000 [ 89.990129][ T29] audit: type=1326 audit(1759637456.502:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175032eec9 code=0x7ffc0000 [ 90.065211][ T29] audit: type=1326 audit(1759637456.562:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f175032d710 code=0x7ffc0000 [ 90.088724][ T29] audit: type=1326 audit(1759637456.562:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f175032d710 code=0x7ffc0000 [ 90.112329][ T29] audit: type=1326 audit(1759637456.562:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175032eec9 code=0x7ffc0000 [ 90.135721][ T29] audit: type=1326 audit(1759637456.562:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175032eec9 code=0x7ffc0000 [ 90.243546][ T6366] lo speed is unknown, defaulting to 1000 [ 90.271497][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1081'. [ 90.311142][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 90.431442][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1083'. [ 90.470116][ T6389] lo speed is unknown, defaulting to 1000 [ 90.629678][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 90.923728][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 91.019226][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 91.029003][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 91.105929][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 91.224115][ T6456] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 91.604766][ T6483] netlink: 'syz.2.1118': attribute type 30 has an invalid length. [ 91.622486][ T1888] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.640108][ T6485] lo speed is unknown, defaulting to 1000 [ 91.646027][ T1888] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.662400][ T1888] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.680788][ T1888] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.401906][ T6519] lo speed is unknown, defaulting to 1000 [ 92.743627][ T6536] lo speed is unknown, defaulting to 1000 [ 93.099300][ T6559] lo speed is unknown, defaulting to 1000 [ 93.262981][ T6580] 9p: Unknown access argument 18446744073709551615: -34 [ 93.922522][ T6612] 9p: Unknown access argument 18446744073709551615: -34 [ 94.039264][ T6614] lo speed is unknown, defaulting to 1000 [ 94.120221][ T6625] FAULT_INJECTION: forcing a failure. [ 94.120221][ T6625] name failslab, interval 1, probability 0, space 0, times 0 [ 94.132889][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.1.1178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.132915][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.132928][ T6625] Call Trace: [ 94.132934][ T6625] [ 94.133022][ T6625] __dump_stack+0x1d/0x30 [ 94.133059][ T6625] dump_stack_lvl+0xe8/0x140 [ 94.133084][ T6625] dump_stack+0x15/0x1b [ 94.133106][ T6625] should_fail_ex+0x265/0x280 [ 94.133194][ T6625] should_failslab+0x8c/0xb0 [ 94.133212][ T6625] kmem_cache_alloc_noprof+0x50/0x480 [ 94.133230][ T6625] ? audit_log_start+0x342/0x720 [ 94.133315][ T6625] audit_log_start+0x342/0x720 [ 94.133396][ T6625] ? kstrtouint+0x76/0xc0 [ 94.133418][ T6625] audit_seccomp+0x48/0x100 [ 94.133439][ T6625] ? __seccomp_filter+0x82d/0x1250 [ 94.133496][ T6625] __seccomp_filter+0x83e/0x1250 [ 94.133514][ T6625] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.133536][ T6625] ? vfs_write+0x7e8/0x960 [ 94.133574][ T6625] ? __rcu_read_unlock+0x4f/0x70 [ 94.133597][ T6625] ? __fget_files+0x184/0x1c0 [ 94.133684][ T6625] __secure_computing+0x82/0x150 [ 94.133782][ T6625] syscall_trace_enter+0xcf/0x1e0 [ 94.133802][ T6625] do_syscall_64+0xac/0x200 [ 94.133823][ T6625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.133842][ T6625] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.133906][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.134000][ T6625] RIP: 0033:0x7faeac12eec9 [ 94.134011][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.134024][ T6625] RSP: 002b:00007faeaab97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 94.134048][ T6625] RAX: ffffffffffffffda RBX: 00007faeac385fa0 RCX: 00007faeac12eec9 [ 94.134057][ T6625] RDX: 000000000000006e RSI: 0000200000000280 RDI: 000000000000000b [ 94.134066][ T6625] RBP: 00007faeaab97090 R08: 0000000000000000 R09: 0000000000000000 [ 94.134099][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.134108][ T6625] R13: 00007faeac386038 R14: 00007faeac385fa0 R15: 00007ffd1476d708 [ 94.134145][ T6625] [ 94.547489][ T6641] __nla_validate_parse: 12 callbacks suppressed [ 94.547505][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 94.562890][ T6641] netlink: 'syz.2.1180': attribute type 30 has an invalid length. [ 94.573930][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 94.573944][ T29] audit: type=1326 audit(1759637461.112:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faeac125d67 code=0x7ffc0000 [ 94.603444][ T29] audit: type=1326 audit(1759637461.112:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faeac0caf79 code=0x7ffc0000 [ 94.626791][ T29] audit: type=1326 audit(1759637461.112:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 94.658424][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 94.718594][ T6648] 9p: Unknown access argument 18446744073709551615: -34 [ 94.727148][ T29] audit: type=1326 audit(1759637461.112:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faeac125d67 code=0x7ffc0000 [ 94.750565][ T29] audit: type=1326 audit(1759637461.112:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faeac0caf79 code=0x7ffc0000 [ 94.773922][ T29] audit: type=1326 audit(1759637461.112:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 94.797232][ T29] audit: type=1326 audit(1759637461.122:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faeac125d67 code=0x7ffc0000 [ 94.820548][ T29] audit: type=1326 audit(1759637461.122:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faeac0caf79 code=0x7ffc0000 [ 94.843940][ T29] audit: type=1326 audit(1759637461.122:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 94.867246][ T29] audit: type=1326 audit(1759637461.122:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faeac125d67 code=0x7ffc0000 [ 95.013823][ T6650] lo speed is unknown, defaulting to 1000 [ 95.174446][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 95.294648][ T6667] lo speed is unknown, defaulting to 1000 [ 95.862908][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 95.872081][ T6697] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 95.897480][ T6699] 9p: Unknown access argument 18446744073709551615: -34 [ 96.141681][ T6707] netlink: 'syz.4.1208': attribute type 30 has an invalid length. [ 96.623341][ T6724] lo speed is unknown, defaulting to 1000 [ 96.720298][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 97.131418][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 97.244647][ T6750] 9p: Unknown access argument 18446744073709551615: -34 [ 97.545998][ T6770] lo speed is unknown, defaulting to 1000 [ 97.715324][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 97.933968][ T6783] lo speed is unknown, defaulting to 1000 [ 98.062575][ T6799] 9p: Unknown access argument 18446744073709551615: -34 [ 98.095151][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 98.201754][ T6805] lo speed is unknown, defaulting to 1000 [ 98.299242][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.307936][ T6824] lo speed is unknown, defaulting to 1000 [ 98.322814][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 98.333076][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.401773][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.418498][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.582883][ T6831] netlink: 'syz.2.1258': attribute type 30 has an invalid length. [ 98.906127][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 98.946135][ T6835] 9p: Unknown access argument 18446744073709551615: -34 [ 99.068511][ T6837] lo speed is unknown, defaulting to 1000 [ 99.275606][ T6860] netlink: 'syz.4.1265': attribute type 30 has an invalid length. [ 99.610736][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 99.610752][ T29] audit: type=1326 audit(1759637466.152:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.674885][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1275'. [ 99.685174][ T29] audit: type=1326 audit(1759637466.152:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.708631][ T29] audit: type=1326 audit(1759637466.152:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.732009][ T29] audit: type=1326 audit(1759637466.152:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.755402][ T29] audit: type=1326 audit(1759637466.152:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.778835][ T29] audit: type=1326 audit(1759637466.152:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.802319][ T29] audit: type=1326 audit(1759637466.152:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 99.825829][ T29] audit: type=1326 audit(1759637466.152:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64b71dd710 code=0x7ffc0000 [ 99.849341][ T29] audit: type=1326 audit(1759637466.152:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f64b71e06f7 code=0x7ffc0000 [ 99.872774][ T29] audit: type=1326 audit(1759637466.152:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64b71deec9 code=0x7ffc0000 [ 100.234328][ T6906] pim6reg: entered allmulticast mode [ 100.240605][ T6906] pim6reg: left allmulticast mode [ 100.260054][ T6896] lo speed is unknown, defaulting to 1000 [ 100.280002][ T6901] lo speed is unknown, defaulting to 1000 [ 100.454163][ T6921] FAULT_INJECTION: forcing a failure. [ 100.454163][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 100.466917][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.2.1292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.466945][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.466955][ T6921] Call Trace: [ 100.466960][ T6921] [ 100.466965][ T6921] __dump_stack+0x1d/0x30 [ 100.467013][ T6921] dump_stack_lvl+0xe8/0x140 [ 100.467047][ T6921] dump_stack+0x15/0x1b [ 100.467071][ T6921] should_fail_ex+0x265/0x280 [ 100.467122][ T6921] should_failslab+0x8c/0xb0 [ 100.467148][ T6921] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 100.467170][ T6921] ? __alloc_skb+0x101/0x320 [ 100.467239][ T6921] __alloc_skb+0x101/0x320 [ 100.467265][ T6921] ? audit_log_start+0x342/0x720 [ 100.467295][ T6921] audit_log_start+0x3a0/0x720 [ 100.467334][ T6921] ? kstrtouint+0x76/0xc0 [ 100.467376][ T6921] audit_seccomp+0x48/0x100 [ 100.467399][ T6921] ? __seccomp_filter+0x82d/0x1250 [ 100.467419][ T6921] __seccomp_filter+0x83e/0x1250 [ 100.467480][ T6921] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.467504][ T6921] ? vfs_write+0x7e8/0x960 [ 100.467527][ T6921] __secure_computing+0x82/0x150 [ 100.467549][ T6921] syscall_trace_enter+0xcf/0x1e0 [ 100.467623][ T6921] do_syscall_64+0xac/0x200 [ 100.467650][ T6921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.467674][ T6921] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.467744][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.467795][ T6921] RIP: 0033:0x7f64b71dd710 [ 100.467809][ T6921] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 100.467825][ T6921] RSP: 002b:00007f64b5c3ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 100.467886][ T6921] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64b71dd710 [ 100.467899][ T6921] RDX: 0000000000000000 RSI: 00007f64b726207e RDI: 00000000ffffff9c [ 100.467912][ T6921] RBP: 00007f64b726207e R08: 0000000000000000 R09: 0000000000000000 [ 100.467925][ T6921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 100.467937][ T6921] R13: 00007f64b7436038 R14: 00007f64b7435fa0 R15: 00007fff05eaf748 [ 100.467952][ T6921] [ 100.815960][ T6936] hub 9-0:1.0: USB hub found [ 100.821728][ T6936] hub 9-0:1.0: 8 ports detected [ 100.971303][ T6958] lo speed is unknown, defaulting to 1000 [ 101.431922][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 101.440945][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 101.482136][ T6978] 9p: Unknown access argument 18446744073709551615: -34 [ 102.024111][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 102.033161][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 102.158352][ T7025] FAULT_INJECTION: forcing a failure. [ 102.158352][ T7025] name failslab, interval 1, probability 0, space 0, times 0 [ 102.171066][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.0.1337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.171159][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.171169][ T7025] Call Trace: [ 102.171173][ T7025] [ 102.171179][ T7025] __dump_stack+0x1d/0x30 [ 102.171221][ T7025] dump_stack_lvl+0xe8/0x140 [ 102.171253][ T7025] dump_stack+0x15/0x1b [ 102.171275][ T7025] should_fail_ex+0x265/0x280 [ 102.171320][ T7025] should_failslab+0x8c/0xb0 [ 102.171396][ T7025] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 102.171424][ T7025] ? __alloc_skb+0x101/0x320 [ 102.171483][ T7025] __alloc_skb+0x101/0x320 [ 102.171506][ T7025] netlink_alloc_large_skb+0xbf/0xf0 [ 102.171529][ T7025] netlink_sendmsg+0x3cf/0x6b0 [ 102.171604][ T7025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.171624][ T7025] __sock_sendmsg+0x145/0x180 [ 102.171646][ T7025] ____sys_sendmsg+0x31e/0x4e0 [ 102.171663][ T7025] ___sys_sendmsg+0x17b/0x1d0 [ 102.171732][ T7025] __x64_sys_sendmsg+0xd4/0x160 [ 102.171750][ T7025] x64_sys_call+0x191e/0x3000 [ 102.171765][ T7025] do_syscall_64+0xd2/0x200 [ 102.171801][ T7025] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.171820][ T7025] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.171837][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.171924][ T7025] RIP: 0033:0x7fa90812eec9 [ 102.171934][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.171947][ T7025] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.171960][ T7025] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 102.171969][ T7025] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000006 [ 102.171984][ T7025] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 102.172070][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.172114][ T7025] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 102.172129][ T7025] [ 102.480966][ T7038] netlink: 'syz.3.1340': attribute type 30 has an invalid length. [ 102.499463][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'. [ 102.508496][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 102.868866][ T7058] 9p: Unknown access argument 18446744073709551615: -34 [ 103.027562][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'. [ 103.292840][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 103.380816][ T7116] netlink: 'syz.0.1378': attribute type 30 has an invalid length. [ 103.397970][ T7104] lo speed is unknown, defaulting to 1000 [ 103.498229][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 103.513704][ T7126] 9p: Unknown access argument 18446744073709551615: -34 [ 103.735578][ T7136] lo speed is unknown, defaulting to 1000 [ 103.794380][ T7151] 9pnet_fd: Insufficient options for proto=fd [ 103.899252][ T7156] lo speed is unknown, defaulting to 1000 [ 104.074192][ T7180] FAULT_INJECTION: forcing a failure. [ 104.074192][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 104.086951][ T7180] CPU: 1 UID: 0 PID: 7180 Comm: syz.2.1405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.086979][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.086992][ T7180] Call Trace: [ 104.086998][ T7180] [ 104.087006][ T7180] __dump_stack+0x1d/0x30 [ 104.087037][ T7180] dump_stack_lvl+0xe8/0x140 [ 104.087094][ T7180] dump_stack+0x15/0x1b [ 104.087127][ T7180] should_fail_ex+0x265/0x280 [ 104.087213][ T7180] ? rtnl_newlink+0x5c/0x12d0 [ 104.087236][ T7180] should_failslab+0x8c/0xb0 [ 104.087262][ T7180] __kmalloc_cache_noprof+0x4c/0x4a0 [ 104.087293][ T7180] rtnl_newlink+0x5c/0x12d0 [ 104.087317][ T7180] ? __rcu_read_unlock+0x4f/0x70 [ 104.087341][ T7180] ? trie_delete_elem+0x5d/0x5b0 [ 104.087358][ T7180] ? drain_stock+0xa6/0x120 [ 104.087380][ T7180] ? bpf_perf_event_read+0x129/0x150 [ 104.087401][ T7180] ? __rcu_read_unlock+0x34/0x70 [ 104.087440][ T7180] ? bpf_trace_run3+0x12c/0x1d0 [ 104.087465][ T7180] ? __kfree_skb+0x109/0x150 [ 104.087494][ T7180] ? rep_movs_alternative+0x11/0x90 [ 104.087604][ T7180] ? __memcg_slab_free_hook+0x135/0x230 [ 104.087639][ T7180] ? __rcu_read_unlock+0x4f/0x70 [ 104.087705][ T7180] ? avc_has_perm_noaudit+0x1b1/0x200 [ 104.087739][ T7180] ? cred_has_capability+0x210/0x280 [ 104.087846][ T7180] ? selinux_capable+0x31/0x40 [ 104.087962][ T7180] ? security_capable+0x83/0x90 [ 104.087992][ T7180] ? ns_capable+0x7d/0xb0 [ 104.088064][ T7180] ? __pfx_rtnl_newlink+0x10/0x10 [ 104.088089][ T7180] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 104.088119][ T7180] netlink_rcv_skb+0x123/0x220 [ 104.088149][ T7180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.088230][ T7180] rtnetlink_rcv+0x1c/0x30 [ 104.088248][ T7180] netlink_unicast+0x5c0/0x690 [ 104.088275][ T7180] netlink_sendmsg+0x58b/0x6b0 [ 104.088345][ T7180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.088364][ T7180] __sock_sendmsg+0x145/0x180 [ 104.088384][ T7180] ____sys_sendmsg+0x31e/0x4e0 [ 104.088414][ T7180] ___sys_sendmsg+0x17b/0x1d0 [ 104.088463][ T7180] __x64_sys_sendmsg+0xd4/0x160 [ 104.088490][ T7180] x64_sys_call+0x191e/0x3000 [ 104.088511][ T7180] do_syscall_64+0xd2/0x200 [ 104.088549][ T7180] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.088569][ T7180] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.088589][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.088618][ T7180] RIP: 0033:0x7f64b71deec9 [ 104.088630][ T7180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.088645][ T7180] RSP: 002b:00007f64b5c3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.088662][ T7180] RAX: ffffffffffffffda RBX: 00007f64b7435fa0 RCX: 00007f64b71deec9 [ 104.088675][ T7180] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000005 [ 104.088689][ T7180] RBP: 00007f64b5c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.088758][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.088769][ T7180] R13: 00007f64b7436038 R14: 00007f64b7435fa0 R15: 00007fff05eaf748 [ 104.088786][ T7180] [ 104.526827][ T7184] lo speed is unknown, defaulting to 1000 [ 104.666084][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 104.666100][ T29] audit: type=1326 audit(1759637471.202:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.703931][ T7204] __nla_validate_parse: 4 callbacks suppressed [ 104.703943][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 104.723639][ T29] audit: type=1326 audit(1759637471.202:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.747197][ T29] audit: type=1326 audit(1759637471.202:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.770687][ T29] audit: type=1326 audit(1759637471.202:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.794140][ T29] audit: type=1326 audit(1759637471.202:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.799204][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 104.817608][ T29] audit: type=1326 audit(1759637471.202:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.850002][ T29] audit: type=1326 audit(1759637471.202:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.873445][ T29] audit: type=1326 audit(1759637471.212:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.896836][ T29] audit: type=1326 audit(1759637471.212:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 104.920243][ T29] audit: type=1326 audit(1759637471.212:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 105.001440][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1411'. [ 105.096380][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 105.105454][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 105.161112][ T7228] lo speed is unknown, defaulting to 1000 [ 105.442863][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 105.591589][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 105.642726][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'. [ 105.670705][ T7280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1440'. [ 105.712636][ T7283] lo speed is unknown, defaulting to 1000 [ 106.137589][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 106.321440][ T7317] lo speed is unknown, defaulting to 1000 [ 106.655998][ T7369] 9p: Unknown access argument 18446744073709551615: -34 [ 106.755276][ T7376] netlink: 'syz.3.1483': attribute type 30 has an invalid length. [ 106.821512][ T7378] netlink: 'syz.3.1484': attribute type 30 has an invalid length. [ 106.991352][ T7382] netlink: 'syz.3.1486': attribute type 30 has an invalid length. [ 107.264198][ T7389] lo speed is unknown, defaulting to 1000 [ 107.459024][ T7402] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.493147][ T7411] 9p: Unknown access argument 18446744073709551615: -34 [ 107.582907][ T7413] lo speed is unknown, defaulting to 1000 [ 107.816238][ T7425] lo speed is unknown, defaulting to 1000 [ 108.335197][ T7457] netlink: 'syz.1.1512': attribute type 30 has an invalid length. [ 108.363986][ T7461] lo speed is unknown, defaulting to 1000 [ 108.681441][ T7491] netlink: 'syz.4.1526': attribute type 30 has an invalid length. [ 108.817201][ T7500] FAULT_INJECTION: forcing a failure. [ 108.817201][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 108.829920][ T7500] CPU: 1 UID: 0 PID: 7500 Comm: syz.4.1530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.830000][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.830014][ T7500] Call Trace: [ 108.830022][ T7500] [ 108.830031][ T7500] __dump_stack+0x1d/0x30 [ 108.830071][ T7500] dump_stack_lvl+0xe8/0x140 [ 108.830118][ T7500] dump_stack+0x15/0x1b [ 108.830223][ T7500] should_fail_ex+0x265/0x280 [ 108.830262][ T7500] ? nf_tables_newtable+0x375/0xea0 [ 108.830372][ T7500] should_failslab+0x8c/0xb0 [ 108.830396][ T7500] __kmalloc_cache_noprof+0x4c/0x4a0 [ 108.830431][ T7500] ? __nla_validate_parse+0x1652/0x1d00 [ 108.830465][ T7500] nf_tables_newtable+0x375/0xea0 [ 108.830587][ T7500] nfnetlink_rcv+0xbc6/0x16c0 [ 108.830644][ T7500] netlink_unicast+0x5c0/0x690 [ 108.830671][ T7500] netlink_sendmsg+0x58b/0x6b0 [ 108.830688][ T7500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.830715][ T7500] __sock_sendmsg+0x145/0x180 [ 108.830761][ T7500] ____sys_sendmsg+0x31e/0x4e0 [ 108.830778][ T7500] ___sys_sendmsg+0x17b/0x1d0 [ 108.830804][ T7500] __x64_sys_sendmsg+0xd4/0x160 [ 108.830822][ T7500] x64_sys_call+0x191e/0x3000 [ 108.830843][ T7500] do_syscall_64+0xd2/0x200 [ 108.830863][ T7500] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.830883][ T7500] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.830926][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.830949][ T7500] RIP: 0033:0x7f175032eec9 [ 108.830966][ T7500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.831030][ T7500] RSP: 002b:00007f174ed8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.831044][ T7500] RAX: ffffffffffffffda RBX: 00007f1750585fa0 RCX: 00007f175032eec9 [ 108.831054][ T7500] RDX: 0000000000040800 RSI: 0000200000000380 RDI: 0000000000000005 [ 108.831063][ T7500] RBP: 00007f174ed8f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.831072][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.831081][ T7500] R13: 00007f1750586038 R14: 00007f1750585fa0 R15: 00007ffe0ced24e8 [ 108.831095][ T7500] [ 108.880495][ T7503] 9p: Unknown access argument 18446744073709551615: -34 [ 109.820872][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 109.820887][ T29] audit: type=1326 audit(1759637476.362:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 109.825782][ T7550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23153 sclass=netlink_route_socket pid=7550 comm=syz.3.1550 [ 109.827183][ T29] audit: type=1326 audit(1759637476.362:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 109.827212][ T29] audit: type=1326 audit(1759637476.362:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 109.827234][ T29] audit: type=1326 audit(1759637476.362:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 109.933490][ T29] audit: type=1326 audit(1759637476.362:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 109.956892][ T29] audit: type=1326 audit(1759637476.362:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 109.980327][ T29] audit: type=1326 audit(1759637476.362:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 110.003673][ T29] audit: type=1326 audit(1759637476.362:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 110.027105][ T29] audit: type=1326 audit(1759637476.362:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 110.050673][ T29] audit: type=1326 audit(1759637476.362:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.3.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 110.080195][ T7553] netlink: 'syz.3.1551': attribute type 20 has an invalid length. [ 110.189918][ T7561] net_ratelimit: 10 callbacks suppressed [ 110.189934][ T7561] dummy0: mtu less than device minimum [ 110.245753][ T7575] netlink: 'syz.1.1559': attribute type 10 has an invalid length. [ 110.253709][ T7575] batadv0: left promiscuous mode [ 110.258664][ T7575] batadv0: left allmulticast mode [ 110.263849][ T7575] FAULT_INJECTION: forcing a failure. [ 110.263849][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 110.276541][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.1.1559 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.276615][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.276625][ T7575] Call Trace: [ 110.276637][ T7575] [ 110.276645][ T7575] __dump_stack+0x1d/0x30 [ 110.276817][ T7575] dump_stack_lvl+0xe8/0x140 [ 110.276852][ T7575] dump_stack+0x15/0x1b [ 110.276949][ T7575] should_fail_ex+0x265/0x280 [ 110.277017][ T7575] should_failslab+0x8c/0xb0 [ 110.277044][ T7575] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 110.277072][ T7575] ? __alloc_skb+0x101/0x320 [ 110.277182][ T7575] __alloc_skb+0x101/0x320 [ 110.277216][ T7575] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 110.277238][ T7575] ? __local_bh_enable_ip+0x70/0x80 [ 110.277289][ T7575] rtmsg_ifinfo+0x6d/0x110 [ 110.277306][ T7575] __dev_notify_flags+0x76/0x1a0 [ 110.277394][ T7575] ? vprintk_emit+0x560/0x580 [ 110.277477][ T7575] netif_change_flags+0xac/0xd0 [ 110.277511][ T7575] do_setlink+0x9d2/0x2810 [ 110.277541][ T7575] ? save_fpregs_to_fpstate+0x100/0x160 [ 110.277573][ T7575] ? _raw_spin_unlock+0x26/0x50 [ 110.277678][ T7575] ? finish_task_switch+0xad/0x2b0 [ 110.277697][ T7575] ? __schedule+0x6b9/0xb30 [ 110.277727][ T7575] rtnl_newlink+0xe75/0x12d0 [ 110.277748][ T7575] ? refill_stock+0x32f/0x390 [ 110.277818][ T7575] ? __rcu_read_unlock+0x4f/0x70 [ 110.277843][ T7575] ? xas_load+0x413/0x430 [ 110.277870][ T7575] ? xas_load+0x413/0x430 [ 110.277895][ T7575] ? __rcu_read_unlock+0x4f/0x70 [ 110.278039][ T7575] ? xa_load+0xb1/0xe0 [ 110.278058][ T7575] ? __rcu_read_unlock+0x4f/0x70 [ 110.278074][ T7575] ? avc_has_perm_noaudit+0x1b1/0x200 [ 110.278125][ T7575] ? cred_has_capability+0x210/0x280 [ 110.278149][ T7575] ? selinux_capable+0x31/0x40 [ 110.278163][ T7575] ? security_capable+0x83/0x90 [ 110.278186][ T7575] ? ns_capable+0x7d/0xb0 [ 110.278274][ T7575] ? __pfx_rtnl_newlink+0x10/0x10 [ 110.278291][ T7575] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 110.278346][ T7575] ? avc_has_perm_noaudit+0x1b1/0x200 [ 110.278401][ T7575] netlink_rcv_skb+0x123/0x220 [ 110.278433][ T7575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.278456][ T7575] rtnetlink_rcv+0x1c/0x30 [ 110.278474][ T7575] netlink_unicast+0x5c0/0x690 [ 110.278498][ T7575] netlink_sendmsg+0x58b/0x6b0 [ 110.278562][ T7575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.278576][ T7575] __sock_sendmsg+0x145/0x180 [ 110.278595][ T7575] ____sys_sendmsg+0x31e/0x4e0 [ 110.278611][ T7575] ___sys_sendmsg+0x17b/0x1d0 [ 110.278672][ T7575] __x64_sys_sendmsg+0xd4/0x160 [ 110.278766][ T7575] x64_sys_call+0x191e/0x3000 [ 110.278781][ T7575] do_syscall_64+0xd2/0x200 [ 110.278800][ T7575] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.278896][ T7575] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.278976][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.278993][ T7575] RIP: 0033:0x7faeac12eec9 [ 110.279003][ T7575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.279071][ T7575] RSP: 002b:00007faeaab97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.279085][ T7575] RAX: ffffffffffffffda RBX: 00007faeac385fa0 RCX: 00007faeac12eec9 [ 110.279095][ T7575] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 110.279104][ T7575] RBP: 00007faeaab97090 R08: 0000000000000000 R09: 0000000000000000 [ 110.279113][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.279122][ T7575] R13: 00007faeac386038 R14: 00007faeac385fa0 R15: 00007ffd1476d708 [ 110.279136][ T7575] [ 110.629952][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.637889][ T7575] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 110.728225][ T7590] FAULT_INJECTION: forcing a failure. [ 110.728225][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 110.740877][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.0.1565 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.740899][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.740912][ T7590] Call Trace: [ 110.740918][ T7590] [ 110.740925][ T7590] __dump_stack+0x1d/0x30 [ 110.740961][ T7590] dump_stack_lvl+0xe8/0x140 [ 110.740992][ T7590] dump_stack+0x15/0x1b [ 110.741024][ T7590] should_fail_ex+0x265/0x280 [ 110.741060][ T7590] should_failslab+0x8c/0xb0 [ 110.741081][ T7590] kmem_cache_alloc_noprof+0x50/0x480 [ 110.741100][ T7590] ? mas_alloc_nodes+0x1a2/0x210 [ 110.741121][ T7590] mas_alloc_nodes+0x1a2/0x210 [ 110.741147][ T7590] mas_preallocate+0x2ca/0x510 [ 110.741180][ T7590] vma_link+0x8b/0x220 [ 110.741204][ T7590] insert_vm_struct+0x113/0x1a0 [ 110.741223][ T7590] create_init_stack_vma+0x1a9/0x390 [ 110.741250][ T7590] alloc_bprm+0x2b9/0x350 [ 110.741270][ T7590] do_execveat_common+0x12e/0x750 [ 110.741289][ T7590] ? getname_flags+0x154/0x3b0 [ 110.741313][ T7590] __x64_sys_execveat+0x73/0x90 [ 110.741337][ T7590] x64_sys_call+0x1fec/0x3000 [ 110.741373][ T7590] do_syscall_64+0xd2/0x200 [ 110.741400][ T7590] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.741426][ T7590] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.741446][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.741464][ T7590] RIP: 0033:0x7fa90812eec9 [ 110.741479][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.741498][ T7590] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 110.741517][ T7590] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 110.741530][ T7590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 110.741542][ T7590] RBP: 00007fa906b97090 R08: 0000000000001000 R09: 0000000000000000 [ 110.741554][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.741563][ T7590] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 110.741578][ T7590] [ 110.986403][ T7591] __nla_validate_parse: 11 callbacks suppressed [ 110.986420][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1562'. [ 111.085851][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 111.129769][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'. [ 111.554297][ T7636] 9p: Unknown access argument 18446744073709551615: -34 [ 111.951052][ T7657] netlink: 'syz.0.1594': attribute type 30 has an invalid length. [ 112.887241][ T7696] netlink: 'syz.3.1610': attribute type 30 has an invalid length. [ 113.286932][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'. [ 113.295975][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 113.703116][ T7758] 9p: Unknown access argument 18446744073709551615: -34 [ 114.070371][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 114.274299][ T7802] lo speed is unknown, defaulting to 1000 [ 114.403501][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1658'. [ 114.628180][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1660'. [ 114.702848][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 114.759778][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'. [ 114.880114][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 114.880128][ T29] audit: type=1326 audit(1759637481.422:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 114.924853][ T29] audit: type=1326 audit(1759637481.422:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 114.948325][ T29] audit: type=1326 audit(1759637481.422:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 114.971839][ T29] audit: type=1326 audit(1759637481.422:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 114.995278][ T29] audit: type=1326 audit(1759637481.422:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 115.018660][ T29] audit: type=1326 audit(1759637481.422:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 115.042151][ T29] audit: type=1326 audit(1759637481.452:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 115.065547][ T29] audit: type=1326 audit(1759637481.452:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 115.088922][ T29] audit: type=1326 audit(1759637481.462:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 115.112306][ T29] audit: type=1326 audit(1759637481.462:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90812eec9 code=0x7ffc0000 [ 115.160722][ T7846] lo speed is unknown, defaulting to 1000 [ 115.192080][ T7852] 9p: Unknown access argument 18446744073709551615: -34 [ 115.340457][ T7855] netlink: 'syz.3.1676': attribute type 30 has an invalid length. [ 115.998561][ T7898] __nla_validate_parse: 6 callbacks suppressed [ 115.998573][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1696'. [ 116.031135][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'. [ 116.040220][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 116.381123][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 116.390246][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 116.457843][ T7936] FAULT_INJECTION: forcing a failure. [ 116.457843][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 116.470610][ T7936] CPU: 0 UID: 0 PID: 7936 Comm: syz.0.1712 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.470634][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.470645][ T7936] Call Trace: [ 116.470650][ T7936] [ 116.470656][ T7936] __dump_stack+0x1d/0x30 [ 116.470707][ T7936] dump_stack_lvl+0xe8/0x140 [ 116.470744][ T7936] dump_stack+0x15/0x1b [ 116.470792][ T7936] should_fail_ex+0x265/0x280 [ 116.470820][ T7936] should_failslab+0x8c/0xb0 [ 116.470840][ T7936] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 116.470906][ T7936] ? __alloc_skb+0x101/0x320 [ 116.470937][ T7936] __alloc_skb+0x101/0x320 [ 116.471028][ T7936] alloc_skb_with_frags+0x7d/0x470 [ 116.471054][ T7936] ? selinux_file_open+0x2df/0x330 [ 116.471123][ T7936] ? should_fail_ex+0xdb/0x280 [ 116.471150][ T7936] sock_alloc_send_pskb+0x430/0x4e0 [ 116.471253][ T7936] tun_get_user+0x9b3/0x26e0 [ 116.471337][ T7936] ? ref_tracker_alloc+0x1f2/0x2f0 [ 116.471375][ T7936] ? selinux_file_permission+0x1e4/0x320 [ 116.471448][ T7936] tun_chr_write_iter+0x15e/0x210 [ 116.471465][ T7936] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 116.471480][ T7936] vfs_write+0x527/0x960 [ 116.471504][ T7936] ksys_write+0xda/0x1a0 [ 116.471559][ T7936] __x64_sys_write+0x40/0x50 [ 116.471650][ T7936] x64_sys_call+0x2802/0x3000 [ 116.471671][ T7936] do_syscall_64+0xd2/0x200 [ 116.471746][ T7936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.471797][ T7936] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 116.471882][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.471910][ T7936] RIP: 0033:0x7fa90812eec9 [ 116.471983][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.472002][ T7936] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.472021][ T7936] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 116.472032][ T7936] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.472042][ T7936] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 116.472051][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.472061][ T7936] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 116.472076][ T7936] [ 116.734572][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 116.885822][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1717'. [ 116.974644][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1722'. [ 117.143305][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1725'. [ 117.644942][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'. [ 117.684700][ T7987] lo speed is unknown, defaulting to 1000 [ 117.913311][ T7996] lo speed is unknown, defaulting to 1000 [ 118.564791][ T8029] FAULT_INJECTION: forcing a failure. [ 118.564791][ T8029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.577976][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.0.1750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.577996][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.578005][ T8029] Call Trace: [ 118.578009][ T8029] [ 118.578014][ T8029] __dump_stack+0x1d/0x30 [ 118.578045][ T8029] dump_stack_lvl+0xe8/0x140 [ 118.578070][ T8029] dump_stack+0x15/0x1b [ 118.578092][ T8029] should_fail_ex+0x265/0x280 [ 118.578206][ T8029] should_fail+0xb/0x20 [ 118.578282][ T8029] should_fail_usercopy+0x1a/0x20 [ 118.578298][ T8029] _copy_from_user+0x1c/0xb0 [ 118.578315][ T8029] ____sys_sendmsg+0x1c5/0x4e0 [ 118.578344][ T8029] ___sys_sendmsg+0x17b/0x1d0 [ 118.578371][ T8029] __sys_sendmmsg+0x178/0x300 [ 118.578412][ T8029] __x64_sys_sendmmsg+0x57/0x70 [ 118.578427][ T8029] x64_sys_call+0x1c4a/0x3000 [ 118.578441][ T8029] do_syscall_64+0xd2/0x200 [ 118.578468][ T8029] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.578487][ T8029] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.578505][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.578520][ T8029] RIP: 0033:0x7fa90812eec9 [ 118.578531][ T8029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.578641][ T8029] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.578654][ T8029] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 118.578664][ T8029] RDX: 0000000000000002 RSI: 0000200000001480 RDI: 0000000000000006 [ 118.578713][ T8029] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 118.578722][ T8029] R10: 0000000024004c41 R11: 0000000000000246 R12: 0000000000000001 [ 118.578730][ T8029] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 118.578745][ T8029] [ 118.889784][ T8047] FAULT_INJECTION: forcing a failure. [ 118.889784][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.902917][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.0.1759 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.902937][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.902946][ T8047] Call Trace: [ 118.902953][ T8047] [ 118.902958][ T8047] __dump_stack+0x1d/0x30 [ 118.902983][ T8047] dump_stack_lvl+0xe8/0x140 [ 118.903072][ T8047] dump_stack+0x15/0x1b [ 118.903095][ T8047] should_fail_ex+0x265/0x280 [ 118.903121][ T8047] should_fail+0xb/0x20 [ 118.903194][ T8047] should_fail_usercopy+0x1a/0x20 [ 118.903209][ T8047] _copy_from_user+0x1c/0xb0 [ 118.903227][ T8047] sctp_getsockopt_interleaving_supported+0x71/0x350 [ 118.903285][ T8047] sctp_getsockopt+0x8f4/0xaa0 [ 118.903319][ T8047] sock_common_getsockopt+0x60/0x70 [ 118.903341][ T8047] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 118.903436][ T8047] do_sock_getsockopt+0x1fd/0x240 [ 118.903464][ T8047] __x64_sys_getsockopt+0x11e/0x1a0 [ 118.903502][ T8047] x64_sys_call+0x2bca/0x3000 [ 118.903592][ T8047] do_syscall_64+0xd2/0x200 [ 118.903611][ T8047] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.903637][ T8047] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.903655][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.903707][ T8047] RIP: 0033:0x7fa90812eec9 [ 118.903718][ T8047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.903771][ T8047] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 118.903785][ T8047] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 118.903794][ T8047] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000003 [ 118.903883][ T8047] RBP: 00007fa906b97090 R08: 0000200000000040 R09: 0000000000000000 [ 118.903892][ T8047] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.903901][ T8047] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 118.903945][ T8047] [ 119.166287][ T8049] lo speed is unknown, defaulting to 1000 [ 119.426985][ T8092] netlink: 'syz.0.1780': attribute type 30 has an invalid length. [ 119.472700][ T8098] lo speed is unknown, defaulting to 1000 [ 119.889461][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 119.889476][ T29] audit: type=1326 audit(1759637486.422:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 119.921970][ T29] audit: type=1326 audit(1759637486.432:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 119.945442][ T29] audit: type=1326 audit(1759637486.432:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 119.968826][ T29] audit: type=1326 audit(1759637486.432:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 119.992283][ T29] audit: type=1326 audit(1759637486.432:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 120.015667][ T29] audit: type=1326 audit(1759637486.432:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 120.039168][ T29] audit: type=1326 audit(1759637486.432:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 120.062552][ T29] audit: type=1326 audit(1759637486.432:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 120.085958][ T29] audit: type=1326 audit(1759637486.432:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 120.109489][ T29] audit: type=1326 audit(1759637486.432:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 120.159024][ T8150] hugetlbfs: Bad value for 'gid' [ 120.164038][ T8150] hugetlbfs: Bad value for 'gid' [ 120.682042][ T8177] FAULT_INJECTION: forcing a failure. [ 120.682042][ T8177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.695143][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.1.1816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.695165][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.695177][ T8177] Call Trace: [ 120.695183][ T8177] [ 120.695191][ T8177] __dump_stack+0x1d/0x30 [ 120.695283][ T8177] dump_stack_lvl+0xe8/0x140 [ 120.695335][ T8177] dump_stack+0x15/0x1b [ 120.695368][ T8177] should_fail_ex+0x265/0x280 [ 120.695407][ T8177] should_fail+0xb/0x20 [ 120.695432][ T8177] should_fail_usercopy+0x1a/0x20 [ 120.695448][ T8177] _copy_from_user+0x1c/0xb0 [ 120.695472][ T8177] restore_altstack+0x4b/0x2d0 [ 120.695513][ T8177] ? __set_task_blocked+0x23a/0x2a0 [ 120.695533][ T8177] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 120.695549][ T8177] ? _raw_spin_unlock_irq+0x26/0x50 [ 120.695576][ T8177] ? signal_setup_done+0x266/0x290 [ 120.695598][ T8177] ? xfd_validate_state+0x45/0xf0 [ 120.695628][ T8177] ? fpu__clear_user_states+0x63/0x1e0 [ 120.695651][ T8177] ? fpregs_mark_activate+0x66/0x140 [ 120.695717][ T8177] ? fpu__clear_user_states+0x63/0x1e0 [ 120.695746][ T8177] ? arch_do_signal_or_restart+0x2b5/0x440 [ 120.695873][ T8177] ? __rcu_read_unlock+0x4f/0x70 [ 120.695917][ T8177] x64_sys_call+0x2d4b/0x3000 [ 120.695934][ T8177] do_syscall_64+0xd2/0x200 [ 120.695955][ T8177] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.695985][ T8177] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.696005][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.696023][ T8177] RIP: 0033:0x7faeac0caf79 [ 120.696038][ T8177] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 120.696068][ T8177] RSP: 002b:00007faeaab96a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 120.696084][ T8177] RAX: ffffffffffffffda RBX: 00007faeac385fa0 RCX: 00007faeac0caf79 [ 120.696147][ T8177] RDX: 00007faeaab96a80 RSI: 00007faeaab96bb0 RDI: 0000000000000021 [ 120.696158][ T8177] RBP: 00007faeaab97090 R08: 0000000000000000 R09: 0000000000000000 [ 120.696168][ T8177] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 120.696179][ T8177] R13: 00007faeac386038 R14: 00007faeac385fa0 R15: 00007ffd1476d708 [ 120.696242][ T8177] [ 120.932166][ T8185] FAULT_INJECTION: forcing a failure. [ 120.932166][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.945253][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.3.1819 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.945364][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.945377][ T8185] Call Trace: [ 120.945383][ T8185] [ 120.945391][ T8185] __dump_stack+0x1d/0x30 [ 120.945421][ T8185] dump_stack_lvl+0xe8/0x140 [ 120.945528][ T8185] dump_stack+0x15/0x1b [ 120.945555][ T8185] should_fail_ex+0x265/0x280 [ 120.945648][ T8185] should_fail+0xb/0x20 [ 120.945703][ T8185] should_fail_usercopy+0x1a/0x20 [ 120.945719][ T8185] _copy_to_user+0x20/0xa0 [ 120.945803][ T8185] simple_read_from_buffer+0xb5/0x130 [ 120.945824][ T8185] proc_fail_nth_read+0x10e/0x150 [ 120.945855][ T8185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.945882][ T8185] vfs_read+0x1a5/0x770 [ 120.945994][ T8185] ? __rcu_read_unlock+0x4f/0x70 [ 120.946019][ T8185] ? __fget_files+0x184/0x1c0 [ 120.946044][ T8185] ksys_read+0xda/0x1a0 [ 120.946063][ T8185] __x64_sys_read+0x40/0x50 [ 120.946101][ T8185] x64_sys_call+0x27c0/0x3000 [ 120.946141][ T8185] do_syscall_64+0xd2/0x200 [ 120.946174][ T8185] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.946205][ T8185] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.946305][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.946329][ T8185] RIP: 0033:0x7f801391d8dc [ 120.946345][ T8185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.946438][ T8185] RSP: 002b:00007f8012387030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.946506][ T8185] RAX: ffffffffffffffda RBX: 00007f8013b75fa0 RCX: 00007f801391d8dc [ 120.946520][ T8185] RDX: 000000000000000f RSI: 00007f80123870a0 RDI: 0000000000000006 [ 120.946572][ T8185] RBP: 00007f8012387090 R08: 0000000000000000 R09: 0000000000000000 [ 120.946586][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.946624][ T8185] R13: 00007f8013b76038 R14: 00007f8013b75fa0 R15: 00007ffc6353baa8 [ 120.946648][ T8185] [ 121.183236][ T8183] pim6reg: entered allmulticast mode [ 121.221122][ T8183] pim6reg: left allmulticast mode [ 121.351221][ T8203] __nla_validate_parse: 15 callbacks suppressed [ 121.351252][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1820'. [ 121.409940][ T8207] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1828'. [ 121.442922][ T8207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1828'. [ 121.462220][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 121.471176][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 121.684751][ T8215] pim6reg: entered allmulticast mode [ 121.690334][ T8215] pim6reg: left allmulticast mode [ 121.699008][ T8221] lo speed is unknown, defaulting to 1000 [ 121.820147][ T8236] lo speed is unknown, defaulting to 1000 [ 122.152412][ T8263] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 122.328145][ T8275] FAULT_INJECTION: forcing a failure. [ 122.328145][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 122.340808][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.1.1856 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.340831][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.340852][ T8275] Call Trace: [ 122.340857][ T8275] [ 122.340863][ T8275] __dump_stack+0x1d/0x30 [ 122.340948][ T8275] dump_stack_lvl+0xe8/0x140 [ 122.341091][ T8275] dump_stack+0x15/0x1b [ 122.341152][ T8275] should_fail_ex+0x265/0x280 [ 122.341256][ T8275] ? audit_log_d_path+0x8d/0x150 [ 122.341291][ T8275] should_failslab+0x8c/0xb0 [ 122.341321][ T8275] __kmalloc_cache_noprof+0x4c/0x4a0 [ 122.341355][ T8275] audit_log_d_path+0x8d/0x150 [ 122.341371][ T8275] audit_log_d_path_exe+0x42/0x70 [ 122.341387][ T8275] audit_log_task+0x1e9/0x250 [ 122.341415][ T8275] audit_seccomp+0x61/0x100 [ 122.341446][ T8275] ? __seccomp_filter+0x82d/0x1250 [ 122.341512][ T8275] __seccomp_filter+0x83e/0x1250 [ 122.341534][ T8275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.341560][ T8275] ? vfs_write+0x7e8/0x960 [ 122.341598][ T8275] ? __rcu_read_unlock+0x4f/0x70 [ 122.341618][ T8275] ? __fget_files+0x184/0x1c0 [ 122.341642][ T8275] __secure_computing+0x82/0x150 [ 122.341663][ T8275] syscall_trace_enter+0xcf/0x1e0 [ 122.341702][ T8275] do_syscall_64+0xac/0x200 [ 122.341771][ T8275] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.341792][ T8275] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.341811][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.341828][ T8275] RIP: 0033:0x7faeac12d8dc [ 122.341843][ T8275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.341862][ T8275] RSP: 002b:00007faeaab97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.341880][ T8275] RAX: ffffffffffffffda RBX: 00007faeac385fa0 RCX: 00007faeac12d8dc [ 122.341890][ T8275] RDX: 000000000000000f RSI: 00007faeaab970a0 RDI: 0000000000000006 [ 122.341910][ T8275] RBP: 00007faeaab97090 R08: 0000000000000000 R09: 0000000000000000 [ 122.341920][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.341929][ T8275] R13: 00007faeac386038 R14: 00007faeac385fa0 R15: 00007ffd1476d708 [ 122.341945][ T8275] [ 122.610803][ T8278] netlink: 'syz.3.1857': attribute type 30 has an invalid length. [ 122.629531][ T8280] lo speed is unknown, defaulting to 1000 [ 122.729768][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 122.873247][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1867'. [ 122.934758][ T8316] veth0: entered promiscuous mode [ 123.092265][ T8330] lo speed is unknown, defaulting to 1000 [ 123.167888][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1883'. [ 123.201245][ T8341] netlink: 'syz.1.1886': attribute type 30 has an invalid length. [ 123.248677][ T8347] netlink: 'syz.4.1889': attribute type 30 has an invalid length. [ 123.412076][ T8360] lo speed is unknown, defaulting to 1000 [ 123.461992][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 123.626290][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 123.718482][ T8380] netlink: 'syz.3.1903': attribute type 30 has an invalid length. [ 123.766882][ T8315] veth0: left promiscuous mode [ 123.828317][ T8386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 123.834834][ T8386] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.842352][ T8386] vhci_hcd vhci_hcd.0: Device attached [ 123.848453][ T8389] usbip_core: unknown command [ 123.849258][ T8386] ªªªªªª: renamed from vlan0 (while UP) [ 123.853184][ T8389] vhci_hcd: unknown pdu 2844066640 [ 123.863827][ T8389] usbip_core: unknown command [ 123.869030][ T57] vhci_hcd: stop threads [ 123.873335][ T57] vhci_hcd: release socket [ 123.877752][ T57] vhci_hcd: disconnect device [ 123.984025][ T8396] lo speed is unknown, defaulting to 1000 [ 124.935787][ T8451] lo speed is unknown, defaulting to 1000 [ 125.074586][ T8457] lo speed is unknown, defaulting to 1000 [ 125.308314][ T8468] lo speed is unknown, defaulting to 1000 [ 125.462420][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 125.462432][ T29] audit: type=1326 audit(1759637492.002:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.493288][ T29] audit: type=1326 audit(1759637492.002:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faeac0caf79 code=0x7ffc0000 [ 125.516651][ T29] audit: type=1326 audit(1759637492.002:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.540169][ T29] audit: type=1326 audit(1759637492.002:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.563531][ T29] audit: type=1326 audit(1759637492.002:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.586894][ T29] audit: type=1326 audit(1759637492.002:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.610193][ T29] audit: type=1326 audit(1759637492.002:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.633726][ T29] audit: type=1326 audit(1759637492.002:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.657007][ T29] audit: type=1326 audit(1759637492.002:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.680435][ T29] audit: type=1326 audit(1759637492.002:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 125.756021][ T8485] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 125.968512][ T8511] lo speed is unknown, defaulting to 1000 [ 126.437741][ T8546] __nla_validate_parse: 12 callbacks suppressed [ 126.437758][ T8546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 126.534141][ T8554] lo speed is unknown, defaulting to 1000 [ 126.655578][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1972'. [ 126.703538][ T8565] 9pnet_fd: Insufficient options for proto=fd [ 126.793927][ T8578] sctp: [Deprecated]: syz.2.1982 (pid 8578) Use of int in maxseg socket option. [ 126.793927][ T8578] Use struct sctp_assoc_value instead [ 126.820396][ T8578] syz.2.1982 (8578) used greatest stack depth: 9344 bytes left [ 126.831888][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1983'. [ 126.940146][ T8594] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1989'. [ 126.949223][ T8594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1989'. [ 127.322590][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 127.366095][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 127.425888][ T8620] lo speed is unknown, defaulting to 1000 [ 127.741978][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2002'. [ 127.844785][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2008'. [ 127.882106][ T8649] lo speed is unknown, defaulting to 1000 [ 128.106939][ T8669] bridge0: port 3(batadv0) entered disabled state [ 128.118246][ T8669] bridge_slave_0: left promiscuous mode [ 128.123958][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.133381][ T8669] bridge_slave_1: left allmulticast mode [ 128.139101][ T8669] bridge_slave_1: left promiscuous mode [ 128.144911][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.149994][ T8671] tls_set_device_offload_rx: netdev not found [ 128.168462][ T8669] bond0: (slave bond_slave_0): Releasing backup interface [ 128.181294][ T8669] bond0: (slave bond_slave_1): Releasing backup interface [ 128.193252][ T8669] team0: Port device team_slave_0 removed [ 128.202284][ T8669] team0: Port device team_slave_1 removed [ 128.208884][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.216274][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.224754][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.232249][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.242046][ T8669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.258162][ T1034] lo speed is unknown, defaulting to 1000 [ 128.315228][ T8678] lo speed is unknown, defaulting to 1000 [ 128.561492][ T8689] FAULT_INJECTION: forcing a failure. [ 128.561492][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 128.574234][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.3.2027 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.574254][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.574263][ T8689] Call Trace: [ 128.574268][ T8689] [ 128.574273][ T8689] __dump_stack+0x1d/0x30 [ 128.574370][ T8689] dump_stack_lvl+0xe8/0x140 [ 128.574535][ T8689] dump_stack+0x15/0x1b [ 128.574581][ T8689] should_fail_ex+0x265/0x280 [ 128.574619][ T8689] should_failslab+0x8c/0xb0 [ 128.574641][ T8689] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 128.574719][ T8689] ? sidtab_sid2str_get+0xa0/0x130 [ 128.574742][ T8689] kmemdup_noprof+0x2b/0x70 [ 128.574759][ T8689] sidtab_sid2str_get+0xa0/0x130 [ 128.574811][ T8689] security_sid_to_context_core+0x1eb/0x2e0 [ 128.574832][ T8689] security_sid_to_context+0x27/0x40 [ 128.574852][ T8689] selinux_lsmprop_to_secctx+0x67/0xf0 [ 128.574943][ T8689] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 128.575029][ T8689] audit_log_subj_ctx+0xa4/0x3e0 [ 128.575081][ T8689] ? skb_put+0xa9/0xf0 [ 128.575111][ T8689] audit_log_task_context+0x48/0x70 [ 128.575126][ T8689] audit_log_task+0xf4/0x250 [ 128.575155][ T8689] ? kstrtouint+0x76/0xc0 [ 128.575179][ T8689] audit_seccomp+0x61/0x100 [ 128.575244][ T8689] ? __seccomp_filter+0x82d/0x1250 [ 128.575262][ T8689] __seccomp_filter+0x83e/0x1250 [ 128.575281][ T8689] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 128.575307][ T8689] ? vfs_write+0x7e8/0x960 [ 128.575428][ T8689] ? __rcu_read_unlock+0x4f/0x70 [ 128.575446][ T8689] ? __fget_files+0x184/0x1c0 [ 128.575466][ T8689] __secure_computing+0x82/0x150 [ 128.575484][ T8689] syscall_trace_enter+0xcf/0x1e0 [ 128.575572][ T8689] do_syscall_64+0xac/0x200 [ 128.575592][ T8689] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.575702][ T8689] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.575720][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.575758][ T8689] RIP: 0033:0x7f801391eec9 [ 128.575769][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.575781][ T8689] RSP: 002b:00007f8012387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 128.575795][ T8689] RAX: ffffffffffffffda RBX: 00007f8013b75fa0 RCX: 00007f801391eec9 [ 128.575804][ T8689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.575812][ T8689] RBP: 00007f8012387090 R08: 0000000000000000 R09: 0000000000000000 [ 128.575821][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.575906][ T8689] R13: 00007f8013b76038 R14: 00007f8013b75fa0 R15: 00007ffc6353baa8 [ 128.575921][ T8689] [ 128.853044][ T8691] lo speed is unknown, defaulting to 1000 [ 128.931337][ T8702] FAULT_INJECTION: forcing a failure. [ 128.931337][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 128.944032][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.2.2033 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.944060][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.944074][ T8702] Call Trace: [ 128.944080][ T8702] [ 128.944087][ T8702] __dump_stack+0x1d/0x30 [ 128.944123][ T8702] dump_stack_lvl+0xe8/0x140 [ 128.944158][ T8702] dump_stack+0x15/0x1b [ 128.944188][ T8702] should_fail_ex+0x265/0x280 [ 128.944224][ T8702] should_failslab+0x8c/0xb0 [ 128.944249][ T8702] kmem_cache_alloc_noprof+0x50/0x480 [ 128.944281][ T8702] ? mas_alloc_nodes+0x1a2/0x210 [ 128.944309][ T8702] mas_alloc_nodes+0x1a2/0x210 [ 128.944335][ T8702] mas_preallocate+0x2ca/0x510 [ 128.944367][ T8702] __split_vma+0x240/0x650 [ 128.944393][ T8702] ? obj_cgroup_charge_account+0x122/0x1a0 [ 128.944431][ T8702] vms_gather_munmap_vmas+0x17a/0x7b0 [ 128.944455][ T8702] ? mas_find+0x608/0x700 [ 128.944482][ T8702] mmap_region+0x52b/0x1620 [ 128.944500][ T8702] ? __rcu_read_unlock+0x4f/0x70 [ 128.944519][ T8702] ? mntput_no_expire+0x6f/0x440 [ 128.944565][ T8702] do_mmap+0x9b3/0xbe0 [ 128.944591][ T8702] vm_mmap_pgoff+0x17a/0x2e0 [ 128.944617][ T8702] ksys_mmap_pgoff+0x268/0x310 [ 128.944649][ T8702] x64_sys_call+0x14a3/0x3000 [ 128.944670][ T8702] do_syscall_64+0xd2/0x200 [ 128.944696][ T8702] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.944723][ T8702] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.944749][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.944770][ T8702] RIP: 0033:0x7f64b71deec9 [ 128.944785][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.944805][ T8702] RSP: 002b:00007f64b5c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.944825][ T8702] RAX: ffffffffffffffda RBX: 00007f64b7435fa0 RCX: 00007f64b71deec9 [ 128.944838][ T8702] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 128.944851][ T8702] RBP: 00007f64b5c3f090 R08: 0000000000000006 R09: 0000000000000000 [ 128.944864][ T8702] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 128.944877][ T8702] R13: 00007f64b7436038 R14: 00007f64b7435fa0 R15: 00007fff05eaf748 [ 128.944898][ T8702] [ 129.183902][ T8705] lo speed is unknown, defaulting to 1000 [ 129.244461][ T8710] lo speed is unknown, defaulting to 1000 [ 129.264361][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 129.727056][ T8750] bridge_slave_0 (unregistering): left allmulticast mode [ 129.734180][ T8750] bridge_slave_0 (unregistering): left promiscuous mode [ 129.741202][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.901676][ T8762] lo speed is unknown, defaulting to 1000 [ 130.267428][ T8776] netlink: 'syz.2.2061': attribute type 30 has an invalid length. [ 130.811006][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 130.811018][ T29] audit: type=1326 audit(1759637497.352:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.840778][ T29] audit: type=1326 audit(1759637497.352:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.864284][ T29] audit: type=1326 audit(1759637497.352:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.887700][ T29] audit: type=1326 audit(1759637497.352:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.911120][ T29] audit: type=1326 audit(1759637497.352:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.934617][ T29] audit: type=1326 audit(1759637497.352:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.957969][ T29] audit: type=1326 audit(1759637497.352:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 130.981417][ T29] audit: type=1326 audit(1759637497.352:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 131.004915][ T29] audit: type=1326 audit(1759637497.382:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 131.028314][ T29] audit: type=1326 audit(1759637497.382:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac12eec9 code=0x7ffc0000 [ 131.071501][ T8811] netlink: 'syz.1.2074': attribute type 30 has an invalid length. [ 131.142704][ T8820] FAULT_INJECTION: forcing a failure. [ 131.142704][ T8820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.155975][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.0.2078 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.156055][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.156065][ T8820] Call Trace: [ 131.156070][ T8820] [ 131.156075][ T8820] __dump_stack+0x1d/0x30 [ 131.156110][ T8820] dump_stack_lvl+0xe8/0x140 [ 131.156248][ T8820] dump_stack+0x15/0x1b [ 131.156281][ T8820] should_fail_ex+0x265/0x280 [ 131.156361][ T8820] should_fail_alloc_page+0xf2/0x100 [ 131.156389][ T8820] __alloc_frozen_pages_noprof+0xff/0x360 [ 131.156499][ T8820] alloc_pages_mpol+0xb3/0x260 [ 131.156533][ T8820] ? xas_load+0x413/0x430 [ 131.156557][ T8820] vma_alloc_folio_noprof+0x1aa/0x300 [ 131.156722][ T8820] handle_mm_fault+0xec2/0x2be0 [ 131.156812][ T8820] ? mt_find+0x208/0x320 [ 131.156847][ T8820] do_user_addr_fault+0x3fe/0x1080 [ 131.156878][ T8820] exc_page_fault+0x62/0xa0 [ 131.156902][ T8820] asm_exc_page_fault+0x26/0x30 [ 131.157004][ T8820] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 131.157044][ T8820] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 131.157134][ T8820] RSP: 0018:ffffc90001e23be0 EFLAGS: 00050216 [ 131.157151][ T8820] RAX: 206e656c5f726468 RBX: 0000000000000012 RCX: 0000000000000012 [ 131.157164][ T8820] RDX: 0000000000000000 RSI: ffff88811e66b234 RDI: 0000200000005bc0 [ 131.157175][ T8820] RBP: 0000000000000000 R08: 00000000000001c6 R09: 0000000000000000 [ 131.157185][ T8820] R10: 000188811e66b234 R11: 000188811e66b245 R12: 0000200000005bd2 [ 131.157195][ T8820] R13: 00007ffffffff000 R14: 0000200000005bc0 R15: ffff88811e66b234 [ 131.157210][ T8820] _copy_to_user+0x7c/0xa0 [ 131.157261][ T8820] bpf_verifier_vlog+0x2c5/0x5b0 [ 131.157297][ T8820] ? avc_has_perm_noaudit+0x1b1/0x200 [ 131.157350][ T8820] btf_verifier_log+0xad/0xe0 [ 131.157426][ T8820] ? btf_new_fd+0x139/0x790 [ 131.157446][ T8820] ? should_failslab+0x8c/0xb0 [ 131.157466][ T8820] btf_parse_hdr+0x30d/0x3b0 [ 131.157548][ T8820] btf_new_fd+0x246/0x790 [ 131.157580][ T8820] bpf_btf_load+0x112/0x130 [ 131.157620][ T8820] __sys_bpf+0x357/0x7c0 [ 131.157659][ T8820] __x64_sys_bpf+0x41/0x50 [ 131.157688][ T8820] x64_sys_call+0x2aee/0x3000 [ 131.157784][ T8820] do_syscall_64+0xd2/0x200 [ 131.157810][ T8820] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.157835][ T8820] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.157854][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.157949][ T8820] RIP: 0033:0x7fa90812eec9 [ 131.157966][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.157985][ T8820] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.158016][ T8820] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 131.158029][ T8820] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 131.158042][ T8820] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 131.158055][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.158067][ T8820] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 131.158122][ T8820] [ 131.640663][ T8832] __nla_validate_parse: 9 callbacks suppressed [ 131.640679][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 131.655896][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 131.966614][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 132.128423][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 132.678912][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2096'. [ 132.688073][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 132.688770][ T8876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8876 comm=syz.3.2098 [ 132.818292][ T8887] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 132.953073][ T8898] lo speed is unknown, defaulting to 1000 [ 133.125688][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2104'. [ 133.338298][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 133.347486][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 133.810860][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2128'. [ 133.883066][ T8966] lo speed is unknown, defaulting to 1000 [ 134.390059][ T8997] lo speed is unknown, defaulting to 1000 [ 134.455247][ T9002] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 134.648822][ T9018] netlink: 'syz.2.2143': attribute type 30 has an invalid length. [ 134.815838][ T9034] lo speed is unknown, defaulting to 1000 [ 134.890621][ T9039] lo speed is unknown, defaulting to 1000 [ 135.169349][ T9045] lo speed is unknown, defaulting to 1000 [ 135.293539][ T9052] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 135.300171][ T9052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.307622][ T9052] vhci_hcd vhci_hcd.0: Device attached [ 135.314256][ T9053] usbip_core: unknown command [ 135.318977][ T9053] vhci_hcd: unknown pdu 2844066640 [ 135.324158][ T9053] usbip_core: unknown command [ 135.324771][ T9052] FAULT_INJECTION: forcing a failure. [ 135.324771][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 135.341498][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.3.2155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.341521][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.341533][ T9052] Call Trace: [ 135.341539][ T9052] [ 135.341546][ T9052] __dump_stack+0x1d/0x30 [ 135.341587][ T9052] dump_stack_lvl+0xe8/0x140 [ 135.341618][ T9052] dump_stack+0x15/0x1b [ 135.341645][ T9052] should_fail_ex+0x265/0x280 [ 135.341684][ T9052] should_failslab+0x8c/0xb0 [ 135.341745][ T9052] kmem_cache_alloc_noprof+0x50/0x480 [ 135.341769][ T9052] ? copy_mm+0xc6/0x370 [ 135.341875][ T9052] copy_mm+0xc6/0x370 [ 135.341896][ T9052] copy_process+0xd08/0x2000 [ 135.341931][ T9052] kernel_clone+0x16c/0x5c0 [ 135.341959][ T9052] ? vfs_write+0x7e8/0x960 [ 135.341985][ T9052] __x64_sys_clone+0xe6/0x120 [ 135.342097][ T9052] x64_sys_call+0x119c/0x3000 [ 135.342119][ T9052] do_syscall_64+0xd2/0x200 [ 135.342249][ T9052] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.342270][ T9052] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 135.342294][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.342318][ T9052] RIP: 0033:0x7f801391eec9 [ 135.342332][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.342360][ T9052] RSP: 002b:00007f8012386fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 135.342380][ T9052] RAX: ffffffffffffffda RBX: 00007f8013b75fa0 RCX: 00007f801391eec9 [ 135.342394][ T9052] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 135.342405][ T9052] RBP: 00007f8012387090 R08: 0000000000000000 R09: 0000000000000000 [ 135.342414][ T9052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 135.342430][ T9052] R13: 00007f8013b76038 R14: 00007f8013b75fa0 R15: 00007ffc6353baa8 [ 135.342446][ T9052] [ 135.344610][ T1742] vhci_hcd: stop threads [ 135.489401][ T9] vhci_hcd: vhci_device speed not set [ 135.492107][ T1742] vhci_hcd: release socket [ 135.541488][ T1742] vhci_hcd: disconnect device [ 135.581013][ T9] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 135.600983][ T9] usb 7-1: enqueue for inactive port 0 [ 135.606848][ T9] usb 7-1: enqueue for inactive port 0 [ 135.612620][ T9] usb 7-1: enqueue for inactive port 0 [ 135.627897][ T9061] block device autoloading is deprecated and will be removed. [ 135.639137][ T9061] EXT4-fs (loop9): unable to read superblock [ 135.660753][ T9061] netlink: 'syz.4.2158': attribute type 13 has an invalid length. [ 135.679438][ T9] vhci_hcd: vhci_device speed not set [ 135.917661][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 135.917677][ T29] audit: type=1400 audit(1759637502.452:9904): avc: denied { unlink } for pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.032486][ T9078] lo speed is unknown, defaulting to 1000 [ 136.357946][ T29] audit: type=1326 audit(1759637502.892:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.426900][ T9093] lo speed is unknown, defaulting to 1000 [ 136.428338][ T29] audit: type=1326 audit(1759637502.922:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.456099][ T29] audit: type=1326 audit(1759637502.922:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.479516][ T29] audit: type=1326 audit(1759637502.922:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.481590][ T9097] lo speed is unknown, defaulting to 1000 [ 136.502942][ T29] audit: type=1326 audit(1759637502.922:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.532103][ T29] audit: type=1326 audit(1759637502.922:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.555644][ T29] audit: type=1326 audit(1759637502.922:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.579026][ T29] audit: type=1326 audit(1759637502.922:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.602452][ T29] audit: type=1326 audit(1759637502.922:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.3.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801391eec9 code=0x7ffc0000 [ 136.706972][ T9103] lo speed is unknown, defaulting to 1000 [ 136.881749][ T9119] __nla_validate_parse: 9 callbacks suppressed [ 136.881761][ T9119] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2176'. [ 136.927850][ T9119] 0ªX¹¦À: renamed from caif0 [ 136.938104][ T9119] 0ªX¹¦À: entered allmulticast mode [ 136.943500][ T9119] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 137.002156][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 137.032940][ T9110] FAULT_INJECTION: forcing a failure. [ 137.032940][ T9110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.046072][ T9110] CPU: 1 UID: 0 PID: 9110 Comm: syz.2.2175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.046140][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.046150][ T9110] Call Trace: [ 137.046156][ T9110] [ 137.046207][ T9110] __dump_stack+0x1d/0x30 [ 137.046241][ T9110] dump_stack_lvl+0xe8/0x140 [ 137.046345][ T9110] dump_stack+0x15/0x1b [ 137.046414][ T9110] should_fail_ex+0x265/0x280 [ 137.046449][ T9110] should_fail+0xb/0x20 [ 137.046480][ T9110] should_fail_usercopy+0x1a/0x20 [ 137.046568][ T9110] _copy_to_user+0x20/0xa0 [ 137.046588][ T9110] rng_dev_read+0x3ef/0x740 [ 137.046619][ T9110] ? __pfx_rng_dev_read+0x10/0x10 [ 137.046706][ T9110] vfs_readv+0x3f8/0x690 [ 137.046810][ T9110] __x64_sys_preadv+0xfd/0x1c0 [ 137.046836][ T9110] x64_sys_call+0x282e/0x3000 [ 137.046874][ T9110] do_syscall_64+0xd2/0x200 [ 137.046978][ T9110] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.047006][ T9110] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.047073][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.047091][ T9110] RIP: 0033:0x7f64b71deec9 [ 137.047103][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.047117][ T9110] RSP: 002b:00007f64b5c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 137.047133][ T9110] RAX: ffffffffffffffda RBX: 00007f64b7435fa0 RCX: 00007f64b71deec9 [ 137.047172][ T9110] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 137.047185][ T9110] RBP: 00007f64b5c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.047198][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.047209][ T9110] R13: 00007f64b7436038 R14: 00007f64b7435fa0 R15: 00007fff05eaf748 [ 137.047225][ T9110] [ 137.436514][ T9136] lo speed is unknown, defaulting to 1000 [ 137.493955][ T9141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2186'. [ 137.540029][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 137.572701][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'. [ 137.617107][ T9153] lo speed is unknown, defaulting to 1000 [ 137.766467][ T9145] FAULT_INJECTION: forcing a failure. [ 137.766467][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.779594][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.0.2187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.779686][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.779764][ T9145] Call Trace: [ 137.779771][ T9145] [ 137.779779][ T9145] __dump_stack+0x1d/0x30 [ 137.779816][ T9145] dump_stack_lvl+0xe8/0x140 [ 137.779844][ T9145] dump_stack+0x15/0x1b [ 137.779970][ T9145] should_fail_ex+0x265/0x280 [ 137.780002][ T9145] should_fail+0xb/0x20 [ 137.780148][ T9145] should_fail_usercopy+0x1a/0x20 [ 137.780171][ T9145] _copy_from_user+0x1c/0xb0 [ 137.780219][ T9145] io_sqe_files_register+0x1e5/0x4f0 [ 137.780245][ T9145] __se_sys_io_uring_register+0xa23/0xf30 [ 137.780323][ T9145] ? fput+0x8f/0xc0 [ 137.780349][ T9145] ? ksys_write+0x192/0x1a0 [ 137.780378][ T9145] __x64_sys_io_uring_register+0x55/0x70 [ 137.780406][ T9145] x64_sys_call+0x18a3/0x3000 [ 137.780429][ T9145] do_syscall_64+0xd2/0x200 [ 137.780459][ T9145] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.780535][ T9145] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.780561][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.780653][ T9145] RIP: 0033:0x7fa90812eec9 [ 137.780670][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.780691][ T9145] RSP: 002b:00007fa906b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 137.780712][ T9145] RAX: ffffffffffffffda RBX: 00007fa908385fa0 RCX: 00007fa90812eec9 [ 137.780726][ T9145] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000004 [ 137.780751][ T9145] RBP: 00007fa906b97090 R08: 0000000000000000 R09: 0000000000000000 [ 137.780763][ T9145] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 137.780853][ T9145] R13: 00007fa908386038 R14: 00007fa908385fa0 R15: 00007fff37e50588 [ 137.780874][ T9145] [ 138.019181][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2193'. [ 138.028235][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 138.107011][ T9175] ================================================================== [ 138.115115][ T9175] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 138.122423][ T9175] [ 138.124744][ T9175] write to 0xffff8881042b2800 of 8 bytes by task 9172 on cpu 0: [ 138.132399][ T9175] mas_wmb_replace+0x208/0xfa0 [ 138.137181][ T9175] mas_wr_store_entry+0x136b/0x26e0 [ 138.142376][ T9175] mas_store_prealloc+0x74d/0xa80 [ 138.147400][ T9175] vma_iter_store_new+0x1c5/0x200 [ 138.152418][ T9175] vma_complete+0x125/0x580 [ 138.156954][ T9175] __split_vma+0x5d9/0x650 [ 138.161371][ T9175] vma_modify+0x3f2/0xc80 [ 138.165703][ T9175] vma_modify_flags+0x101/0x130 [ 138.170547][ T9175] mprotect_fixup+0x2cc/0x570 [ 138.175233][ T9175] do_mprotect_pkey+0x6d6/0x980 [ 138.180088][ T9175] __x64_sys_mprotect+0x48/0x60 [ 138.184935][ T9175] x64_sys_call+0x2752/0x3000 [ 138.189635][ T9175] do_syscall_64+0xd2/0x200 [ 138.194150][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.200247][ T9175] [ 138.202567][ T9175] read to 0xffff8881042b2800 of 8 bytes by task 9175 on cpu 1: [ 138.210099][ T9175] mas_state_walk+0x485/0x650 [ 138.214774][ T9175] mas_walk+0x60/0x150 [ 138.218836][ T9175] lock_vma_under_rcu+0x95/0x170 [ 138.223769][ T9175] do_user_addr_fault+0x233/0x1080 [ 138.228975][ T9175] exc_page_fault+0x62/0xa0 [ 138.233514][ T9175] asm_exc_page_fault+0x26/0x30 [ 138.238358][ T9175] [ 138.240671][ T9175] value changed: 0xffff888135676201 -> 0xffff8881042b2800 [ 138.247766][ T9175] [ 138.250089][ T9175] Reported by Kernel Concurrency Sanitizer on: [ 138.256228][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.4.2197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.265938][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.275987][ T9175] ================================================================== [ 138.333398][ T9177] lo speed is unknown, defaulting to 1000