last executing test programs: 4.518732231s ago: executing program 3 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) 4.118064938s ago: executing program 1 (id=1261): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.079727939s ago: executing program 1 (id=1263): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120907080000002abd7000eddbdf25030007"], 0x40}}, 0x4004004) 4.06530325s ago: executing program 1 (id=1265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 4.02952707s ago: executing program 1 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) 3.938023132s ago: executing program 1 (id=1267): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000016c0)="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", 0xfed}, {0x0}], 0x2, 0x0, 0x0, 0x2800}, 0x20000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000d300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.673497127s ago: executing program 1 (id=1269): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x4000000) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc) socket$netlink(0x10, 0x3, 0x10) r6 = getpid() socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.560836459s ago: executing program 4 (id=1289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000040)={0x1}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x24101, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x22, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0001000203030000000000000000000000000008000100010000e25a527969d055e1b2027cbd149a2f9163073cce06d29b9584f244e1734e8f1655bb694cad9835e52a59e487d8510afda3284b37aedf761a00b8da9e4fe21749"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) recvfrom(r3, &(0x7f00000004c0)=""/70, 0x46, 0x40000000, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @remote}, 0x3, 0x2, 0x0, 0x4}}, 0x80) sendfile(r2, r0, &(0x7f0000000180)=0xffffffffffff7774, 0x9) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x818018, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 1.716307736s ago: executing program 4 (id=1292): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x8, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000d506442df183b9fc5cc62d191faef1065869089ca13629ef54f5c1c9b884aa235e023410b871746a5bb2a9ba9dd832bb6f2502c6b738f5653828459893ef42fe6279778e44be64cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x73, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000700)='svcrdma_send_pullup\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x3, 0x0, 0x0, 0x7, 0x44420, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x98d4}, 0x214000, 0xfffc, 0xfffffffe, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e200000000000000010000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ab0e9dcd2db821e200"/376], 0x178) r6 = socket(0x1, 0x1, 0x8) listen(r6, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0xc040400) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10) syz_io_uring_setup(0x10d6, &(0x7f0000000500)={0x0, 0xeaed, 0x8000, 0x1, 0x34f, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340)) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc113c82600befcdd, {{}, 0x4}}, 0x10) close(r0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000000)=0x0) ptrace(0x4208, r9) r10 = socket$inet6(0xa, 0x5, 0x7ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @broadcast}], 0x10) 1.685514886s ago: executing program 4 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) 1.630137797s ago: executing program 4 (id=1296): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) read(r3, &(0x7f0000000680)=""/221, 0xdd) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) 1.467400421s ago: executing program 3 (id=1302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800851979000f00000085a100002300000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfffffffffffffe17, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000004c0)={[{@dots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@discard}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0)) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000c8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) munlockall() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1.266946955s ago: executing program 3 (id=1305): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x1000000, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xba2, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x0, 0x80}, {}, {}, {}, {0xffffffff, 0x80000, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, {0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff, 0xfffffffe}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0xfffffffc, 0x0, 0x403, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0xfffffffe, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, {}, {0x1, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0xfff}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x1}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x6fdf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fff, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x4}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {0x3}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910680000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.244770945s ago: executing program 3 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000"], 0x48) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x314e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 1.243985705s ago: executing program 3 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@phonet={0x23, 0x4, 0x10, 0x8}, 0x35, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') fcntl$setlease(r5, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='iocost_iocg_forgive_debt\x00', r7, 0x0, 0x2}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x3) cachestat(r8, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) bind$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.057518039s ago: executing program 0 (id=1317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) sysinfo(&(0x7f0000000040)=""/42) 1.046461659s ago: executing program 0 (id=1318): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[]) 1.045920029s ago: executing program 2 (id=1319): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) open_tree(0xffffffffffffff9c, 0x0, 0x89001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001000)='tlb_flush\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[], 0x3c}}, 0x0) 982.96877ms ago: executing program 2 (id=1320): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x10}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x5}}, {@delalloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x68}, 0x1, 0x7}, 0x0) 982.16021ms ago: executing program 0 (id=1321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000059f5c18e74b777345ec3ade9372c0336249203f0fcd331c5c091480cfd936b375c9d4e1a9af725d155b03b5fa067ca56557b03060b9f6a9f86632a8f3965a667792617aac84e4b77d7b2a913a47f0e781cca7056e0c5f1edb54fbb1ad4e9fb65d5075984e96b93d7590c5fdfffc8c8efb9717a266c194a4ab4ce22f31a27b4575997336d8473e596a9ea8ed9174d46e65881af319678d887322c59f9db21943ac8f2d4240022b82265de03c008aa103b56f6c6803db2070531406bb28c5c650da282ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@remote}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, &(0x7f0000000440)={0x0, 0x23, 0x1, @thr={&(0x7f0000000340)="b617f5b75a6fe9686f1bf7fc357ea4a6929ca072a4f8f45dafa1c1604c4fb59feb5f708081bdb745c03bb6a32f41bae56f86d271fb2584198f784daafa88e2f5be37b8c3c7705590542c101d000653d7f9cf9891006c5fffc7a45391671861828039f7dc2cef07b69c1014fdd97ba6e94fa40ed9307f37ac0922a2b6f4474448ab7207333443c31833c3c40b72967c", &(0x7f0000000400)="ccf74f389ce9d2c9ce86704dc7143aa5814fae0a0ec90094dc228b50ce455b63cbff7faf7545a140f3ddd801073e84ef933491a83965eb558efdf35cc634a27d"}}, &(0x7f00000004c0)=0x0) timer_delete(r2) (async) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000005c0)=@hopopts={0x88}, 0x8) (async) connect$inet6(r3, &(0x7f0000000640)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r5, r4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) (async) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x4690}], 0x1, 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r8 = getpid() migrate_pages(r8, 0x0, &(0x7f0000000500)=0x5, &(0x7f0000000600)=0x4) (async) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) (async) listen(r7, 0x0) (async) ioctl$int_in(r7, 0x5421, &(0x7f0000000540)=0x8) accept4$unix(r7, 0x0, 0x0, 0x0) 906.151172ms ago: executing program 0 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xcd78, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) sendmsg$nl_route(r2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) 905.764692ms ago: executing program 2 (id=1323): set_mempolicy(0x8006, 0x0, 0x4005) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x8004) 737.646415ms ago: executing program 4 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4c000) 737.264165ms ago: executing program 4 (id=1325): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) (fail_nth: 2) 5.36534ms ago: executing program 3 (id=1326): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0xfe, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) unshare(0x22020600) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000008035eb0000000001000000940000930600003e4f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a9f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x4000004) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000a00"], 0x138}}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x102a28, 0x1, 0x5, 0x1, 0xa, 0xfffd, 0x9, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x400}, 0x100b28, 0x6, 0x3, 0xa, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f3}, 0x50) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x8001, 0x3}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xff10, 0x8000c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000001000000000000160f17ea2737c2d9000000000000003ecdc143632351087bfa570df28be109", @ANYRES8=r4, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x2}, 0x94) 0s ago: executing program 2 (id=1327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) semop(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x1}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000800)='sched_kthread_stop\x00', r1}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x78) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x10, 0x8, 0x0, 0x7, {{0x3d, 0x4, 0x2, 0x1, 0xf4, 0x64, 0x0, 0x39, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1f, 0x2, [{0x6, 0x12, "efeee6808c4e599fb0f7e23c5f2e7369"}, {0x1, 0x7, "026e1743fb"}]}, @lsrr={0x83, 0xb, 0xbd, [@remote, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x29, 0x2, [{0x2, 0xb, "89ba7eb72a2629a8cf"}, {0x0, 0xa, "3f38805cb3372a62"}, {0x0, 0x8, "203284f72b97"}, {0x7, 0x6, "144dff52"}]}, @timestamp_prespec={0x44, 0x1c, 0xe6, 0x3, 0x0, [{@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @cipso={0x86, 0x58, 0x3, [{0x2, 0xe, "eebcb1d4cb0e32cf68491d07"}, {0x6, 0x10, "17130441d99dc9b588de8710bceb"}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0xf, "c4ab3221185891682b97334c55"}, {0x2, 0x4, "130f"}, {0x0, 0xa, "32cf1631906076d3"}, {0x6, 0x11, "a1747b6d1f9bd7bf7f416f58a79458"}]}, @timestamp={0x44, 0x18, 0xe8, 0x0, 0x5, [0x4347, 0x4, 0x1, 0x8, 0x9]}]}}}}}) kernel console output (not intermixed with test programs): xa0 [ 69.582302][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.582422][ T5636] RIP: 0033:0x7f795f42d8dc [ 69.582437][ T5636] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.582451][ T5636] RSP: 002b:00007f795de97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.582474][ T5636] RAX: ffffffffffffffda RBX: 00007f795f685fa0 RCX: 00007f795f42d8dc [ 69.582484][ T5636] RDX: 000000000000000f RSI: 00007f795de970a0 RDI: 0000000000000006 [ 69.582495][ T5636] RBP: 00007f795de97090 R08: 0000000000000000 R09: 0000000000000000 [ 69.582508][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.582521][ T5636] R13: 00007f795f686038 R14: 00007f795f685fa0 R15: 00007fff602c37a8 [ 69.582592][ T5636] [ 70.042226][ T5648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.752'. [ 70.052677][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 70.180307][ T5661] netlink: zone id is out of range [ 70.337752][ T5680] netlink: 'syz.4.766': attribute type 27 has an invalid length. [ 70.366936][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.374214][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.393324][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 70.433043][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.444944][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.474571][ T5680] 0·: left allmulticast mode [ 70.479364][ T5680] hsr_slave_0: left allmulticast mode [ 70.484774][ T5680] hsr_slave_1: left allmulticast mode [ 70.513411][ T3926] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.522035][ T3926] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.531154][ T3926] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.539685][ T3926] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.660934][ T5702] FAULT_INJECTION: forcing a failure. [ 70.660934][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 70.673666][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: syz.4.775 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.673693][ T5702] Tainted: [W]=WARN [ 70.673746][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.673780][ T5702] Call Trace: [ 70.673786][ T5702] [ 70.673793][ T5702] __dump_stack+0x1d/0x30 [ 70.673814][ T5702] dump_stack_lvl+0xe8/0x140 [ 70.673834][ T5702] dump_stack+0x15/0x1b [ 70.673849][ T5702] should_fail_ex+0x265/0x280 [ 70.673870][ T5702] should_failslab+0x8c/0xb0 [ 70.673960][ T5702] kmem_cache_alloc_noprof+0x50/0x310 [ 70.673976][ T5702] ? audit_log_start+0x365/0x6c0 [ 70.674061][ T5702] ? 0xffffffffa0201868 [ 70.674070][ T5702] audit_log_start+0x365/0x6c0 [ 70.674098][ T5702] ? strncpy_from_user+0x1f4/0x230 [ 70.674153][ T5702] audit_seccomp+0x48/0x100 [ 70.674192][ T5702] ? __seccomp_filter+0x68c/0x10d0 [ 70.674204][ T5702] __seccomp_filter+0x69d/0x10d0 [ 70.674281][ T5702] ? _raw_spin_unlock+0x26/0x50 [ 70.674296][ T5702] __secure_computing+0x82/0x150 [ 70.674366][ T5702] syscall_trace_enter+0xcf/0x1e0 [ 70.674381][ T5702] do_syscall_64+0xac/0x200 [ 70.674398][ T5702] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.674438][ T5702] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.674454][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.674465][ T5702] RIP: 0033:0x7f15fc92d8dc [ 70.674474][ T5702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.674484][ T5702] RSP: 002b:00007f15fb38f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.674568][ T5702] RAX: ffffffffffffffda RBX: 00007f15fcb85fa0 RCX: 00007f15fc92d8dc [ 70.674581][ T5702] RDX: 000000000000000f RSI: 00007f15fb38f0a0 RDI: 0000000000000006 [ 70.674590][ T5702] RBP: 00007f15fb38f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.674660][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.674672][ T5702] R13: 00007f15fcb86038 R14: 00007f15fcb85fa0 R15: 00007fff24f9ca58 [ 70.674691][ T5702] [ 70.938067][ T5706] loop2: detected capacity change from 0 to 128 [ 70.944902][ T5706] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.957199][ T5706] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.996643][ T5708] loop2: detected capacity change from 0 to 1024 [ 71.005794][ T5708] ext4: Bad value for 'init_itable' [ 71.013145][ T5710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5710 comm=syz.4.779 [ 71.030720][ T5708] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 71.084534][ T5447] hid_parser_main: 9 callbacks suppressed [ 71.084551][ T5447] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.098112][ T5447] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.128661][ T5717] fido_id[5717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.176936][ T5723] loop2: detected capacity change from 0 to 512 [ 71.178641][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 71.210255][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.785: corrupted inode contents [ 71.222204][ T5723] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.785: mark_inode_dirty error [ 71.234558][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.785: corrupted inode contents [ 71.246679][ T5723] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.785: mark_inode_dirty error [ 71.258507][ T5723] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.785: Failed to acquire dquot type 0 [ 71.270245][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.785: corrupted inode contents [ 71.282282][ T5723] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.785: mark_inode_dirty error [ 71.293788][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.785: corrupted inode contents [ 71.305744][ T5723] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.785: mark_inode_dirty error [ 71.317509][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.785: corrupted inode contents [ 71.329587][ T5723] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 71.338679][ T5723] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.785: corrupted inode contents [ 71.350700][ T5723] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.785: mark_inode_dirty error [ 71.361928][ T5723] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 71.371358][ T5723] EXT4-fs (loop2): 1 truncate cleaned up [ 71.377378][ T5723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.390156][ T5723] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.401606][ T5723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.564004][ T5447] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 71.568711][ T5733] FAULT_INJECTION: forcing a failure. [ 71.568711][ T5733] name failslab, interval 1, probability 0, space 0, times 0 [ 71.572053][ T5447] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.584035][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.2.787 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.584067][ T5733] Tainted: [W]=WARN [ 71.584073][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.584084][ T5733] Call Trace: [ 71.584091][ T5733] [ 71.584098][ T5733] __dump_stack+0x1d/0x30 [ 71.584119][ T5733] dump_stack_lvl+0xe8/0x140 [ 71.584167][ T5733] dump_stack+0x15/0x1b [ 71.584183][ T5733] should_fail_ex+0x265/0x280 [ 71.584207][ T5733] should_failslab+0x8c/0xb0 [ 71.584231][ T5733] kmem_cache_alloc_noprof+0x50/0x310 [ 71.584325][ T5733] ? audit_log_start+0x365/0x6c0 [ 71.584427][ T5733] audit_log_start+0x365/0x6c0 [ 71.584457][ T5733] audit_seccomp+0x48/0x100 [ 71.584528][ T5733] ? __seccomp_filter+0x68c/0x10d0 [ 71.584587][ T5733] __seccomp_filter+0x69d/0x10d0 [ 71.584609][ T5733] ? __list_add_valid_or_report+0x38/0xe0 [ 71.584683][ T5733] ? _raw_spin_unlock+0x26/0x50 [ 71.584708][ T5733] __secure_computing+0x82/0x150 [ 71.584728][ T5733] syscall_trace_enter+0xcf/0x1e0 [ 71.584786][ T5733] do_syscall_64+0xac/0x200 [ 71.584814][ T5733] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.584837][ T5733] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.584865][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.584925][ T5733] RIP: 0033:0x7f795f42d8dc [ 71.584939][ T5733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.584956][ T5733] RSP: 002b:00007f795de97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.584975][ T5733] RAX: ffffffffffffffda RBX: 00007f795f685fa0 RCX: 00007f795f42d8dc [ 71.585065][ T5733] RDX: 000000000000000f RSI: 00007f795de970a0 RDI: 0000000000000008 [ 71.585077][ T5733] RBP: 00007f795de97090 R08: 0000000000000000 R09: 0000000000000000 [ 71.585156][ T5733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.585168][ T5733] R13: 00007f795f686038 R14: 00007f795f685fa0 R15: 00007fff602c37a8 [ 71.585187][ T5733] [ 71.809983][ T5736] net_ratelimit: 5 callbacks suppressed [ 71.809995][ T5736] netlink: zone id is out of range [ 71.831043][ T5738] FAULT_INJECTION: forcing a failure. [ 71.831043][ T5738] name failslab, interval 1, probability 0, space 0, times 0 [ 71.843794][ T5738] CPU: 0 UID: 0 PID: 5738 Comm: syz.0.789 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.843820][ T5738] Tainted: [W]=WARN [ 71.843938][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.843949][ T5738] Call Trace: [ 71.843954][ T5738] [ 71.843962][ T5738] __dump_stack+0x1d/0x30 [ 71.843989][ T5738] dump_stack_lvl+0xe8/0x140 [ 71.844062][ T5738] dump_stack+0x15/0x1b [ 71.844078][ T5738] should_fail_ex+0x265/0x280 [ 71.844102][ T5738] should_failslab+0x8c/0xb0 [ 71.844173][ T5738] __kmalloc_noprof+0xa5/0x3e0 [ 71.844199][ T5738] ? security_sk_alloc+0x52/0x120 [ 71.844308][ T5738] security_sk_alloc+0x52/0x120 [ 71.844336][ T5738] sk_prot_alloc+0xc2/0x190 [ 71.844438][ T5738] sk_alloc+0x34/0x360 [ 71.844457][ T5738] unix_create1+0xa5/0x430 [ 71.844522][ T5738] ? inode_init_always_gfp+0x4cd/0x500 [ 71.844546][ T5738] unix_create+0x11f/0x150 [ 71.844565][ T5738] __sock_create+0x2e9/0x5b0 [ 71.844612][ T5738] __sys_socketpair+0x1bc/0x430 [ 71.844634][ T5738] __x64_sys_socketpair+0x52/0x60 [ 71.844654][ T5738] x64_sys_call+0x2bf2/0x2ff0 [ 71.844748][ T5738] do_syscall_64+0xd2/0x200 [ 71.844849][ T5738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.844873][ T5738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.844906][ T5738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.844929][ T5738] RIP: 0033:0x7f216a0ceec9 [ 71.844944][ T5738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.844960][ T5738] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 71.844986][ T5738] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 71.844997][ T5738] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 71.845074][ T5738] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.845084][ T5738] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 71.845094][ T5738] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 71.845110][ T5738] [ 72.214572][ T3894] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.226327][ T3894] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.240145][ T3952] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.258528][ T3952] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.287036][ T5772] netlink: zone id is out of range [ 72.292433][ T5772] netlink: zone id is out of range [ 72.316262][ T5776] netlink: 9 bytes leftover after parsing attributes in process `syz.0.803'. [ 72.326546][ T5776] 1·: renamed from 70· [ 72.332690][ T5776] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.342961][ T5776] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.353865][ T5776] 1·: entered allmulticast mode [ 72.358770][ T5776] hsr_slave_0: entered allmulticast mode [ 72.364488][ T5776] hsr_slave_1: entered allmulticast mode [ 72.370993][ T5776] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 72.519097][ T5784] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 72.773832][ T5797] netlink: 'syz.1.812': attribute type 30 has an invalid length. [ 73.103789][ T5807] loop2: detected capacity change from 0 to 1024 [ 73.112953][ T5807] EXT4-fs: Ignoring removed orlov option [ 73.118690][ T5807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.182285][ T5807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.265930][ T3952] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.322274][ T3952] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.342760][ T3952] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.351284][ T3952] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.383094][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.428789][ T5820] batadv_slave_1: entered promiscuous mode [ 73.436959][ T5820] batadv_slave_1: left promiscuous mode [ 73.447793][ T5822] netlink: 'syz.2.821': attribute type 11 has an invalid length. [ 73.528082][ T5828] SELinux: policydb version -299076691 does not match my version range 15-35 [ 73.537166][ T5828] SELinux: failed to load policy [ 73.679915][ T5838] netlink: 'syz.3.829': attribute type 30 has an invalid length. [ 73.734143][ T5844] netlink: 'syz.1.830': attribute type 30 has an invalid length. [ 73.828664][ T5851] netlink: 'syz.1.833': attribute type 11 has an invalid length. [ 73.965253][ T5861] wg1 speed is unknown, defaulting to 1000 [ 73.971562][ T5861] wg1 speed is unknown, defaulting to 1000 [ 73.977935][ T5861] wg1 speed is unknown, defaulting to 1000 [ 73.984147][ T5861] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.992265][ T5861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 74.003274][ T5861] wg1 speed is unknown, defaulting to 1000 [ 74.013150][ T5861] wg1 speed is unknown, defaulting to 1000 [ 74.019659][ T5861] wg1 speed is unknown, defaulting to 1000 [ 74.030330][ T5861] wg1 speed is unknown, defaulting to 1000 [ 74.037949][ T5863] loop3: detected capacity change from 0 to 1024 [ 74.044690][ T5861] wg1 speed is unknown, defaulting to 1000 [ 74.070016][ T5863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.131120][ T5868] FAULT_INJECTION: forcing a failure. [ 74.131120][ T5868] name failslab, interval 1, probability 0, space 0, times 0 [ 74.143788][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.1.839 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.143888][ T5868] Tainted: [W]=WARN [ 74.143895][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.143907][ T5868] Call Trace: [ 74.143914][ T5868] [ 74.143922][ T5868] __dump_stack+0x1d/0x30 [ 74.143944][ T5868] dump_stack_lvl+0xe8/0x140 [ 74.143960][ T5868] dump_stack+0x15/0x1b [ 74.144013][ T5868] should_fail_ex+0x265/0x280 [ 74.144102][ T5868] ? ip_mc_add_src+0x2e4/0x5f0 [ 74.144179][ T5868] should_failslab+0x8c/0xb0 [ 74.144278][ T5868] __kmalloc_cache_noprof+0x4c/0x320 [ 74.144307][ T5868] ip_mc_add_src+0x2e4/0x5f0 [ 74.144353][ T5868] ip_mc_msfilter+0x3f1/0x5c0 [ 74.144379][ T5868] ? __kmalloc_noprof+0x364/0x3e0 [ 74.144401][ T5868] ? set_mcast_msfilter+0x3c/0x180 [ 74.144467][ T5868] set_mcast_msfilter+0x15d/0x180 [ 74.144490][ T5868] ip_set_mcast_msfilter+0x241/0x2a0 [ 74.144514][ T5868] do_ip_setsockopt+0x16ca/0x2240 [ 74.144595][ T5868] ip_setsockopt+0x58/0x110 [ 74.144616][ T5868] udp_setsockopt+0x99/0xb0 [ 74.144636][ T5868] sock_common_setsockopt+0x69/0x80 [ 74.144669][ T5868] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.144755][ T5868] __sys_setsockopt+0x181/0x200 [ 74.144782][ T5868] __x64_sys_setsockopt+0x64/0x80 [ 74.144805][ T5868] x64_sys_call+0x20ec/0x2ff0 [ 74.144823][ T5868] do_syscall_64+0xd2/0x200 [ 74.144901][ T5868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.144925][ T5868] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.144955][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.144993][ T5868] RIP: 0033:0x7f8295e1eec9 [ 74.145007][ T5868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.145021][ T5868] RSP: 002b:00007f8294887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.145040][ T5868] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 74.145070][ T5868] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004 [ 74.145145][ T5868] RBP: 00007f8294887090 R08: 0000000000000110 R09: 0000000000000000 [ 74.145156][ T5868] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 74.145180][ T5868] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 74.145200][ T5868] [ 74.434017][ T5869] wg1 speed is unknown, defaulting to 1000 [ 74.561331][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 74.561344][ T29] audit: type=1326 audit(1758785456.361:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.605250][ T5875] loop2: detected capacity change from 0 to 512 [ 74.613168][ T5875] ext4: Unknown parameter 'euid>00000000000000000000' [ 74.649798][ T5878] FAULT_INJECTION: forcing a failure. [ 74.649798][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.663035][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz.1.843 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.663100][ T5878] Tainted: [W]=WARN [ 74.663107][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.663118][ T5878] Call Trace: [ 74.663126][ T5878] [ 74.663134][ T5878] __dump_stack+0x1d/0x30 [ 74.663157][ T5878] dump_stack_lvl+0xe8/0x140 [ 74.663255][ T5878] dump_stack+0x15/0x1b [ 74.663271][ T5878] should_fail_ex+0x265/0x280 [ 74.663296][ T5878] should_fail+0xb/0x20 [ 74.663316][ T5878] should_fail_usercopy+0x1a/0x20 [ 74.663340][ T5878] strncpy_from_user+0x25/0x230 [ 74.663415][ T5878] ? kmem_cache_alloc_noprof+0x186/0x310 [ 74.663441][ T5878] ? getname_flags+0x80/0x3b0 [ 74.663511][ T5878] getname_flags+0xae/0x3b0 [ 74.663650][ T5878] __se_sys_acct+0x3d/0x490 [ 74.663690][ T5878] __x64_sys_acct+0x1f/0x30 [ 74.663717][ T5878] x64_sys_call+0x2f2b/0x2ff0 [ 74.663740][ T5878] do_syscall_64+0xd2/0x200 [ 74.663841][ T5878] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.663872][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.663927][ T5878] RIP: 0033:0x7f8295e1eec9 [ 74.663944][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.663961][ T5878] RSP: 002b:00007f8294887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 74.663981][ T5878] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 74.663994][ T5878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001040 [ 74.664007][ T5878] RBP: 00007f8294887090 R08: 0000000000000000 R09: 0000000000000000 [ 74.664084][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.664097][ T5878] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 74.664117][ T5878] [ 74.665050][ T29] audit: type=1326 audit(1758785456.391:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.752266][ T29] audit: type=1326 audit(1758785456.391:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.752288][ T29] audit: type=1326 audit(1758785456.391:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.918419][ T29] audit: type=1326 audit(1758785456.391:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.941704][ T29] audit: type=1326 audit(1758785456.391:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.964990][ T29] audit: type=1326 audit(1758785456.391:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 74.988360][ T29] audit: type=1326 audit(1758785456.401:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 75.011660][ T29] audit: type=1326 audit(1758785456.401:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 75.034973][ T29] audit: type=1326 audit(1758785456.401:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 75.059679][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.072265][ T5888] netlink: zone id is out of range [ 75.077472][ T5888] netlink: zone id is out of range [ 75.166892][ T5903] FAULT_INJECTION: forcing a failure. [ 75.166892][ T5903] name failslab, interval 1, probability 0, space 0, times 0 [ 75.179650][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.2.853 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.179682][ T5903] Tainted: [W]=WARN [ 75.179689][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.179701][ T5903] Call Trace: [ 75.179707][ T5903] [ 75.179712][ T5903] __dump_stack+0x1d/0x30 [ 75.179734][ T5903] dump_stack_lvl+0xe8/0x140 [ 75.179754][ T5903] dump_stack+0x15/0x1b [ 75.179856][ T5903] should_fail_ex+0x265/0x280 [ 75.179893][ T5903] ? sctp_add_bind_addr+0x71/0x1e0 [ 75.179920][ T5903] should_failslab+0x8c/0xb0 [ 75.179981][ T5903] __kmalloc_cache_noprof+0x4c/0x320 [ 75.180157][ T5903] sctp_add_bind_addr+0x71/0x1e0 [ 75.180211][ T5903] sctp_copy_local_addr_list+0x199/0x220 [ 75.180361][ T5903] sctp_copy_one_addr+0x7f/0x280 [ 75.180398][ T5903] sctp_bind_addr_copy+0x79/0x290 [ 75.180423][ T5903] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 75.180450][ T5903] sctp_connect_new_asoc+0x1c3/0x3a0 [ 75.180567][ T5903] sctp_sendmsg+0xf10/0x18d0 [ 75.180589][ T5903] ? selinux_socket_sendmsg+0x91/0x1b0 [ 75.180653][ T5903] ? __pfx_sctp_sendmsg+0x10/0x10 [ 75.180674][ T5903] inet_sendmsg+0xc5/0xd0 [ 75.180698][ T5903] __sock_sendmsg+0x102/0x180 [ 75.180757][ T5903] __sys_sendto+0x268/0x330 [ 75.180783][ T5903] __x64_sys_sendto+0x76/0x90 [ 75.180807][ T5903] x64_sys_call+0x2d05/0x2ff0 [ 75.180829][ T5903] do_syscall_64+0xd2/0x200 [ 75.180964][ T5903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.180986][ T5903] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.181038][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.181055][ T5903] RIP: 0033:0x7f795f42eec9 [ 75.181126][ T5903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.181142][ T5903] RSP: 002b:00007f795de97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.181161][ T5903] RAX: ffffffffffffffda RBX: 00007f795f685fa0 RCX: 00007f795f42eec9 [ 75.181173][ T5903] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 75.181186][ T5903] RBP: 00007f795de97090 R08: 000020000005ffe4 R09: 000000000000001c [ 75.181198][ T5903] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 75.181282][ T5903] R13: 00007f795f686038 R14: 00007f795f685fa0 R15: 00007fff602c37a8 [ 75.181298][ T5903] [ 75.435232][ T5906] loop2: detected capacity change from 0 to 512 [ 75.442387][ T5908] FAULT_INJECTION: forcing a failure. [ 75.442387][ T5908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.455492][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: syz.0.855 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.455521][ T5908] Tainted: [W]=WARN [ 75.455527][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.455590][ T5908] Call Trace: [ 75.455596][ T5908] [ 75.455604][ T5908] __dump_stack+0x1d/0x30 [ 75.455625][ T5908] dump_stack_lvl+0xe8/0x140 [ 75.455644][ T5908] dump_stack+0x15/0x1b [ 75.455660][ T5908] should_fail_ex+0x265/0x280 [ 75.455752][ T5908] should_fail+0xb/0x20 [ 75.455782][ T5908] should_fail_usercopy+0x1a/0x20 [ 75.455836][ T5908] _copy_from_user+0x1c/0xb0 [ 75.455864][ T5908] ___sys_sendmsg+0xc1/0x1d0 [ 75.455986][ T5908] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 75.456025][ T5908] __sys_sendmmsg+0x178/0x300 [ 75.456108][ T5908] __x64_sys_sendmmsg+0x57/0x70 [ 75.456202][ T5908] x64_sys_call+0x1c4a/0x2ff0 [ 75.456223][ T5908] do_syscall_64+0xd2/0x200 [ 75.456252][ T5908] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.456272][ T5908] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.456331][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.456359][ T5908] RIP: 0033:0x7f216a0ceec9 [ 75.456372][ T5908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.456389][ T5908] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.456407][ T5908] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 75.456420][ T5908] RDX: 0000000000000272 RSI: 0000200000007fc0 RDI: 0000000000000003 [ 75.456432][ T5908] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.456443][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.456503][ T5908] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 75.456523][ T5908] [ 75.649537][ T5906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.669265][ T5912] program syz.3.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.682987][ T5906] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.729896][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 75.730453][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.739145][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 75.759992][ T5922] netlink: 34 bytes leftover after parsing attributes in process `syz.1.861'. [ 75.804248][ T5926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.863'. [ 75.819238][ T5929] binfmt_misc: register: failed to install interpreter file ./file2 [ 75.955111][ T5944] netlink: 9004 bytes leftover after parsing attributes in process `syz.3.871'. [ 75.977402][ T5948] FAULT_INJECTION: forcing a failure. [ 75.977402][ T5948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.990535][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.0.872 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.990571][ T5948] Tainted: [W]=WARN [ 75.990577][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.990589][ T5948] Call Trace: [ 75.990595][ T5948] [ 75.990602][ T5948] __dump_stack+0x1d/0x30 [ 75.990623][ T5948] dump_stack_lvl+0xe8/0x140 [ 75.990642][ T5948] dump_stack+0x15/0x1b [ 75.990658][ T5948] should_fail_ex+0x265/0x280 [ 75.990711][ T5948] should_fail+0xb/0x20 [ 75.990746][ T5948] should_fail_usercopy+0x1a/0x20 [ 75.990770][ T5948] _copy_from_user+0x1c/0xb0 [ 75.990837][ T5948] ___sys_sendmsg+0xc1/0x1d0 [ 75.990871][ T5948] __x64_sys_sendmsg+0xd4/0x160 [ 75.990896][ T5948] x64_sys_call+0x191e/0x2ff0 [ 75.990979][ T5948] do_syscall_64+0xd2/0x200 [ 75.991004][ T5948] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.991025][ T5948] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.991072][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.991089][ T5948] RIP: 0033:0x7f216a0ceec9 [ 75.991102][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.991118][ T5948] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.991195][ T5948] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 75.991206][ T5948] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000006 [ 75.991216][ T5948] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.991227][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.991240][ T5948] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 75.991259][ T5948] [ 76.350173][ T5958] FAULT_INJECTION: forcing a failure. [ 76.350173][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.363280][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.0.876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.363360][ T5958] Tainted: [W]=WARN [ 76.363365][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.363456][ T5958] Call Trace: [ 76.363461][ T5958] [ 76.363468][ T5958] __dump_stack+0x1d/0x30 [ 76.363486][ T5958] dump_stack_lvl+0xe8/0x140 [ 76.363506][ T5958] dump_stack+0x15/0x1b [ 76.363524][ T5958] should_fail_ex+0x265/0x280 [ 76.363549][ T5958] should_fail+0xb/0x20 [ 76.363616][ T5958] should_fail_usercopy+0x1a/0x20 [ 76.363641][ T5958] _copy_from_user+0x1c/0xb0 [ 76.363671][ T5958] memdup_user+0x5e/0xd0 [ 76.363769][ T5958] strndup_user+0x68/0xb0 [ 76.363791][ T5958] perf_ioctl+0x58a/0x12e0 [ 76.363894][ T5958] ? ioctl_has_perm+0x289/0x2a0 [ 76.363978][ T5958] ? do_vfs_ioctl+0x866/0xe10 [ 76.364000][ T5958] ? selinux_file_ioctl+0x308/0x3a0 [ 76.364040][ T5958] ? __fget_files+0x184/0x1c0 [ 76.364059][ T5958] ? sysvec_reschedule_ipi+0x4f/0x70 [ 76.364166][ T5958] ? __pfx_perf_ioctl+0x10/0x10 [ 76.364191][ T5958] __se_sys_ioctl+0xce/0x140 [ 76.364255][ T5958] __x64_sys_ioctl+0x43/0x50 [ 76.364270][ T5958] x64_sys_call+0x1816/0x2ff0 [ 76.364287][ T5958] do_syscall_64+0xd2/0x200 [ 76.364391][ T5958] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.364421][ T5958] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.364458][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.364548][ T5958] RIP: 0033:0x7f216a0ceec9 [ 76.364561][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.364576][ T5958] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.364596][ T5958] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 76.364610][ T5958] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000003 [ 76.364629][ T5958] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.364642][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.364655][ T5958] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 76.364675][ T5958] [ 76.714494][ T5966] netlink: zone id is out of range [ 76.784381][ T5976] netlink: 9004 bytes leftover after parsing attributes in process `syz.2.883'. [ 76.823844][ T5978] netlink: 'syz.0.884': attribute type 11 has an invalid length. [ 76.866442][ T5984] netlink: 64 bytes leftover after parsing attributes in process `syz.4.887'. [ 76.931074][ T5992] netlink: zone id is out of range [ 76.982185][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.893'. [ 77.093058][ T6004] FAULT_INJECTION: forcing a failure. [ 77.093058][ T6004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.106352][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.895 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.106410][ T6004] Tainted: [W]=WARN [ 77.106415][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.106425][ T6004] Call Trace: [ 77.106431][ T6004] [ 77.106439][ T6004] __dump_stack+0x1d/0x30 [ 77.106459][ T6004] dump_stack_lvl+0xe8/0x140 [ 77.106476][ T6004] dump_stack+0x15/0x1b [ 77.106543][ T6004] should_fail_ex+0x265/0x280 [ 77.106566][ T6004] should_fail_alloc_page+0xf2/0x100 [ 77.106590][ T6004] __alloc_frozen_pages_noprof+0xff/0x360 [ 77.106673][ T6004] alloc_pages_mpol+0xb3/0x250 [ 77.106773][ T6004] folio_alloc_mpol_noprof+0x39/0x80 [ 77.106802][ T6004] shmem_get_folio_gfp+0x3cf/0xd60 [ 77.106890][ T6004] shmem_write_begin+0xa8/0x190 [ 77.106907][ T6004] generic_perform_write+0x184/0x490 [ 77.106930][ T6004] shmem_file_write_iter+0xc5/0xf0 [ 77.106952][ T6004] do_iter_readv_writev+0x499/0x540 [ 77.106983][ T6004] vfs_writev+0x2df/0x8b0 [ 77.107016][ T6004] __se_sys_pwritev2+0xfc/0x1c0 [ 77.107059][ T6004] __x64_sys_pwritev2+0x67/0x80 [ 77.107082][ T6004] x64_sys_call+0x2c55/0x2ff0 [ 77.107102][ T6004] do_syscall_64+0xd2/0x200 [ 77.107130][ T6004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.107185][ T6004] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.107212][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.107232][ T6004] RIP: 0033:0x7f216a0ceec9 [ 77.107245][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.107260][ T6004] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 77.107309][ T6004] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 77.107320][ T6004] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 77.107332][ T6004] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000003 [ 77.107344][ T6004] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 77.107356][ T6004] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 77.107376][ T6004] [ 77.383654][ T5987] syz.1.888 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 77.394590][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.1.888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.394653][ T5987] Tainted: [W]=WARN [ 77.394658][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.394668][ T5987] Call Trace: [ 77.394675][ T5987] [ 77.394683][ T5987] __dump_stack+0x1d/0x30 [ 77.394703][ T5987] dump_stack_lvl+0xe8/0x140 [ 77.394750][ T5987] dump_stack+0x15/0x1b [ 77.394764][ T5987] dump_header+0x81/0x220 [ 77.394792][ T5987] oom_kill_process+0x342/0x400 [ 77.394833][ T5987] out_of_memory+0x979/0xb80 [ 77.394861][ T5987] try_charge_memcg+0x5e6/0x9e0 [ 77.394889][ T5987] charge_memcg+0x51/0xc0 [ 77.394905][ T5987] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 77.394982][ T5987] __read_swap_cache_async+0x1df/0x350 [ 77.395012][ T5987] swap_cluster_readahead+0x277/0x3e0 [ 77.395044][ T5987] swapin_readahead+0xde/0x6f0 [ 77.395145][ T5987] ? __filemap_get_folio+0x4f7/0x6b0 [ 77.395162][ T5987] ? swap_cache_get_folio+0x77/0x200 [ 77.395244][ T5987] do_swap_page+0x301/0x2430 [ 77.395268][ T5987] ? css_rstat_updated+0xb7/0x240 [ 77.395329][ T5987] ? __pfx_default_wake_function+0x10/0x10 [ 77.395349][ T5987] handle_mm_fault+0x9a5/0x2c20 [ 77.395376][ T5987] do_user_addr_fault+0x636/0x1090 [ 77.395410][ T5987] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 77.395454][ T5987] exc_page_fault+0x62/0xa0 [ 77.395479][ T5987] asm_exc_page_fault+0x26/0x30 [ 77.395499][ T5987] RIP: 0033:0x7f8295e51733 [ 77.395577][ T5987] Code: f5 08 00 48 8d 3d 76 f5 08 00 e8 b8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 77.395593][ T5987] RSP: 002b:00007fff29370ee8 EFLAGS: 00010293 [ 77.395607][ T5987] RAX: 00000000fffffffa RBX: 00007f8296075fa0 RCX: 0000000000000000 [ 77.395617][ T5987] RDX: 00007fff29370f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.395628][ T5987] RBP: 00007f8296077da0 R08: 0000000014803a12 R09: 7fffffffffffffff [ 77.395640][ T5987] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000012f8a [ 77.395665][ T5987] R13: 00007f8296076090 R14: ffffffffffffffff R15: 00007fff29371040 [ 77.395694][ T5987] [ 77.395725][ T5987] memory: usage 305380kB, limit 307200kB, failcnt 3562 [ 77.580450][ T6009] netlink: 9004 bytes leftover after parsing attributes in process `syz.0.896'. [ 77.582316][ T5987] memory+swap: usage 1100kB, limit 9007199254740988kB, failcnt 0 [ 77.582330][ T5987] kmem: usage 880kB, limit 9007199254740988kB, failcnt 0 [ 77.582341][ T5987] Memory cgroup stats for /syz1: [ 77.673363][ T5987] cache 0 [ 77.681240][ T5987] rss 24576 [ 77.684336][ T5987] shmem 0 [ 77.687254][ T5987] mapped_file 0 [ 77.690751][ T5987] dirty 0 [ 77.693671][ T5987] writeback 4096 [ 77.697217][ T5987] workingset_refault_anon 94 [ 77.701812][ T5987] workingset_refault_file 710 [ 77.706521][ T5987] swap 172032 [ 77.709839][ T5987] swapcached 20480 [ 77.713559][ T5987] pgpgin 55209 [ 77.716910][ T5987] pgpgout 55196 [ 77.720389][ T5987] pgfault 58430 [ 77.723862][ T5987] pgmajfault 56 [ 77.727319][ T5987] inactive_anon 8192 [ 77.731219][ T5987] active_anon 24576 [ 77.735071][ T5987] inactive_file 20480 [ 77.739060][ T5987] active_file 0 [ 77.742531][ T5987] unevictable 0 [ 77.745981][ T5987] hierarchical_memory_limit 314572800 [ 77.751412][ T5987] hierarchical_memsw_limit 9223372036854771712 [ 77.757549][ T5987] total_cache 0 [ 77.761010][ T5987] total_rss 24576 [ 77.764640][ T5987] total_shmem 0 [ 77.768087][ T5987] total_mapped_file 0 [ 77.772074][ T5987] total_dirty 0 [ 77.775515][ T5987] total_writeback 4096 [ 77.779602][ T5987] total_workingset_refault_anon 94 [ 77.784708][ T5987] total_workingset_refault_file 710 [ 77.789983][ T5987] total_swap 172032 [ 77.793847][ T5987] total_swapcached 20480 [ 77.798075][ T5987] total_pgpgin 55209 [ 77.802018][ T5987] total_pgpgout 55196 [ 77.805981][ T5987] total_pgfault 58430 [ 77.809998][ T5987] total_pgmajfault 56 [ 77.814051][ T5987] total_inactive_anon 8192 [ 77.818476][ T5987] total_active_anon 24576 [ 77.822794][ T5987] total_inactive_file 20480 [ 77.827280][ T5987] total_active_file 0 [ 77.831267][ T5987] total_unevictable 0 [ 77.831734][ T6013] netlink: 64 bytes leftover after parsing attributes in process `syz.4.900'. [ 77.835246][ T5987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.888,pid=5987,uid=0 [ 77.858650][ T5987] Memory cgroup out of memory: Killed process 5987 (syz.1.888) total-vm:93956kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 77.887404][ T6017] netlink: zone id is out of range [ 77.981979][ T6026] FAULT_INJECTION: forcing a failure. [ 77.981979][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.995242][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.3.898 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.995273][ T6026] Tainted: [W]=WARN [ 77.995279][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.995288][ T6026] Call Trace: [ 77.995336][ T6026] [ 77.995344][ T6026] __dump_stack+0x1d/0x30 [ 77.995434][ T6026] dump_stack_lvl+0xe8/0x140 [ 77.995452][ T6026] dump_stack+0x15/0x1b [ 77.995468][ T6026] should_fail_ex+0x265/0x280 [ 77.995492][ T6026] should_fail+0xb/0x20 [ 77.995508][ T6026] should_fail_usercopy+0x1a/0x20 [ 77.995534][ T6026] strncpy_from_user+0x25/0x230 [ 77.995562][ T6026] ? kmem_cache_alloc_noprof+0x186/0x310 [ 77.995600][ T6026] ? getname_flags+0x80/0x3b0 [ 77.995627][ T6026] getname_flags+0xae/0x3b0 [ 77.995654][ T6026] user_path_at+0x28/0x130 [ 77.995761][ T6026] do_sys_truncate+0x5c/0x130 [ 77.995782][ T6026] __x64_sys_truncate+0x31/0x40 [ 77.995806][ T6026] x64_sys_call+0x1a2f/0x2ff0 [ 77.995828][ T6026] do_syscall_64+0xd2/0x200 [ 77.995933][ T6026] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.995957][ T6026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.995986][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.996006][ T6026] RIP: 0033:0x7f3e1406eec9 [ 77.996022][ T6026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.996063][ T6026] RSP: 002b:00007f3e12acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 77.996137][ T6026] RAX: ffffffffffffffda RBX: 00007f3e142c5fa0 RCX: 00007f3e1406eec9 [ 77.996148][ T6026] RDX: 0000000000000000 RSI: 0000000000000c1a RDI: 0000200000000080 [ 77.996159][ T6026] RBP: 00007f3e12acf090 R08: 0000000000000000 R09: 0000000000000000 [ 77.996170][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.996182][ T6026] R13: 00007f3e142c6038 R14: 00007f3e142c5fa0 R15: 00007ffec44988d8 [ 77.996200][ T6026] [ 78.260857][ T6033] netlink: 'syz.1.902': attribute type 11 has an invalid length. [ 78.330499][ T6048] netlink: 'syz.0.913': attribute type 30 has an invalid length. [ 78.358149][ T6052] netlink: zone id is out of range [ 78.378020][ T6054] netlink: zone id is out of range [ 78.383293][ T6054] netlink: zone id is out of range [ 78.420252][ T6060] FAULT_INJECTION: forcing a failure. [ 78.420252][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 78.432981][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.3.917 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.433013][ T6060] Tainted: [W]=WARN [ 78.433039][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.433052][ T6060] Call Trace: [ 78.433058][ T6060] [ 78.433066][ T6060] __dump_stack+0x1d/0x30 [ 78.433087][ T6060] dump_stack_lvl+0xe8/0x140 [ 78.433107][ T6060] dump_stack+0x15/0x1b [ 78.433123][ T6060] should_fail_ex+0x265/0x280 [ 78.433145][ T6060] ? __se_sys_memfd_create+0x1cc/0x590 [ 78.433232][ T6060] should_failslab+0x8c/0xb0 [ 78.433263][ T6060] __kmalloc_cache_noprof+0x4c/0x320 [ 78.433286][ T6060] ? fput+0x8f/0xc0 [ 78.433309][ T6060] __se_sys_memfd_create+0x1cc/0x590 [ 78.433359][ T6060] __x64_sys_memfd_create+0x31/0x40 [ 78.433380][ T6060] x64_sys_call+0x2abe/0x2ff0 [ 78.433402][ T6060] do_syscall_64+0xd2/0x200 [ 78.433432][ T6060] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.433451][ T6060] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.433615][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.433638][ T6060] RIP: 0033:0x7f3e1406eec9 [ 78.433726][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.433743][ T6060] RSP: 002b:00007f3e12acee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.433785][ T6060] RAX: ffffffffffffffda RBX: 0000000000000a02 RCX: 00007f3e1406eec9 [ 78.433803][ T6060] RDX: 00007f3e12aceef0 RSI: 0000000000000000 RDI: 00007f3e140f2960 [ 78.433816][ T6060] RBP: 0000200000003640 R08: 00007f3e12acebb7 R09: 00007f3e12acee40 [ 78.433827][ T6060] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000002380 [ 78.433838][ T6060] R13: 00007f3e12aceef0 R14: 00007f3e12aceeb0 R15: 00002000000023c0 [ 78.433854][ T6060] [ 78.664955][ T6066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6066 comm=syz.3.920 [ 78.688010][ T6066] loop3: detected capacity change from 0 to 1764 [ 78.950245][ T6086] netlink: zone id is out of range [ 79.006469][ T6091] netlink: zone id is out of range [ 79.012071][ T6091] netlink: zone id is out of range [ 79.161589][ T6113] netlink: zone id is out of range [ 79.171299][ T6113] netlink: zone id is out of range [ 79.272263][ T6115] loop4: detected capacity change from 0 to 512 [ 79.283059][ T6115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.298202][ T6115] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 79.313555][ T6115] EXT4-fs (loop4): 1 truncate cleaned up [ 79.319548][ T6115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.343411][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.502177][ T6148] 0·: renamed from hsr0 (while UP) [ 79.519068][ T6148] 0·: entered allmulticast mode [ 79.523958][ T6148] hsr_slave_0: entered allmulticast mode [ 79.529636][ T6148] hsr_slave_1: entered allmulticast mode [ 79.590319][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 79.590340][ T29] audit: type=1400 audit(1758785461.391:4714): avc: denied { setopt } for pid=6143 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.803979][ T6164] wg1 speed is unknown, defaulting to 1000 [ 79.910406][ T6169] wg1 speed is unknown, defaulting to 1000 [ 79.970035][ T29] audit: type=1400 audit(1758785461.771:4715): avc: denied { setcurrent } for pid=6176 comm="syz.3.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.989569][ T29] audit: type=1401 audit(1758785461.771:4716): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 80.114632][ T6182] wg1 speed is unknown, defaulting to 1000 [ 80.131677][ T6195] loop3: detected capacity change from 0 to 512 [ 80.147721][ T6195] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.157974][ T6198] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 80.186053][ T6198] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 80.196302][ T6195] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.966: EA inode hash validation failed [ 80.213726][ T6198] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 80.221560][ T6195] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.263011][ T6195] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.966: corrupted inode contents [ 80.295494][ T29] audit: type=1326 audit(1758785462.091:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.318826][ T29] audit: type=1326 audit(1758785462.091:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.344641][ T6195] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.966: mark_inode_dirty error [ 80.359060][ T6195] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.966: corrupted inode contents [ 80.370842][ T29] audit: type=1326 audit(1758785462.091:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.394246][ T29] audit: type=1326 audit(1758785462.091:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.417551][ T29] audit: type=1326 audit(1758785462.091:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.441138][ T29] audit: type=1326 audit(1758785462.091:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.464448][ T29] audit: type=1326 audit(1758785462.121:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 80.493164][ T6195] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.966: mark_inode_dirty error [ 80.508333][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6206 comm=syz.2.970 [ 80.520969][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6206 comm=syz.2.970 [ 80.533570][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6206 comm=syz.2.970 [ 80.546091][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6206 comm=syz.2.970 [ 80.558601][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6206 comm=syz.2.970 [ 80.572167][ T6195] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.966: mark inode dirty (error -117) [ 80.591419][ T6195] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 80.607911][ T6204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6204 comm=syz.2.970 [ 80.609232][ T6195] EXT4-fs (loop3): 1 orphan inode deleted [ 80.620492][ T6204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6204 comm=syz.2.970 [ 80.626606][ T6195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.638691][ T6204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6204 comm=syz.2.970 [ 80.663099][ T6204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6204 comm=syz.2.970 [ 80.687205][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.740636][ T6218] __nla_validate_parse: 4 callbacks suppressed [ 80.740652][ T6218] netlink: 9 bytes leftover after parsing attributes in process `syz.3.972'. [ 80.781228][ T6218] 1·: renamed from 70· (while UP) [ 80.874247][ T6230] FAULT_INJECTION: forcing a failure. [ 80.874247][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.887329][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.2.979 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.887371][ T6230] Tainted: [W]=WARN [ 80.887377][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.887397][ T6230] Call Trace: [ 80.887404][ T6230] [ 80.887411][ T6230] __dump_stack+0x1d/0x30 [ 80.887429][ T6230] dump_stack_lvl+0xe8/0x140 [ 80.887448][ T6230] dump_stack+0x15/0x1b [ 80.887487][ T6230] should_fail_ex+0x265/0x280 [ 80.887545][ T6230] should_fail+0xb/0x20 [ 80.887564][ T6230] should_fail_usercopy+0x1a/0x20 [ 80.887583][ T6230] _copy_to_user+0x20/0xa0 [ 80.887630][ T6230] simple_read_from_buffer+0xb5/0x130 [ 80.887653][ T6230] proc_fail_nth_read+0x10e/0x150 [ 80.887710][ T6230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.887732][ T6230] vfs_read+0x1a5/0x770 [ 80.887753][ T6230] ? __rcu_read_unlock+0x4f/0x70 [ 80.887851][ T6230] ? __fget_files+0x184/0x1c0 [ 80.887879][ T6230] ksys_read+0xda/0x1a0 [ 80.887903][ T6230] __x64_sys_read+0x40/0x50 [ 80.887980][ T6230] x64_sys_call+0x27bc/0x2ff0 [ 80.888002][ T6230] do_syscall_64+0xd2/0x200 [ 80.888028][ T6230] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.888048][ T6230] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.888144][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.888165][ T6230] RIP: 0033:0x7f795f42d8dc [ 80.888178][ T6230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.888193][ T6230] RSP: 002b:00007f795de97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.888283][ T6230] RAX: ffffffffffffffda RBX: 00007f795f685fa0 RCX: 00007f795f42d8dc [ 80.888296][ T6230] RDX: 000000000000000f RSI: 00007f795de970a0 RDI: 0000000000000008 [ 80.888309][ T6230] RBP: 00007f795de97090 R08: 0000000000000000 R09: 0000000000000000 [ 80.888321][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.888333][ T6230] R13: 00007f795f686038 R14: 00007f795f685fa0 R15: 00007fff602c37a8 [ 80.888350][ T6230] [ 81.118735][ T6220] netlink: 104 bytes leftover after parsing attributes in process `syz.4.975'. [ 81.157343][ T6234] devpts: Bad value for 'gid' [ 81.162095][ T6234] devpts: Bad value for 'gid' [ 81.216099][ T6237] batadv_slave_1: entered promiscuous mode [ 81.278952][ T6236] batadv_slave_1: left promiscuous mode [ 81.317800][ T6242] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.340676][ T6248] tipc: Enabling of bearer rejected, already enabled [ 81.369954][ T6242] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.420015][ T6242] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.470088][ T6242] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.509618][ T6257] batadv_slave_1: entered promiscuous mode [ 81.528249][ T3960] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.544129][ T3953] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569651][ T3953] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578584][ T6255] batadv_slave_1: left promiscuous mode [ 81.584275][ T3953] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.607389][ T6261] netlink: 27 bytes leftover after parsing attributes in process `syz.1.991'. [ 81.620893][ T6264] loop4: detected capacity change from 0 to 512 [ 81.646375][ T6269] netlink: 'syz.1.994': attribute type 30 has an invalid length. [ 81.670946][ T6264] EXT4-fs warning (device loop4): ext4_xattr_inode_get:542: inode #11: comm syz.4.990: ea_inode file size=0 entry size=6 [ 81.690800][ T6264] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.708037][ T6264] EXT4-fs (loop4): 1 orphan inode deleted [ 81.714297][ T6264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.224578][ T6279] wg1 speed is unknown, defaulting to 1000 [ 82.345141][ T6288] net_ratelimit: 11 callbacks suppressed [ 82.345160][ T6288] netlink: zone id is out of range [ 82.368591][ T6288] netlink: zone id is out of range [ 82.418733][ T6291] netlink: zone id is out of range [ 82.488923][ T6291] netlink: zone id is out of range [ 82.499115][ T6291] netlink: zone id is out of range [ 82.588862][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.608430][ T6295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1003'. [ 82.694680][ T6303] netlink: 'syz.4.1006': attribute type 30 has an invalid length. [ 82.942700][ T6319] netlink: zone id is out of range [ 82.947915][ T6319] netlink: zone id is out of range [ 82.953932][ T6319] netlink: zone id is out of range [ 83.014817][ T6326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1015'. [ 83.304780][ T6348] tipc: Started in network mode [ 83.309868][ T6348] tipc: Node identity 6ef363f754e5, cluster identity 4711 [ 83.317121][ T6348] tipc: Enabled bearer , priority 0 [ 83.340776][ T6348] tipc: Resetting bearer [ 83.341162][ T6353] netlink: zone id is out of range [ 83.351840][ T6353] netlink: zone id is out of range [ 83.358997][ T6346] tipc: Disabling bearer [ 83.410458][ T6361] FAULT_INJECTION: forcing a failure. [ 83.410458][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 83.423196][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.1.1029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 83.423227][ T6361] Tainted: [W]=WARN [ 83.423233][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.423243][ T6361] Call Trace: [ 83.423249][ T6361] [ 83.423256][ T6361] __dump_stack+0x1d/0x30 [ 83.423276][ T6361] dump_stack_lvl+0xe8/0x140 [ 83.423294][ T6361] dump_stack+0x15/0x1b [ 83.423309][ T6361] should_fail_ex+0x265/0x280 [ 83.423332][ T6361] should_failslab+0x8c/0xb0 [ 83.423355][ T6361] kmem_cache_alloc_noprof+0x50/0x310 [ 83.423380][ T6361] ? vm_area_dup+0x33/0x2c0 [ 83.423407][ T6361] vm_area_dup+0x33/0x2c0 [ 83.423433][ T6361] dup_mmap+0x501/0xf20 [ 83.423460][ T6361] copy_mm+0x11a/0x370 [ 83.423484][ T6361] copy_process+0xd08/0x2000 [ 83.423512][ T6361] kernel_clone+0x16c/0x5c0 [ 83.423535][ T6361] ? vfs_write+0x7e8/0x960 [ 83.423558][ T6361] __x64_sys_clone+0xe6/0x120 [ 83.423589][ T6361] x64_sys_call+0x119c/0x2ff0 [ 83.423607][ T6361] do_syscall_64+0xd2/0x200 [ 83.423635][ T6361] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.423655][ T6361] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.423679][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.423707][ T6361] RIP: 0033:0x7f8295e1eec9 [ 83.423721][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.423735][ T6361] RSP: 002b:00007f8294886fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 83.423750][ T6361] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 83.423760][ T6361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 83.423771][ T6361] RBP: 00007f8294887090 R08: 0000000000000000 R09: 0000000000000000 [ 83.423781][ T6361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 83.423792][ T6361] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 83.423806][ T6361] [ 83.870952][ T6398] binfmt_misc: register: failed to install interpreter file ./file2 [ 83.924747][ T6404] loop3: detected capacity change from 0 to 764 [ 83.932250][ T6404] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 83.941801][ T6404] Symlink component flag not implemented [ 83.947883][ T6404] Symlink component flag not implemented (7) [ 84.092567][ T6413] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1050'. [ 84.101684][ T6413] 0·: renamed from 71· (while UP) [ 84.370224][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1054'. [ 84.693180][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 84.693192][ T29] audit: type=1326 audit(1758785466.491:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.693220][ T29] audit: type=1326 audit(1758785466.491:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.694081][ T29] audit: type=1326 audit(1758785466.491:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.770563][ T29] audit: type=1326 audit(1758785466.491:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.794045][ T29] audit: type=1326 audit(1758785466.491:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.992810][ T29] audit: type=1326 audit(1758785466.571:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.992896][ T29] audit: type=1326 audit(1758785466.571:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.992920][ T29] audit: type=1326 audit(1758785466.571:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.992940][ T29] audit: type=1326 audit(1758785466.571:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 84.993005][ T29] audit: type=1326 audit(1758785466.571:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 85.477750][ T6478] netlink: 'syz.4.1076': attribute type 9 has an invalid length. [ 85.822275][ T6510] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1089'. [ 85.886108][ T6515] loop4: detected capacity change from 0 to 1024 [ 85.893265][ T6516] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1091'. [ 85.903365][ T6515] EXT4-fs: Ignoring removed bh option [ 85.909543][ T6515] ext4: Bad value for 'max_batch_time' [ 86.547384][ T6536] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1099'. [ 86.587357][ T6540] FAULT_INJECTION: forcing a failure. [ 86.587357][ T6540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.600478][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.0.1101 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.600509][ T6540] Tainted: [W]=WARN [ 86.600516][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.600526][ T6540] Call Trace: [ 86.600531][ T6540] [ 86.600535][ T6540] __dump_stack+0x1d/0x30 [ 86.600548][ T6540] dump_stack_lvl+0xe8/0x140 [ 86.600626][ T6540] dump_stack+0x15/0x1b [ 86.600710][ T6540] should_fail_ex+0x265/0x280 [ 86.600724][ T6540] should_fail+0xb/0x20 [ 86.600815][ T6540] should_fail_usercopy+0x1a/0x20 [ 86.600828][ T6540] _copy_from_user+0x1c/0xb0 [ 86.600845][ T6540] __sys_connect+0xd0/0x2b0 [ 86.600973][ T6540] __x64_sys_connect+0x3f/0x50 [ 86.600985][ T6540] x64_sys_call+0x2c08/0x2ff0 [ 86.600997][ T6540] do_syscall_64+0xd2/0x200 [ 86.601032][ T6540] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.601046][ T6540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.601133][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.601146][ T6540] RIP: 0033:0x7f216a0ceec9 [ 86.601155][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.601193][ T6540] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 86.601205][ T6540] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 86.601231][ T6540] RDX: 000000000000006e RSI: 0000200000000380 RDI: 0000000000000005 [ 86.601238][ T6540] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.601245][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.601252][ T6540] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 86.601263][ T6540] [ 86.829871][ T6548] FAULT_INJECTION: forcing a failure. [ 86.829871][ T6548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.843056][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.1.1105 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.843086][ T6548] Tainted: [W]=WARN [ 86.843093][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.843105][ T6548] Call Trace: [ 86.843112][ T6548] [ 86.843119][ T6548] __dump_stack+0x1d/0x30 [ 86.843140][ T6548] dump_stack_lvl+0xe8/0x140 [ 86.843199][ T6548] dump_stack+0x15/0x1b [ 86.843216][ T6548] should_fail_ex+0x265/0x280 [ 86.843241][ T6548] should_fail+0xb/0x20 [ 86.843262][ T6548] should_fail_usercopy+0x1a/0x20 [ 86.843286][ T6548] _copy_from_user+0x1c/0xb0 [ 86.843337][ T6548] ___sys_sendmsg+0xc1/0x1d0 [ 86.843377][ T6548] __x64_sys_sendmsg+0xd4/0x160 [ 86.843408][ T6548] x64_sys_call+0x191e/0x2ff0 [ 86.843462][ T6548] do_syscall_64+0xd2/0x200 [ 86.843490][ T6548] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.843594][ T6548] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.843622][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.843734][ T6548] RIP: 0033:0x7f8295e1eec9 [ 86.843747][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.843789][ T6548] RSP: 002b:00007f8294887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.843808][ T6548] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 86.843820][ T6548] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000009 [ 86.843832][ T6548] RBP: 00007f8294887090 R08: 0000000000000000 R09: 0000000000000000 [ 86.843843][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.843854][ T6548] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 86.843874][ T6548] [ 86.847574][ T6550] netlink: 'syz.2.1106': attribute type 30 has an invalid length. [ 87.119817][ T6570] pim6reg1: entered promiscuous mode [ 87.125175][ T6570] pim6reg1: entered allmulticast mode [ 87.192529][ T6577] FAULT_INJECTION: forcing a failure. [ 87.192529][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 87.205219][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.4.1116 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.205270][ T6577] Tainted: [W]=WARN [ 87.205276][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.205286][ T6577] Call Trace: [ 87.205291][ T6577] [ 87.205299][ T6577] __dump_stack+0x1d/0x30 [ 87.205396][ T6577] dump_stack_lvl+0xe8/0x140 [ 87.205414][ T6577] dump_stack+0x15/0x1b [ 87.205430][ T6577] should_fail_ex+0x265/0x280 [ 87.205469][ T6577] should_failslab+0x8c/0xb0 [ 87.205491][ T6577] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 87.205572][ T6577] ? __d_alloc+0x3d/0x340 [ 87.205599][ T6577] __d_alloc+0x3d/0x340 [ 87.205632][ T6577] d_alloc+0x2e/0x100 [ 87.205704][ T6577] lookup_one_qstr_excl+0x99/0x250 [ 87.205800][ T6577] filename_create+0x149/0x230 [ 87.205819][ T6577] do_mkdirat+0x52/0x3f0 [ 87.205837][ T6577] __x64_sys_mkdir+0x42/0x50 [ 87.205880][ T6577] x64_sys_call+0x2daa/0x2ff0 [ 87.205901][ T6577] do_syscall_64+0xd2/0x200 [ 87.205930][ T6577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.205955][ T6577] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.206044][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.206066][ T6577] RIP: 0033:0x7f15fc92eec9 [ 87.206150][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.206164][ T6577] RSP: 002b:00007f15fb38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 87.206184][ T6577] RAX: ffffffffffffffda RBX: 00007f15fcb85fa0 RCX: 00007f15fc92eec9 [ 87.206240][ T6577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 87.206250][ T6577] RBP: 00007f15fb38f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.206260][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.206272][ T6577] R13: 00007f15fcb86038 R14: 00007f15fcb85fa0 R15: 00007fff24f9ca58 [ 87.206289][ T6577] [ 87.408096][ T6581] sd 0:0:1:0: device reset [ 87.450459][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1120'. [ 87.501630][ T6592] loop3: detected capacity change from 0 to 512 [ 87.525722][ T6592] EXT4-fs warning (device loop3): ext4_xattr_inode_get:542: inode #11: comm syz.3.1121: ea_inode file size=0 entry size=6 [ 87.539644][ T6592] EXT4-fs (loop3): 1 orphan inode deleted [ 87.545789][ T6592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.575414][ T6597] net_ratelimit: 12 callbacks suppressed [ 87.575494][ T6597] netlink: zone id is out of range [ 87.587577][ T6597] netlink: zone id is out of range [ 87.595595][ T6597] netlink: zone id is out of range [ 87.623326][ T6599] FAULT_INJECTION: forcing a failure. [ 87.623326][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 87.635944][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.4.1125 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.636035][ T6599] Tainted: [W]=WARN [ 87.636176][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.636188][ T6599] Call Trace: [ 87.636194][ T6599] [ 87.636201][ T6599] __dump_stack+0x1d/0x30 [ 87.636262][ T6599] dump_stack_lvl+0xe8/0x140 [ 87.636286][ T6599] dump_stack+0x15/0x1b [ 87.636302][ T6599] should_fail_ex+0x265/0x280 [ 87.636364][ T6599] should_failslab+0x8c/0xb0 [ 87.636387][ T6599] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 87.636416][ T6599] ? sidtab_context_to_sid+0x1c5/0x5e0 [ 87.636470][ T6599] ? context_to_sid+0x2da/0x310 [ 87.636487][ T6599] kstrdup+0x3e/0xd0 [ 87.636510][ T6599] sidtab_context_to_sid+0x1c5/0x5e0 [ 87.636533][ T6599] security_context_to_sid_core+0x294/0x3b0 [ 87.636592][ T6599] security_context_to_sid_force+0x30/0x40 [ 87.636612][ T6599] selinux_inode_setxattr+0x4e8/0x6e0 [ 87.636634][ T6599] ? mntput+0x4b/0x80 [ 87.636660][ T6599] security_inode_setxattr+0x13a/0x1b0 [ 87.636688][ T6599] __vfs_setxattr_locked+0x83/0x1d0 [ 87.636789][ T6599] vfs_setxattr+0x132/0x270 [ 87.636811][ T6599] file_setxattr+0x139/0x1b0 [ 87.636987][ T6599] path_setxattrat+0x290/0x310 [ 87.637080][ T6599] __x64_sys_fsetxattr+0x6b/0x80 [ 87.637103][ T6599] x64_sys_call+0x1ced/0x2ff0 [ 87.637122][ T6599] do_syscall_64+0xd2/0x200 [ 87.637231][ T6599] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.637251][ T6599] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.637299][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.637318][ T6599] RIP: 0033:0x7f15fc92eec9 [ 87.637333][ T6599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.637348][ T6599] RSP: 002b:00007f15fb38f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 87.637366][ T6599] RAX: ffffffffffffffda RBX: 00007f15fcb85fa0 RCX: 00007f15fc92eec9 [ 87.637378][ T6599] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 87.637438][ T6599] RBP: 00007f15fb38f090 R08: 0000000000000001 R09: 0000000000000000 [ 87.637448][ T6599] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000002 [ 87.637459][ T6599] R13: 00007f15fcb86038 R14: 00007f15fcb85fa0 R15: 00007fff24f9ca58 [ 87.637570][ T6599] [ 88.031513][ T6616] FAULT_INJECTION: forcing a failure. [ 88.031513][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 88.044204][ T6616] CPU: 1 UID: 0 PID: 6616 Comm: syz.1.1133 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.044269][ T6616] Tainted: [W]=WARN [ 88.044276][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.044289][ T6616] Call Trace: [ 88.044296][ T6616] [ 88.044303][ T6616] __dump_stack+0x1d/0x30 [ 88.044322][ T6616] dump_stack_lvl+0xe8/0x140 [ 88.044338][ T6616] dump_stack+0x15/0x1b [ 88.044355][ T6616] should_fail_ex+0x265/0x280 [ 88.044432][ T6616] should_failslab+0x8c/0xb0 [ 88.044454][ T6616] kmem_cache_alloc_noprof+0x50/0x310 [ 88.044478][ T6616] ? getname_flags+0x80/0x3b0 [ 88.044511][ T6616] ? bpf_trace_run2+0x124/0x1c0 [ 88.044539][ T6616] getname_flags+0x80/0x3b0 [ 88.044585][ T6616] do_sys_openat2+0x60/0x110 [ 88.044618][ T6616] __x64_sys_creat+0x65/0x90 [ 88.044638][ T6616] x64_sys_call+0x2d94/0x2ff0 [ 88.044697][ T6616] do_syscall_64+0xd2/0x200 [ 88.044802][ T6616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.044901][ T6616] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.044973][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.045013][ T6616] RIP: 0033:0x7f8295e1eec9 [ 88.045028][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.045044][ T6616] RSP: 002b:00007f8294887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 88.045063][ T6616] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 88.045076][ T6616] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000001c0 [ 88.045088][ T6616] RBP: 00007f8294887090 R08: 0000000000000000 R09: 0000000000000000 [ 88.045176][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.045188][ T6616] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 88.045204][ T6616] [ 88.296022][ T6625] loop4: detected capacity change from 0 to 512 [ 88.307751][ T6628] netlink: zone id is out of range [ 88.309362][ T6625] EXT4-fs: test_dummy_encryption option not supported [ 88.326175][ T6586] syz.3.1121 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 88.337257][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.3.1121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.337309][ T6586] Tainted: [W]=WARN [ 88.337316][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.337328][ T6586] Call Trace: [ 88.337335][ T6586] [ 88.337342][ T6586] __dump_stack+0x1d/0x30 [ 88.337418][ T6586] dump_stack_lvl+0xe8/0x140 [ 88.337438][ T6586] dump_stack+0x15/0x1b [ 88.337452][ T6586] dump_header+0x81/0x220 [ 88.337481][ T6586] oom_kill_process+0x342/0x400 [ 88.337596][ T6586] out_of_memory+0x979/0xb80 [ 88.337627][ T6586] try_charge_memcg+0x5e6/0x9e0 [ 88.337659][ T6586] charge_memcg+0x51/0xc0 [ 88.337723][ T6586] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 88.337742][ T6586] __read_swap_cache_async+0x1df/0x350 [ 88.337787][ T6586] swap_cluster_readahead+0x277/0x3e0 [ 88.337822][ T6586] swapin_readahead+0xde/0x6f0 [ 88.337916][ T6586] ? __filemap_get_folio+0x4f7/0x6b0 [ 88.337938][ T6586] ? swap_cache_get_folio+0x77/0x200 [ 88.337963][ T6586] do_swap_page+0x301/0x2430 [ 88.337986][ T6586] ? css_rstat_updated+0xb7/0x240 [ 88.338085][ T6586] ? __pfx_default_wake_function+0x10/0x10 [ 88.338106][ T6586] handle_mm_fault+0x9a5/0x2c20 [ 88.338199][ T6586] do_user_addr_fault+0x636/0x1090 [ 88.338226][ T6586] ? fpregs_restore_userregs+0xe2/0x1d0 [ 88.338289][ T6586] ? switch_fpu_return+0xe/0x20 [ 88.338326][ T6586] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 88.338358][ T6586] exc_page_fault+0x62/0xa0 [ 88.338386][ T6586] asm_exc_page_fault+0x26/0x30 [ 88.338407][ T6586] RIP: 0033:0x7f3e13f457cc [ 88.338491][ T6586] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 88.338506][ T6586] RSP: 002b:00007ffec4498a40 EFLAGS: 00010287 [ 88.338542][ T6586] RAX: 0000000000000000 RBX: 00007f3e142c6090 RCX: 0000000000000000 [ 88.338555][ T6586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555559341808 [ 88.338568][ T6586] RBP: 00007f3e142c7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 88.338582][ T6586] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000158be [ 88.338595][ T6586] R13: 00007f3e142c6090 R14: ffffffffffffffff R15: 00007ffec4498b50 [ 88.338691][ T6586] [ 88.561468][ T6586] memory: usage 307200kB, limit 307200kB, failcnt 20339 [ 88.568438][ T6586] memory+swap: usage 288644kB, limit 9007199254740988kB, failcnt 0 [ 88.576380][ T6586] kmem: usage 266904kB, limit 9007199254740988kB, failcnt 0 [ 88.583674][ T6586] Memory cgroup stats for /syz3: [ 88.612658][ T6628] netlink: zone id is out of range [ 88.632503][ T6586] cache 8192 [ 88.635746][ T6586] rss 0 [ 88.638523][ T6586] shmem 0 [ 88.641552][ T6586] mapped_file 0 [ 88.644997][ T6586] dirty 0 [ 88.647921][ T6586] writeback 4096 [ 88.651500][ T6586] workingset_refault_anon 182 [ 88.656177][ T6586] workingset_refault_file 1494 [ 88.660936][ T6586] swap 434176 [ 88.664202][ T6586] swapcached 28672 [ 88.667916][ T6586] pgpgin 100618 [ 88.671487][ T6586] pgpgout 100606 [ 88.675016][ T6586] pgfault 70228 [ 88.678477][ T6586] pgmajfault 121 [ 88.682045][ T6586] inactive_anon 24576 [ 88.686009][ T6586] active_anon 0 [ 88.689505][ T6586] inactive_file 20480 [ 88.693585][ T6586] active_file 0 [ 88.697039][ T6586] unevictable 0 [ 88.700569][ T6586] hierarchical_memory_limit 314572800 [ 88.706007][ T6586] hierarchical_memsw_limit 9223372036854771712 [ 88.712172][ T6586] total_cache 8192 [ 88.715880][ T6586] total_rss 0 [ 88.719230][ T6586] total_shmem 0 [ 88.722676][ T6586] total_mapped_file 0 [ 88.726644][ T6586] total_dirty 0 [ 88.730119][ T6586] total_writeback 4096 [ 88.734172][ T6586] total_workingset_refault_anon 182 [ 88.739385][ T6586] total_workingset_refault_file 1494 [ 88.744653][ T6586] total_swap 434176 [ 88.748479][ T6586] total_swapcached 28672 [ 88.752751][ T6586] total_pgpgin 100618 [ 88.756717][ T6586] total_pgpgout 100606 [ 88.760790][ T6586] total_pgfault 70228 [ 88.764757][ T6586] total_pgmajfault 121 [ 88.768850][ T6586] total_inactive_anon 24576 [ 88.773359][ T6586] total_active_anon 0 [ 88.777329][ T6586] total_inactive_file 20480 [ 88.781846][ T6586] total_active_file 0 [ 88.785849][ T6586] total_unevictable 0 [ 88.789843][ T6586] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1121,pid=6586,uid=0 [ 88.804409][ T6586] Memory cgroup out of memory: Killed process 6586 (syz.3.1121) total-vm:96004kB, anon-rss:1116kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 88.837183][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.844892][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.853904][ T6641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.870564][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.891715][ T6643] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.970446][ T6643] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.987510][ T6655] loop4: detected capacity change from 0 to 512 [ 89.006551][ T6657] FAULT_INJECTION: forcing a failure. [ 89.006551][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 89.012155][ T6655] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1144: bg 0: block 248: padding at end of block bitmap is not set [ 89.019230][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.3.1145 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.019319][ T6657] Tainted: [W]=WARN [ 89.019326][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.019338][ T6657] Call Trace: [ 89.019344][ T6657] [ 89.019352][ T6657] __dump_stack+0x1d/0x30 [ 89.019373][ T6657] dump_stack_lvl+0xe8/0x140 [ 89.019505][ T6657] dump_stack+0x15/0x1b [ 89.019521][ T6657] should_fail_ex+0x265/0x280 [ 89.019620][ T6657] should_failslab+0x8c/0xb0 [ 89.019655][ T6657] __kmalloc_noprof+0xa5/0x3e0 [ 89.019680][ T6657] ? blk_rq_map_user_iov+0x442/0x14a0 [ 89.019708][ T6657] blk_rq_map_user_iov+0x442/0x14a0 [ 89.019750][ T6657] blk_rq_map_user_io+0x20f/0x260 [ 89.019788][ T6657] ? sg_link_reserve+0x117/0x140 [ 89.019809][ T6657] sg_common_write+0xb06/0xc30 [ 89.019835][ T6657] sg_new_write+0x7b6/0x890 [ 89.019899][ T6657] ? do_vfs_ioctl+0x866/0xe10 [ 89.019918][ T6657] sg_ioctl+0xb81/0x1360 [ 89.019938][ T6657] ? __pfx_sg_ioctl+0x10/0x10 [ 89.020021][ T6657] __se_sys_ioctl+0xce/0x140 [ 89.020121][ T6657] __x64_sys_ioctl+0x43/0x50 [ 89.020168][ T6657] x64_sys_call+0x1816/0x2ff0 [ 89.020189][ T6657] do_syscall_64+0xd2/0x200 [ 89.020224][ T6657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.020248][ T6657] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.020335][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.020355][ T6657] RIP: 0033:0x7f3e1406eec9 [ 89.020371][ T6657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.020387][ T6657] RSP: 002b:00007f3e12acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.020406][ T6657] RAX: ffffffffffffffda RBX: 00007f3e142c5fa0 RCX: 00007f3e1406eec9 [ 89.020418][ T6657] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000007 [ 89.020504][ T6657] RBP: 00007f3e12acf090 R08: 0000000000000000 R09: 0000000000000000 [ 89.020516][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.020528][ T6657] R13: 00007f3e142c6038 R14: 00007f3e142c5fa0 R15: 00007ffec44988d8 [ 89.020546][ T6657] [ 89.103301][ T6663] loop3: detected capacity change from 0 to 512 [ 89.107820][ T6655] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1144: Failed to acquire dquot type 1 [ 89.266036][ T6655] EXT4-fs (loop4): 1 truncate cleaned up [ 89.275603][ T6655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.276697][ T6661] 9pnet: Could not find request transport: 0xffffffffffffffff [ 89.299265][ T6643] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.308842][ T6655] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.364025][ T6655] unsupported nla_type 52263 [ 89.379994][ T6643] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.394376][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.431785][ T6677] loop2: detected capacity change from 0 to 512 [ 89.455916][ T3934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.465715][ T3960] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.480749][ T3960] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.493302][ T3960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520745][ T6677] EXT4-fs warning (device loop2): ext4_xattr_inode_get:542: inode #11: comm syz.2.1149: ea_inode file size=0 entry size=6 [ 89.643212][ T6677] EXT4-fs (loop2): 1 orphan inode deleted [ 89.697381][ T6677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.763488][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 89.763502][ T29] audit: type=1326 audit(1758785471.561:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.797012][ T29] audit: type=1326 audit(1758785471.591:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.820659][ T29] audit: type=1326 audit(1758785471.591:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.844986][ T29] audit: type=1326 audit(1758785471.591:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.860026][ T6699] netlink: zone id is out of range [ 89.869230][ T29] audit: type=1326 audit(1758785471.671:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.881471][ T6699] netlink: zone id is out of range [ 89.896999][ T29] audit: type=1326 audit(1758785471.671:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.925647][ T29] audit: type=1326 audit(1758785471.671:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 89.926945][ T6699] netlink: zone id is out of range [ 90.150995][ T6715] netlink: zone id is out of range [ 90.166656][ T29] audit: type=1326 audit(1758785471.961:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 90.190135][ T29] audit: type=1326 audit(1758785471.961:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795f42eec9 code=0x7ffc0000 [ 90.239589][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.272077][ T6722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1168'. [ 90.314671][ T6727] FAULT_INJECTION: forcing a failure. [ 90.314671][ T6727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.327830][ T6727] CPU: 0 UID: 0 PID: 6727 Comm: syz.2.1170 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.327913][ T6727] Tainted: [W]=WARN [ 90.327919][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.327930][ T6727] Call Trace: [ 90.327937][ T6727] [ 90.327944][ T6727] __dump_stack+0x1d/0x30 [ 90.328055][ T6727] dump_stack_lvl+0xe8/0x140 [ 90.328074][ T6727] dump_stack+0x15/0x1b [ 90.328119][ T6727] should_fail_ex+0x265/0x280 [ 90.328143][ T6727] should_fail+0xb/0x20 [ 90.328225][ T6727] should_fail_usercopy+0x1a/0x20 [ 90.328247][ T6727] _copy_from_user+0x1c/0xb0 [ 90.328296][ T6727] ___sys_sendmsg+0xc1/0x1d0 [ 90.328330][ T6727] __x64_sys_sendmsg+0xd4/0x160 [ 90.328425][ T6727] x64_sys_call+0x191e/0x2ff0 [ 90.328445][ T6727] do_syscall_64+0xd2/0x200 [ 90.328472][ T6727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.328493][ T6727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.328556][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.328576][ T6727] RIP: 0033:0x7f795f42eec9 [ 90.328591][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.328607][ T6727] RSP: 002b:00007f795de97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.328626][ T6727] RAX: ffffffffffffffda RBX: 00007f795f685fa0 RCX: 00007f795f42eec9 [ 90.328641][ T6727] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 90.328654][ T6727] RBP: 00007f795de97090 R08: 0000000000000000 R09: 0000000000000000 [ 90.328699][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.328713][ T6727] R13: 00007f795f686038 R14: 00007f795f685fa0 R15: 00007fff602c37a8 [ 90.328794][ T6727] [ 90.360412][ T29] audit: type=1326 audit(1758785472.131:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295e1eec9 code=0x7ffc0000 [ 90.584386][ T6746] loop3: detected capacity change from 0 to 1024 [ 90.594085][ T6746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.600893][ T6746] EXT4-fs: Ignoring removed nobh option [ 90.639977][ T6746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.766393][ T6764] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1179: Allocating blocks 497-513 which overlap fs metadata [ 90.829378][ T6761] EXT4-fs (loop3): pa ffff888106e61700: logic 16, phys. 145, len 23 [ 90.837402][ T6761] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 90.868670][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.989593][ T6791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1194'. [ 91.093437][ T6799] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 91.109829][ T6799] can0: slcan on ttyS3. [ 91.114833][ T6803] netlink: 'syz.3.1199': attribute type 2 has an invalid length. [ 91.122701][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 91.140318][ T6804] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 91.146879][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.154492][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 91.165468][ T6805] vhci_hcd: connection closed [ 91.165645][ T3953] vhci_hcd: stop threads [ 91.174660][ T3953] vhci_hcd: release socket [ 91.179104][ T3953] vhci_hcd: disconnect device [ 91.184340][ T6799] can0 (unregistered): slcan off ttyS3. [ 91.281428][ T6816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 91.287948][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.295504][ T6816] vhci_hcd vhci_hcd.0: Device attached [ 91.301947][ T6817] vhci_hcd: connection closed [ 91.302150][ T3952] vhci_hcd: stop threads [ 91.311337][ T3952] vhci_hcd: release socket [ 91.315910][ T3952] vhci_hcd: disconnect device [ 91.424744][ T6820] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1206'. [ 91.433987][ T6820] 0·: renamed from 71· [ 91.439590][ T6820] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.449818][ T6820] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.460181][ T6820] 0·: entered allmulticast mode [ 91.465097][ T6820] hsr_slave_0: entered allmulticast mode [ 91.470840][ T6820] hsr_slave_1: entered allmulticast mode [ 91.814425][ T6830] FAULT_INJECTION: forcing a failure. [ 91.814425][ T6830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.827551][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.1.1210 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.827578][ T6830] Tainted: [W]=WARN [ 91.827584][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.827593][ T6830] Call Trace: [ 91.827599][ T6830] [ 91.827605][ T6830] __dump_stack+0x1d/0x30 [ 91.827662][ T6830] dump_stack_lvl+0xe8/0x140 [ 91.827679][ T6830] dump_stack+0x15/0x1b [ 91.827693][ T6830] should_fail_ex+0x265/0x280 [ 91.827713][ T6830] should_fail+0xb/0x20 [ 91.827775][ T6830] should_fail_usercopy+0x1a/0x20 [ 91.827799][ T6830] _copy_from_user+0x1c/0xb0 [ 91.827827][ T6830] ___sys_sendmsg+0xc1/0x1d0 [ 91.827865][ T6830] __sys_sendmmsg+0x178/0x300 [ 91.827936][ T6830] __x64_sys_sendmmsg+0x57/0x70 [ 91.827961][ T6830] x64_sys_call+0x1c4a/0x2ff0 [ 91.828039][ T6830] do_syscall_64+0xd2/0x200 [ 91.828130][ T6830] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.828156][ T6830] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.828182][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.828203][ T6830] RIP: 0033:0x7f8295e1eec9 [ 91.828236][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.828253][ T6830] RSP: 002b:00007f8294887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.828271][ T6830] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 91.828285][ T6830] RDX: 0000000000000002 RSI: 0000200000002ec0 RDI: 0000000000000006 [ 91.828370][ T6830] RBP: 00007f8294887090 R08: 0000000000000000 R09: 0000000000000000 [ 91.828383][ T6830] R10: 00000000040040c1 R11: 0000000000000246 R12: 0000000000000001 [ 91.828395][ T6830] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 91.828411][ T6830] [ 92.059914][ T6838] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1214'. [ 92.161575][ T6849] tipc: Enabled bearer , priority 0 [ 92.172283][ T6849] syzkaller0: entered promiscuous mode [ 92.177827][ T6849] syzkaller0: entered allmulticast mode [ 92.192216][ T6849] tipc: Resetting bearer [ 92.199102][ T6848] tipc: Resetting bearer [ 92.210642][ T6848] tipc: Disabling bearer [ 92.232375][ T6851] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.320472][ T6855] loop3: detected capacity change from 0 to 512 [ 92.340132][ T6855] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 92.621705][ T6859] FAULT_INJECTION: forcing a failure. [ 92.621705][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 92.634474][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.4.1222 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.634507][ T6859] Tainted: [W]=WARN [ 92.634514][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.634547][ T6859] Call Trace: [ 92.634595][ T6859] [ 92.634602][ T6859] __dump_stack+0x1d/0x30 [ 92.634689][ T6859] dump_stack_lvl+0xe8/0x140 [ 92.634709][ T6859] dump_stack+0x15/0x1b [ 92.634727][ T6859] should_fail_ex+0x265/0x280 [ 92.634770][ T6859] ? cma_alloc_port+0x3d/0x2f0 [ 92.634790][ T6859] should_failslab+0x8c/0xb0 [ 92.634816][ T6859] __kmalloc_cache_noprof+0x4c/0x320 [ 92.634846][ T6859] cma_alloc_port+0x3d/0x2f0 [ 92.634874][ T6859] rdma_bind_addr_dst+0xa7f/0x1cf0 [ 92.634929][ T6859] rdma_resolve_addr+0x424/0x1340 [ 92.634949][ T6859] ? __kmalloc_cache_noprof+0x189/0x320 [ 92.634978][ T6859] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 92.635013][ T6859] rdma_create_trans+0x666/0x9e0 [ 92.635041][ T6859] p9_client_create+0x60b/0xbc0 [ 92.635076][ T6859] v9fs_session_init+0xf7/0xde0 [ 92.635102][ T6859] ? avc_has_perm_noaudit+0x1b1/0x200 [ 92.635207][ T6859] ? should_fail_ex+0xdb/0x280 [ 92.635230][ T6859] ? v9fs_mount+0x51/0x5c0 [ 92.635257][ T6859] ? should_failslab+0x8c/0xb0 [ 92.635281][ T6859] ? __kmalloc_cache_noprof+0x189/0x320 [ 92.635332][ T6859] v9fs_mount+0x67/0x5c0 [ 92.635354][ T6859] ? selinux_capable+0x31/0x40 [ 92.635380][ T6859] ? __pfx_v9fs_mount+0x10/0x10 [ 92.635419][ T6859] legacy_get_tree+0x78/0xd0 [ 92.635443][ T6859] vfs_get_tree+0x57/0x1d0 [ 92.635466][ T6859] do_new_mount+0x207/0x5e0 [ 92.635489][ T6859] ? security_capable+0x83/0x90 [ 92.635580][ T6859] path_mount+0x4a4/0xb20 [ 92.635687][ T6859] ? user_path_at+0x109/0x130 [ 92.635718][ T6859] __se_sys_mount+0x28f/0x2e0 [ 92.635741][ T6859] ? fput+0x8f/0xc0 [ 92.635773][ T6859] __x64_sys_mount+0x67/0x80 [ 92.635792][ T6859] x64_sys_call+0x2b4d/0x2ff0 [ 92.635862][ T6859] do_syscall_64+0xd2/0x200 [ 92.635931][ T6859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.635956][ T6859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.635983][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.636005][ T6859] RIP: 0033:0x7f15fc92eec9 [ 92.636019][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.636116][ T6859] RSP: 002b:00007f15fb38f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.636203][ T6859] RAX: ffffffffffffffda RBX: 00007f15fcb85fa0 RCX: 00007f15fc92eec9 [ 92.636213][ T6859] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 92.636224][ T6859] RBP: 00007f15fb38f090 R08: 0000200000000080 R09: 0000000000000000 [ 92.636312][ T6859] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 92.636325][ T6859] R13: 00007f15fcb86038 R14: 00007f15fcb85fa0 R15: 00007fff24f9ca58 [ 92.636343][ T6859] [ 93.139689][ T6869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.160258][ T6872] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1224'. [ 93.199616][ T6869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.241356][ T6874] FAULT_INJECTION: forcing a failure. [ 93.241356][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 93.254202][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.0.1226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.254231][ T6874] Tainted: [W]=WARN [ 93.254295][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.254307][ T6874] Call Trace: [ 93.254315][ T6874] [ 93.254323][ T6874] __dump_stack+0x1d/0x30 [ 93.254345][ T6874] dump_stack_lvl+0xe8/0x140 [ 93.254365][ T6874] dump_stack+0x15/0x1b [ 93.254446][ T6874] should_fail_ex+0x265/0x280 [ 93.254467][ T6874] ? __request_module+0x1c4/0x3e0 [ 93.254487][ T6874] should_failslab+0x8c/0xb0 [ 93.254507][ T6874] ? dev_load+0xa3/0xc0 [ 93.254533][ T6874] __kmalloc_cache_noprof+0x4c/0x320 [ 93.254584][ T6874] ? dev_load+0xa3/0xc0 [ 93.254607][ T6874] __request_module+0x1c4/0x3e0 [ 93.254631][ T6874] dev_load+0xa3/0xc0 [ 93.254657][ T6874] dev_ioctl+0x2d1/0x960 [ 93.254726][ T6874] sock_do_ioctl+0x197/0x220 [ 93.254760][ T6874] sock_ioctl+0x41b/0x610 [ 93.254823][ T6874] ? __pfx_sock_ioctl+0x10/0x10 [ 93.254852][ T6874] __se_sys_ioctl+0xce/0x140 [ 93.254873][ T6874] __x64_sys_ioctl+0x43/0x50 [ 93.254892][ T6874] x64_sys_call+0x1816/0x2ff0 [ 93.254985][ T6874] do_syscall_64+0xd2/0x200 [ 93.255013][ T6874] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.255065][ T6874] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.255090][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.255162][ T6874] RIP: 0033:0x7f216a0ceec9 [ 93.255251][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.255266][ T6874] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.255347][ T6874] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 93.255361][ T6874] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 93.255374][ T6874] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.255387][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.255400][ T6874] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 93.255417][ T6874] [ 93.479043][ T6869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.570089][ T6869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.591269][ T6882] FAULT_INJECTION: forcing a failure. [ 93.591269][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 93.604051][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.0.1230 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.604081][ T6882] Tainted: [W]=WARN [ 93.604087][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.604174][ T6882] Call Trace: [ 93.604181][ T6882] [ 93.604189][ T6882] __dump_stack+0x1d/0x30 [ 93.604236][ T6882] dump_stack_lvl+0xe8/0x140 [ 93.604293][ T6882] dump_stack+0x15/0x1b [ 93.604306][ T6882] should_fail_ex+0x265/0x280 [ 93.604330][ T6882] should_failslab+0x8c/0xb0 [ 93.604426][ T6882] kmem_cache_alloc_node_noprof+0x57/0x320 [ 93.604453][ T6882] ? __alloc_skb+0x101/0x320 [ 93.604472][ T6882] __alloc_skb+0x101/0x320 [ 93.604490][ T6882] netlink_ack+0xfd/0x500 [ 93.604534][ T6882] ? avc_has_perm_noaudit+0x1b1/0x200 [ 93.604560][ T6882] netlink_rcv_skb+0x192/0x220 [ 93.604673][ T6882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.604710][ T6882] rtnetlink_rcv+0x1c/0x30 [ 93.604783][ T6882] netlink_unicast+0x5c0/0x690 [ 93.604803][ T6882] netlink_sendmsg+0x58b/0x6b0 [ 93.604828][ T6882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.604861][ T6882] __sock_sendmsg+0x142/0x180 [ 93.604886][ T6882] ____sys_sendmsg+0x31e/0x4e0 [ 93.604910][ T6882] ___sys_sendmsg+0x17b/0x1d0 [ 93.605039][ T6882] __x64_sys_sendmsg+0xd4/0x160 [ 93.605064][ T6882] x64_sys_call+0x191e/0x2ff0 [ 93.605082][ T6882] do_syscall_64+0xd2/0x200 [ 93.605110][ T6882] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.605139][ T6882] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.605169][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.605191][ T6882] RIP: 0033:0x7f216a0ceec9 [ 93.605204][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.605238][ T6882] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.605258][ T6882] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 93.605271][ T6882] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 93.605363][ T6882] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.605373][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.605431][ T6882] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 93.605451][ T6882] [ 93.885302][ T3952] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.913637][ T3960] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938630][ T3952] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.958192][ T3952] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.006188][ T6888] net_ratelimit: 5 callbacks suppressed [ 94.006204][ T6888] netlink: zone id is out of range [ 94.055746][ T6895] netlink: zone id is out of range [ 94.063988][ T6895] netlink: zone id is out of range [ 94.103223][ T6901] loop3: detected capacity change from 0 to 512 [ 94.110525][ T6901] EXT4-fs warning (device loop3): read_mmp_block:115: Error -74 while reading MMP block 13 [ 94.191472][ T6914] hub 2-0:1.0: USB hub found [ 94.196191][ T6914] hub 2-0:1.0: 8 ports detected [ 94.202303][ T6918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.250031][ T6918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.299839][ T6918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.350252][ T6918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.443908][ T6929] netlink: zone id is out of range [ 94.617167][ T6934] loop2: detected capacity change from 0 to 512 [ 94.624720][ T6934] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.631712][ T6934] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.1247: EA inode hash validation failed [ 94.644328][ T6934] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.657540][ T6934] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1247: corrupted inode contents [ 94.669548][ T6934] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.1247: mark_inode_dirty error [ 94.681108][ T6934] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1247: corrupted inode contents [ 94.693206][ T6934] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.1247: mark_inode_dirty error [ 94.705471][ T6934] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.1247: mark inode dirty (error -117) [ 94.718426][ T6934] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 94.727467][ T6934] EXT4-fs (loop2): 1 orphan inode deleted [ 94.733730][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.834340][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 94.834358][ T29] audit: type=1326 audit(1758785476.631:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 94.835270][ T6938] SELinux: policydb magic number 0x30 does not match expected magic number 0xf97cff8c [ 94.840797][ T29] audit: type=1326 audit(1758785476.631:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 94.864966][ T6938] SELinux: failed to load policy [ 94.873693][ T29] audit: type=1326 audit(1758785476.631:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 94.873730][ T29] audit: type=1326 audit(1758785476.631:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 94.948920][ T29] audit: type=1326 audit(1758785476.631:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 94.972347][ T29] audit: type=1326 audit(1758785476.631:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 94.995831][ T29] audit: type=1326 audit(1758785476.631:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 95.019320][ T29] audit: type=1326 audit(1758785476.631:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 95.024611][ T6941] netlink: zone id is out of range [ 95.042743][ T29] audit: type=1326 audit(1758785476.631:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 95.048868][ T6941] netlink: zone id is out of range [ 95.071162][ T29] audit: type=1326 audit(1758785476.631:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15fc92eec9 code=0x7ffc0000 [ 95.212150][ T6951] netlink: zone id is out of range [ 95.217267][ T6951] netlink: zone id is out of range [ 95.259191][ T3926] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.280275][ T3926] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.288610][ T3926] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289719][ T6958] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1256'. [ 95.297742][ T3926] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.323283][ T6958] 1·: renamed from 70· (while UP) [ 95.323627][ T6960] FAULT_INJECTION: forcing a failure. [ 95.323627][ T6960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.341566][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.1.1257 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.341587][ T6960] Tainted: [W]=WARN [ 95.341591][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.341634][ T6960] Call Trace: [ 95.341657][ T6960] [ 95.341662][ T6960] __dump_stack+0x1d/0x30 [ 95.341707][ T6960] dump_stack_lvl+0xe8/0x140 [ 95.341718][ T6960] dump_stack+0x15/0x1b [ 95.341727][ T6960] should_fail_ex+0x265/0x280 [ 95.341804][ T6960] should_fail+0xb/0x20 [ 95.341815][ T6960] should_fail_usercopy+0x1a/0x20 [ 95.341829][ T6960] _copy_from_user+0x1c/0xb0 [ 95.341922][ T6960] __sys_connect+0xd0/0x2b0 [ 95.341938][ T6960] __x64_sys_connect+0x3f/0x50 [ 95.341950][ T6960] x64_sys_call+0x2c08/0x2ff0 [ 95.342036][ T6960] do_syscall_64+0xd2/0x200 [ 95.342063][ T6960] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.342077][ T6960] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.342093][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.342104][ T6960] RIP: 0033:0x7f8295e1eec9 [ 95.342152][ T6960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.342230][ T6960] RSP: 002b:00007f8294887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 95.342242][ T6960] RAX: ffffffffffffffda RBX: 00007f8296075fa0 RCX: 00007f8295e1eec9 [ 95.342249][ T6960] RDX: 0000000000000026 RSI: 00002000000002c0 RDI: 0000000000000004 [ 95.342260][ T6960] RBP: 00007f8294887090 R08: 0000000000000000 R09: 0000000000000000 [ 95.342275][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.342287][ T6960] R13: 00007f8296076038 R14: 00007f8296075fa0 R15: 00007fff29370dc8 [ 95.342303][ T6960] [ 95.342683][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.354984][ T6958] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 95.706844][ T6974] delete_channel: no stack [ 95.711559][ T6973] delete_channel: no stack [ 95.736489][ T6980] netlink: zone id is out of range [ 95.832589][ T6983] wg1 speed is unknown, defaulting to 1000 [ 96.215125][ T6999] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.250781][ T6999] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.319727][ T6999] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.379851][ T6999] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.522556][ T7007] netlink: 'syz.2.1272': attribute type 2 has an invalid length. [ 97.147698][ T7037] netlink: 'syz.4.1285': attribute type 30 has an invalid length. [ 97.249849][ T7051] vhci_hcd: invalid port number 255 [ 97.255059][ T7051] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 97.283193][ T7052] loop4: detected capacity change from 0 to 2048 [ 97.299219][ T7052] EXT4-fs (loop4): failed to initialize system zone (-117) [ 97.306579][ T7052] EXT4-fs (loop4): mount failed [ 98.120295][ T7070] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1295'. [ 98.303472][ T7088] loop3: detected capacity change from 0 to 512 [ 98.312561][ T7090] FAULT_INJECTION: forcing a failure. [ 98.312561][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.325661][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.0.1303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.325702][ T7090] Tainted: [W]=WARN [ 98.325709][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.325745][ T7090] Call Trace: [ 98.325753][ T7090] [ 98.325760][ T7090] __dump_stack+0x1d/0x30 [ 98.325782][ T7090] dump_stack_lvl+0xe8/0x140 [ 98.325802][ T7090] dump_stack+0x15/0x1b [ 98.325819][ T7090] should_fail_ex+0x265/0x280 [ 98.325842][ T7090] should_fail+0xb/0x20 [ 98.325885][ T7090] should_fail_usercopy+0x1a/0x20 [ 98.325906][ T7090] _copy_from_user+0x1c/0xb0 [ 98.325970][ T7090] ___sys_sendmsg+0xc1/0x1d0 [ 98.326008][ T7090] __x64_sys_sendmsg+0xd4/0x160 [ 98.326045][ T7090] x64_sys_call+0x191e/0x2ff0 [ 98.326057][ T7090] do_syscall_64+0xd2/0x200 [ 98.326107][ T7090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.326121][ T7090] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.326215][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.326228][ T7090] RIP: 0033:0x7f216a0ceec9 [ 98.326265][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.326275][ T7090] RSP: 002b:00007f2168b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.326287][ T7090] RAX: ffffffffffffffda RBX: 00007f216a325fa0 RCX: 00007f216a0ceec9 [ 98.326294][ T7090] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 98.326300][ T7090] RBP: 00007f2168b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.326308][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.326314][ T7090] R13: 00007f216a326038 R14: 00007f216a325fa0 R15: 00007fffde212b58 [ 98.326399][ T7090] [ 98.817117][ T7127] loop2: detected capacity change from 0 to 1024 [ 98.824282][ T7127] EXT4-fs: Ignoring removed orlov option [ 98.830693][ T7127] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 98.850572][ T7127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.863496][ T7127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.913716][ T7140] loop2: detected capacity change from 0 to 8192 [ 99.031999][ T7146] FAULT_INJECTION: forcing a failure. [ 99.031999][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 99.044754][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.4.1325 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.044857][ T7146] Tainted: [W]=WARN [ 99.044863][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.044872][ T7146] Call Trace: [ 99.044879][ T7146] [ 99.044888][ T7146] __dump_stack+0x1d/0x30 [ 99.044959][ T7146] dump_stack_lvl+0xe8/0x140 [ 99.044976][ T7146] dump_stack+0x15/0x1b [ 99.045018][ T7146] should_fail_ex+0x265/0x280 [ 99.045056][ T7146] should_failslab+0x8c/0xb0 [ 99.045079][ T7146] __kmalloc_cache_node_noprof+0x54/0x320 [ 99.045235][ T7146] ? __get_vm_area_node+0x106/0x1d0 [ 99.045265][ T7146] __get_vm_area_node+0x106/0x1d0 [ 99.045358][ T7146] __vmalloc_node_range_noprof+0x273/0xe00 [ 99.045388][ T7146] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.045414][ T7146] ? avc_has_perm_noaudit+0x1b1/0x200 [ 99.045437][ T7146] ? cred_has_capability+0x210/0x280 [ 99.045482][ T7146] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.045506][ T7146] __vmalloc_noprof+0x83/0xc0 [ 99.045611][ T7146] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.045638][ T7146] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.045663][ T7146] ? bpf_prog_alloc+0x2a/0x150 [ 99.045685][ T7146] bpf_prog_alloc+0x3c/0x150 [ 99.045712][ T7146] bpf_prog_load+0x514/0x1070 [ 99.045742][ T7146] ? security_bpf+0x2b/0x90 [ 99.045784][ T7146] __sys_bpf+0x462/0x7b0 [ 99.045809][ T7146] __x64_sys_bpf+0x41/0x50 [ 99.045828][ T7146] x64_sys_call+0x2aea/0x2ff0 [ 99.045913][ T7146] do_syscall_64+0xd2/0x200 [ 99.045941][ T7146] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.045970][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.045988][ T7146] RIP: 0033:0x7f15fc92eec9 [ 99.046115][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.046132][ T7146] RSP: 002b:00007f15fb38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.046158][ T7146] RAX: ffffffffffffffda RBX: 00007f15fcb85fa0 RCX: 00007f15fc92eec9 [ 99.046171][ T7146] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 99.046218][ T7146] RBP: 00007f15fb38f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.046228][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.046239][ T7146] R13: 00007f15fcb86038 R14: 00007f15fcb85fa0 R15: 00007fff24f9ca58 [ 99.046254][ T7146] [ 99.046263][ T7146] syz.4.1325: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 99.299076][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.4.1325 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.299236][ T7146] Tainted: [W]=WARN [ 99.299242][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.299252][ T7146] Call Trace: [ 99.299259][ T7146] [ 99.299266][ T7146] __dump_stack+0x1d/0x30 [ 99.299284][ T7146] dump_stack_lvl+0xe8/0x140 [ 99.299302][ T7146] dump_stack+0x15/0x1b [ 99.299390][ T7146] warn_alloc+0x12b/0x1a0 [ 99.299419][ T7146] __vmalloc_node_range_noprof+0x297/0xe00 [ 99.299520][ T7146] ? avc_has_perm_noaudit+0x1b1/0x200 [ 99.299544][ T7146] ? cred_has_capability+0x210/0x280 [ 99.299568][ T7146] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.299634][ T7146] __vmalloc_noprof+0x83/0xc0 [ 99.299663][ T7146] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.299703][ T7146] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 99.299724][ T7146] ? bpf_prog_alloc+0x2a/0x150 [ 99.299747][ T7146] bpf_prog_alloc+0x3c/0x150 [ 99.299792][ T7146] bpf_prog_load+0x514/0x1070 [ 99.299821][ T7146] ? security_bpf+0x2b/0x90 [ 99.299836][ T7146] __sys_bpf+0x462/0x7b0 [ 99.299864][ T7146] __x64_sys_bpf+0x41/0x50 [ 99.299997][ T7146] x64_sys_call+0x2aea/0x2ff0 [ 99.300014][ T7146] do_syscall_64+0xd2/0x200 [ 99.300040][ T7146] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.300126][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.300148][ T7146] RIP: 0033:0x7f15fc92eec9 [ 99.300163][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.300177][ T7146] RSP: 002b:00007f15fb38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.300209][ T7146] RAX: ffffffffffffffda RBX: 00007f15fcb85fa0 RCX: 00007f15fc92eec9 [ 99.300220][ T7146] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 99.300231][ T7146] RBP: 00007f15fb38f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.300244][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.300255][ T7146] R13: 00007f15fcb86038 R14: 00007f15fcb85fa0 R15: 00007fff24f9ca58 [ 99.300271][ T7146] [ 99.300278][ T7146] Mem-Info: [ 99.513001][ T7146] active_anon:4521 inactive_anon:6 isolated_anon:0 [ 99.513001][ T7146] active_file:8794 inactive_file:2805 isolated_file:0 [ 99.513001][ T7146] unevictable:0 dirty:288 writeback:0 [ 99.513001][ T7146] slab_reclaimable:3258 slab_unreclaimable:26372 [ 99.513001][ T7146] mapped:28990 shmem:1199 pagetables:1578 [ 99.513001][ T7146] sec_pagetables:0 bounce:0 [ 99.513001][ T7146] kernel_misc_reclaimable:0 [ 99.513001][ T7146] free:1827037 free_pcp:1604 free_cma:0 [ 99.557805][ T7146] Node 0 active_anon:18084kB inactive_anon:24kB active_file:35176kB inactive_file:11220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115960kB dirty:1152kB writeback:0kB shmem:4796kB kernel_stack:4528kB pagetables:6312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 99.585199][ T7146] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.613765][ T7146] lowmem_reserve[]: 0 2883 7862 7862 [ 99.619088][ T7146] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 99.649312][ T7146] lowmem_reserve[]: 0 0 4978 4978 [ 99.654392][ T7146] Node 0 Normal free:4293152kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13784kB inactive_anon:4324kB active_file:33896kB inactive_file:11456kB unevictable:0kB writepending:1152kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:4388kB local_pcp:1628kB free_cma:0kB [ 99.686581][ T7146] lowmem_reserve[]: 0 0 0 0 [ 99.691110][ T7146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.703786][ T7146] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 99.719851][ T7146] Node 0 Normal: 1672*4kB (UME) 1721*8kB (UME) 561*16kB (ME) 444*32kB (ME) 323*64kB (ME) 211*128kB (UME) 133*256kB (UME) 60*512kB (ME) 50*1024kB (UME) 27*2048kB (UM) 984*4096kB (UM) = 4293048kB [ 99.739238][ T7146] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 99.748624][ T7146] 12518 total pagecache pages [ 99.753352][ T7146] 32 pages in swap cache [ 99.757624][ T7146] Free swap = 120324kB [ 99.761800][ T7146] Total swap = 124996kB [ 99.765940][ T7146] 2097051 pages RAM [ 99.769785][ T7146] 0 pages HighMem/MovableOnly [ 99.774508][ T7146] 80446 pages reserved [ 99.797929][ T7148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1326'. [ 99.838228][ C0] ================================================================== [ 99.846327][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 99.853531][ C0] [ 99.855846][ C0] read-write to 0xffff888101242eb8 of 8 bytes by interrupt on cpu 1: [ 99.863897][ C0] wq_worker_tick+0x60/0x230 [ 99.868491][ C0] sched_tick+0x11a/0x270 [ 99.872814][ C0] update_process_times+0x15f/0x190 [ 99.878025][ C0] tick_nohz_handler+0x249/0x2d0 [ 99.882972][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 99.888172][ C0] hrtimer_interrupt+0x21a/0x460 [ 99.893106][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 99.899005][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 99.904638][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.910609][ C0] __sanitizer_cov_trace_pc+0x11/0x70 [ 99.916165][ C0] __io_commit_cqring_flush+0xa9/0x100 [ 99.921616][ C0] __io_cqring_overflow_flush+0x4e3/0x4f0 [ 99.927332][ C0] io_ring_ctx_free+0x68/0x3a0 [ 99.932091][ C0] io_ring_exit_work+0x529/0x560 [ 99.937024][ C0] process_scheduled_works+0x4cb/0x9d0 [ 99.942481][ C0] worker_thread+0x582/0x770 [ 99.947064][ C0] kthread+0x489/0x510 [ 99.951115][ C0] ret_from_fork+0x11f/0x1b0 [ 99.955690][ C0] ret_from_fork_asm+0x1a/0x30 [ 99.960438][ C0] [ 99.962745][ C0] read-write to 0xffff888101242eb8 of 8 bytes by interrupt on cpu 0: [ 99.970787][ C0] wq_worker_tick+0x60/0x230 [ 99.975359][ C0] sched_tick+0x11a/0x270 [ 99.979672][ C0] update_process_times+0x15f/0x190 [ 99.984862][ C0] tick_nohz_handler+0x249/0x2d0 [ 99.989784][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 99.994964][ C0] hrtimer_interrupt+0x21a/0x460 [ 99.999883][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 100.005764][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 100.011386][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.017350][ C0] io_poll_remove_all+0x70/0x1a0 [ 100.022282][ C0] io_uring_try_cancel_requests+0x275/0x310 [ 100.028164][ C0] io_ring_exit_work+0x195/0x560 [ 100.033089][ C0] process_scheduled_works+0x4cb/0x9d0 [ 100.038537][ C0] worker_thread+0x582/0x770 [ 100.043116][ C0] kthread+0x489/0x510 [ 100.047167][ C0] ret_from_fork+0x11f/0x1b0 [ 100.051738][ C0] ret_from_fork_asm+0x1a/0x30 [ 100.056490][ C0] [ 100.058796][ C0] value changed: 0x00000000000249f0 -> 0x0000000000027100 [ 100.065881][ C0] [ 100.068187][ C0] Reported by Kernel Concurrency Sanitizer on: [ 100.074319][ C0] CPU: 0 UID: 0 PID: 3947 Comm: kworker/u8:49 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.085844][ C0] Tainted: [W]=WARN [ 100.089630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.099670][ C0] Workqueue: iou_exit io_ring_exit_work [ 100.105208][ C0] ================================================================== [ 100.114452][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 100.114464][ T29] audit: type=1326 audit(1758785481.601:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.146873][ T29] audit: type=1326 audit(1758785481.941:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.170362][ T29] audit: type=1326 audit(1758785481.941:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.193836][ T29] audit: type=1326 audit(1758785481.941:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.217316][ T29] audit: type=1326 audit(1758785481.941:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.240703][ T29] audit: type=1326 audit(1758785481.941:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.273453][ T7153] wg1 speed is unknown, defaulting to 1000 [ 100.279257][ T29] audit: type=1326 audit(1758785481.971:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.279286][ T29] audit: type=1326 audit(1758785481.971:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.326172][ T29] audit: type=1326 audit(1758785481.971:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.360220][ T29] audit: type=1326 audit(1758785482.151:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1406eec9 code=0x7ffc0000 [ 100.496331][ T7155] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 100.560673][ T7155] wg1 speed is unknown, defaulting to 1000 [ 101.003346][ T3952] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.013482][ T3952] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.024261][ T3941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.034996][ T3941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0