last executing test programs: 1m4.830847716s ago: executing program 1 (id=145): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) 1m4.802393386s ago: executing program 1 (id=149): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m4.688585798s ago: executing program 1 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) rseq(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m4.417278053s ago: executing program 1 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2000404, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000010280)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffff7) timer_create(0x3, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.294985306s ago: executing program 1 (id=163): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) 1m4.102266929s ago: executing program 1 (id=168): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf, 0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x24040084) 1m4.089188109s ago: executing program 32 (id=168): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf, 0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x24040084) 1m0.964236838s ago: executing program 2 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m0.86651361s ago: executing program 2 (id=249): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x2, 0x0, 0x0, 0x42, 0x5c}) 1m0.823198711s ago: executing program 2 (id=251): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) 1m0.737352552s ago: executing program 2 (id=253): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, 0x0, 0x0) 1m0.387996529s ago: executing program 2 (id=269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc0c8, &(0x7f0000000240)=ANY=[], 0x3c, 0x2e2, &(0x7f0000000b40)="$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") syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 1m0.144508724s ago: executing program 2 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x16, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) 1m0.144364353s ago: executing program 33 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x16, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) 1.940146383s ago: executing program 5 (id=1811): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.444737872s ago: executing program 6 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x4, 0xa, 0x0, 0x0) 1.411722073s ago: executing program 6 (id=1836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435000000000000000000bbfe8000000000000000000000000000aa00004e22b2eabfccff20b41185a32518515d4e0471568fd600e97e987aaac663ca48c3b98210669765f33968530c80fff4061b5da9662e45616783c6e420321bf12fb88d087f584cc45d5100"/133, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x15, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000540)='./file1\x00', 0x1416c14, &(0x7f0000000680)={[{@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@nojournal_checksum}, {@nodiscard}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x10000}}]}, 0x1, 0x77e, &(0x7f0000001600)="$eJzs3c9rXNUeAPDvnWSaNu17yYMH79VVQNBA6cTU2Cq4qLgQwUJB17bDZBpqJpmSmZQmBLSI4EZQcSHopmt/1J1bf2z1v3AhlqppseJCIndyp502M9MkTTLV+XzgZs65907O+d4f556Ze7gTQN8aS//kIg5HxLtJxEg2P4mIfCM1GHFyfb1bqyuldEpibe3lX5LGOjdXV0rR8p7UwSzz/4j45q2II7mN5daWlmeLlUp5IctP1OcuTNSWlo+enyvOlGfK88cnp6aOnXjqxPGdi/W375cPXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2yliMZdskn27Cuzy/04X1WNLrCrAt6ak5sH6Wx+EYiYFGCgD4J3s9ItYAgD6TuP4DQJ9pfg9wc3Wl1Jx6+43E3rr+XETsX4+/eX9zfclgds9uf+M+6PDN5K47I0lEjO5A+WMR8fGXr36aTrFL9yEB2nnjckScHR3b2P4nG8YsbNUTXZbty17H7pmv/YO981Xa/3m6Xf8vd7v/E236P0Ntzt3tuO/5f2AHCuki7f892zK27VZL/JnRgSz3r0afL5+cO18pp23bvyNiPPJDaX6ySxnjN/680WlZa//v1/df+yQtP329s0bup8Ghu98zXawXHyTmVtcvRzwy2C7+5Pb+Tzr0f09vsowXn3n7o07L0vjTeJvTxvgjG520O9auRDzWdv/fGdGWdB2fONE4HCaaB0UbX/zw4XCn8lv3fzql5Tc/C+yFdP8Pd49/NGkdr1nbehnfXRn5utOy+8ff/vjfl7zSSDf7EZeK9frCZMS+5KWN84/deW8z31w/jX/80fbnf7fjP/1MeHaT8Q9e+/mz7ce/u9L4p7e0/7eeuHprdqBT+Zvb/1ON1Hg2ZzPt32Yr+CDbDgAAAAAAAAAAAAAAAAAAAAAAAAA2KxcRhyLJFW6nc7lCYf03vP8bw7lKtVY/cq66OD8djd/KHo18rvmoy5GW56FOZs/Db+aP3ZN/MiL+ExEfDB1Ims9RnO5x7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdLDD7/+nfhzqde0AgF2zv9cVAAD2nOs/APQf138A6C+u/QDQn/QBAKD/uP4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy06fOpVOa7+vrpTS/PTFpcXZ6sWj0+XabGFusVQoVRcuFGaq1ZlKuVCqzt3v/1Wq1QtTMb94aaJertUnakvLZ+aqi/P1M+fnijPlM+X8nkQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFtTW1qeLVYq5QWJbSTWHo5q9D4xkB1OD0t99jSRdF8nn22bh6GqW0h0azVyu98wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxN/BUAAP//oV8fnw==") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.253627186s ago: executing program 4 (id=1841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x4d, 0x1}, {0x1, 0x200}]}, 0x14, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8509}}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000d80)="$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") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r6, 0x0) 1.08427184s ago: executing program 5 (id=1850): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3067, 0x2025}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x107}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040082) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.05499565s ago: executing program 4 (id=1851): socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) 1.03045007s ago: executing program 5 (id=1852): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 979.161801ms ago: executing program 4 (id=1854): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x1000, &(0x7f0000001040)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x3029, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x4, 0x3, 0x4, 0x2}, {0x0, 0x2, 0xc, 0x3}, {0x0, 0x5, 0x5, 0x4}, {0x2, 0x2, 0x10, 0x4}, {0x1, 0x2, 0x5, 0x4}, {0x1, 0x3, 0x2, 0x2}, {0x2, 0x3, 0x9, 0xb}, {0x4, 0x3, 0xe, 0xa}, {0x1, 0x5, 0xe, 0x4}, {0x2, 0x3, 0x8, 0x4}]}, 0x94) unshare(0x2c020400) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000140), 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='rxrpc_rx_abort\x00', r2, 0x0, 0x29}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x408e, &(0x7f0000000240), 0xff, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) (fail_nth: 7) 943.284372ms ago: executing program 5 (id=1857): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 504.07077ms ago: executing program 6 (id=1863): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x2, 0xedc, 0x4, 0xcf6, 0x0, 0x4}, {0x1, 0x0, 0x1000, 0x3, 0x0, 0x100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x48, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x8, r3}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x177e, 0x4e, &(0x7f0000000340)=""/78, 0x41000, 0x2, '\x00', 0x0, @sk_msg=0x7, r4, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x0, 0x5, 0x87}, 0x10, r5, r6, 0x0, &(0x7f0000000a40)=[r0, r0, r0, r0, 0xffffffffffffffff, r7], 0x0, 0x10, 0x10001}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) 496.56566ms ago: executing program 3 (id=1864): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3067, 0x2025}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x107}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040082) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 449.167081ms ago: executing program 0 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 448.695261ms ago: executing program 3 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)='9', 0x1}], 0x1) 435.074062ms ago: executing program 0 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 417.417232ms ago: executing program 0 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000014c0)=0x3) 404.693712ms ago: executing program 3 (id=1870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@orlov}, {@noload}, {@noblock_validity}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000d80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x400c744d, 0x0) 404.259472ms ago: executing program 6 (id=1871): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x4, 0xa, 0x0, 0x0) 385.038093ms ago: executing program 6 (id=1872): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbece65facee5586dd000000000000000001fe8000000000000100000000000000aa00030e22001690787dc2c7c577ee7fd51e04bf876431"], 0x0) 369.310153ms ago: executing program 6 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435000000000000000000bbfe8000000000000000000000000000aa00004e22b2eabfccff20b41185a32518515d4e0471568fd600e97e987aaac663ca48c3b98210669765f33968530c80fff4061b5da9662e45616783c6e420321bf12fb88d087f584cc45d5100"/133, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x15, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000540)='./file1\x00', 0x1416c14, &(0x7f0000000680)={[{@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@nojournal_checksum}, {@nodiscard}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x10000}}]}, 0x1, 0x77e, &(0x7f0000001600)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 297.335574ms ago: executing program 0 (id=1874): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000940)=0xdc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/8, 0x8}) 292.574974ms ago: executing program 3 (id=1875): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r9, &(0x7f0000000000)='2', 0x1, 0x4fed0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r4) sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r13, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0xffffffff}}}}}, 0x28}}, 0x44) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000329bd7000fbdbdf25420000000c00990009000000420000000a20060050505050505000000a00060008021100000100000a00060008021100000000000a000600c37c505050500000"], 0x50}, 0x1, 0x0, 0x0, 0x20044044}, 0x20048040) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r11, {0x2, 0xf}, {}, {0x5, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 220.998166ms ago: executing program 3 (id=1876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000014c0)=0x3) 97.260808ms ago: executing program 4 (id=1877): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@orlov}, {@noload}, {@noblock_validity}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000d80)="$eJzs3c9vFFUcAPDvzG7Lb1sVf4CgVTQSf7S0/Dx4wWjiQRMTPWA81bYQZKFKayKEKHrAoyHxbjya+Bd40otRTyZe9W5IiOECmpismdmZsi67pUsXtrifTzLw3s7bvvedmbf75r3dNoCBNZb9k0RsjojfImKkkf1vgbHGf9eunJv568q5mSTq9Tf+TPJyV6+cmymLls/b1MjU60V+XZt6L7wdMV2rzZ0u8hOLJ9+bWDhz9vnjJ6ePzR2bOzV16NC+vTuHD0zt70mcWVxXt380v2PbK29dfG3myMV3fvoma+/mYn9zHL0y1ji6bT3V68r6bEtTOqn2sSF0pRIR2ekayvv/SFRiw9K+kXj50742Drit6vV6vd37c+F8HfgfS6LfLQD6o3yjz+5/y+0ODT3WhMuHI94/2Ij/WrE19lQjLcoMtdzf9tJYRBw5//eX2Ra3aR4CAKDZd4cj4rl24780Hmwqd0+xhjIaEfdGxH0RcX9EbI2IByLysg9FxMNd1t+6QnLj+Ce9dEuBrVA2/nuhWNtaGv/9U8/jL4xWityWPP6h5Ojx2tye4pjsjqF1WX5ymTq+f+nXzzvtax7/ZVtWfzkWbEgvVVsm6GanF6dXGfaSy59EbK+2xJ9LolzGSSJiW0Rs7+onX7/DOP7M1zs6lbp5/MvowTpT/auIpxvn/3y0xF9KOq5PTh48MLV/Yn3U5vZMlFfFjX7+5cLrnepfVfw9kJ3/ja3Xf24p/tFkfcTCmbMn8vXahe7ruPD7Zx3vaW71+h9O3szTw8VjH04vLp6ejBhOXr3x8anrzy3zZfks/t272sWf5q9x5ZF4JCKyi3hnRDwaEY8VbX88Ip6IiF3LxP/ji0++2338y8zK91AW/+zNzn80n//uE5UTP3zbffyl7Pzvy1O7i0dW8vq30gau5tgBAADA3SLNPwOfpONL6TQdH298hn9rbExr8wuLzx6d/+DUbOOz8qMxlJYzXSNN86GTxdxwmZ9qye8t5o2/qGzI8+Mz87XZfgcPA25Th/6f+aPS79YBt53va8Hg0v9hcOn/MLj0fxhc+j8Mrnb9/+M+tAO487z/w+DS/2Fw6f8wuPR/GEgdvxufruor/2s1kYW8MYo/PbAG2nMXJyLt/lnVWCONv5sS1RX/MotbTKxru6vfr0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC98W8AAAD///we6rk=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_access_volume\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x400c744d, 0x0) 97.116068ms ago: executing program 0 (id=1878): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 72.787109ms ago: executing program 5 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 72.465029ms ago: executing program 3 (id=1880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x49) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 63.654148ms ago: executing program 0 (id=1881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x4d, 0x1}, {0x1, 0x200}]}, 0x14, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8509}}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000d80)="$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") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r6, 0x0) 37.309649ms ago: executing program 4 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x4, 0xa, 0x0, 0x0) 28.527929ms ago: executing program 5 (id=1883): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbece65facee5586dd000000000000000001fe8000000000000100000000000000aa00030e22001690787dc2c7c577ee7fd51e04bf876431"], 0x0) 0s ago: executing program 4 (id=1884): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)='9', 0x1}], 0x1) kernel console output (not intermixed with test programs): 000000000000133 [ 59.938340][ T5063] RAX: ffffffffffffffda RBX: 00007fa82ed35fa0 RCX: 00007fa82eafebe9 [ 59.938355][ T5063] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 59.938367][ T5063] RBP: 00007fa82d567090 R08: 0000000000000000 R09: 0000000000000000 [ 59.938378][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.938430][ T5063] R13: 00007fa82ed36038 R14: 00007fa82ed35fa0 R15: 00007ffdee95e4f8 [ 59.938452][ T5063] [ 59.972667][ T5064] netlink: 'syz.0.539': attribute type 13 has an invalid length. [ 60.219692][ T5064] netlink: 'syz.0.539': attribute type 17 has an invalid length. [ 60.282728][ T5064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.534811][ T5081] __nla_validate_parse: 6 callbacks suppressed [ 60.534831][ T5081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.571791][ T5090] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.552'. [ 60.574027][ T5091] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.552'. [ 60.590721][ T5091] netlink: zone id is out of range [ 60.597233][ T5091] netlink: del zone limit has 8 unknown bytes [ 60.603644][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 60.671750][ T5090] netlink: zone id is out of range [ 60.677458][ T5090] netlink: del zone limit has 8 unknown bytes [ 60.831578][ T5107] netlink: 'syz.3.556': attribute type 13 has an invalid length. [ 60.839591][ T5107] netlink: 'syz.3.556': attribute type 17 has an invalid length. [ 60.854120][ T5110] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 60.860686][ T5110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.868304][ T5110] vhci_hcd vhci_hcd.0: Device attached [ 60.888892][ T5112] vhci_hcd: connection closed [ 60.891504][ T309] vhci_hcd: stop threads [ 60.900587][ T309] vhci_hcd: release socket [ 60.905801][ T309] vhci_hcd: disconnect device [ 60.922193][ T5118] SELinux: failed to load policy [ 60.927453][ T5107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.966759][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 60.995801][ T5122] FAULT_INJECTION: forcing a failure. [ 60.995801][ T5122] name failslab, interval 1, probability 0, space 0, times 0 [ 61.008618][ T5122] CPU: 1 UID: 0 PID: 5122 Comm: syz.0.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.008651][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.008675][ T5122] Call Trace: [ 61.008683][ T5122] [ 61.008693][ T5122] __dump_stack+0x1d/0x30 [ 61.008731][ T5122] dump_stack_lvl+0xe8/0x140 [ 61.008755][ T5122] dump_stack+0x15/0x1b [ 61.008833][ T5122] should_fail_ex+0x265/0x280 [ 61.008918][ T5122] should_failslab+0x8c/0xb0 [ 61.008949][ T5122] __kmalloc_node_noprof+0xa9/0x410 [ 61.008977][ T5122] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 61.009010][ T5122] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 61.009080][ T5122] ? sel_write_load+0x158/0x380 [ 61.009111][ T5122] vmalloc_noprof+0x82/0xc0 [ 61.009150][ T5122] ? sel_write_load+0x158/0x380 [ 61.009180][ T5122] sel_write_load+0x158/0x380 [ 61.009336][ T5122] ? __pfx_sel_write_load+0x10/0x10 [ 61.009360][ T5122] vfs_write+0x266/0x960 [ 61.009387][ T5122] ? __rcu_read_unlock+0x4f/0x70 [ 61.009474][ T5122] ? __fget_files+0x184/0x1c0 [ 61.009503][ T5122] ? finish_task_switch+0xad/0x2b0 [ 61.009576][ T5122] ksys_write+0xda/0x1a0 [ 61.009611][ T5122] __x64_sys_write+0x40/0x50 [ 61.009636][ T5122] x64_sys_call+0x27fe/0x2ff0 [ 61.009663][ T5122] do_syscall_64+0xd2/0x200 [ 61.009723][ T5122] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.009793][ T5122] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.009830][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.009877][ T5122] RIP: 0033:0x7f77160aebe9 [ 61.009892][ T5122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.009909][ T5122] RSP: 002b:00007f7714b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.009933][ T5122] RAX: ffffffffffffffda RBX: 00007f77162e5fa0 RCX: 00007f77160aebe9 [ 61.009948][ T5122] RDX: 0000000000000010 RSI: 0000200000001600 RDI: 0000000000000003 [ 61.009963][ T5122] RBP: 00007f7714b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.009980][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.009994][ T5122] R13: 00007f77162e6038 R14: 00007f77162e5fa0 R15: 00007fff1e5a10e8 [ 61.010016][ T5122] [ 61.010025][ T5122] syz.0.563: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 61.247119][ T5122] CPU: 1 UID: 0 PID: 5122 Comm: syz.0.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.247146][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.247158][ T5122] Call Trace: [ 61.247165][ T5122] [ 61.247211][ T5122] __dump_stack+0x1d/0x30 [ 61.247237][ T5122] dump_stack_lvl+0xe8/0x140 [ 61.247261][ T5122] dump_stack+0x15/0x1b [ 61.247279][ T5122] warn_alloc+0x12b/0x1a0 [ 61.247375][ T5122] __vmalloc_node_range_noprof+0x497/0xe00 [ 61.247441][ T5122] ? sel_write_load+0x158/0x380 [ 61.247467][ T5122] vmalloc_noprof+0x82/0xc0 [ 61.247502][ T5122] ? sel_write_load+0x158/0x380 [ 61.247559][ T5122] sel_write_load+0x158/0x380 [ 61.247582][ T5122] ? __pfx_sel_write_load+0x10/0x10 [ 61.247608][ T5122] vfs_write+0x266/0x960 [ 61.247682][ T5122] ? __rcu_read_unlock+0x4f/0x70 [ 61.247706][ T5122] ? __fget_files+0x184/0x1c0 [ 61.247762][ T5122] ? finish_task_switch+0xad/0x2b0 [ 61.247848][ T5122] ksys_write+0xda/0x1a0 [ 61.247878][ T5122] __x64_sys_write+0x40/0x50 [ 61.247905][ T5122] x64_sys_call+0x27fe/0x2ff0 [ 61.247932][ T5122] do_syscall_64+0xd2/0x200 [ 61.248028][ T5122] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.248059][ T5122] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.248096][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.248178][ T5122] RIP: 0033:0x7f77160aebe9 [ 61.248196][ T5122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.248237][ T5122] RSP: 002b:00007f7714b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.248260][ T5122] RAX: ffffffffffffffda RBX: 00007f77162e5fa0 RCX: 00007f77160aebe9 [ 61.248275][ T5122] RDX: 0000000000000010 RSI: 0000200000001600 RDI: 0000000000000003 [ 61.248289][ T5122] RBP: 00007f7714b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.248300][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.248364][ T5122] R13: 00007f77162e6038 R14: 00007f77162e5fa0 R15: 00007fff1e5a10e8 [ 61.248387][ T5122] [ 61.248412][ T5122] Mem-Info: [ 61.456270][ T5122] active_anon:8193 inactive_anon:0 isolated_anon:0 [ 61.456270][ T5122] active_file:18739 inactive_file:2213 isolated_file:0 [ 61.456270][ T5122] unevictable:0 dirty:635 writeback:0 [ 61.456270][ T5122] slab_reclaimable:3291 slab_unreclaimable:67622 [ 61.456270][ T5122] mapped:29665 shmem:256 pagetables:1495 [ 61.456270][ T5122] sec_pagetables:0 bounce:0 [ 61.456270][ T5122] kernel_misc_reclaimable:0 [ 61.456270][ T5122] free:1817593 free_pcp:26080 free_cma:0 [ 61.501235][ T5122] Node 0 active_anon:32772kB inactive_anon:0kB active_file:74956kB inactive_file:8852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118660kB dirty:2540kB writeback:0kB shmem:1024kB kernel_stack:3600kB pagetables:6096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 61.528565][ T5122] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.557202][ T5122] lowmem_reserve[]: 0 2883 7862 7862 [ 61.562635][ T5122] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 61.592793][ T5122] lowmem_reserve[]: 0 0 4978 4978 [ 61.597921][ T5122] Node 0 Normal free:4305724kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32772kB inactive_anon:0kB active_file:74956kB inactive_file:8852kB unevictable:0kB writepending:2540kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:100692kB local_pcp:53160kB free_cma:0kB [ 61.630062][ T5122] lowmem_reserve[]: 0 0 0 0 [ 61.634888][ T5122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.647766][ T5122] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 61.664147][ T5122] Node 0 Normal: 70*4kB (UM) 489*8kB (UM) 109*16kB (UM) 42*32kB (UME) 64*64kB (UME) 39*128kB (UM) 33*256kB (UM) 25*512kB (UME) 12*1024kB (UM) 4*2048kB (UM) 1037*4096kB (UM) = 4305648kB [ 61.682839][ T5122] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 61.692182][ T5122] 21176 total pagecache pages [ 61.696995][ T5122] 0 pages in swap cache [ 61.701168][ T5122] Free swap = 124996kB [ 61.705380][ T5122] Total swap = 124996kB [ 61.709564][ T5122] 2097051 pages RAM [ 61.713380][ T5122] 0 pages HighMem/MovableOnly [ 61.718107][ T5122] 80446 pages reserved [ 61.774277][ T5136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 61.827358][ T5157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 61.845589][ T5156] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 61.845589][ T5156] program syz.5.571 not setting count and/or reply_len properly [ 62.173690][ T5177] netlink: 104 bytes leftover after parsing attributes in process `syz.5.580'. [ 62.424912][ T5202] rdma_op ffff88811a178180 conn xmit_rdma 0000000000000000 [ 62.484152][ T5211] usb usb1: usbfs: process 5211 (syz.5.589) did not claim interface 0 before use [ 62.642942][ T5239] 9pnet_fd: Insufficient options for proto=fd [ 62.666765][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.960175][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 63.030454][ T5298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 63.883324][ T5322] wireguard0: entered promiscuous mode [ 63.888952][ T5322] wireguard0: entered allmulticast mode [ 64.066298][ T5332] mmap: syz.3.626 (5332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.247240][ T5349] FAULT_INJECTION: forcing a failure. [ 64.247240][ T5349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.260418][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syz.6.632 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.260448][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.260512][ T5349] Call Trace: [ 64.260586][ T5349] [ 64.260595][ T5349] __dump_stack+0x1d/0x30 [ 64.260664][ T5349] dump_stack_lvl+0xe8/0x140 [ 64.260688][ T5349] dump_stack+0x15/0x1b [ 64.260708][ T5349] should_fail_ex+0x265/0x280 [ 64.260802][ T5349] should_fail+0xb/0x20 [ 64.260904][ T5349] should_fail_usercopy+0x1a/0x20 [ 64.260936][ T5349] _copy_from_user+0x1c/0xb0 [ 64.260986][ T5349] ___sys_sendmsg+0xc1/0x1d0 [ 64.261059][ T5349] __x64_sys_sendmsg+0xd4/0x160 [ 64.261089][ T5349] x64_sys_call+0x191e/0x2ff0 [ 64.261169][ T5349] do_syscall_64+0xd2/0x200 [ 64.261208][ T5349] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.261236][ T5349] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.261268][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.261290][ T5349] RIP: 0033:0x7fed456febe9 [ 64.261309][ T5349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.261330][ T5349] RSP: 002b:00007fed44167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.261353][ T5349] RAX: ffffffffffffffda RBX: 00007fed45935fa0 RCX: 00007fed456febe9 [ 64.261416][ T5349] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 64.261427][ T5349] RBP: 00007fed44167090 R08: 0000000000000000 R09: 0000000000000000 [ 64.261486][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.261499][ T5349] R13: 00007fed45936038 R14: 00007fed45935fa0 R15: 00007ffdcb016718 [ 64.261613][ T5349] [ 64.466805][ T5359] syzkaller1: entered promiscuous mode [ 64.472368][ T5359] syzkaller1: entered allmulticast mode [ 64.622538][ T5380] netlink: 'syz.4.644': attribute type 2 has an invalid length. [ 64.630291][ T5380] netlink: 'syz.4.644': attribute type 9 has an invalid length. [ 64.670427][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 64.670466][ T29] audit: type=1326 audit(1757285783.623:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.712329][ T29] audit: type=1326 audit(1757285783.623:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.735723][ T29] audit: type=1326 audit(1757285783.663:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.759016][ T29] audit: type=1326 audit(1757285783.663:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.844614][ T29] audit: type=1400 audit(1757285783.663:630): avc: denied { name_connect } for pid=5379 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 64.864733][ T29] audit: type=1326 audit(1757285783.763:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.888005][ T29] audit: type=1326 audit(1757285783.763:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.911345][ T29] audit: type=1326 audit(1757285783.763:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.934726][ T29] audit: type=1326 audit(1757285783.783:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 64.958038][ T29] audit: type=1326 audit(1757285783.783:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 65.114239][ T5400] FAULT_INJECTION: forcing a failure. [ 65.114239][ T5400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.127371][ T5400] CPU: 0 UID: 0 PID: 5400 Comm: syz.4.652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.127405][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.127420][ T5400] Call Trace: [ 65.127492][ T5400] [ 65.127500][ T5400] __dump_stack+0x1d/0x30 [ 65.127528][ T5400] dump_stack_lvl+0xe8/0x140 [ 65.127548][ T5400] dump_stack+0x15/0x1b [ 65.127565][ T5400] should_fail_ex+0x265/0x280 [ 65.127657][ T5400] should_fail+0xb/0x20 [ 65.127680][ T5400] should_fail_usercopy+0x1a/0x20 [ 65.127704][ T5400] _copy_to_user+0x20/0xa0 [ 65.127734][ T5400] store_msg+0x49/0x120 [ 65.127801][ T5400] do_mq_timedreceive+0x5b0/0x6d0 [ 65.127863][ T5400] __x64_sys_mq_timedreceive+0xc6/0x160 [ 65.127887][ T5400] x64_sys_call+0x2906/0x2ff0 [ 65.127947][ T5400] do_syscall_64+0xd2/0x200 [ 65.127977][ T5400] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.128057][ T5400] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.128084][ T5400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.128104][ T5400] RIP: 0033:0x7fa82eafebe9 [ 65.128124][ T5400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.128141][ T5400] RSP: 002b:00007fa82d567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 65.128232][ T5400] RAX: ffffffffffffffda RBX: 00007fa82ed35fa0 RCX: 00007fa82eafebe9 [ 65.128247][ T5400] RDX: 00000000fffffceb RSI: 0000200000004600 RDI: 0000000000000005 [ 65.128261][ T5400] RBP: 00007fa82d567090 R08: 0000000000000000 R09: 0000000000000000 [ 65.128274][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.128285][ T5400] R13: 00007fa82ed36038 R14: 00007fa82ed35fa0 R15: 00007ffdee95e4f8 [ 65.128302][ T5400] [ 65.557067][ T5432] netlink: 'syz.0.665': attribute type 27 has an invalid length. [ 65.621585][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.628955][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.650673][ T5437] __nla_validate_parse: 8 callbacks suppressed [ 65.650741][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 65.710674][ T5437] IPVS: Error joining to the multicast group [ 65.716942][ T309] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.726177][ T309] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.744273][ T51] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.753653][ T51] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.185469][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.674'. [ 66.740904][ T5518] SELinux: failed to load policy [ 66.746573][ T5518] program syz.0.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.840353][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 66.854888][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 66.879125][ T5539] FAULT_INJECTION: forcing a failure. [ 66.879125][ T5539] name failslab, interval 1, probability 0, space 0, times 0 [ 66.892040][ T5539] CPU: 0 UID: 0 PID: 5539 Comm: syz.0.710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.892073][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.892087][ T5539] Call Trace: [ 66.892094][ T5539] [ 66.892101][ T5539] __dump_stack+0x1d/0x30 [ 66.892121][ T5539] dump_stack_lvl+0xe8/0x140 [ 66.892138][ T5539] dump_stack+0x15/0x1b [ 66.892152][ T5539] should_fail_ex+0x265/0x280 [ 66.892172][ T5539] should_failslab+0x8c/0xb0 [ 66.892194][ T5539] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 66.892243][ T5539] ? shmem_alloc_inode+0x34/0x50 [ 66.892295][ T5539] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 66.892314][ T5539] shmem_alloc_inode+0x34/0x50 [ 66.892332][ T5539] alloc_inode+0x3d/0x170 [ 66.892351][ T5539] new_inode+0x1d/0xe0 [ 66.892372][ T5539] shmem_get_inode+0x244/0x750 [ 66.892397][ T5539] shmem_mknod+0x46/0x180 [ 66.892418][ T5539] shmem_create+0x34/0x50 [ 66.892437][ T5539] ? __pfx_shmem_create+0x10/0x10 [ 66.892483][ T5539] path_openat+0x1102/0x2170 [ 66.892574][ T5539] do_filp_open+0x109/0x230 [ 66.892598][ T5539] do_sys_openat2+0xa6/0x110 [ 66.892680][ T5539] __x64_sys_open+0xe6/0x110 [ 66.892707][ T5539] x64_sys_call+0x1457/0x2ff0 [ 66.892724][ T5539] do_syscall_64+0xd2/0x200 [ 66.892779][ T5539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.892799][ T5539] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.892823][ T5539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.892938][ T5539] RIP: 0033:0x7f77160aebe9 [ 66.892983][ T5539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.892998][ T5539] RSP: 002b:00007f7714b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 66.893020][ T5539] RAX: ffffffffffffffda RBX: 00007f77162e5fa0 RCX: 00007f77160aebe9 [ 66.893031][ T5539] RDX: 0000000000000001 RSI: 0000000000101042 RDI: 0000200000000000 [ 66.893042][ T5539] RBP: 00007f7714b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.893052][ T5539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.893133][ T5539] R13: 00007f77162e6038 R14: 00007f77162e5fa0 R15: 00007fff1e5a10e8 [ 66.893157][ T5539] [ 67.144720][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 67.487642][ T5566] netlink: 'syz.4.722': attribute type 29 has an invalid length. [ 67.496040][ T5566] netlink: 'syz.4.722': attribute type 29 has an invalid length. [ 67.532240][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 67.884813][ T5596] FAULT_INJECTION: forcing a failure. [ 67.884813][ T5596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.898010][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.3.734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.898041][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.898056][ T5596] Call Trace: [ 67.898064][ T5596] [ 67.898075][ T5596] __dump_stack+0x1d/0x30 [ 67.898144][ T5596] dump_stack_lvl+0xe8/0x140 [ 67.898163][ T5596] dump_stack+0x15/0x1b [ 67.898181][ T5596] should_fail_ex+0x265/0x280 [ 67.898290][ T5596] should_fail+0xb/0x20 [ 67.898314][ T5596] should_fail_usercopy+0x1a/0x20 [ 67.898338][ T5596] _copy_to_user+0x20/0xa0 [ 67.898422][ T5596] simple_read_from_buffer+0xb5/0x130 [ 67.898524][ T5596] proc_fail_nth_read+0x10e/0x150 [ 67.898623][ T5596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.898656][ T5596] vfs_read+0x1a5/0x770 [ 67.898678][ T5596] ? __rcu_read_unlock+0x4f/0x70 [ 67.898705][ T5596] ? __fget_files+0x184/0x1c0 [ 67.898781][ T5596] ksys_read+0xda/0x1a0 [ 67.898844][ T5596] __x64_sys_read+0x40/0x50 [ 67.898872][ T5596] x64_sys_call+0x27bc/0x2ff0 [ 67.898899][ T5596] do_syscall_64+0xd2/0x200 [ 67.898931][ T5596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.898967][ T5596] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.899019][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.899096][ T5596] RIP: 0033:0x7fef41bad5fc [ 67.899109][ T5596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 67.899123][ T5596] RSP: 002b:00007fef4060f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.899146][ T5596] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41bad5fc [ 67.899200][ T5596] RDX: 000000000000000f RSI: 00007fef4060f0a0 RDI: 0000000000000005 [ 67.899210][ T5596] RBP: 00007fef4060f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.899221][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.899232][ T5596] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 67.899298][ T5596] [ 68.295563][ T5609] FAULT_INJECTION: forcing a failure. [ 68.295563][ T5609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.308710][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz.3.740 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.308739][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.308818][ T5609] Call Trace: [ 68.308827][ T5609] [ 68.308901][ T5609] __dump_stack+0x1d/0x30 [ 68.308984][ T5609] dump_stack_lvl+0xe8/0x140 [ 68.309008][ T5609] dump_stack+0x15/0x1b [ 68.309029][ T5609] should_fail_ex+0x265/0x280 [ 68.309059][ T5609] should_fail+0xb/0x20 [ 68.309112][ T5609] should_fail_usercopy+0x1a/0x20 [ 68.309187][ T5609] _copy_from_iter+0xd2/0xe80 [ 68.309223][ T5609] ? __build_skb_around+0x1a0/0x200 [ 68.309251][ T5609] ? __alloc_skb+0x223/0x320 [ 68.309303][ T5609] netlink_sendmsg+0x471/0x6b0 [ 68.309355][ T5609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.309382][ T5609] __sock_sendmsg+0x142/0x180 [ 68.309489][ T5609] ____sys_sendmsg+0x31e/0x4e0 [ 68.309558][ T5609] ___sys_sendmsg+0x17b/0x1d0 [ 68.309684][ T5609] __x64_sys_sendmsg+0xd4/0x160 [ 68.309722][ T5609] x64_sys_call+0x191e/0x2ff0 [ 68.309811][ T5609] do_syscall_64+0xd2/0x200 [ 68.309850][ T5609] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.310027][ T5609] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.310055][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.310080][ T5609] RIP: 0033:0x7fef41baebe9 [ 68.310130][ T5609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.310152][ T5609] RSP: 002b:00007fef4060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.310176][ T5609] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41baebe9 [ 68.310191][ T5609] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 68.310202][ T5609] RBP: 00007fef4060f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.310213][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.310225][ T5609] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 68.310244][ T5609] [ 68.622348][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.743'. [ 68.642088][ T5633] bridge_slave_1: left allmulticast mode [ 68.647864][ T5633] bridge_slave_1: left promiscuous mode [ 68.653658][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.662020][ T5633] bridge_slave_0: left allmulticast mode [ 68.667796][ T5633] bridge_slave_0: left promiscuous mode [ 68.673502][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.720732][ T5652] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5652 comm=syz.6.743 [ 68.739409][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 68.751655][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 68.764762][ T5615] tmpfs: Bad value for 'mpol' [ 68.831192][ T5659] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 68.831192][ T5659] program syz.5.753 not setting count and/or reply_len properly [ 69.026215][ T5676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.762'. [ 69.127151][ T5685] geneve2: entered promiscuous mode [ 69.132417][ T5685] geneve2: entered allmulticast mode [ 69.200377][ T5692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.231860][ T5692] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.246303][ T5698] FAULT_INJECTION: forcing a failure. [ 69.246303][ T5698] name failslab, interval 1, probability 0, space 0, times 0 [ 69.259076][ T5698] CPU: 0 UID: 0 PID: 5698 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.259187][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.259202][ T5698] Call Trace: [ 69.259209][ T5698] [ 69.259218][ T5698] __dump_stack+0x1d/0x30 [ 69.259261][ T5698] dump_stack_lvl+0xe8/0x140 [ 69.259280][ T5698] dump_stack+0x15/0x1b [ 69.259300][ T5698] should_fail_ex+0x265/0x280 [ 69.259331][ T5698] should_failslab+0x8c/0xb0 [ 69.259359][ T5698] kmem_cache_alloc_node_noprof+0x57/0x320 [ 69.259498][ T5698] ? __alloc_skb+0x101/0x320 [ 69.259527][ T5698] __alloc_skb+0x101/0x320 [ 69.259551][ T5698] netlink_alloc_large_skb+0xba/0xf0 [ 69.259599][ T5698] netlink_sendmsg+0x3cf/0x6b0 [ 69.259633][ T5698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.259664][ T5698] __sock_sendmsg+0x142/0x180 [ 69.259698][ T5698] ____sys_sendmsg+0x31e/0x4e0 [ 69.259776][ T5698] ___sys_sendmsg+0x17b/0x1d0 [ 69.259833][ T5698] __x64_sys_sendmsg+0xd4/0x160 [ 69.259915][ T5698] x64_sys_call+0x191e/0x2ff0 [ 69.259943][ T5698] do_syscall_64+0xd2/0x200 [ 69.259974][ T5698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.259998][ T5698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.260088][ T5698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.260135][ T5698] RIP: 0033:0x7fef41baebe9 [ 69.260150][ T5698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.260208][ T5698] RSP: 002b:00007fef4060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.260232][ T5698] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41baebe9 [ 69.260246][ T5698] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 69.260261][ T5698] RBP: 00007fef4060f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.260273][ T5698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.260284][ T5698] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 69.260302][ T5698] [ 69.665126][ T5716] sctp: [Deprecated]: syz.4.772 (pid 5716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.665126][ T5716] Use struct sctp_sack_info instead [ 69.777774][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 69.777800][ T29] audit: type=1326 audit(1757285788.653:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 69.777838][ T29] audit: type=1326 audit(1757285788.653:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 69.777884][ T29] audit: type=1326 audit(1757285788.653:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 69.777916][ T29] audit: type=1326 audit(1757285788.653:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 69.777981][ T29] audit: type=1326 audit(1757285788.653:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 69.778015][ T29] audit: type=1326 audit(1757285788.653:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 69.955354][ T29] audit: type=1326 audit(1757285788.913:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f77160aebe9 code=0x7ffc0000 [ 70.047620][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.055170][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.066417][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.073888][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.553118][ T29] audit: type=1326 audit(1757285789.503:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.6.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 70.576558][ T29] audit: type=1326 audit(1757285789.503:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.6.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 70.623838][ T5743] FAULT_INJECTION: forcing a failure. [ 70.623838][ T5743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.637082][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.3.784 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.637112][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.637128][ T5743] Call Trace: [ 70.637134][ T5743] [ 70.637142][ T5743] __dump_stack+0x1d/0x30 [ 70.637164][ T5743] dump_stack_lvl+0xe8/0x140 [ 70.637184][ T5743] dump_stack+0x15/0x1b [ 70.637201][ T5743] should_fail_ex+0x265/0x280 [ 70.637299][ T5743] should_fail+0xb/0x20 [ 70.637320][ T5743] should_fail_usercopy+0x1a/0x20 [ 70.637409][ T5743] _copy_from_user+0x1c/0xb0 [ 70.637462][ T5743] sctp_setsockopt+0x154/0xe30 [ 70.637484][ T5743] sock_common_setsockopt+0x69/0x80 [ 70.637598][ T5743] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 70.637640][ T5743] __sys_setsockopt+0x181/0x200 [ 70.637672][ T5743] __x64_sys_setsockopt+0x64/0x80 [ 70.637703][ T5743] x64_sys_call+0x20ec/0x2ff0 [ 70.637761][ T5743] do_syscall_64+0xd2/0x200 [ 70.637798][ T5743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.637938][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.637979][ T5743] RIP: 0033:0x7fef41baebe9 [ 70.637996][ T5743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.638081][ T5743] RSP: 002b:00007fef4060f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.638103][ T5743] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41baebe9 [ 70.638116][ T5743] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000006 [ 70.638153][ T5743] RBP: 00007fef4060f090 R08: 0000000000000009 R09: 0000000000000000 [ 70.638166][ T5743] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 70.638180][ T5743] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 70.638202][ T5743] [ 70.642030][ T29] audit: type=1326 audit(1757285789.503:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.6.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 70.790152][ T5760] __nla_validate_parse: 6 callbacks suppressed [ 70.790170][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.786'. [ 70.900337][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.787'. [ 70.982174][ T5774] bridge_slave_0: left allmulticast mode [ 70.988139][ T5774] bridge_slave_0: left promiscuous mode [ 70.994119][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.015519][ T5774] bridge_slave_1: left allmulticast mode [ 71.021222][ T5774] bridge_slave_1: left promiscuous mode [ 71.027063][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.037019][ T5774] bond0: (slave bond_slave_0): Releasing backup interface [ 71.051705][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.795'. [ 71.061150][ T5774] bond0: (slave bond_slave_1): Releasing backup interface [ 71.063689][ T5779] netlink: 'syz.3.797': attribute type 4 has an invalid length. [ 71.076573][ T5779] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.797'. [ 71.113130][ T5774] team0: Port device team_slave_0 removed [ 71.128349][ T5774] team0: Port device team_slave_1 removed [ 71.222689][ T5789] FAULT_INJECTION: forcing a failure. [ 71.222689][ T5789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 71.236141][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.3.799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.236174][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.236189][ T5789] Call Trace: [ 71.236196][ T5789] [ 71.236205][ T5789] __dump_stack+0x1d/0x30 [ 71.236229][ T5789] dump_stack_lvl+0xe8/0x140 [ 71.236267][ T5789] dump_stack+0x15/0x1b [ 71.236282][ T5789] should_fail_ex+0x265/0x280 [ 71.236311][ T5789] should_fail_alloc_page+0xf2/0x100 [ 71.236345][ T5789] __alloc_frozen_pages_noprof+0xff/0x360 [ 71.236446][ T5789] alloc_pages_mpol+0xb3/0x250 [ 71.236481][ T5789] vma_alloc_folio_noprof+0x1aa/0x300 [ 71.236581][ T5789] handle_mm_fault+0xec2/0x2c20 [ 71.236676][ T5789] do_user_addr_fault+0x636/0x1090 [ 71.236778][ T5789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.236822][ T5789] exc_page_fault+0x62/0xa0 [ 71.236851][ T5789] asm_exc_page_fault+0x26/0x30 [ 71.236876][ T5789] RIP: 0033:0x7fef41b5c1eb [ 71.236895][ T5789] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 71.237016][ T5789] RSP: 002b:00007fef4060ce10 EFLAGS: 00010246 [ 71.237036][ T5789] RAX: 00007fef4060ef30 RBX: 00007fef41db7640 RCX: 0000000000000000 [ 71.237102][ T5789] RDX: 00007fef4060ef78 RSI: 00007fef41c0eca8 RDI: 00007fef4060ce30 [ 71.237117][ T5789] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 71.237130][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.237143][ T5789] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 71.237167][ T5789] [ 71.237178][ T5789] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 71.293279][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 71.689031][ T5823] FAULT_INJECTION: forcing a failure. [ 71.689031][ T5823] name failslab, interval 1, probability 0, space 0, times 0 [ 71.701749][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz.6.811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.701782][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.701797][ T5823] Call Trace: [ 71.701805][ T5823] [ 71.701814][ T5823] __dump_stack+0x1d/0x30 [ 71.701839][ T5823] dump_stack_lvl+0xe8/0x140 [ 71.701863][ T5823] dump_stack+0x15/0x1b [ 71.701883][ T5823] should_fail_ex+0x265/0x280 [ 71.701987][ T5823] should_failslab+0x8c/0xb0 [ 71.702017][ T5823] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 71.702047][ T5823] ? sidtab_sid2str_get+0xa0/0x130 [ 71.702075][ T5823] kmemdup_noprof+0x2b/0x70 [ 71.702103][ T5823] sidtab_sid2str_get+0xa0/0x130 [ 71.702129][ T5823] security_sid_to_context_core+0x1eb/0x2e0 [ 71.702184][ T5823] security_sid_to_context_force+0x2a/0x40 [ 71.702203][ T5823] selinux_inode_getsecurity+0x2c4/0x2e0 [ 71.702301][ T5823] security_inode_getsecurity+0xcf/0xe0 [ 71.702342][ T5823] vfs_getxattr+0x140/0x250 [ 71.702410][ T5823] do_getxattr+0x124/0x2a0 [ 71.702433][ T5823] path_getxattrat+0x22c/0x2a0 [ 71.702479][ T5823] __x64_sys_fgetxattr+0x59/0x70 [ 71.702509][ T5823] x64_sys_call+0x1ab3/0x2ff0 [ 71.702602][ T5823] do_syscall_64+0xd2/0x200 [ 71.702653][ T5823] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.702720][ T5823] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.702757][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.702843][ T5823] RIP: 0033:0x7fed456febe9 [ 71.702867][ T5823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.702884][ T5823] RSP: 002b:00007fed44167038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 71.702905][ T5823] RAX: ffffffffffffffda RBX: 00007fed45935fa0 RCX: 00007fed456febe9 [ 71.702920][ T5823] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 71.702934][ T5823] RBP: 00007fed44167090 R08: 0000000000000000 R09: 0000000000000000 [ 71.702949][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.703011][ T5823] R13: 00007fed45936038 R14: 00007fed45935fa0 R15: 00007ffdcb016718 [ 71.703031][ T5823] [ 71.941607][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.814'. [ 71.968305][ T5835] FAULT_INJECTION: forcing a failure. [ 71.968305][ T5835] name failslab, interval 1, probability 0, space 0, times 0 [ 71.981014][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.981042][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.981114][ T5835] Call Trace: [ 71.981121][ T5835] [ 71.981128][ T5835] __dump_stack+0x1d/0x30 [ 71.981150][ T5835] dump_stack_lvl+0xe8/0x140 [ 71.981170][ T5835] dump_stack+0x15/0x1b [ 71.981186][ T5835] should_fail_ex+0x265/0x280 [ 71.981275][ T5835] ? rtnl_newlink+0x5c/0x12d0 [ 71.981306][ T5835] should_failslab+0x8c/0xb0 [ 71.981331][ T5835] __kmalloc_cache_noprof+0x4c/0x320 [ 71.981435][ T5835] rtnl_newlink+0x5c/0x12d0 [ 71.981471][ T5835] ? xas_load+0x413/0x430 [ 71.981528][ T5835] ? try_charge_memcg+0x200/0x9e0 [ 71.981592][ T5835] ? cmp_ex_search+0x25/0x40 [ 71.981610][ T5835] ? bsearch+0x95/0xc0 [ 71.981627][ T5835] ? __pfx_cmp_ex_search+0x10/0x10 [ 71.981686][ T5835] ? __memcg_slab_free_hook+0x135/0x230 [ 71.981722][ T5835] ? __rcu_read_unlock+0x4f/0x70 [ 71.981823][ T5835] ? avc_has_perm_noaudit+0x1b1/0x200 [ 71.981858][ T5835] ? cred_has_capability+0x210/0x280 [ 71.981884][ T5835] ? selinux_capable+0x31/0x40 [ 71.981923][ T5835] ? security_capable+0x83/0x90 [ 71.981947][ T5835] ? ns_capable+0x7d/0xb0 [ 71.981967][ T5835] ? __pfx_rtnl_newlink+0x10/0x10 [ 71.981999][ T5835] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 71.982035][ T5835] ? netlink_rcv_skb+0xfe/0x220 [ 71.982061][ T5835] netlink_rcv_skb+0x123/0x220 [ 71.982123][ T5835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.982160][ T5835] rtnetlink_rcv+0x1c/0x30 [ 71.982250][ T5835] netlink_unicast+0x5bd/0x690 [ 71.982274][ T5835] netlink_sendmsg+0x58b/0x6b0 [ 71.982301][ T5835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.982362][ T5835] __sock_sendmsg+0x142/0x180 [ 71.982396][ T5835] ____sys_sendmsg+0x31e/0x4e0 [ 71.982425][ T5835] ___sys_sendmsg+0x17b/0x1d0 [ 71.982584][ T5835] __x64_sys_sendmsg+0xd4/0x160 [ 71.982701][ T5835] x64_sys_call+0x191e/0x2ff0 [ 71.982723][ T5835] do_syscall_64+0xd2/0x200 [ 71.982754][ T5835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.982812][ T5835] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.982843][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.982904][ T5835] RIP: 0033:0x7fa82eafebe9 [ 71.982920][ T5835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.982937][ T5835] RSP: 002b:00007fa82d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.982956][ T5835] RAX: ffffffffffffffda RBX: 00007fa82ed35fa0 RCX: 00007fa82eafebe9 [ 71.982997][ T5835] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 71.983009][ T5835] RBP: 00007fa82d567090 R08: 0000000000000000 R09: 0000000000000000 [ 71.983021][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.983032][ T5835] R13: 00007fa82ed36038 R14: 00007fa82ed35fa0 R15: 00007ffdee95e4f8 [ 71.983051][ T5835] [ 72.305895][ T5834] can: request_module (can-proto-0) failed. [ 72.335697][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 72.358406][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 72.925967][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.839'. [ 72.966951][ T5903] program syz.5.841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.294640][ T5935] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 73.302388][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 73.315396][ T5935] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 73.481638][ T5949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.973783][ T6025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.359229][ T6062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.495967][ T6067] tipc: Started in network mode [ 74.500940][ T6067] tipc: Node identity 06353f899311, cluster identity 4711 [ 74.508265][ T6067] tipc: Enabled bearer , priority 0 [ 74.592072][ T6063] tipc: Resetting bearer [ 74.621696][ T6063] tipc: Disabling bearer [ 74.688470][ T6078] random: crng reseeded on system resumption [ 74.892476][ T6094] netlink: 'syz.3.904': attribute type 3 has an invalid length. [ 75.010584][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 75.010602][ T29] audit: type=1400 audit(74.989:1263): avc: denied { create } for pid=6102 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.036085][ T29] audit: type=1400 audit(74.989:1264): avc: denied { connect } for pid=6102 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.244246][ T6126] FAULT_INJECTION: forcing a failure. [ 75.244246][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.257360][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.5.916 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.257411][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.257427][ T6126] Call Trace: [ 75.257435][ T6126] [ 75.257445][ T6126] __dump_stack+0x1d/0x30 [ 75.257471][ T6126] dump_stack_lvl+0xe8/0x140 [ 75.257557][ T6126] dump_stack+0x15/0x1b [ 75.257577][ T6126] should_fail_ex+0x265/0x280 [ 75.257682][ T6126] should_fail+0xb/0x20 [ 75.257706][ T6126] should_fail_usercopy+0x1a/0x20 [ 75.257737][ T6126] _copy_to_user+0x20/0xa0 [ 75.257831][ T6126] simple_read_from_buffer+0xb5/0x130 [ 75.257857][ T6126] proc_fail_nth_read+0x10e/0x150 [ 75.257931][ T6126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.257959][ T6126] vfs_read+0x1a5/0x770 [ 75.257980][ T6126] ? __rcu_read_unlock+0x4f/0x70 [ 75.258049][ T6126] ? __fget_files+0x184/0x1c0 [ 75.258081][ T6126] ksys_read+0xda/0x1a0 [ 75.258111][ T6126] __x64_sys_read+0x40/0x50 [ 75.258135][ T6126] x64_sys_call+0x27bc/0x2ff0 [ 75.258159][ T6126] do_syscall_64+0xd2/0x200 [ 75.258293][ T6126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.258322][ T6126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.258563][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.258590][ T6126] RIP: 0033:0x7fb24545d5fc [ 75.258605][ T6126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.258621][ T6126] RSP: 002b:00007fb243ebf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.258641][ T6126] RAX: ffffffffffffffda RBX: 00007fb245695fa0 RCX: 00007fb24545d5fc [ 75.258710][ T6126] RDX: 000000000000000f RSI: 00007fb243ebf0a0 RDI: 0000000000000007 [ 75.258726][ T6126] RBP: 00007fb243ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 75.258760][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.258775][ T6126] R13: 00007fb245696038 R14: 00007fb245695fa0 R15: 00007ffe7ee60978 [ 75.258799][ T6126] [ 75.513149][ T29] audit: type=1326 audit(75.489:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.536085][ T29] audit: type=1326 audit(75.499:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.558820][ T29] audit: type=1326 audit(75.499:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.581721][ T29] audit: type=1326 audit(75.499:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.604492][ T29] audit: type=1326 audit(75.499:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.627785][ T29] audit: type=1326 audit(75.499:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.650606][ T29] audit: type=1326 audit(75.499:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.673326][ T29] audit: type=1326 audit(75.499:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.5.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 75.812335][ T6149] __nla_validate_parse: 6 callbacks suppressed [ 75.812350][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.925'. [ 75.820378][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.5.927'. [ 75.854044][ T6158] netlink: 'syz.5.927': attribute type 10 has an invalid length. [ 75.898343][ T6158] team0: Port device dummy0 added [ 75.918474][ T6158] netlink: 'syz.5.927': attribute type 10 has an invalid length. [ 75.943791][ T6158] team0: Port device dummy0 removed [ 75.954904][ T6158] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.032345][ T10] IPVS: starting estimator thread 0... [ 76.044001][ T6182] netlink: 256 bytes leftover after parsing attributes in process `syz.5.936'. [ 76.062609][ T6182] process 'syz.5.936' launched './file0' with NULL argv: empty string added [ 76.133961][ T6183] IPVS: using max 1872 ests per chain, 93600 per kthread [ 76.201733][ T6194] netlink: 5 bytes leftover after parsing attributes in process `syz.4.940'. [ 76.210805][ T6194] 0{X功: renamed from gretap0 (while UP) [ 76.218494][ T6194] 0{X功: entered allmulticast mode [ 76.226115][ T6194] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 76.248869][ T6194] netlink: 96 bytes leftover after parsing attributes in process `syz.4.940'. [ 76.610733][ T6197] FAULT_INJECTION: forcing a failure. [ 76.610733][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 76.623502][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.3.941 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.623529][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.623603][ T6197] Call Trace: [ 76.623611][ T6197] [ 76.623620][ T6197] __dump_stack+0x1d/0x30 [ 76.623644][ T6197] dump_stack_lvl+0xe8/0x140 [ 76.623777][ T6197] dump_stack+0x15/0x1b [ 76.623801][ T6197] should_fail_ex+0x265/0x280 [ 76.623830][ T6197] should_failslab+0x8c/0xb0 [ 76.623925][ T6197] __kmalloc_noprof+0xa5/0x3e0 [ 76.623996][ T6197] ? bpf_map_meta_alloc+0x116/0x340 [ 76.624033][ T6197] bpf_map_meta_alloc+0x116/0x340 [ 76.624066][ T6197] htab_of_map_alloc+0x21/0x80 [ 76.624144][ T6197] map_create+0x840/0xca0 [ 76.624173][ T6197] ? security_bpf+0x2b/0x90 [ 76.624208][ T6197] __sys_bpf+0x545/0x7b0 [ 76.624257][ T6197] __x64_sys_bpf+0x41/0x50 [ 76.624286][ T6197] x64_sys_call+0x2aea/0x2ff0 [ 76.624312][ T6197] do_syscall_64+0xd2/0x200 [ 76.624390][ T6197] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.624482][ T6197] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.624518][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.624545][ T6197] RIP: 0033:0x7fef41baebe9 [ 76.624563][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.624582][ T6197] RSP: 002b:00007fef4060f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.624624][ T6197] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41baebe9 [ 76.624638][ T6197] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 0000000000000000 [ 76.624652][ T6197] RBP: 00007fef4060f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.624707][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.624719][ T6197] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 76.624741][ T6197] [ 76.929512][ T6212] can: request_module (can-proto-0) failed. [ 76.942555][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 76.994855][ T6212] 9pnet_fd: Insufficient options for proto=fd [ 77.004502][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 77.013458][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.949'. [ 77.022380][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 77.041828][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.949'. [ 77.050755][ T6227] netlink: 'syz.4.949': attribute type 6 has an invalid length. [ 77.065853][ T6227] sch_tbf: peakrate 127 is lower than or equals to rate 4294934529 ! [ 77.077752][ T6231] SELinux: security_context_str_to_sid (跲*3伳!跮;偣(x?8皜>${覵骸7#暑呷!g挸.&[n佴9欤P9\E盩昗q3℉*8缙YYL溨銰R!I*饭' 蹑淐D賆 [ 77.077752][ T6231] 炅s0dn頿h篁5L0蒂嶋|q蛭鼥鮀81缼驄鸄{陥唵nK 凱;oi) failed with errno=-22 [ 77.104179][ T6227] sock: sock_timestamping_bind_phc: sock not bind to device [ 77.106577][ T6233] FAULT_INJECTION: forcing a failure. [ 77.106577][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.124636][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.5.952 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.124666][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.124747][ T6233] Call Trace: [ 77.124754][ T6233] [ 77.124771][ T6233] __dump_stack+0x1d/0x30 [ 77.124796][ T6233] dump_stack_lvl+0xe8/0x140 [ 77.124817][ T6233] dump_stack+0x15/0x1b [ 77.124833][ T6233] should_fail_ex+0x265/0x280 [ 77.124856][ T6233] should_fail+0xb/0x20 [ 77.124876][ T6233] should_fail_usercopy+0x1a/0x20 [ 77.124963][ T6233] _copy_from_user+0x1c/0xb0 [ 77.125031][ T6233] sctp_setsockopt+0x154/0xe30 [ 77.125051][ T6233] sock_common_setsockopt+0x69/0x80 [ 77.125160][ T6233] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 77.125194][ T6233] __sys_setsockopt+0x181/0x200 [ 77.125219][ T6233] __x64_sys_setsockopt+0x64/0x80 [ 77.125245][ T6233] x64_sys_call+0x20ec/0x2ff0 [ 77.125283][ T6233] do_syscall_64+0xd2/0x200 [ 77.125386][ T6233] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.125411][ T6233] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.125491][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.125513][ T6233] RIP: 0033:0x7fb24545ebe9 [ 77.125528][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.125596][ T6233] RSP: 002b:00007fb243ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.125688][ T6233] RAX: ffffffffffffffda RBX: 00007fb245695fa0 RCX: 00007fb24545ebe9 [ 77.125700][ T6233] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000006 [ 77.125712][ T6233] RBP: 00007fb243ebf090 R08: 0000000000000009 R09: 0000000000000000 [ 77.125724][ T6233] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 77.125815][ T6233] R13: 00007fb245696038 R14: 00007fb245695fa0 R15: 00007ffe7ee60978 [ 77.125835][ T6233] [ 77.411930][ T6250] ip6gretap1: entered allmulticast mode [ 77.484625][ T6256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.922840][ T6314] FAULT_INJECTION: forcing a failure. [ 77.922840][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.936070][ T6314] CPU: 1 UID: 0 PID: 6314 Comm: syz.0.990 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.936100][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.936110][ T6314] Call Trace: [ 77.936116][ T6314] [ 77.936123][ T6314] __dump_stack+0x1d/0x30 [ 77.936211][ T6314] dump_stack_lvl+0xe8/0x140 [ 77.936227][ T6314] dump_stack+0x15/0x1b [ 77.936241][ T6314] should_fail_ex+0x265/0x280 [ 77.936261][ T6314] should_fail+0xb/0x20 [ 77.936376][ T6314] should_fail_usercopy+0x1a/0x20 [ 77.936399][ T6314] _copy_from_user+0x1c/0xb0 [ 77.936456][ T6314] __se_sys_add_key+0x209/0x350 [ 77.936478][ T6314] __x64_sys_add_key+0x67/0x80 [ 77.936496][ T6314] x64_sys_call+0x28c4/0x2ff0 [ 77.936514][ T6314] do_syscall_64+0xd2/0x200 [ 77.936555][ T6314] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.936575][ T6314] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.936608][ T6314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.936634][ T6314] RIP: 0033:0x7f77160aebe9 [ 77.936695][ T6314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.936716][ T6314] RSP: 002b:00007f7714b0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 77.936739][ T6314] RAX: ffffffffffffffda RBX: 00007f77162e5fa0 RCX: 00007f77160aebe9 [ 77.936754][ T6314] RDX: 0000200000001000 RSI: 0000200000001000 RDI: 0000200000000080 [ 77.936776][ T6314] RBP: 00007f7714b0f090 R08: 0000000003db7470 R09: 0000000000000000 [ 77.936787][ T6314] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 77.936798][ T6314] R13: 00007f77162e6038 R14: 00007f77162e5fa0 R15: 00007fff1e5a10e8 [ 77.936818][ T6314] [ 77.942485][ T6310] 9pnet_fd: Insufficient options for proto=fd [ 78.298441][ T10] IPVS: starting estimator thread 0... [ 78.465516][ T6344] IPVS: using max 1824 ests per chain, 91200 per kthread [ 79.606990][ T6410] netlink: 'syz.3.1027': attribute type 4 has an invalid length. [ 79.654200][ T6410] netlink: 'syz.3.1027': attribute type 4 has an invalid length. [ 79.916432][ T6446] FAULT_INJECTION: forcing a failure. [ 79.916432][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 79.929204][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.6.1036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.929277][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.929293][ T6446] Call Trace: [ 79.929300][ T6446] [ 79.929309][ T6446] __dump_stack+0x1d/0x30 [ 79.929335][ T6446] dump_stack_lvl+0xe8/0x140 [ 79.929438][ T6446] dump_stack+0x15/0x1b [ 79.929458][ T6446] should_fail_ex+0x265/0x280 [ 79.929489][ T6446] should_failslab+0x8c/0xb0 [ 79.929521][ T6446] kmem_cache_alloc_node_noprof+0x57/0x320 [ 79.929606][ T6446] ? __alloc_skb+0x101/0x320 [ 79.929629][ T6446] __alloc_skb+0x101/0x320 [ 79.929657][ T6446] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 79.929730][ T6446] rtmsg_ifinfo+0x6d/0x110 [ 79.929756][ T6446] __dev_notify_flags+0x76/0x1a0 [ 79.929783][ T6446] netif_change_flags+0xac/0xd0 [ 79.929832][ T6446] do_setlink+0x9d2/0x2810 [ 79.929902][ T6446] ? selinux_capable+0x31/0x40 [ 79.929938][ T6446] ? security_capable+0x83/0x90 [ 79.929968][ T6446] ? ns_capable+0x7d/0xb0 [ 79.929993][ T6446] ? netlink_ns_capable+0x86/0xa0 [ 79.930021][ T6446] rtnl_newlink+0xd8b/0x12d0 [ 79.930122][ T6446] ? htab_map_hash+0x1cc/0x1d0 [ 79.930160][ T6446] ? htab_lru_map_delete_elem+0x2f2/0x460 [ 79.930197][ T6446] ? __rcu_read_unlock+0x4f/0x70 [ 79.930286][ T6446] ? avc_has_perm_noaudit+0x1b1/0x200 [ 79.930318][ T6446] ? cred_has_capability+0x210/0x280 [ 79.930348][ T6446] ? selinux_capable+0x31/0x40 [ 79.930382][ T6446] ? security_capable+0x83/0x90 [ 79.930410][ T6446] ? ns_capable+0x7d/0xb0 [ 79.930477][ T6446] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.930514][ T6446] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 79.930571][ T6446] netlink_rcv_skb+0x123/0x220 [ 79.930598][ T6446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.930660][ T6446] rtnetlink_rcv+0x1c/0x30 [ 79.930687][ T6446] netlink_unicast+0x5bd/0x690 [ 79.930711][ T6446] netlink_sendmsg+0x58b/0x6b0 [ 79.930746][ T6446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.930782][ T6446] __sock_sendmsg+0x142/0x180 [ 79.930816][ T6446] ____sys_sendmsg+0x31e/0x4e0 [ 79.930852][ T6446] ___sys_sendmsg+0x17b/0x1d0 [ 79.931024][ T6446] __x64_sys_sendmsg+0xd4/0x160 [ 79.931064][ T6446] x64_sys_call+0x191e/0x2ff0 [ 79.931092][ T6446] do_syscall_64+0xd2/0x200 [ 79.931186][ T6446] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.931216][ T6446] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.931264][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.931312][ T6446] RIP: 0033:0x7fed456febe9 [ 79.931342][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.931374][ T6446] RSP: 002b:00007fed44146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.931398][ T6446] RAX: ffffffffffffffda RBX: 00007fed45936090 RCX: 00007fed456febe9 [ 79.931413][ T6446] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 79.931428][ T6446] RBP: 00007fed44146090 R08: 0000000000000000 R09: 0000000000000000 [ 79.931442][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.931455][ T6446] R13: 00007fed45936128 R14: 00007fed45936090 R15: 00007ffdcb016718 [ 79.931473][ T6446] [ 80.270037][ T6446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.375062][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 80.375077][ T29] audit: type=1400 audit(80.359:1942): avc: denied { write } for pid=6459 comm="syz.3.1044" name="sockstat6" dev="proc" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.416703][ T29] audit: type=1326 audit(80.399:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 80.439596][ T29] audit: type=1326 audit(80.399:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 80.462447][ T29] audit: type=1326 audit(80.399:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 80.485202][ T29] audit: type=1326 audit(80.399:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 80.510024][ T29] audit: type=1326 audit(80.399:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 80.532841][ T29] audit: type=1326 audit(80.399:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb24545ec23 code=0x7ffc0000 [ 80.555564][ T29] audit: type=1326 audit(80.399:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb24545d69f code=0x7ffc0000 [ 80.578236][ T29] audit: type=1326 audit(80.399:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb24545ec77 code=0x7ffc0000 [ 80.601022][ T29] audit: type=1326 audit(80.399:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24545d550 code=0x7ffc0000 [ 80.678025][ T6473] netlink: 'syz.5.1050': attribute type 30 has an invalid length. [ 80.917964][ T6498] __nla_validate_parse: 9 callbacks suppressed [ 80.918040][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'. [ 81.020823][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1069'. [ 81.086823][ T6525] netlink: 'syz.6.1071': attribute type 4 has an invalid length. [ 81.094719][ T6525] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1071'. [ 81.366996][ T6543] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1080'. [ 81.463649][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'. [ 81.489671][ T6548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.595710][ T6562] Driver unsupported XDP return value 0 on prog (id 472) dev N/A, expect packet loss! [ 81.624342][ T6564] ip6gretap1: entered allmulticast mode [ 81.676857][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1092'. [ 81.795537][ T6577] FAULT_INJECTION: forcing a failure. [ 81.795537][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 81.808287][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.4.1093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.808315][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.808332][ T6577] Call Trace: [ 81.808340][ T6577] [ 81.808348][ T6577] __dump_stack+0x1d/0x30 [ 81.808373][ T6577] dump_stack_lvl+0xe8/0x140 [ 81.808457][ T6577] dump_stack+0x15/0x1b [ 81.808475][ T6577] should_fail_ex+0x265/0x280 [ 81.808503][ T6577] should_failslab+0x8c/0xb0 [ 81.808532][ T6577] __kmalloc_noprof+0xa5/0x3e0 [ 81.808657][ T6577] ? pfkey_add+0x85b/0x12e0 [ 81.808687][ T6577] ? timer_init_key+0x73/0x140 [ 81.808717][ T6577] pfkey_add+0x85b/0x12e0 [ 81.808750][ T6577] pfkey_sendmsg+0x715/0x900 [ 81.808801][ T6577] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 81.808839][ T6577] __sock_sendmsg+0x142/0x180 [ 81.808899][ T6577] ____sys_sendmsg+0x31e/0x4e0 [ 81.808928][ T6577] ___sys_sendmsg+0x17b/0x1d0 [ 81.808968][ T6577] __x64_sys_sendmsg+0xd4/0x160 [ 81.809071][ T6577] x64_sys_call+0x191e/0x2ff0 [ 81.809163][ T6577] do_syscall_64+0xd2/0x200 [ 81.809195][ T6577] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.809220][ T6577] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.809301][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.809323][ T6577] RIP: 0033:0x7fa82eafebe9 [ 81.809338][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.809356][ T6577] RSP: 002b:00007fa82d546038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.809424][ T6577] RAX: ffffffffffffffda RBX: 00007fa82ed36090 RCX: 00007fa82eafebe9 [ 81.809437][ T6577] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 81.809449][ T6577] RBP: 00007fa82d546090 R08: 0000000000000000 R09: 0000000000000000 [ 81.809460][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.809472][ T6577] R13: 00007fa82ed36128 R14: 00007fa82ed36090 R15: 00007ffdee95e4f8 [ 81.809491][ T6577] [ 82.017251][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1093'. [ 82.024947][ T6581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.038915][ T6572] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 82.054992][ T6572] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 82.069221][ T6572] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 82.104938][ T36] IPVS: starting estimator thread 0... [ 82.204038][ T6588] IPVS: using max 2400 ests per chain, 120000 per kthread [ 82.312057][ T6608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.511509][ T6635] 1{X功: renamed from 30{X功 (while UP) [ 82.519295][ T6635] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 82.607080][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6641 comm=syz.0.1121 [ 82.627335][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a00da00: rx timeout, send abort [ 82.635776][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a00da00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.650219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a00dc00: rx timeout, send abort [ 82.689275][ T3409] IPVS: starting estimator thread 0... [ 82.783935][ T6650] IPVS: using max 2256 ests per chain, 112800 per kthread [ 82.943382][ T6665] tmpfs: Unknown parameter 'V' [ 83.158468][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a00dc00: abort rx timeout. Force session deactivation [ 83.226310][ T6679] ip6gretap1: entered allmulticast mode [ 83.303341][ T6689] netlink: 'syz.5.1133': attribute type 13 has an invalid length. [ 83.311432][ T6689] netlink: 'syz.5.1133': attribute type 17 has an invalid length. [ 83.325562][ T6692] netlink: 'syz.6.1142': attribute type 4 has an invalid length. [ 83.337278][ T6692] netlink: 'syz.6.1142': attribute type 4 has an invalid length. [ 83.408159][ T6689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.496890][ T6700] ip6gretap1: entered allmulticast mode [ 83.765357][ T6714] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.956349][ T6736] netlink: 'syz.5.1158': attribute type 13 has an invalid length. [ 83.964258][ T6736] netlink: 'syz.5.1158': attribute type 17 has an invalid length. [ 83.991467][ T6736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.194387][ T6753] 9pnet_fd: Insufficient options for proto=fd [ 84.352742][ T6766] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 84.352742][ T6766] program syz.0.1175 not setting count and/or reply_len properly [ 84.409578][ T6769] FAULT_INJECTION: forcing a failure. [ 84.409578][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 84.422322][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.3.1176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.422354][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.422370][ T6769] Call Trace: [ 84.422378][ T6769] [ 84.422387][ T6769] __dump_stack+0x1d/0x30 [ 84.422507][ T6769] dump_stack_lvl+0xe8/0x140 [ 84.422532][ T6769] dump_stack+0x15/0x1b [ 84.422569][ T6769] should_fail_ex+0x265/0x280 [ 84.422592][ T6769] should_failslab+0x8c/0xb0 [ 84.422619][ T6769] kmem_cache_alloc_noprof+0x50/0x310 [ 84.422654][ T6769] ? skb_clone+0x151/0x1f0 [ 84.422738][ T6769] skb_clone+0x151/0x1f0 [ 84.422770][ T6769] __netlink_deliver_tap+0x2c9/0x500 [ 84.422807][ T6769] netlink_unicast+0x66b/0x690 [ 84.422909][ T6769] netlink_sendmsg+0x58b/0x6b0 [ 84.422943][ T6769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.422968][ T6769] __sock_sendmsg+0x142/0x180 [ 84.422999][ T6769] ____sys_sendmsg+0x31e/0x4e0 [ 84.423137][ T6769] ___sys_sendmsg+0x17b/0x1d0 [ 84.423259][ T6769] __x64_sys_sendmsg+0xd4/0x160 [ 84.423297][ T6769] x64_sys_call+0x191e/0x2ff0 [ 84.423323][ T6769] do_syscall_64+0xd2/0x200 [ 84.423362][ T6769] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.423514][ T6769] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.423551][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.423577][ T6769] RIP: 0033:0x7fef41baebe9 [ 84.423592][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.423667][ T6769] RSP: 002b:00007fef4060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.423686][ T6769] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41baebe9 [ 84.423700][ T6769] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 84.423711][ T6769] RBP: 00007fef4060f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.423771][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.423787][ T6769] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 84.423874][ T6769] [ 84.786721][ T6790] FAULT_INJECTION: forcing a failure. [ 84.786721][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 84.799532][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.3.1187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.799629][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.799645][ T6790] Call Trace: [ 84.799652][ T6790] [ 84.799660][ T6790] __dump_stack+0x1d/0x30 [ 84.799767][ T6790] dump_stack_lvl+0xe8/0x140 [ 84.799791][ T6790] dump_stack+0x15/0x1b [ 84.799839][ T6790] should_fail_ex+0x265/0x280 [ 84.799863][ T6790] should_failslab+0x8c/0xb0 [ 84.799902][ T6790] kmem_cache_alloc_node_noprof+0x57/0x320 [ 84.799940][ T6790] ? __alloc_skb+0x101/0x320 [ 84.799964][ T6790] __alloc_skb+0x101/0x320 [ 84.800047][ T6790] ? selinux_file_permission+0x1e4/0x320 [ 84.800070][ T6790] ppp_write+0x87/0x310 [ 84.800087][ T6790] ? vfs_write+0x250/0x960 [ 84.800114][ T6790] ? __pfx_ppp_write+0x10/0x10 [ 84.800138][ T6790] vfs_write+0x266/0x960 [ 84.800220][ T6790] ? __rcu_read_unlock+0x4f/0x70 [ 84.800241][ T6790] ? __fget_files+0x184/0x1c0 [ 84.800274][ T6790] ksys_write+0xda/0x1a0 [ 84.800369][ T6790] __x64_sys_write+0x40/0x50 [ 84.800393][ T6790] x64_sys_call+0x27fe/0x2ff0 [ 84.800418][ T6790] do_syscall_64+0xd2/0x200 [ 84.800510][ T6790] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.800542][ T6790] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.800597][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.800618][ T6790] RIP: 0033:0x7fef41baebe9 [ 84.800636][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.800653][ T6790] RSP: 002b:00007fef4060f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.800674][ T6790] RAX: ffffffffffffffda RBX: 00007fef41de5fa0 RCX: 00007fef41baebe9 [ 84.800756][ T6790] RDX: 000000000000fce1 RSI: 0000200000000280 RDI: 0000000000000004 [ 84.800771][ T6790] RBP: 00007fef4060f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.800786][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.800797][ T6790] R13: 00007fef41de6038 R14: 00007fef41de5fa0 R15: 00007ffd9617f6b8 [ 84.800816][ T6790] [ 85.069309][ T6799] ip6gretap1: entered allmulticast mode [ 85.338868][ T6815] netlink: 'syz.5.1195': attribute type 13 has an invalid length. [ 85.346797][ T6815] netlink: 'syz.5.1195': attribute type 17 has an invalid length. [ 85.375007][ T6815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.485653][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 85.485670][ T29] audit: type=1326 audit(85.469:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.519151][ T29] audit: type=1326 audit(85.469:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.541945][ T29] audit: type=1326 audit(85.469:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.564780][ T29] audit: type=1326 audit(85.469:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.590095][ T29] audit: type=1326 audit(85.499:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.612874][ T29] audit: type=1326 audit(85.499:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.635802][ T29] audit: type=1326 audit(85.549:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.658482][ T29] audit: type=1326 audit(85.549:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.681238][ T29] audit: type=1326 audit(85.549:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.704053][ T29] audit: type=1326 audit(85.549:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.6.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fed456febe9 code=0x7ffc0000 [ 85.870074][ T6838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.995043][ T6849] netlink: 'syz.0.1210': attribute type 4 has an invalid length. [ 86.033021][ T6849] netlink: 'syz.0.1210': attribute type 4 has an invalid length. [ 86.061850][ T6857] __nla_validate_parse: 13 callbacks suppressed [ 86.061864][ T6857] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1214'. [ 86.190366][ T6874] tipc: Started in network mode [ 86.195314][ T6874] tipc: Node identity 6a03e226febb, cluster identity 4711 [ 86.202530][ T6874] tipc: Enabled bearer , priority 0 [ 86.239785][ T6876] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.316253][ T6881] tipc: Resetting bearer [ 86.334099][ T6874] syzkaller0: entered promiscuous mode [ 86.453450][ T6876] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.465940][ T6873] tipc: Resetting bearer [ 86.477771][ T6873] tipc: Disabling bearer [ 86.558113][ T6876] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.643451][ T6876] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.716819][ T5979] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.751698][ T5979] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.794260][ T5979] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.856516][ T5979] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.147629][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1230'. [ 87.273958][ T6920] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1236'. [ 87.289641][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1236'. [ 87.298796][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1236'. [ 87.503222][ T6931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.649611][ T6944] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1246'. [ 87.709430][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1248'. [ 87.758366][ T6954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1249'. [ 87.771651][ T6954] FAULT_INJECTION: forcing a failure. [ 87.771651][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 87.784453][ T6954] CPU: 1 UID: 0 PID: 6954 Comm: syz.5.1249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.784524][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.784540][ T6954] Call Trace: [ 87.784547][ T6954] [ 87.784622][ T6954] __dump_stack+0x1d/0x30 [ 87.784684][ T6954] dump_stack_lvl+0xe8/0x140 [ 87.784735][ T6954] dump_stack+0x15/0x1b [ 87.784756][ T6954] should_fail_ex+0x265/0x280 [ 87.784787][ T6954] should_failslab+0x8c/0xb0 [ 87.784818][ T6954] kmem_cache_alloc_noprof+0x50/0x310 [ 87.784853][ T6954] ? skb_clone+0x151/0x1f0 [ 87.784934][ T6954] skb_clone+0x151/0x1f0 [ 87.784965][ T6954] __netlink_deliver_tap+0x2c9/0x500 [ 87.785024][ T6954] netlink_unicast+0x66b/0x690 [ 87.785055][ T6954] netlink_sendmsg+0x58b/0x6b0 [ 87.785087][ T6954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.785120][ T6954] __sock_sendmsg+0x142/0x180 [ 87.785222][ T6954] ____sys_sendmsg+0x31e/0x4e0 [ 87.785349][ T6954] ___sys_sendmsg+0x17b/0x1d0 [ 87.785399][ T6954] __x64_sys_sendmsg+0xd4/0x160 [ 87.785484][ T6954] x64_sys_call+0x191e/0x2ff0 [ 87.785513][ T6954] do_syscall_64+0xd2/0x200 [ 87.785601][ T6954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.785642][ T6954] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.785740][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.785767][ T6954] RIP: 0033:0x7fb24545ebe9 [ 87.785787][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.785809][ T6954] RSP: 002b:00007fb243ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.785880][ T6954] RAX: ffffffffffffffda RBX: 00007fb245695fa0 RCX: 00007fb24545ebe9 [ 87.785897][ T6954] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005 [ 87.785932][ T6954] RBP: 00007fb243ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.785947][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.785962][ T6954] R13: 00007fb245696038 R14: 00007fb245695fa0 R15: 00007ffe7ee60978 [ 87.786047][ T6954] [ 87.786065][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 88.081700][ T6960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.094935][ T6962] sd 0:0:1:0: device reset [ 88.324935][ T6975] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1259'. [ 88.545337][ T6993] FAULT_INJECTION: forcing a failure. [ 88.545337][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 88.558037][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.5.1266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.558070][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.558134][ T6993] Call Trace: [ 88.558141][ T6993] [ 88.558150][ T6993] __dump_stack+0x1d/0x30 [ 88.558228][ T6993] dump_stack_lvl+0xe8/0x140 [ 88.558249][ T6993] dump_stack+0x15/0x1b [ 88.558265][ T6993] should_fail_ex+0x265/0x280 [ 88.558288][ T6993] should_failslab+0x8c/0xb0 [ 88.558313][ T6993] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 88.558396][ T6993] ? __d_alloc+0x3d/0x340 [ 88.558495][ T6993] ? __account_obj_stock+0x211/0x350 [ 88.558526][ T6993] __d_alloc+0x3d/0x340 [ 88.558631][ T6993] d_alloc_parallel+0x53/0xc60 [ 88.558702][ T6993] ? __rcu_read_unlock+0x4f/0x70 [ 88.558806][ T6993] ? avc_has_perm_noaudit+0x1b1/0x200 [ 88.558838][ T6993] ? lockref_get_not_dead+0x120/0x1c0 [ 88.558920][ T6993] ? __rcu_read_unlock+0x4f/0x70 [ 88.558947][ T6993] __lookup_slow+0x8c/0x250 [ 88.558989][ T6993] lookup_slow+0x3c/0x60 [ 88.559029][ T6993] link_path_walk+0x753/0x900 [ 88.559090][ T6993] path_openat+0x1de/0x2170 [ 88.559114][ T6993] ? _parse_integer_limit+0x170/0x190 [ 88.559153][ T6993] do_filp_open+0x109/0x230 [ 88.559188][ T6993] do_sys_openat2+0xa6/0x110 [ 88.559255][ T6993] __x64_sys_openat+0xf2/0x120 [ 88.559348][ T6993] x64_sys_call+0x2e9c/0x2ff0 [ 88.559377][ T6993] do_syscall_64+0xd2/0x200 [ 88.559416][ T6993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.559446][ T6993] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.559607][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.559628][ T6993] RIP: 0033:0x7fb24545ebe9 [ 88.559643][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.559660][ T6993] RSP: 002b:00007fb243ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.559682][ T6993] RAX: ffffffffffffffda RBX: 00007fb245695fa0 RCX: 00007fb24545ebe9 [ 88.559697][ T6993] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 88.559711][ T6993] RBP: 00007fb243ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.559786][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.559801][ T6993] R13: 00007fb245696038 R14: 00007fb245695fa0 R15: 00007ffe7ee60978 [ 88.559824][ T6993] [ 88.831241][ T7002] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 88.831241][ T7002] program syz.4.1269 not setting count and/or reply_len properly [ 88.914064][ T7015] netlink: 'syz.0.1275': attribute type 11 has an invalid length. [ 88.923740][ T7015] sd 0:0:1:0: device reset [ 89.045181][ T7028] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 89.045181][ T7028] program syz.4.1282 not setting count and/or reply_len properly [ 89.146868][ T7046] netlink: 'syz.0.1290': attribute type 4 has an invalid length. [ 89.157300][ T7046] netlink: 'syz.0.1290': attribute type 4 has an invalid length. [ 89.235383][ T7055] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.237111][ T7057] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 89.237111][ T7057] program syz.0.1295 not setting count and/or reply_len properly [ 89.453563][ T7083] netlink: 'syz.4.1300': attribute type 13 has an invalid length. [ 89.461500][ T7083] netlink: 'syz.4.1300': attribute type 17 has an invalid length. [ 89.494637][ T7086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.506106][ T7083] 1{X功: left allmulticast mode [ 89.559752][ T7083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.740934][ T7119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.807211][ T7123] FAULT_INJECTION: forcing a failure. [ 89.807211][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 89.820098][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.6.1325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.820128][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.820140][ T7123] Call Trace: [ 89.820146][ T7123] [ 89.820153][ T7123] __dump_stack+0x1d/0x30 [ 89.820174][ T7123] dump_stack_lvl+0xe8/0x140 [ 89.820193][ T7123] dump_stack+0x15/0x1b [ 89.820255][ T7123] should_fail_ex+0x265/0x280 [ 89.820284][ T7123] should_failslab+0x8c/0xb0 [ 89.820316][ T7123] __kmalloc_noprof+0xa5/0x3e0 [ 89.820423][ T7123] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 89.820477][ T7123] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 89.820572][ T7123] genl_family_rcv_msg_doit+0x48/0x1b0 [ 89.820613][ T7123] ? selinux_capable+0x31/0x40 [ 89.820724][ T7123] ? security_capable+0x83/0x90 [ 89.820890][ T7123] ? ns_capable+0x7d/0xb0 [ 89.820917][ T7123] genl_rcv_msg+0x422/0x460 [ 89.820998][ T7123] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 89.821036][ T7123] ? __pfx_nl802154_add_llsec_seclevel+0x10/0x10 [ 89.821064][ T7123] ? __pfx_nl802154_post_doit+0x10/0x10 [ 89.821098][ T7123] netlink_rcv_skb+0x123/0x220 [ 89.821182][ T7123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.821307][ T7123] genl_rcv+0x28/0x40 [ 89.821389][ T7123] netlink_unicast+0x5bd/0x690 [ 89.821479][ T7123] netlink_sendmsg+0x58b/0x6b0 [ 89.821510][ T7123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.821535][ T7123] __sock_sendmsg+0x142/0x180 [ 89.821575][ T7123] ____sys_sendmsg+0x31e/0x4e0 [ 89.821623][ T7123] ___sys_sendmsg+0x17b/0x1d0 [ 89.821668][ T7123] __x64_sys_sendmsg+0xd4/0x160 [ 89.821759][ T7123] x64_sys_call+0x191e/0x2ff0 [ 89.821785][ T7123] do_syscall_64+0xd2/0x200 [ 89.821841][ T7123] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.821869][ T7123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.821960][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.822036][ T7123] RIP: 0033:0x7fed456febe9 [ 89.822054][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.822076][ T7123] RSP: 002b:00007fed44167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.822099][ T7123] RAX: ffffffffffffffda RBX: 00007fed45935fa0 RCX: 00007fed456febe9 [ 89.822114][ T7123] RDX: 0000000000040000 RSI: 0000200000000f00 RDI: 0000000000000005 [ 89.822130][ T7123] RBP: 00007fed44167090 R08: 0000000000000000 R09: 0000000000000000 [ 89.822142][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.822153][ T7123] R13: 00007fed45936038 R14: 00007fed45935fa0 R15: 00007ffdcb016718 [ 89.822192][ T7123] [ 90.118497][ T7128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7128 comm=syz.6.1327 [ 90.335964][ T7148] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 90.335964][ T7148] program syz.5.1336 not setting count and/or reply_len properly [ 90.534615][ T7179] netlink: 'syz.5.1343': attribute type 13 has an invalid length. [ 90.542522][ T7179] netlink: 'syz.5.1343': attribute type 17 has an invalid length. [ 90.555834][ T7180] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 90.555834][ T7180] program syz.4.1349 not setting count and/or reply_len properly [ 90.632932][ T7179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.846248][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 90.846267][ T29] audit: type=1326 audit(90.829:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82eafebe9 code=0x7ffc0000 [ 90.878323][ T29] audit: type=1326 audit(90.829:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa82eafebe9 code=0x7ffc0000 [ 90.901299][ T29] audit: type=1326 audit(90.829:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82eafebe9 code=0x7ffc0000 [ 90.924258][ T29] audit: type=1326 audit(90.829:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.4.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82eafebe9 code=0x7ffc0000 [ 91.004487][ T29] audit: type=1326 audit(90.989:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 91.215133][ T7212] netlink: 'syz.4.1363': attribute type 4 has an invalid length. [ 91.226917][ T7212] netlink: 'syz.4.1363': attribute type 4 has an invalid length. [ 91.266366][ T29] audit: type=1326 audit(90.989:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 91.289406][ T29] audit: type=1326 audit(90.989:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 91.312170][ T29] audit: type=1326 audit(90.989:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 91.334980][ T29] audit: type=1326 audit(90.989:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 91.357709][ T29] audit: type=1326 audit(90.989:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 91.876824][ T3409] IPVS: starting estimator thread 0... [ 91.887228][ T7256] __nla_validate_parse: 9 callbacks suppressed [ 91.887247][ T7256] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1382'. [ 91.994203][ T7259] IPVS: using max 2496 ests per chain, 124800 per kthread [ 92.177742][ T7269] netlink: 'syz.0.1386': attribute type 13 has an invalid length. [ 92.304823][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.324952][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.347049][ T7269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.243028][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1411'. [ 93.270290][ T7325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.504916][ T7340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.656664][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1423'. [ 94.062122][ T7385] validate_nla: 3 callbacks suppressed [ 94.062152][ T7385] netlink: 'syz.5.1434': attribute type 13 has an invalid length. [ 94.075603][ T7385] netlink: 'syz.5.1434': attribute type 17 has an invalid length. [ 94.107350][ T7388] FAULT_INJECTION: forcing a failure. [ 94.107350][ T7388] name failslab, interval 1, probability 0, space 0, times 0 [ 94.120244][ T7388] CPU: 0 UID: 0 PID: 7388 Comm: syz.4.1438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.120300][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.120316][ T7388] Call Trace: [ 94.120324][ T7388] [ 94.120333][ T7388] __dump_stack+0x1d/0x30 [ 94.120359][ T7388] dump_stack_lvl+0xe8/0x140 [ 94.120383][ T7388] dump_stack+0x15/0x1b [ 94.120404][ T7388] should_fail_ex+0x265/0x280 [ 94.120431][ T7388] should_failslab+0x8c/0xb0 [ 94.120529][ T7388] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 94.120563][ T7388] ? sidtab_sid2str_get+0xa0/0x130 [ 94.120632][ T7388] kmemdup_noprof+0x2b/0x70 [ 94.120665][ T7388] sidtab_sid2str_get+0xa0/0x130 [ 94.120692][ T7388] security_sid_to_context_core+0x1eb/0x2e0 [ 94.120729][ T7388] security_sid_to_context+0x27/0x40 [ 94.120789][ T7388] selinux_lsmprop_to_secctx+0x67/0xf0 [ 94.120818][ T7388] security_lsmprop_to_secctx+0x43/0x80 [ 94.120926][ T7388] audit_log_task_context+0x77/0x190 [ 94.121031][ T7388] audit_log_task+0xf4/0x250 [ 94.121065][ T7388] audit_seccomp+0x61/0x100 [ 94.121103][ T7388] ? __seccomp_filter+0x68c/0x10d0 [ 94.121144][ T7388] __seccomp_filter+0x69d/0x10d0 [ 94.121169][ T7388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.121216][ T7388] ? vfs_write+0x7e8/0x960 [ 94.121239][ T7388] ? __rcu_read_unlock+0x4f/0x70 [ 94.121263][ T7388] ? __fget_files+0x184/0x1c0 [ 94.121290][ T7388] __secure_computing+0x82/0x150 [ 94.121319][ T7388] syscall_trace_enter+0xcf/0x1e0 [ 94.121394][ T7388] do_syscall_64+0xac/0x200 [ 94.121430][ T7388] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.121460][ T7388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.121497][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.121524][ T7388] RIP: 0033:0x7fa82eafebe9 [ 94.121543][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.121565][ T7388] RSP: 002b:00007fa82d567038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 94.121588][ T7388] RAX: ffffffffffffffda RBX: 00007fa82ed35fa0 RCX: 00007fa82eafebe9 [ 94.121600][ T7388] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 94.121612][ T7388] RBP: 00007fa82d567090 R08: 0000000000000000 R09: 0000000000000000 [ 94.121623][ T7388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.121695][ T7388] R13: 00007fa82ed36038 R14: 00007fa82ed35fa0 R15: 00007ffdee95e4f8 [ 94.121715][ T7388] [ 94.246484][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 94.388789][ T7385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.493482][ T7411] netlink: 'syz.6.1446': attribute type 10 has an invalid length. [ 94.526749][ T7411] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.584449][ T7419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.755081][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 94.784833][ T7437] netlink: 'syz.0.1453': attribute type 13 has an invalid length. [ 94.792719][ T7437] netlink: 'syz.0.1453': attribute type 17 has an invalid length. [ 94.875450][ T7437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.038527][ T7453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.274332][ T7482] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.288378][ T7474] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1471'. [ 95.300915][ T7474] 0{X功: renamed from gretap0 (while UP) [ 95.326752][ T7474] 0{X功: entered allmulticast mode [ 95.338360][ T7474] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 95.413260][ T7491] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.489394][ T7499] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 95.489394][ T7499] program syz.0.1479 not setting count and/or reply_len properly [ 95.508454][ T7491] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.545749][ T7491] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.570200][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 95.597774][ T7491] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.674305][ T5980] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.698521][ T5980] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.710992][ T5980] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.750463][ T5981] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.784347][ T7525] netlink: 'syz.5.1489': attribute type 13 has an invalid length. [ 95.792197][ T7525] netlink: 'syz.5.1489': attribute type 17 has an invalid length. [ 95.814398][ T7527] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 95.814398][ T7527] program syz.6.1492 not setting count and/or reply_len properly [ 95.852971][ T7525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.898906][ T7531] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1493'. [ 95.915196][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 95.915213][ T29] audit: type=1400 audit(95.889:3253): avc: denied { create } for pid=7528 comm="syz.3.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.940454][ T29] audit: type=1400 audit(95.889:3254): avc: denied { connect } for pid=7528 comm="syz.3.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.959669][ T29] audit: type=1400 audit(95.889:3255): avc: denied { ioctl } for pid=7528 comm="syz.3.1493" path="socket:[20118]" dev="sockfs" ino=20118 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.186302][ T29] audit: type=1326 audit(96.169:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 96.209206][ T29] audit: type=1326 audit(96.169:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 96.314567][ T29] audit: type=1326 audit(96.169:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 96.337309][ T29] audit: type=1326 audit(96.169:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 96.360523][ T29] audit: type=1326 audit(96.169:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 96.383585][ T29] audit: type=1326 audit(96.169:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 96.406582][ T29] audit: type=1326 audit(96.239:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.4.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82eafebe9 code=0x7ffc0000 [ 96.526148][ T7569] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1510'. [ 96.584484][ T7578] netlink: 'syz.0.1513': attribute type 13 has an invalid length. [ 96.592439][ T7578] netlink: 'syz.0.1513': attribute type 17 has an invalid length. [ 96.653762][ T7578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.949506][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1524'. [ 97.125290][ T7610] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 97.467519][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 97.743080][ T7664] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.949177][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1552'. [ 98.264105][ T7704] netlink: 'syz.0.1563': attribute type 13 has an invalid length. [ 98.292856][ T7704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.372586][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 98.862759][ T7748] FAULT_INJECTION: forcing a failure. [ 98.862759][ T7748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.876007][ T7748] CPU: 1 UID: 0 PID: 7748 Comm: syz.6.1581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.876038][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.876053][ T7748] Call Trace: [ 98.876060][ T7748] [ 98.876123][ T7748] __dump_stack+0x1d/0x30 [ 98.876188][ T7748] dump_stack_lvl+0xe8/0x140 [ 98.876208][ T7748] dump_stack+0x15/0x1b [ 98.876228][ T7748] should_fail_ex+0x265/0x280 [ 98.876258][ T7748] should_fail+0xb/0x20 [ 98.876283][ T7748] should_fail_usercopy+0x1a/0x20 [ 98.876394][ T7748] _copy_from_user+0x1c/0xb0 [ 98.876432][ T7748] __sys_sendto+0x19e/0x330 [ 98.876469][ T7748] __x64_sys_sendto+0x76/0x90 [ 98.876543][ T7748] x64_sys_call+0x2d05/0x2ff0 [ 98.876639][ T7748] do_syscall_64+0xd2/0x200 [ 98.876750][ T7748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.876782][ T7748] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.876837][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.876859][ T7748] RIP: 0033:0x7fed456febe9 [ 98.876874][ T7748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.876899][ T7748] RSP: 002b:00007fed44167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 98.876918][ T7748] RAX: ffffffffffffffda RBX: 00007fed45935fa0 RCX: 00007fed456febe9 [ 98.876931][ T7748] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000003 [ 98.876943][ T7748] RBP: 00007fed44167090 R08: 0000200000000140 R09: 0000000000000014 [ 98.876956][ T7748] R10: f6ea48ea4f2fa0d1 R11: 0000000000000246 R12: 0000000000000001 [ 98.876968][ T7748] R13: 00007fed45936038 R14: 00007fed45935fa0 R15: 00007ffdcb016718 [ 98.876988][ T7748] [ 99.177580][ T7771] block device autoloading is deprecated and will be removed. [ 99.222824][ T7771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7771 comm=syz.5.1590 [ 99.241692][ T7771] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 99.601685][ T7827] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 99.601685][ T7827] program syz.4.1617 not setting count and/or reply_len properly [ 99.644890][ T7833] usb usb1: usbfs: process 7833 (syz.3.1620) did not claim interface 0 before use [ 99.752663][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 99.761820][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 99.955537][ T7863] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 99.955537][ T7863] program syz.3.1633 not setting count and/or reply_len properly [ 100.089082][ T7874] validate_nla: 1 callbacks suppressed [ 100.089100][ T7874] netlink: 'syz.3.1635': attribute type 13 has an invalid length. [ 100.102530][ T7874] netlink: 'syz.3.1635': attribute type 17 has an invalid length. [ 100.152885][ T7874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.230772][ T7882] program syz.5.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.565101][ T7894] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 100.565101][ T7894] program syz.3.1645 not setting count and/or reply_len properly [ 100.656211][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 100.696936][ T7907] 9pnet_fd: Insufficient options for proto=fd [ 100.746552][ T7914] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.906916][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 100.934572][ T29] kauditd_printk_skb: 947 callbacks suppressed [ 100.934590][ T29] audit: type=1326 audit(100.919:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 100.975471][ T29] audit: type=1326 audit(100.949:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 100.998418][ T29] audit: type=1326 audit(100.949:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.032178][ T29] audit: type=1326 audit(101.009:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.035125][ T7937] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1656' sets config #1 [ 101.055203][ T29] audit: type=1326 audit(101.009:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.086976][ T29] audit: type=1326 audit(101.009:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.109799][ T29] audit: type=1326 audit(101.009:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.132634][ T29] audit: type=1326 audit(101.009:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.155485][ T29] audit: type=1326 audit(101.009:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fef41baebe9 code=0x7ffc0000 [ 101.178332][ T29] audit: type=1326 audit(101.009:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.3.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fef41baec23 code=0x7ffc0000 crond[3097]: time disparity of -29288094 minutes detected [ 101.365070][ T7955] FAULT_INJECTION: forcing a failure. [ 101.365070][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 101.377886][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz.3.1670 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.377923][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.377939][ T7955] Call Trace: [ 101.377947][ T7955] [ 101.377955][ T7955] __dump_stack+0x1d/0x30 [ 101.377977][ T7955] dump_stack_lvl+0xe8/0x140 [ 101.377997][ T7955] dump_stack+0x15/0x1b [ 101.378016][ T7955] should_fail_ex+0x265/0x280 [ 101.378040][ T7955] should_failslab+0x8c/0xb0 [ 101.378065][ T7955] kmem_cache_alloc_noprof+0x50/0x310 [ 101.378093][ T7955] ? mas_alloc_nodes+0x265/0x520 [ 101.378128][ T7955] mas_alloc_nodes+0x265/0x520 [ 101.378162][ T7955] mas_preallocate+0x33e/0x520 [ 101.378197][ T7955] mmap_region+0xbdd/0x1630 [ 101.378245][ T7955] do_mmap+0x9b3/0xbe0 [ 101.378281][ T7955] vm_mmap_pgoff+0x17a/0x2e0 [ 101.378314][ T7955] ksys_mmap_pgoff+0xc2/0x310 [ 101.378331][ T7955] ? __x64_sys_mmap+0x49/0x70 [ 101.378361][ T7955] x64_sys_call+0x14a3/0x2ff0 [ 101.378382][ T7955] do_syscall_64+0xd2/0x200 [ 101.378414][ T7955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.378439][ T7955] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.378469][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.378490][ T7955] RIP: 0033:0x7fef41baec23 [ 101.378505][ T7955] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 101.378523][ T7955] RSP: 002b:00007fef4060ed68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.378543][ T7955] RAX: ffffffffffffffda RBX: 00000000000005c1 RCX: 00007fef41baec23 [ 101.378555][ T7955] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 101.378568][ T7955] RBP: 00002000000005c2 R08: 00000000ffffffff R09: 0000000000000000 [ 101.378580][ T7955] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 101.378592][ T7955] R13: 00007fef4060edec R14: 00007fef4060edf0 R15: 00007ffd9617f6b8 [ 101.378612][ T7955] [ 101.631391][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 101.643447][ T7968] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.694702][ T7971] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 101.968874][ T8019] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1695'. [ 101.979224][ T8019] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1695'. [ 102.717742][ T8112] can0: slcan on ttyS3. [ 102.796575][ T8115] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1731'. [ 102.918282][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1739'. [ 102.927446][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1739'. [ 102.936514][ T8128] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1739'. [ 103.021579][ T8137] netlink: 'syz.0.1744': attribute type 13 has an invalid length. [ 103.029517][ T8137] netlink: 'syz.0.1744': attribute type 17 has an invalid length. [ 103.043496][ T8137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.136604][ T8141] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.594472][ T8114] can0 (unregistered): slcan off ttyS3. [ 103.782050][ T8161] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.873096][ T8165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.130958][ T8173] netlink: 'syz.3.1760': attribute type 13 has an invalid length. [ 104.138907][ T8173] netlink: 'syz.3.1760': attribute type 17 has an invalid length. [ 104.236799][ T8173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.301925][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 104.443643][ T8193] netlink: 'syz.0.1766': attribute type 13 has an invalid length. [ 104.451629][ T8193] netlink: 'syz.0.1766': attribute type 17 has an invalid length. [ 104.505023][ T8193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.896784][ T8195] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.282968][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1777'. [ 105.331103][ T8214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.550911][ T8227] netlink: 'syz.4.1782': attribute type 13 has an invalid length. [ 105.558963][ T8227] netlink: 'syz.4.1782': attribute type 17 has an invalid length. [ 105.582196][ T8227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.952734][ T29] kauditd_printk_skb: 6895 callbacks suppressed [ 105.952764][ T29] audit: type=1326 audit(105.929:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.024024][ T29] audit: type=1326 audit(105.939:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.047197][ T29] audit: type=1326 audit(105.939:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.070131][ T29] audit: type=1326 audit(105.939:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.093146][ T29] audit: type=1326 audit(105.939:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24545d550 code=0x7ffc0000 [ 106.116066][ T29] audit: type=1326 audit(105.939:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.138986][ T29] audit: type=1326 audit(105.939:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.161877][ T29] audit: type=1326 audit(105.939:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.184815][ T29] audit: type=1326 audit(105.939:11123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.207778][ T29] audit: type=1326 audit(105.939:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24545ebe9 code=0x7ffc0000 [ 106.454485][ T8270] netlink: 'syz.0.1797': attribute type 13 has an invalid length. [ 106.462445][ T8270] netlink: 'syz.0.1797': attribute type 17 has an invalid length. [ 106.515601][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1803'. [ 106.545828][ T8270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.830524][ T8299] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.012926][ T8321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.128448][ T8333] 9pnet: Could not find request transport: fd [ 107.203240][ T8348] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 107.259317][ T8350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.279274][ T8352] netlink: 'syz.6.1836': attribute type 13 has an invalid length. [ 107.287334][ T8352] netlink: 'syz.6.1836': attribute type 17 has an invalid length. [ 107.308989][ T8348] team0: Device dummy0 is already a lower device of the team interface [ 107.364461][ T8352] 0{X功: left allmulticast mode [ 107.408120][ T8352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.535379][ T8374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.587218][ T8381] can0: slcan on ttyS3. [ 107.623159][ T8383] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 107.644261][ T8381] can0 (unregistered): slcan off ttyS3. [ 107.721653][ T8396] FAULT_INJECTION: forcing a failure. [ 107.721653][ T8396] name failslab, interval 1, probability 0, space 0, times 0 [ 107.734432][ T8396] CPU: 0 UID: 0 PID: 8396 Comm: syz.4.1854 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.734465][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.734480][ T8396] Call Trace: [ 107.734488][ T8396] [ 107.734498][ T8396] __dump_stack+0x1d/0x30 [ 107.734568][ T8396] dump_stack_lvl+0xe8/0x140 [ 107.734587][ T8396] dump_stack+0x15/0x1b [ 107.734606][ T8396] should_fail_ex+0x265/0x280 [ 107.734628][ T8396] ? hash_netportnet_create+0x21a/0x730 [ 107.734787][ T8396] should_failslab+0x8c/0xb0 [ 107.734816][ T8396] __kmalloc_cache_noprof+0x4c/0x320 [ 107.734854][ T8396] hash_netportnet_create+0x21a/0x730 [ 107.734886][ T8396] ? __pfx_hash_netportnet_create+0x10/0x10 [ 107.734989][ T8396] ip_set_create+0x3c9/0x960 [ 107.735026][ T8396] ? __nla_parse+0x40/0x60 [ 107.735110][ T8396] nfnetlink_rcv_msg+0x4c3/0x590 [ 107.735153][ T8396] netlink_rcv_skb+0x123/0x220 [ 107.735180][ T8396] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 107.735208][ T8396] nfnetlink_rcv+0x16b/0x1690 [ 107.735245][ T8396] ? nlmon_xmit+0x4f/0x60 [ 107.735279][ T8396] ? consume_skb+0x49/0x150 [ 107.735358][ T8396] ? nlmon_xmit+0x4f/0x60 [ 107.735386][ T8396] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 107.735413][ T8396] ? __dev_queue_xmit+0x1200/0x2000 [ 107.735503][ T8396] ? __dev_queue_xmit+0x182/0x2000 [ 107.735535][ T8396] ? ref_tracker_free+0x37d/0x3e0 [ 107.735609][ T8396] ? __netlink_deliver_tap+0x4dc/0x500 [ 107.735642][ T8396] netlink_unicast+0x5bd/0x690 [ 107.735671][ T8396] netlink_sendmsg+0x58b/0x6b0 [ 107.735716][ T8396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.735740][ T8396] __sock_sendmsg+0x142/0x180 [ 107.735846][ T8396] ____sys_sendmsg+0x31e/0x4e0 [ 107.735880][ T8396] ___sys_sendmsg+0x17b/0x1d0 [ 107.735919][ T8396] __x64_sys_sendmsg+0xd4/0x160 [ 107.736011][ T8396] x64_sys_call+0x191e/0x2ff0 [ 107.736033][ T8396] do_syscall_64+0xd2/0x200 [ 107.736067][ T8396] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.736165][ T8396] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.736270][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.736291][ T8396] RIP: 0033:0x7fa82eafebe9 [ 107.736305][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.736391][ T8396] RSP: 002b:00007fa82d546038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.736454][ T8396] RAX: ffffffffffffffda RBX: 00007fa82ed36090 RCX: 00007fa82eafebe9 [ 107.736468][ T8396] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 107.736482][ T8396] RBP: 00007fa82d546090 R08: 0000000000000000 R09: 0000000000000000 [ 107.736497][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.736511][ T8396] R13: 00007fa82ed36128 R14: 00007fa82ed36090 R15: 00007ffdee95e4f8 [ 107.736534][ T8396] [ 108.154638][ T8411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.300013][ T8429] netlink: 'syz.6.1873': attribute type 13 has an invalid length. [ 108.308094][ T8429] netlink: 'syz.6.1873': attribute type 17 has an invalid length. [ 108.340830][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 108.396260][ T8429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.594263][ T8452] ================================================================== [ 108.602398][ T8452] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 108.610673][ T8452] [ 108.613003][ T8452] write to 0xffff88811a0a94dc of 4 bytes by task 28 on cpu 1: [ 108.620463][ T8452] rcu_tasks_trace_pregp_step+0x1ac/0x920 [ 108.626202][ T8452] rcu_tasks_wait_gp+0x8b/0x530 [ 108.631067][ T8452] rcu_tasks_one_gp+0x7f3/0x8e0 [ 108.635931][ T8452] rcu_tasks_kthread+0xf7/0x110 [ 108.640793][ T8452] kthread+0x489/0x510 [ 108.644872][ T8452] ret_from_fork+0xda/0x150 [ 108.649388][ T8452] ret_from_fork_asm+0x1a/0x30 [ 108.654162][ T8452] [ 108.656488][ T8452] read to 0xffff88811a0a9080 of 3264 bytes by task 8452 on cpu 0: [ 108.664323][ T8452] memcpy_and_pad+0x48/0x80 [ 108.668879][ T8452] arch_dup_task_struct+0x2c/0x40 [ 108.673962][ T8452] dup_task_struct+0x83/0x6a0 [ 108.678665][ T8452] copy_process+0x399/0x2000 [ 108.683293][ T8452] kernel_clone+0x16c/0x5c0 [ 108.687814][ T8452] __se_sys_clone3+0x1c2/0x200 [ 108.692592][ T8452] __x64_sys_clone3+0x31/0x40 [ 108.697284][ T8452] x64_sys_call+0x1fc9/0x2ff0 [ 108.701972][ T8452] do_syscall_64+0xd2/0x200 [ 108.706497][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.712399][ T8452] [ 108.714725][ T8452] Reported by Kernel Concurrency Sanitizer on: [ 108.721010][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.4.1884 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.730750][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.740844][ T8452] ==================================================================