last executing test programs: 1.650241958s ago: executing program 0 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) (async) brk(0x200000ffc000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.609403589s ago: executing program 2 (id=1197): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffff24f, 0x9875, 0x6) prctl$PR_SET_NAME(0xf, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) (fail_nth: 4) kexec_load(0x0, 0x0, 0x0, 0x0) 1.397784843s ago: executing program 2 (id=1199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async, rerun: 32) r1 = socket$kcm(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x84, 0xd, &(0x7f0000000000), 0x8) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000580)=ANY=[@ANYRES16=r4], 0x53) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000180)='[\x93!\x00']}, &(0x7f0000000500)={[&(0x7f0000000280)='%\x00', &(0x7f0000000380)='-\\/-\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='kfree\x00', &(0x7f0000000480)='kfree\x00', &(0x7f00000004c0)='V^\\&*+W\x00']}, 0x100) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async, rerun: 32) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.297387454s ago: executing program 2 (id=1202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES8=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306030000000000000000000af2ff020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000e0ff120256821f469c723dde82d09a75100e09b7983c563388ff0bc9db6bacd84b5fb00585c5bed09dd7b02fa55df1a3cd72145e40e0861794b80615aaa25a465583c5f80627abcece7f945b84055d49bc1483ae9d000000000000000000000000000000004143919d1d674cd8f46c91365903754898bafd6b2e94e87b8951f329dfe87439d0adf07733df90ab6299559c804237f6f5279cd5dcafc1746012f070faa76d"], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) lsm_get_self_attr(0x69, &(0x7f0000000440)={0x0, 0x0, 0x65, 0x45, ""/69}, &(0x7f0000000340)=0x65, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000a00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@discard}, {@noload}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@oldalloc}, {@norecovery}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1.178378407s ago: executing program 3 (id=1206): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x63, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000140)={0x6a}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x7c, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gretap0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7fffffff, 0xf3f, 0x1, 0x8100}}, {0x28, 0x1, {0x9, 0x61b, 0x10000, 0x8100}}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) sendfile(r0, r0, 0x0, 0x4) 1.145348167s ago: executing program 2 (id=1207): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 1.097862118s ago: executing program 1 (id=1208): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.075632599s ago: executing program 1 (id=1209): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6_vti0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'wg1\x00'}}, 0x1e) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 1.073864599s ago: executing program 2 (id=1210): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYRES32=0x0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xac0e, 0x0, 0x210000, 0x3e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r8}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x700, 0x8, 0xffff, 0x1, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x64, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x9b, [@multicast1]}, @ssrr={0x89, 0x1b, 0xe3, [@empty, @remote, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1e}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x382, 0x0, 0x0, 0x0, 0x97}, [@jmp={0x5, 0x1, 0x2, 0x1, 0x8, 0xc, 0xfffffffffffffffc}, @exit]}, &(0x7f00000004c0)='syzkaller\x00', 0x39, 0x66, &(0x7f0000000680)=""/102, 0x41000, 0x53, '\x00', r13, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r0, r10], 0x0, 0x10, 0x7982}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r11, 0x0, 0x200000000000006}, 0x18) rmdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) fallocate(r14, 0x24, 0x1, 0x0) sendmsg$kcm(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) 989.83069ms ago: executing program 1 (id=1211): r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ftruncate(r1, 0x2000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 929.413841ms ago: executing program 2 (id=1213): lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000380), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x3, 0x1}, {0x2}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x2}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}}], 0x28) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x4, 0x7fffffff, 0x0, 'queue1\x00', 0x10}) bpf$MAP_CREATE(0x0, 0x0, 0x48) iopl(0x47) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x81, 0x0, 0x0, 0x10000}, {0x16, 0x0, 0xff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file7\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x23d, &(0x7f0000000700)="$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") 640.210237ms ago: executing program 0 (id=1217): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 560.315629ms ago: executing program 3 (id=1220): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 512.95543ms ago: executing program 3 (id=1221): r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r0, &(0x7f0000003940), 0x0, 0x82, 0x3) 491.42693ms ago: executing program 3 (id=1222): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000a00)=""/191, 0xbf}], 0x5}, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, &(0x7f0000001080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37, 0x0, 0x3}, 0x28) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x8, 0x78d3f, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0xf086, 0xfffffffffffffffb, 0xfff, 0x5, 0x81, 0x5, 0x6, 0x0, 0xa, 0x0, 0x8000080000000002}, 0xffffffffffffffff, 0x2000000000000010, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) unshare(0x4a000200) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0xe5, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x30, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 437.649901ms ago: executing program 4 (id=1223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0xc, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0xffffffffffffffff, 0x8001}, 0x106, 0xffffffff, 0x8001, 0x3, 0x40000002, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xa4, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0xa4}}, 0x8000) ptrace(0x10, r2) ptrace$getregset(0x4212, r2, 0x201, &(0x7f0000000240)={0x0}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9}, 0x18) lchown(&(0x7f0000000ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, 0xee00) r10 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r10, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) connect$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x7, @remote, 0x2, 0x3}, 0x20) 417.680462ms ago: executing program 4 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r3, &(0x7f0000000040)=@objname={'system_u:object_r:tmp_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2, 0x20, './file0\x00'}, 0x4f) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000280)={0x1d, r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r8, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500", @ANYRES32], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'bridge_slave_1\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r12, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 339.280253ms ago: executing program 4 (id=1225): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04b3", 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x1, 0x1, 0x1, 0x9, {{0x15, 0x4, 0x2, 0x1c, 0x54, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0x0, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x81}]}, @lsrr={0x83, 0x1b, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010102, @empty]}, @generic={0x86, 0xf, "b3c5558a8cd75c8c66fa00b252"}]}}}}}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x16, r2, 0x1, 0x6, 0x6, @remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b0000040400"], 0x18}}, 0x0) 338.588403ms ago: executing program 0 (id=1226): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000000000000aa60000030000000e050000", @ANYRES32, @ANYBLOB="0000000000001300000000060000000000000000c9cd3e9466ae55f7579a78c570177cc1d56ad612a6f3c822e9706eca99caab7742361b526297d2951c129c68ca59187e97da96f03b3c1a0cdc0b8bb1dfa9f3a2b09b43b6eac48cad49a6458dd18e9ff707ddd411cc95c8a59bf5d4d5086858b317a4079f927a2938f80422bb6e31468478ab795f4b7998a0c3b4d6d14cb17b904796a2de13ff77266967bfa75d5061689e5149e15998fcec04fea0061e5a748c7f46d8033b4b2cd143a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES64=r1], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000906010200000000000000000200ffff180007c3519836869d9122ee800c00018008000140e000020008000a40000000020900020073797a31000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c4081) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x3c, 0xa, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdfffffffffffffc, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}, {&(0x7f0000000840)="356715729ac9b9cccd0c1c0b57345dcb27d8454aaad9cc23e4181894d139c98b07a1f9a44ac82caddf22ee32f925836ee9404ae9eb3359eae61db0fd666235f93ab9aa1b4610f3e89a02bbc8ea0d94565a2d3ab79d17579a379c4df8a007c9cdabf6d51452f0870577eeb7ad32c4226668189468d68837cb8ae68f6c02559efcd6b90bb4068c5facddc77b65a3bcdd439f0d3f8f2ddbb7525b646163d362be", 0x9f}, {&(0x7f0000000b00)="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", 0x160}, {&(0x7f0000000300)}, {&(0x7f0000000380)="87dbdbcdda2ebbf4e83c45c7", 0xc}, {0x0}], 0x6}, 0x4000054) bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r1], 0x7, 0x7e2, &(0x7f0000001740)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4, 0x0, 0x400000000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000001500000000000000"], &(0x7f0000000600)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000280)={0x5, 0x2, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) 257.232485ms ago: executing program 3 (id=1227): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x30, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 247.021875ms ago: executing program 4 (id=1228): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/vmcoreinfo', 0x180000, 0xd0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a70700000000030600710a5eeb9d04710400bbd6e76880000000005c786d17fd8beb29b773c0c6b84caec25c498e8b8a686fd42e2e4dd0728a9cde87af6cbd434628bbc0968e30fe1d03", 0x4e}], 0x1, 0xee, 0x4000004) sendmsg$can_bcm(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300004001000000020000004002000033a773533664928ec6b4f2922f34a3c5148573abd6baf982138eb87222318feaf5c5d75215aaf181b56881366b84e72216"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 219.422315ms ago: executing program 0 (id=1229): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 194.884296ms ago: executing program 0 (id=1230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) 168.141277ms ago: executing program 4 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x3}, 0xfd}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x421, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "559ae9", 0x3eb, 0x1, 0xfe, @empty, @private0={0xfc, 0x0, '\x00', 0x4}, {[@dstopts={0x21, 0x5, '\x00', [@generic={0x60, 0x7, "91fde52b1438ad"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x18}]}, @dstopts={0x16, 0x25, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0xfffd, [0x8]}}, @hao={0xc9, 0x10, @local}, @generic={0x8, 0xd8, "32c630ae4ae7a3386ec17bd1302c24b936d5ebf5f3b43fdd861899ddc76baf485b34d858a1e707ddd44378e3c4fe75e759405d3b06276bbb9921e82aa87f4307b8db0a1660a05b153caeeee96c6279d138098dcf0f5c9fc2206bb38cddb51a0fcdaccc7e4e9b09111a5591a0025e6a7cd0cb272a161e45c26797222dcf19c3aab5d873e292e4c754c599c33e68a676f5e5c1799ed187114756855c11d8e27e8656baaa7129f57bf385201e60f3c0bdc4b2d6120bb81aec7678906d0547a12c59c6312156774d64466499791e992b00"/216}, @pad1]}, @hopopts={0x8, 0x17, '\x00', [@generic={0x9, 0xac, "3688645c9fada4db324fad9c74f3b64c8ce7368d648ed5d7627bd5c1643a3c4fe3830740a7f9c21a6d5eeed6c725f2c092fd02285af53ba76b662e7bc5433bc68b3020a80e457df836efd2d7354b650aaf3293ee723f22dbad7042823de92d06ad9752b72e2d1fd6b4f8202384ae7422ccc519ced2ab79cfefa2b9683a4a0ed29e1cb7d9cda1a11eb43a83362d646c8fd1c59059a5cb937edbd4df333214e3e77c51c9a8e5e932eecf4ce35a"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x2b, 0x1a, '\x00', [@generic={0xd, 0xd0, "3aaf470510defa08808e2f3af8e43c8747afe8e1f6522e03f8e314d0bb531ac18757d81158de99afe789f3f3fe40440ffe9b72bfb024ed9c3676cddf4ea5829ba5b2eb38e643ec2d708314b205087f57b31521c2bd64d75e5a8b838a63bf351789d1a4ce3d14e660788d11fa61a6ff6bcc39340f973fee519008eadaa73e63dbaa1d136857aa247092cc37ff9eab06c8778193d0bb5f302dcbae64e99e081507c4c6a047c72fbcc1e9d18cc3f6a20c496033e285d2f35bc001f8087a28cf6e6b51ad908d41eafeffd03206c48dae5bee"}, @pad1]}, @routing={0x8, 0x2, 0x0, 0x0, 0x0, [@empty]}, @dstopts={0x3b, 0xc, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x51, "652c39a7aa57faba0a216297b3973d80b88ab0290340c7eb6370fcd0b3b99cbcb0238f5bdc067733d79158ca3e7296558d6e74b4e0f8e66a390749be703385adb272913ecb66e1d228d652610c83ef8d93"}]}, @hopopts={0x5c, 0x0, '\x00', [@pad1]}, @srh={0x8, 0x4, 0x4, 0x2, 0x1, 0x18, 0x8, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, @private0]}], "04b26d668ed5c96144c9d46d313e41b88174d6f6d7478b25cc564215365a7bf27f74ad"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2b, 0x25dfdbff, {0x80, 0x10, 0x80, 0x10, 0x0, 0x4, 0xfe, 0xe, 0x400}, ["", "", "", ""]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 167.832947ms ago: executing program 3 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 102.713238ms ago: executing program 4 (id=1233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002180)={&(0x7f0000001000)="aeff22262ffbb6fa28afe25e013ea39ee6f9cbcd57e2b11ef182db1a1d7ff2944b3bbf6303a4a20f7bfb7e995284f82d14eba62606b94ea3a0cb2aa8c6f160bc1005fa48bf42c4458b28a4f4421511625a9ba333f8aca51b3245d0715ee7a6b3d595f05f276274f72900b0ed8d6079d6adf5c94c1574967773d46575c061552ec8c07492445da554b9772d656f184eb09c6789f1409da9e46f25a9b770d641a770ca79c08e1cf275a40671273ac7d716316837cfc35d0a1b45fcbbfe9d5264888dff0ba96595d40e630c5b7dd91f332fd38e24d86f3f3679edacc405000e054fde5bf36a084f667a2c7eaee8a99ec92ab0941bfc39d64a4c08170f02e1405a68bbcef889c45a6e162a5a31a2522d6ce27643305d2b0e3eedb72401e534067fca8b25ac4edf1ccc72489c3e105ab7b2fc3289013dac089fb55aa0add8ca687f3eafae5f5782f74bd0e1460c4f8585e65e0f837391c55ca22b5565ae53e90fe6c2bc79f3332d14364ab5468b805f516deae90b63d929fed147f83c273c4564a09735f657793c5d98329042a6d9c77cdc6ea853bc7b0af939dd0c9d483101753b02c6e534e06ad70cb3fbad3c7eb3e9a6ea173c93e7a7c8349a25b3984ffbe3fc01c9eee76f0c51b026d471c2d2c8059cb0ba5a36e7ac76fdcb209c559cf5ca5719abe7ad910936ce2112bae30402073bd6c637bc647340eee065275bce7592802949d15262bda4e4a6a73a3c5679bea4df0a247dfc150be2061b0958b5f1f00ef6cb197a2c4a312db950715a854bd92c61ff58d3b93ce9b0adaf9eeff740cc82f754dcc3bc180f8ab8730a7e65e9612574151a42a471bde378c513b0c956470b945d31aaa38d7c56cbda38c4af918caecdbc87474b15df3227cd9061a8ff52e5b826a96e677ecc0e4c4277d579c13e91b583db1c5d328b0039fdbbea6ccb2838ed74a29c7bbdcf3ec406b1918b4613d7959d69182c8d10f33ff8cb1e9a655a9d7c7f079bba4a1cbf5e9ad5a126af74baaaf7933bfce4a2c924fb3ae683341e3465712eec7a4452cbb7434e02c5b5447af48034d9ed2eb31b3d47bc7253db43afaca13ff84b8066b692e7d74e96964ca9b29181a016c0c7c02aa26338daa9de4632de15cde391ea194612768732d42420e285f0f2e96c81ab1b6614765b9350280abdf3c3db09a263dd2b5d87999509f6328b70d8fd93625b92d0820d60a643cae0420ea306ffdfd40dd3f7b502f7c32a82d78d8fd5b1cb6a0ef0dc1ef9b511563af368d62667e2517bc30ba1bb5fb14e184227e71a6f1d8169ecf0509fe2407c4164e3339f557d5ce27f090b70f2b1864771e83362d760fa942ab4047a9b2dd5930e919c4641c35ba886844b7eecd3448687e3e1c4b91c63b89bc111e68a500cf0a04e0c785a7dd45a67a113aeff108cdcb82eaaf7747e30d7548b7f043bf14640d9b51544c53b6616eb833a263d812dc6e83527a013b500db467f264a7a924e73a079f0ad6870ee949b653501df458f008c14fd795a8fb53ae268137dfc2c3ecbca3281fc203aa2bed649187963cf27ef427957361cf783c804872cfc2c16334003ded396a1780903cd0cd9861e4b22d405c00ab911e2e5ef172caca6f205baf69b52bad907df85ba7f4b6269d3e2725693c6211210188f011ab303e188e1a9a3f405e4ff29fad6f5736b55390108b4925ba688a45c38f621f52fd362b7fe45e4791b8bc1df2e2bd5cdee63960649fb911b55dcb22573eb2939e72c4bd0d18c6a30f54b5f90c768a62f703bd3241c0590cbbdac3e035bb6d215520eded738fe017e55a967c6b3423689e616c6171387e4aaf2e2a254b97b5fe20a1ea080dafeadce84f072bcd3139ab1e7a5d6be343c4506db76d5503195e9ce82e86a1f13aa012f798f41cc2546f988e52dc9c27720bf00a320b0af3c78ea7b489df3bc127bc82f3bc4d89cd28a6a9f531dc249d6c8c5c1a4f4935d61a2ac6705e68265647d01e9d2a49ba32b28f8669f5e81cb13e73fe68d3b265ab3fbebcff6a6f5bafbed2f4956a22ab473f5ba5fa14c99eb7e143413cd027761858da77880cbfc7dcbe9f7a0ffad88843046c919ab32ca25e1801d7108f13d8c493c1cb2ebe719a75d83eef9f27c449477efaf35daa38cfd1fe9ce921710bb7d123055967f101e13a15d6974fe5c01bc5f3d36dc20c2008f5d806fe9b2b781c7c0476ceb8d61b1f3eda7957646382366b06101e32d890a74c5618591b049a98e208baf5cc3ce3026cb24dd941254d053258bfc8be231e87bacef632fd97003c0fcfd9b8508e969bb09b7f97415e7e6ec1553636db66fda75ead864fd56dbd88d9dadd1e9c59e97559749693eb2515c044cf63e119c07c5c8f4640915e64cfe2a59650b60791c5bad0adfb17268895c61fd72d134e76f09c5e1eb30a8a18dbe22383bfa428c9d79af1ebf1712e663a4ef6b885ab35207e9479fa0eeb7aab9be6a6a205df5c55124cfe0d71c6f2ce2f81d1204bc671454bafc1ab416b51b048c5c2479096238bc2b6ea6c3ded4761639b55408a4c1ecb91226c834b910fda3b93ab2813366af8279fed542f98a757397aff396145a4e2368fbee7ec3eb52f95e9752d99be80f7959db0030917bdc0fda70f7c6ba1f9796f34d2b5cf09a4151572b09f7a04f99c0082079ad6db8d84136b6023286819cce007c42ed62eb56b83c9f6874356e8b56efb57398a7e9edc898aba1375fb88f9c5dcc91dd5045b488a18e9936c5c1fa0727d972f59483a42818237153edf08e43ded2cdcadf5592193998d9e8ed1ad1db2c1b41a91a6c6d792a91aca2db4e604fe64f78e381bc077ac1069217f06099d56c4ec5a18ac05c465ce9936286fc54461d38b71fbeaaab523dac18fdd3b30e0a0eb6ea49fd6d5746b90051ded8aaafd1a7aa83dbd6abd7ed78be42fb80248de836de10bfd4b9bd8528ea807c9ade9879a85b7ff2b4017bb200e0ec0f48ff4268cbc57fdd78b568968ed586010e768c9c7679c5cfc2a88b988deca14c5d3a30b6aa95aa95d0eff7430eb76940d4c111995066a1e99720705909f7fe6e1d14e24ec2ed24d864a8247a1fec01695763f795cbb516f92958329756b83650932287c0c228f06f72629984dbc61996c1a7f2e282d3c8d5246df3a8e814210cd8f5daf7fee78ac63ef43d79064eeb3d55a389ac5117f4a6a771484507c73e7d8ca1ecf8a47e98e222340d647e0dfcd1288d675f9d60b2cfb6700d5a71b64e9ec30019aff328176991273407b33b1ee932ba2317cff0a11bf29ffa1669f13c4c2164482981c6699bedbd0f7cdde3479daed22c7730d67eff777f727cf0920ade725f30bc4988339b62e0e474cf12e4a8765c54fd65e579969294b9f5f3b24e90644632b70b1c3ca3a338bfc44de1f5450e49f342dc72c964a5cd92b07dc1389ca683448b9826a89a730c930709fc8d12c96c384a49b16ce7c3b6a2821171c59c5267dc5171cbe5a87406670c074d7ef1702bb87b0ded84e109b3b4f1b0e5bebae65a68fb03fc81368efdae295feb46a78e74c4db7440d5ecb295ad79186ec320abe1fa7961c4af9c8f9539e0f0a8ff9e361b3d49c4365be927d6bcaff21843c19222948e390f5646525b99257ee2093c8f5143f881c0f2f6be24406da08d230b0304964f33109abc87601925a71594179a81b32f78f9aaeb57f538d08270fa37fd48a899c5f57708bfd3c6cf6683f590dbc6a64df501a8f1450d322121e810b85b846663b34f2f7703e9db73f54591273a1418d9618ef7134f7b26388390dd756a9c322920ed319e1d6352bb9afe3ed27a3efdede617195c9cefbe93e8f50cd6120bd50310c88ee59c2c4d31589873d412de0452ca369aa850009ef5f9a99adc2ca0e16210b78254d001f7c2a81925927bf7f4b862a4e51857fe57b7215d5964bb70c286c999183995d60fcc661ad71b84a376c52e78bed9f4c12d909827f993c0bedcff71b5a5cd4bc15b98760baf05698505176202e57ab4450482399feee232694942df0c8730ebfc9e47bc8ccb78af8db1e76628b6412dcfa520ece69320b8867958ad11dccc1f6559b6de7f4123c465a845f978c42e79cc2d3786b521b890f47599760c6a3a187a15e65c3fd242737e9c3653556a2217feff44653191b28c833d99a0cb29e5d15ff7041bcb2d8c48961362ff9feca91d8fdf424da5ddb032aafb47761ab37b3c80648ea6cd9e833367083ae98a5f217a562141e4a728d71b4595106e07da3de110c5ecd7eeeea9251fe3bed5d91c282263b27484e1b6cb15c0838cdf0a3f5924ea0661b4ae6f23d1f4bb0c383580dcf03859213d2bb72a8360f4e890142033df5ccd34de17196abe7939e9edf696af8100b20c7d34c5955fd1800813e4397378636f636d80477d57f644be82b5f839c69875b7b580ad775aa90612ac16c545d766b096c9eb84ca3cf6cf3d8e09fa03a3dc144bcf2241d34559f4e1554fbf168a13f2ac1a8ff1b10ad4edf75a6803295f59e7b6747f4bd64709ced046ee11f2823023a75af9492b3340b2b5934ab680da092f7a7416032ad5f02fd85877a7ac7de45f45c64335b876d8f8f0481e0cf9896fa18577b685fa0899cbbc8a1802620b55c9178675ce62ec331ff79e661b29b90748487cb4645845584904ab0778398b751e4c73c2b3300a13ad6aa4f867dc48e37eee56c085822fa7f7ccd5c61b1c093e69b1b9b000ca0888b2bf1e2abc71337e52c7de79f3450aa0dc49a16f4b67b078c35a25a3c6418d538ae3adf9fc9072cf1a90c1c7e503ee197d0d579bef8e10d665dbd18d9b311ad06e358a6befba0704f748bdc37e448818f541f333d746c4fe748a567e27aa584b7056e43aca735c8e952b4b0972231a5316cd03e299ee25fda0a4423ff8fa63f8f035f9fd2f3ec22850108ded1902b2ad985fc76f17d6e633c00efab539c88f7e3629511ca52179ab1be5fae8fcc6adec726efcb35924739f56fec549f9f879a4d01f11f53a19610b9a2e4918285be629ccbfc3c74bec89b10c6414a941acef59bb49a498b096c96ab86cf15072e6db055a23845774a45cac7225bbf543b8e937e1e15634e896732b7f4d58e1881b0f9e9821c7f8689d81f86a29b5cc231965ee5fb123bd986dcb62ed473bdc6fdc0210e069eded52217a7830cf3f30eab7f7a926b543d778e0c669f7a20788b71f910fb8ff49aa9ecf16d539d660d62d3dbec101e2378ae25846760af1bf1c13877bd953843a1dae42d6ccf203ac9386c9195f119982fc1c5f879bb45624efb752a36a0a9d4cbf4307a572be1afc11b755f882ea2769c172bab2fa7f8f303b897f2184608b7910332f346b573575ec99069a9ae4cdd700ddb87e5b55ca7d101f41014775160d23e7bd4984b2f42792445c9b98df5f097a4826f6b92b817a17d3169d1e3213c04b442d7a28b07eb02709e9bfd3f5a3429051fe13fe32e9db40ef4b52b4f46bf95997f3eb3d4205c32744744e2e953687e22221a5ca41e6de1a246871aef30bb89cf723e2e9af6109ef0d79f0af7a856255c99a05f967878fc5b3195eef76fb7c5ff4811e2f1ab1530752bfa743ced729051bd24d689c1750541b38de9a0ba25282f193d1", &(0x7f0000002000)=""/37, &(0x7f0000002040)="6394d3488330666dbdd9950eab66acedb7d63142f2579bb5c49d6afcf733d53868f022d406603472f8fe856b8b1dec832a9e1aed59fed3cfabd3b12e55901fc713c22cf897a36932c18e9b56a1b27cd6e87f4ad3feddd6f92547771e227cd37d9d513fd0cd3064f568ad9d7d7392db22625d406496d092a39dcbb89252e3736d81263d4c2f60eaf0bdf5bf510d0d046260b1bc6fabeecf59289a42c09ce4b5488d1e094bb040ad5250952d8f7e0e9ae0b1e1dc11e940a60a902045731b520ab814026fd0fa683e994eaec41845f221df61bc1e16156175865a5cb0cd4336c5", 0x0, 0x4f, r0, 0x4}, 0x38) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000200)=0x8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002180)={&(0x7f0000001000)="aeff22262ffbb6fa28afe25e013ea39ee6f9cbcd57e2b11ef182db1a1d7ff2944b3bbf6303a4a20f7bfb7e995284f82d14eba62606b94ea3a0cb2aa8c6f160bc1005fa48bf42c4458b28a4f4421511625a9ba333f8aca51b3245d0715ee7a6b3d595f05f276274f72900b0ed8d6079d6adf5c94c1574967773d46575c061552ec8c07492445da554b9772d656f184eb09c6789f1409da9e46f25a9b770d641a770ca79c08e1cf275a40671273ac7d716316837cfc35d0a1b45fcbbfe9d5264888dff0ba96595d40e630c5b7dd91f332fd38e24d86f3f3679edacc405000e054fde5bf36a084f667a2c7eaee8a99ec92ab0941bfc39d64a4c08170f02e1405a68bbcef889c45a6e162a5a31a2522d6ce27643305d2b0e3eedb72401e534067fca8b25ac4edf1ccc72489c3e105ab7b2fc3289013dac089fb55aa0add8ca687f3eafae5f5782f74bd0e1460c4f8585e65e0f837391c55ca22b5565ae53e90fe6c2bc79f3332d14364ab5468b805f516deae90b63d929fed147f83c273c4564a09735f657793c5d98329042a6d9c77cdc6ea853bc7b0af939dd0c9d483101753b02c6e534e06ad70cb3fbad3c7eb3e9a6ea173c93e7a7c8349a25b3984ffbe3fc01c9eee76f0c51b026d471c2d2c8059cb0ba5a36e7ac76fdcb209c559cf5ca5719abe7ad910936ce2112bae30402073bd6c637bc647340eee065275bce7592802949d15262bda4e4a6a73a3c5679bea4df0a247dfc150be2061b0958b5f1f00ef6cb197a2c4a312db950715a854bd92c61ff58d3b93ce9b0adaf9eeff740cc82f754dcc3bc180f8ab8730a7e65e9612574151a42a471bde378c513b0c956470b945d31aaa38d7c56cbda38c4af918caecdbc87474b15df3227cd9061a8ff52e5b826a96e677ecc0e4c4277d579c13e91b583db1c5d328b0039fdbbea6ccb2838ed74a29c7bbdcf3ec406b1918b4613d7959d69182c8d10f33ff8cb1e9a655a9d7c7f079bba4a1cbf5e9ad5a126af74baaaf7933bfce4a2c924fb3ae683341e3465712eec7a4452cbb7434e02c5b5447af48034d9ed2eb31b3d47bc7253db43afaca13ff84b8066b692e7d74e96964ca9b29181a016c0c7c02aa26338daa9de4632de15cde391ea194612768732d42420e285f0f2e96c81ab1b6614765b9350280abdf3c3db09a263dd2b5d87999509f6328b70d8fd93625b92d0820d60a643cae0420ea306ffdfd40dd3f7b502f7c32a82d78d8fd5b1cb6a0ef0dc1ef9b511563af368d62667e2517bc30ba1bb5fb14e184227e71a6f1d8169ecf0509fe2407c4164e3339f557d5ce27f090b70f2b1864771e83362d760fa942ab4047a9b2dd5930e919c4641c35ba886844b7eecd3448687e3e1c4b91c63b89bc111e68a500cf0a04e0c785a7dd45a67a113aeff108cdcb82eaaf7747e30d7548b7f043bf14640d9b51544c53b6616eb833a263d812dc6e83527a013b500db467f264a7a924e73a079f0ad6870ee949b653501df458f008c14fd795a8fb53ae268137dfc2c3ecbca3281fc203aa2bed649187963cf27ef427957361cf783c804872cfc2c16334003ded396a1780903cd0cd9861e4b22d405c00ab911e2e5ef172caca6f205baf69b52bad907df85ba7f4b6269d3e2725693c6211210188f011ab303e188e1a9a3f405e4ff29fad6f5736b55390108b4925ba688a45c38f621f52fd362b7fe45e4791b8bc1df2e2bd5cdee63960649fb911b55dcb22573eb2939e72c4bd0d18c6a30f54b5f90c768a62f703bd3241c0590cbbdac3e035bb6d215520eded738fe017e55a967c6b3423689e616c6171387e4aaf2e2a254b97b5fe20a1ea080dafeadce84f072bcd3139ab1e7a5d6be343c4506db76d5503195e9ce82e86a1f13aa012f798f41cc2546f988e52dc9c27720bf00a320b0af3c78ea7b489df3bc127bc82f3bc4d89cd28a6a9f531dc249d6c8c5c1a4f4935d61a2ac6705e68265647d01e9d2a49ba32b28f8669f5e81cb13e73fe68d3b265ab3fbebcff6a6f5bafbed2f4956a22ab473f5ba5fa14c99eb7e143413cd027761858da77880cbfc7dcbe9f7a0ffad88843046c919ab32ca25e1801d7108f13d8c493c1cb2ebe719a75d83eef9f27c449477efaf35daa38cfd1fe9ce921710bb7d123055967f101e13a15d6974fe5c01bc5f3d36dc20c2008f5d806fe9b2b781c7c0476ceb8d61b1f3eda7957646382366b06101e32d890a74c5618591b049a98e208baf5cc3ce3026cb24dd941254d053258bfc8be231e87bacef632fd97003c0fcfd9b8508e969bb09b7f97415e7e6ec1553636db66fda75ead864fd56dbd88d9dadd1e9c59e97559749693eb2515c044cf63e119c07c5c8f4640915e64cfe2a59650b60791c5bad0adfb17268895c61fd72d134e76f09c5e1eb30a8a18dbe22383bfa428c9d79af1ebf1712e663a4ef6b885ab35207e9479fa0eeb7aab9be6a6a205df5c55124cfe0d71c6f2ce2f81d1204bc671454bafc1ab416b51b048c5c2479096238bc2b6ea6c3ded4761639b55408a4c1ecb91226c834b910fda3b93ab2813366af8279fed542f98a757397aff396145a4e2368fbee7ec3eb52f95e9752d99be80f7959db0030917bdc0fda70f7c6ba1f9796f34d2b5cf09a4151572b09f7a04f99c0082079ad6db8d84136b6023286819cce007c42ed62eb56b83c9f6874356e8b56efb57398a7e9edc898aba1375fb88f9c5dcc91dd5045b488a18e9936c5c1fa0727d972f59483a42818237153edf08e43ded2cdcadf5592193998d9e8ed1ad1db2c1b41a91a6c6d792a91aca2db4e604fe64f78e381bc077ac1069217f06099d56c4ec5a18ac05c465ce9936286fc54461d38b71fbeaaab523dac18fdd3b30e0a0eb6ea49fd6d5746b90051ded8aaafd1a7aa83dbd6abd7ed78be42fb80248de836de10bfd4b9bd8528ea807c9ade9879a85b7ff2b4017bb200e0ec0f48ff4268cbc57fdd78b568968ed586010e768c9c7679c5cfc2a88b988deca14c5d3a30b6aa95aa95d0eff7430eb76940d4c111995066a1e99720705909f7fe6e1d14e24ec2ed24d864a8247a1fec01695763f795cbb516f92958329756b83650932287c0c228f06f72629984dbc61996c1a7f2e282d3c8d5246df3a8e814210cd8f5daf7fee78ac63ef43d79064eeb3d55a389ac5117f4a6a771484507c73e7d8ca1ecf8a47e98e222340d647e0dfcd1288d675f9d60b2cfb6700d5a71b64e9ec30019aff328176991273407b33b1ee932ba2317cff0a11bf29ffa1669f13c4c2164482981c6699bedbd0f7cdde3479daed22c7730d67eff777f727cf0920ade725f30bc4988339b62e0e474cf12e4a8765c54fd65e579969294b9f5f3b24e90644632b70b1c3ca3a338bfc44de1f5450e49f342dc72c964a5cd92b07dc1389ca683448b9826a89a730c930709fc8d12c96c384a49b16ce7c3b6a2821171c59c5267dc5171cbe5a87406670c074d7ef1702bb87b0ded84e109b3b4f1b0e5bebae65a68fb03fc81368efdae295feb46a78e74c4db7440d5ecb295ad79186ec320abe1fa7961c4af9c8f9539e0f0a8ff9e361b3d49c4365be927d6bcaff21843c19222948e390f5646525b99257ee2093c8f5143f881c0f2f6be24406da08d230b0304964f33109abc87601925a71594179a81b32f78f9aaeb57f538d08270fa37fd48a899c5f57708bfd3c6cf6683f590dbc6a64df501a8f1450d322121e810b85b846663b34f2f7703e9db73f54591273a1418d9618ef7134f7b26388390dd756a9c322920ed319e1d6352bb9afe3ed27a3efdede617195c9cefbe93e8f50cd6120bd50310c88ee59c2c4d31589873d412de0452ca369aa850009ef5f9a99adc2ca0e16210b78254d001f7c2a81925927bf7f4b862a4e51857fe57b7215d5964bb70c286c999183995d60fcc661ad71b84a376c52e78bed9f4c12d909827f993c0bedcff71b5a5cd4bc15b98760baf05698505176202e57ab4450482399feee232694942df0c8730ebfc9e47bc8ccb78af8db1e76628b6412dcfa520ece69320b8867958ad11dccc1f6559b6de7f4123c465a845f978c42e79cc2d3786b521b890f47599760c6a3a187a15e65c3fd242737e9c3653556a2217feff44653191b28c833d99a0cb29e5d15ff7041bcb2d8c48961362ff9feca91d8fdf424da5ddb032aafb47761ab37b3c80648ea6cd9e833367083ae98a5f217a562141e4a728d71b4595106e07da3de110c5ecd7eeeea9251fe3bed5d91c282263b27484e1b6cb15c0838cdf0a3f5924ea0661b4ae6f23d1f4bb0c383580dcf03859213d2bb72a8360f4e890142033df5ccd34de17196abe7939e9edf696af8100b20c7d34c5955fd1800813e4397378636f636d80477d57f644be82b5f839c69875b7b580ad775aa90612ac16c545d766b096c9eb84ca3cf6cf3d8e09fa03a3dc144bcf2241d34559f4e1554fbf168a13f2ac1a8ff1b10ad4edf75a6803295f59e7b6747f4bd64709ced046ee11f2823023a75af9492b3340b2b5934ab680da092f7a7416032ad5f02fd85877a7ac7de45f45c64335b876d8f8f0481e0cf9896fa18577b685fa0899cbbc8a1802620b55c9178675ce62ec331ff79e661b29b90748487cb4645845584904ab0778398b751e4c73c2b3300a13ad6aa4f867dc48e37eee56c085822fa7f7ccd5c61b1c093e69b1b9b000ca0888b2bf1e2abc71337e52c7de79f3450aa0dc49a16f4b67b078c35a25a3c6418d538ae3adf9fc9072cf1a90c1c7e503ee197d0d579bef8e10d665dbd18d9b311ad06e358a6befba0704f748bdc37e448818f541f333d746c4fe748a567e27aa584b7056e43aca735c8e952b4b0972231a5316cd03e299ee25fda0a4423ff8fa63f8f035f9fd2f3ec22850108ded1902b2ad985fc76f17d6e633c00efab539c88f7e3629511ca52179ab1be5fae8fcc6adec726efcb35924739f56fec549f9f879a4d01f11f53a19610b9a2e4918285be629ccbfc3c74bec89b10c6414a941acef59bb49a498b096c96ab86cf15072e6db055a23845774a45cac7225bbf543b8e937e1e15634e896732b7f4d58e1881b0f9e9821c7f8689d81f86a29b5cc231965ee5fb123bd986dcb62ed473bdc6fdc0210e069eded52217a7830cf3f30eab7f7a926b543d778e0c669f7a20788b71f910fb8ff49aa9ecf16d539d660d62d3dbec101e2378ae25846760af1bf1c13877bd953843a1dae42d6ccf203ac9386c9195f119982fc1c5f879bb45624efb752a36a0a9d4cbf4307a572be1afc11b755f882ea2769c172bab2fa7f8f303b897f2184608b7910332f346b573575ec99069a9ae4cdd700ddb87e5b55ca7d101f41014775160d23e7bd4984b2f42792445c9b98df5f097a4826f6b92b817a17d3169d1e3213c04b442d7a28b07eb02709e9bfd3f5a3429051fe13fe32e9db40ef4b52b4f46bf95997f3eb3d4205c32744744e2e953687e22221a5ca41e6de1a246871aef30bb89cf723e2e9af6109ef0d79f0af7a856255c99a05f967878fc5b3195eef76fb7c5ff4811e2f1ab1530752bfa743ced729051bd24d689c1750541b38de9a0ba25282f193d1", &(0x7f0000002000)=""/37, &(0x7f0000002040)="6394d3488330666dbdd9950eab66acedb7d63142f2579bb5c49d6afcf733d53868f022d406603472f8fe856b8b1dec832a9e1aed59fed3cfabd3b12e55901fc713c22cf897a36932c18e9b56a1b27cd6e87f4ad3feddd6f92547771e227cd37d9d513fd0cd3064f568ad9d7d7392db22625d406496d092a39dcbb89252e3736d81263d4c2f60eaf0bdf5bf510d0d046260b1bc6fabeecf59289a42c09ce4b5488d1e094bb040ad5250952d8f7e0e9ae0b1e1dc11e940a60a902045731b520ab814026fd0fa683e994eaec41845f221df61bc1e16156175865a5cb0cd4336c5", 0x0, 0x4f, r0, 0x4}, 0x38) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000200)=0x8, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') (async) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 101.260338ms ago: executing program 1 (id=1234): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 65.779838ms ago: executing program 0 (id=1235): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x2b, 0x80000, 0x1) shutdown(r1, 0xfffffffffffffffd) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x6a040000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYRESDEC=r0], 0x0) 17.782439ms ago: executing program 1 (id=1236): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 0s ago: executing program 1 (id=1237): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_io_uring_setup(0x1459, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') kernel console output (not intermixed with test programs): 0 [ 63.119811][ T5044] _copy_from_user+0x1c/0xb0 [ 63.119838][ T5044] sock_do_ioctl+0xe6/0x220 [ 63.119874][ T5044] sock_ioctl+0x41b/0x610 [ 63.119909][ T5044] ? __pfx_sock_ioctl+0x10/0x10 [ 63.119933][ T5044] __se_sys_ioctl+0xce/0x140 [ 63.119986][ T5044] __x64_sys_ioctl+0x43/0x50 [ 63.120002][ T5044] x64_sys_call+0x1816/0x2ff0 [ 63.120021][ T5044] do_syscall_64+0xd2/0x200 [ 63.120070][ T5044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.120154][ T5044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.120181][ T5044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.120201][ T5044] RIP: 0033:0x7f8c8aafeba9 [ 63.120215][ T5044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.120232][ T5044] RSP: 002b:00007f8c89567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.120271][ T5044] RAX: ffffffffffffffda RBX: 00007f8c8ad45fa0 RCX: 00007f8c8aafeba9 [ 63.120284][ T5044] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000004 [ 63.120297][ T5044] RBP: 00007f8c89567090 R08: 0000000000000000 R09: 0000000000000000 [ 63.120309][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.120322][ T5044] R13: 00007f8c8ad46038 R14: 00007f8c8ad45fa0 R15: 00007fffe7f13ac8 [ 63.120336][ T5044] [ 63.341354][ T5052] ÿÿÿÿÿÿ: renamed from vlan1 [ 63.388327][ T5047] lo speed is unknown, defaulting to 1000 [ 63.395597][ T5047] lo speed is unknown, defaulting to 1000 [ 63.514042][ T5067] pim6reg: entered allmulticast mode [ 63.527955][ T5067] pim6reg: left allmulticast mode [ 63.592962][ T5077] loop1: detected capacity change from 0 to 512 [ 63.601270][ T5077] EXT4-fs: Ignoring removed bh option [ 63.611791][ T5077] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.621868][ T5077] EXT4-fs (loop1): 1 truncate cleaned up [ 63.690766][ T5090] netlink: 'syz.0.583': attribute type 21 has an invalid length. [ 63.709838][ T5090] loop0: detected capacity change from 0 to 764 [ 63.732739][ T5090] rock: directory entry would overflow storage [ 63.738975][ T5090] rock: sig=0x4f50, size=4, remaining=3 [ 63.744581][ T5090] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.757811][ T5085] loop2: detected capacity change from 0 to 512 [ 63.769847][ T5092] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.777404][ T5092] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 63.784225][ T5085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.807227][ T5085] ext4: Unknown parameter 'block_validity2' [ 63.811648][ T5094] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 63.919916][ T5105] team0: No ports can be present during mode change [ 63.996783][ T5113] loop0: detected capacity change from 0 to 512 [ 64.004425][ T5113] EXT4-fs: Ignoring removed bh option [ 64.011275][ T5113] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 64.028253][ T5117] loop1: detected capacity change from 0 to 128 [ 64.038881][ T5113] EXT4-fs (loop0): 1 truncate cleaned up [ 64.057051][ T5117] ref_ctr increment failed for inode: 0x1b offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811b10f300 [ 64.068470][ T5117] ref_ctr increment failed for inode: 0x1b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811b10f300 [ 64.099016][ T5117] lo speed is unknown, defaulting to 1000 [ 64.112829][ T5117] lo speed is unknown, defaulting to 1000 [ 64.128611][ T5119] pim6reg: entered allmulticast mode [ 64.153777][ T5119] pim6reg: left allmulticast mode [ 64.213355][ T5128] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.228854][ T5128] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 64.236765][ T5116] uprobe: syz.1.593:5116 failed to unregister, leaking uprobe [ 64.238667][ T5131] loop3: detected capacity change from 0 to 512 [ 64.253901][ T5131] journal_path: Lookup failure for './bus' [ 64.259751][ T5131] EXT4-fs: error: could not find journal device path [ 64.311630][ T5116] uprobe: syz.1.593:5116 failed to unregister, leaking uprobe [ 64.320927][ T5133] loop0: detected capacity change from 0 to 1024 [ 64.435630][ T5143] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.525096][ T5148] loop3: detected capacity change from 0 to 1024 [ 64.553683][ T5150] loop1: detected capacity change from 0 to 512 [ 64.560360][ T5150] EXT4-fs: Ignoring removed bh option [ 64.569641][ T5150] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 64.589136][ T5148] SELinux: Context @ is not valid (left unmapped). [ 64.627865][ T5150] EXT4-fs (loop1): 1 truncate cleaned up [ 64.674876][ T5156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5119 sclass=netlink_route_socket pid=5156 comm=syz.0.607 [ 64.727795][ T5162] netlink: 'syz.3.610': attribute type 21 has an invalid length. [ 64.791592][ T5166] hub 9-0:1.0: USB hub found [ 64.796879][ T5166] hub 9-0:1.0: 8 ports detected [ 64.805937][ T5170] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.813412][ T5170] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 64.917840][ T5177] loop3: detected capacity change from 0 to 1024 [ 64.933549][ T5184] loop1: detected capacity change from 0 to 512 [ 64.946029][ T5182] siw: device registration error -23 [ 64.954042][ T5182] netlink: 'syz.4.619': attribute type 21 has an invalid length. [ 64.975421][ T5184] EXT4-fs: Ignoring removed bh option [ 64.975667][ T5177] EXT4-fs (loop3): failed to initialize system zone (-117) [ 64.992944][ T5186] loop0: detected capacity change from 0 to 512 [ 65.002067][ T5184] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 65.026987][ T5186] journal_path: Lookup failure for './bus' [ 65.032877][ T5186] EXT4-fs: error: could not find journal device path [ 65.051405][ T5130] loop2: detected capacity change from 0 to 8192 [ 65.058364][ T5177] EXT4-fs (loop3): mount failed [ 65.075005][ T5184] EXT4-fs (loop1): 1 truncate cleaned up [ 65.099639][ T5193] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.148626][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 65.148640][ T29] audit: type=1400 audit(1757699787.575:1623): avc: denied { bind } for pid=5198 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.231222][ T29] audit: type=1326 audit(1757699787.575:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.254586][ T29] audit: type=1326 audit(1757699787.575:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.277907][ T29] audit: type=1400 audit(1757699787.605:1626): avc: denied { write } for pid=5198 comm="syz.1.627" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.301458][ T29] audit: type=1326 audit(1757699787.605:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.324836][ T29] audit: type=1326 audit(1757699787.605:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.348178][ T29] audit: type=1326 audit(1757699787.605:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.371479][ T29] audit: type=1326 audit(1757699787.605:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.394807][ T29] audit: type=1326 audit(1757699787.605:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.418105][ T29] audit: type=1326 audit(1757699787.605:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af071eba9 code=0x7ffc0000 [ 65.484326][ T5209] netlink: 'syz.1.630': attribute type 21 has an invalid length. [ 65.494323][ T5218] loop2: detected capacity change from 0 to 256 [ 65.823581][ T5226] loop1: detected capacity change from 0 to 512 [ 65.853878][ T5226] journal_path: Lookup failure for './bus' [ 65.859731][ T5226] EXT4-fs: error: could not find journal device path [ 66.133659][ T5239] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 66.179999][ T5243] lo speed is unknown, defaulting to 1000 [ 66.190607][ T5243] lo speed is unknown, defaulting to 1000 [ 66.317771][ T5245] __nla_validate_parse: 16 callbacks suppressed [ 66.317898][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 66.333108][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 66.345905][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 66.354738][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 66.355862][ T5224] loop4: detected capacity change from 0 to 8192 [ 66.457791][ T5264] FAULT_INJECTION: forcing a failure. [ 66.457791][ T5264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.470889][ T5264] CPU: 1 UID: 0 PID: 5264 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.470914][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.470924][ T5264] Call Trace: [ 66.470930][ T5264] [ 66.470935][ T5264] __dump_stack+0x1d/0x30 [ 66.471010][ T5264] dump_stack_lvl+0xe8/0x140 [ 66.471028][ T5264] dump_stack+0x15/0x1b [ 66.471042][ T5264] should_fail_ex+0x265/0x280 [ 66.471067][ T5264] should_fail+0xb/0x20 [ 66.471084][ T5264] should_fail_usercopy+0x1a/0x20 [ 66.471104][ T5264] _copy_to_user+0x20/0xa0 [ 66.471131][ T5264] simple_read_from_buffer+0xb5/0x130 [ 66.471204][ T5264] proc_fail_nth_read+0x10e/0x150 [ 66.471230][ T5264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.471253][ T5264] vfs_read+0x1a8/0x770 [ 66.471272][ T5264] ? __rcu_read_unlock+0x4f/0x70 [ 66.471339][ T5264] ? __fget_files+0x184/0x1c0 [ 66.471360][ T5264] ? tiocsti+0x19b/0x1d0 [ 66.471377][ T5264] ksys_read+0xda/0x1a0 [ 66.471399][ T5264] __x64_sys_read+0x40/0x50 [ 66.471420][ T5264] x64_sys_call+0x27bc/0x2ff0 [ 66.471514][ T5264] do_syscall_64+0xd2/0x200 [ 66.471539][ T5264] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.471587][ T5264] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.471614][ T5264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.471634][ T5264] RIP: 0033:0x7f8c8aafd5bc [ 66.471649][ T5264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.471674][ T5264] RSP: 002b:00007f8c89567030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.471692][ T5264] RAX: ffffffffffffffda RBX: 00007f8c8ad45fa0 RCX: 00007f8c8aafd5bc [ 66.471704][ T5264] RDX: 000000000000000f RSI: 00007f8c895670a0 RDI: 0000000000000004 [ 66.471714][ T5264] RBP: 00007f8c89567090 R08: 0000000000000000 R09: 0000000000000000 [ 66.471725][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.471735][ T5264] R13: 00007f8c8ad46038 R14: 00007f8c8ad45fa0 R15: 00007fffe7f13ac8 [ 66.471756][ T5264] [ 66.735375][ T5276] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 66.789123][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 66.806072][ T5284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'. [ 66.815202][ T5284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'. [ 66.824127][ T5284] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 66.868298][ T5279] hub 9-0:1.0: USB hub found [ 66.873734][ T5279] hub 9-0:1.0: 8 ports detected [ 66.942954][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 66.951804][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 66.966087][ T5292] loop3: detected capacity change from 0 to 1024 [ 66.975582][ T5303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5303 comm=syz.0.665 [ 66.983213][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 67.018106][ T5292] EXT4-fs mount: 16 callbacks suppressed [ 67.018124][ T5292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.033350][ T5309] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 67.041986][ T5305] program syz.2.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.056691][ T5292] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.102438][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.148184][ T5318] loop3: detected capacity change from 0 to 512 [ 67.154909][ T5318] EXT4-fs: Ignoring removed bh option [ 67.160818][ T5318] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.170579][ T5318] EXT4-fs (loop3): 1 truncate cleaned up [ 67.177055][ T5318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.201388][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.229612][ T5324] loop3: detected capacity change from 0 to 512 [ 67.236386][ T5324] EXT4-fs: Ignoring removed bh option [ 67.258361][ T5324] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.272981][ T5324] EXT4-fs (loop3): 1 truncate cleaned up [ 67.279275][ T5324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.304090][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.322458][ T5330] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.336122][ T5330] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 67.380193][ T5335] siw: device registration error -23 [ 67.403525][ T5335] netlink: 'syz.0.676': attribute type 21 has an invalid length. [ 67.503499][ T5343] pim6reg: entered allmulticast mode [ 67.508974][ T5345] loop3: detected capacity change from 0 to 764 [ 67.520032][ T5343] pim6reg: left allmulticast mode [ 67.529462][ T5345] rock: directory entry would overflow storage [ 67.535660][ T5345] rock: sig=0x4f50, size=4, remaining=3 [ 67.541222][ T5345] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 67.596317][ T5347] loop3: detected capacity change from 0 to 512 [ 67.598215][ T5349] netlink: 'syz.0.683': attribute type 21 has an invalid length. [ 67.604210][ T5347] EXT4-fs: Ignoring removed bh option [ 67.650421][ T5347] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.666555][ T5347] EXT4-fs (loop3): 1 truncate cleaned up [ 67.690615][ T5347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.728653][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.782575][ T5361] loop3: detected capacity change from 0 to 512 [ 67.815343][ T5361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.873912][ T5369] lo speed is unknown, defaulting to 1000 [ 67.886053][ T5361] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.902874][ T5365] hub 9-0:1.0: USB hub found [ 67.911226][ T5369] lo speed is unknown, defaulting to 1000 [ 67.918817][ T5365] hub 9-0:1.0: 8 ports detected [ 68.029237][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.101348][ T5378] netlink: 'syz.3.694': attribute type 21 has an invalid length. [ 68.134107][ T5376] loop4: detected capacity change from 0 to 8192 [ 68.335884][ T5385] loop3: detected capacity change from 0 to 512 [ 68.402851][ T5385] EXT4-fs: Ignoring removed bh option [ 68.498802][ T5385] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.610461][ T5385] EXT4-fs (loop3): 1 truncate cleaned up [ 68.625781][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.654307][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.927226][ T5407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.999091][ T5409] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.045919][ T5407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.063464][ T5413] loop2: detected capacity change from 0 to 512 [ 69.070269][ T5413] EXT4-fs: Ignoring removed bh option [ 69.102507][ T5416] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.111878][ T5413] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 69.133398][ T5413] EXT4-fs (loop2): 1 truncate cleaned up [ 69.139427][ T5413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.139991][ T5407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.200957][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.235825][ T5423] pim6reg: entered allmulticast mode [ 69.252648][ T5423] pim6reg: left allmulticast mode [ 69.277589][ T5407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.310762][ T5371] loop0: detected capacity change from 0 to 8192 [ 69.381816][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.417139][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.431306][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.449786][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.633054][ T5445] loop1: detected capacity change from 0 to 512 [ 69.639660][ T5445] EXT4-fs: Ignoring removed bh option [ 69.653693][ T5447] siw: device registration error -23 [ 69.662285][ T5447] netlink: 'syz.4.723': attribute type 21 has an invalid length. [ 69.706421][ T5445] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 69.764282][ T5445] EXT4-fs (loop1): 1 truncate cleaned up [ 69.774002][ T5457] netlink: 'syz.3.727': attribute type 21 has an invalid length. [ 69.801517][ T5445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.909417][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.994442][ T5478] syz.1.732 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.029966][ T5479] hub 9-0:1.0: USB hub found [ 70.048636][ T5487] netlink: 'syz.0.739': attribute type 13 has an invalid length. [ 70.063396][ T5479] hub 9-0:1.0: 8 ports detected [ 70.073962][ T5478] loop1: detected capacity change from 0 to 2048 [ 70.115864][ T5493] loop4: detected capacity change from 0 to 512 [ 70.122731][ T5493] EXT4-fs: Ignoring removed bh option [ 70.133063][ T5493] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 70.151403][ T5495] netlink: 'syz.0.743': attribute type 21 has an invalid length. [ 70.154353][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 70.154365][ T29] audit: type=1326 audit(1757699792.585:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8c8ab0034a code=0x7ffc0000 [ 70.193423][ T5493] EXT4-fs (loop4): 1 truncate cleaned up [ 70.202202][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.217934][ T5478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.236345][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.247150][ T29] audit: type=1326 audit(1757699792.665:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c8aafd510 code=0x7ffc0000 [ 70.270531][ T29] audit: type=1326 audit(1757699792.665:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8c8aafd8f7 code=0x7ffc0000 [ 70.270557][ T29] audit: type=1326 audit(1757699792.675:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c8aafd510 code=0x7ffc0000 [ 70.270670][ T29] audit: type=1326 audit(1757699792.675:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8aafeba9 code=0x7ffc0000 [ 70.270688][ T29] audit: type=1326 audit(1757699792.675:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8aafeba9 code=0x7ffc0000 [ 70.285736][ T29] audit: type=1326 audit(1757699792.675:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8c8aafeba9 code=0x7ffc0000 [ 70.392567][ T29] audit: type=1326 audit(1757699792.675:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8aafeba9 code=0x7ffc0000 [ 70.416171][ T29] audit: type=1326 audit(1757699792.675:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8aafeba9 code=0x7ffc0000 [ 70.439531][ T29] audit: type=1326 audit(1757699792.675:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8c8aafeba9 code=0x7ffc0000 [ 70.499538][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.540802][ T5519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.556254][ T3841] lo speed is unknown, defaulting to 1000 [ 70.588062][ T5526] netlink: 'syz.0.752': attribute type 13 has an invalid length. [ 70.620676][ T5533] loop2: detected capacity change from 0 to 256 [ 70.645248][ T5533] FAT-fs (loop2): Invalid FSINFO signature: 0x0ffffff8, 0x00000000 (sector = 33) [ 70.662240][ T5533] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start df000002) [ 70.672296][ T5533] FAT-fs (loop2): Filesystem has been set read-only [ 70.683912][ T5535] netlink: 'syz.3.755': attribute type 21 has an invalid length. [ 70.714940][ T5541] loop3: detected capacity change from 0 to 512 [ 70.738002][ T5541] EXT4-fs: Ignoring removed bh option [ 70.777843][ T5541] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 70.808335][ T5541] EXT4-fs (loop3): 1 truncate cleaned up [ 70.822128][ T5541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.864135][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.898255][ T5537] loop4: detected capacity change from 0 to 1024 [ 70.938096][ T5537] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.754: Failed to acquire dquot type 0 [ 70.984804][ T5555] FAULT_INJECTION: forcing a failure. [ 70.984804][ T5555] name failslab, interval 1, probability 0, space 0, times 0 [ 70.997502][ T5555] CPU: 1 UID: 0 PID: 5555 Comm: syz.0.760 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.997546][ T5555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.997571][ T5555] Call Trace: [ 70.997576][ T5555] [ 70.997582][ T5555] __dump_stack+0x1d/0x30 [ 70.997614][ T5555] dump_stack_lvl+0xe8/0x140 [ 70.997632][ T5555] dump_stack+0x15/0x1b [ 70.997647][ T5555] should_fail_ex+0x265/0x280 [ 70.997667][ T5555] should_failslab+0x8c/0xb0 [ 70.997733][ T5555] kmem_cache_alloc_node_noprof+0x57/0x320 [ 70.997761][ T5555] ? __alloc_skb+0x101/0x320 [ 70.997823][ T5555] __alloc_skb+0x101/0x320 [ 70.997843][ T5555] netlink_alloc_large_skb+0xba/0xf0 [ 70.997862][ T5555] netlink_sendmsg+0x3cf/0x6b0 [ 70.997939][ T5555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.997962][ T5555] __sock_sendmsg+0x145/0x180 [ 70.997993][ T5555] ____sys_sendmsg+0x31e/0x4e0 [ 70.998089][ T5555] ___sys_sendmsg+0x17b/0x1d0 [ 70.998127][ T5555] __x64_sys_sendmsg+0xd4/0x160 [ 70.998153][ T5555] x64_sys_call+0x191e/0x2ff0 [ 70.998173][ T5555] do_syscall_64+0xd2/0x200 [ 70.998249][ T5555] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.998351][ T5555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.998378][ T5555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.998469][ T5555] RIP: 0033:0x7f71ed21eba9 [ 70.998483][ T5555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.998497][ T5555] RSP: 002b:00007f71ebc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.998513][ T5555] RAX: ffffffffffffffda RBX: 00007f71ed465fa0 RCX: 00007f71ed21eba9 [ 70.998550][ T5555] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 70.998561][ T5555] RBP: 00007f71ebc87090 R08: 0000000000000000 R09: 0000000000000000 [ 70.998728][ T5555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.998738][ T5555] R13: 00007f71ed466038 R14: 00007f71ed465fa0 R15: 00007ffdb43ca5c8 [ 70.998836][ T5555] [ 71.227184][ T5550] hub 9-0:1.0: USB hub found [ 71.234916][ T5550] hub 9-0:1.0: 8 ports detected [ 71.242971][ T5537] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 71.288291][ T5537] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.754: corrupted inode contents [ 71.311045][ T5537] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.754: mark_inode_dirty error [ 71.331266][ T5537] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.754: corrupted inode contents [ 71.344721][ T5537] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.754: mark_inode_dirty error [ 71.364782][ T5537] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.754: corrupted inode contents [ 71.379312][ T5566] netlink: 'syz.0.766': attribute type 13 has an invalid length. [ 71.398354][ T5537] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 71.422607][ T5537] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.754: corrupted inode contents [ 71.433451][ T5569] loop0: detected capacity change from 0 to 512 [ 71.457172][ T5537] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.754: mark_inode_dirty error [ 71.469418][ T5537] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 71.478842][ T5537] EXT4-fs (loop4): 1 truncate cleaned up [ 71.486263][ T5569] EXT4-fs: Ignoring removed bh option [ 71.488944][ T5537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.504878][ T5569] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 71.517606][ T5569] EXT4-fs (loop0): 1 truncate cleaned up [ 71.529543][ T5572] loop1: detected capacity change from 0 to 8192 [ 71.531599][ T5569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.620579][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.642904][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.743784][ T5577] loop4: detected capacity change from 0 to 512 [ 71.750393][ T5577] journal_path: Lookup failure for './bus' [ 71.756262][ T5577] EXT4-fs: error: could not find journal device path [ 71.863394][ T5588] loop2: detected capacity change from 0 to 764 [ 71.868995][ T5590] __nla_validate_parse: 28 callbacks suppressed [ 71.869060][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 71.902151][ T5588] rock: directory entry would overflow storage [ 71.908341][ T5588] rock: sig=0x4f50, size=4, remaining=3 [ 71.913914][ T5588] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.936378][ T5590] hub 9-0:1.0: USB hub found [ 71.941735][ T5590] hub 9-0:1.0: 8 ports detected [ 72.019609][ T5594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=5594 comm=syz.2.777 [ 72.024069][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 72.062266][ T5600] loop4: detected capacity change from 0 to 512 [ 72.078702][ T5600] EXT4-fs: Ignoring removed bh option [ 72.084740][ T5600] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 72.094589][ T5600] EXT4-fs (loop4): 1 truncate cleaned up [ 72.101077][ T5600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.125670][ T5603] siw: device registration error -23 [ 72.134204][ T5603] netlink: 'syz.2.780': attribute type 21 has an invalid length. [ 72.142008][ T5603] netlink: 156 bytes leftover after parsing attributes in process `syz.2.780'. [ 72.150997][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 72.195304][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.233861][ T5605] loop2: detected capacity change from 0 to 512 [ 72.243087][ T5607] loop3: detected capacity change from 0 to 512 [ 72.245672][ T5609] pim6reg: entered allmulticast mode [ 72.249759][ T5607] EXT4-fs: Ignoring removed bh option [ 72.260655][ T5605] journal_path: Lookup failure for './bus' [ 72.266540][ T5605] EXT4-fs: error: could not find journal device path [ 72.290160][ T5609] pim6reg: left allmulticast mode [ 72.303032][ T5607] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 72.313027][ T5607] EXT4-fs (loop3): 1 truncate cleaned up [ 72.330397][ T5607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.396423][ T5612] loop2: detected capacity change from 0 to 512 [ 72.409625][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.427951][ T5612] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.449742][ T5612] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.458421][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 72.469787][ T5612] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.784: Failed to acquire dquot type 1 [ 72.470385][ T5623] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 72.498715][ T5612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.784: bg 0: block 40: padding at end of block bitmap is not set [ 72.513425][ T5612] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 72.525607][ T5621] hub 9-0:1.0: USB hub found [ 72.542205][ T5621] hub 9-0:1.0: 8 ports detected [ 72.547574][ T5612] EXT4-fs (loop2): 1 truncate cleaned up [ 72.554060][ T5612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.588617][ T5612] loop9: detected capacity change from 0 to 7 [ 72.594961][ T5612] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.605351][ T5612] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.613340][ T5612] loop9: unable to read partition table [ 72.624245][ T5612] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 72.624245][ T5612] ) failed (rc=-5) [ 72.630367][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.662959][ T5631] siw: device registration error -23 [ 72.671680][ T5631] netlink: 'syz.0.792': attribute type 21 has an invalid length. [ 72.679503][ T5631] netlink: 156 bytes leftover after parsing attributes in process `syz.0.792'. [ 72.688599][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 72.689745][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.727629][ T5632] tipc: Started in network mode [ 72.732626][ T5632] tipc: Node identity ac141411, cluster identity 4711 [ 72.738847][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.765272][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.765407][ T5632] tipc: New replicast peer: 127.0.0.1 [ 72.778885][ T5632] tipc: Enabled bearer , priority 10 [ 72.781142][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 72.813316][ T5637] loop0: detected capacity change from 0 to 512 [ 72.841210][ T5637] journal_path: Lookup failure for './bus' [ 72.847071][ T5637] EXT4-fs: error: could not find journal device path [ 72.881804][ T5645] loop3: detected capacity change from 0 to 512 [ 72.888490][ T5645] journal_path: Lookup failure for './bus' [ 72.894477][ T5645] EXT4-fs: error: could not find journal device path [ 72.924782][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.946154][ T5647] netlink: 'syz.3.799': attribute type 21 has an invalid length. [ 72.953934][ T5647] netlink: 156 bytes leftover after parsing attributes in process `syz.3.799'. [ 72.997403][ T5656] FAULT_INJECTION: forcing a failure. [ 72.997403][ T5656] name failslab, interval 1, probability 0, space 0, times 0 [ 73.010112][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.0.802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.010139][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.010151][ T5656] Call Trace: [ 73.010158][ T5656] [ 73.010165][ T5656] __dump_stack+0x1d/0x30 [ 73.010183][ T5656] dump_stack_lvl+0xe8/0x140 [ 73.010230][ T5656] dump_stack+0x15/0x1b [ 73.010246][ T5656] should_fail_ex+0x265/0x280 [ 73.010275][ T5656] should_failslab+0x8c/0xb0 [ 73.010374][ T5656] __kvmalloc_node_noprof+0x123/0x4e0 [ 73.010402][ T5656] ? alloc_netdev_mqs+0x553/0xa30 [ 73.010515][ T5656] alloc_netdev_mqs+0x553/0xa30 [ 73.010539][ T5656] rtnl_create_link+0x239/0x710 [ 73.010564][ T5656] rtnl_newlink_create+0x14c/0x620 [ 73.010612][ T5656] ? security_capable+0x83/0x90 [ 73.010638][ T5656] ? netlink_ns_capable+0x86/0xa0 [ 73.010659][ T5656] rtnl_newlink+0xf29/0x12d0 [ 73.010683][ T5656] ? perf_event_update_userpage+0x416/0x450 [ 73.010775][ T5656] ? xas_load+0x413/0x430 [ 73.010801][ T5656] ? __rcu_read_unlock+0x4f/0x70 [ 73.010851][ T5656] ? xa_load+0xb1/0xe0 [ 73.010878][ T5656] ? __rcu_read_unlock+0x4f/0x70 [ 73.010894][ T5656] ? avc_has_perm_noaudit+0x1b1/0x200 [ 73.010998][ T5656] ? cred_has_capability+0x210/0x280 [ 73.011022][ T5656] ? selinux_capable+0x31/0x40 [ 73.011047][ T5656] ? security_capable+0x83/0x90 [ 73.011087][ T5656] ? ns_capable+0x7d/0xb0 [ 73.011103][ T5656] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.011131][ T5656] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 73.011158][ T5656] ? avc_has_perm_noaudit+0x1b1/0x200 [ 73.011228][ T5656] netlink_rcv_skb+0x123/0x220 [ 73.011250][ T5656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.011281][ T5656] rtnetlink_rcv+0x1c/0x30 [ 73.011304][ T5656] netlink_unicast+0x5bd/0x690 [ 73.011324][ T5656] netlink_sendmsg+0x58b/0x6b0 [ 73.011404][ T5656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.011427][ T5656] __sock_sendmsg+0x145/0x180 [ 73.011482][ T5656] ____sys_sendmsg+0x31e/0x4e0 [ 73.011510][ T5656] ___sys_sendmsg+0x17b/0x1d0 [ 73.011544][ T5656] __x64_sys_sendmsg+0xd4/0x160 [ 73.011649][ T5656] x64_sys_call+0x191e/0x2ff0 [ 73.011737][ T5656] do_syscall_64+0xd2/0x200 [ 73.011762][ T5656] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.011781][ T5656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.011820][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.011904][ T5656] RIP: 0033:0x7f71ed21eba9 [ 73.011920][ T5656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.011938][ T5656] RSP: 002b:00007f71ebc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.011979][ T5656] RAX: ffffffffffffffda RBX: 00007f71ed465fa0 RCX: 00007f71ed21eba9 [ 73.011990][ T5656] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 73.012002][ T5656] RBP: 00007f71ebc87090 R08: 0000000000000000 R09: 0000000000000000 [ 73.012012][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.012025][ T5656] R13: 00007f71ed466038 R14: 00007f71ed465fa0 R15: 00007ffdb43ca5c8 [ 73.012043][ T5656] [ 73.315199][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 73.331379][ T5660] loop3: detected capacity change from 0 to 764 [ 73.355187][ T5654] hub 9-0:1.0: USB hub found [ 73.364164][ T5654] hub 9-0:1.0: 8 ports detected [ 73.369847][ T5647] rock: directory entry would overflow storage [ 73.375963][ T5663] loop0: detected capacity change from 0 to 1024 [ 73.376087][ T5647] rock: sig=0x4f50, size=4, remaining=3 [ 73.387979][ T5647] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 73.403563][ T5663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.585284][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.601537][ T5681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40978 sclass=netlink_route_socket pid=5681 comm=syz.1.810 [ 73.618638][ T5681] netlink: 224 bytes leftover after parsing attributes in process `syz.1.810'. [ 73.652992][ T5688] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 73.683797][ T5686] loop0: detected capacity change from 0 to 512 [ 73.683887][ T5690] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 73.690754][ T5686] journal_path: Lookup failure for './bus' [ 73.703324][ T5686] EXT4-fs: error: could not find journal device path [ 73.743554][ T5694] program syz.3.808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.761018][ T5694] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 73.800067][ T5614] loop4: detected capacity change from 0 to 8192 [ 73.871252][ T3415] tipc: Node number set to 2886997009 [ 73.937703][ T5708] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 73.950381][ T5711] loop4: detected capacity change from 0 to 1024 [ 73.963580][ T5713] loop1: detected capacity change from 0 to 512 [ 73.970258][ T5713] EXT4-fs: Ignoring removed bh option [ 73.971363][ T5711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.988631][ T5713] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.003377][ T5713] EXT4-fs (loop1): 1 truncate cleaned up [ 74.009396][ T5713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.032845][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.044780][ T5720] loop2: detected capacity change from 0 to 256 [ 74.067056][ T5720] FAT-fs (loop2): Invalid FSINFO signature: 0x0ffffff8, 0x00000000 (sector = 33) [ 74.077374][ T5720] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start df000002) [ 74.087324][ T5720] FAT-fs (loop2): Filesystem has been set read-only [ 74.131064][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.151826][ T5730] siw: device registration error -23 [ 74.522991][ T5748] team0: No ports can be present during mode change [ 74.529716][ T5750] loop1: detected capacity change from 0 to 512 [ 74.553297][ T5754] loop4: detected capacity change from 0 to 1024 [ 74.561159][ T5750] EXT4-fs: Ignoring removed bh option [ 74.569394][ T5750] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.587281][ T5754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.600562][ T5750] EXT4-fs (loop1): 1 truncate cleaned up [ 74.606659][ T5750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.652844][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.673719][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.681064][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.741529][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.878302][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.894595][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.975743][ T3416] lo speed is unknown, defaulting to 1000 [ 74.981569][ T3416] syz0: Port: 1 Link DOWN [ 74.997295][ T5767] lo speed is unknown, defaulting to 1000 [ 75.004113][ T2264] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.023328][ T2264] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.033396][ T5767] lo speed is unknown, defaulting to 1000 [ 75.063872][ T2264] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.085722][ T2264] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.109528][ T5778] validate_nla: 4 callbacks suppressed [ 75.109544][ T5778] netlink: 'syz.3.841': attribute type 21 has an invalid length. [ 75.151903][ T5784] loop0: detected capacity change from 0 to 512 [ 75.173732][ T5784] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.842: bg 0: block 248: padding at end of block bitmap is not set [ 75.189105][ T5784] __quota_error: 196 callbacks suppressed [ 75.189131][ T5784] Quota error (device loop0): write_blk: dquota write failed [ 75.202473][ T5784] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 75.213639][ T5784] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.842: Failed to acquire dquot type 1 [ 75.226011][ T5784] EXT4-fs (loop0): 1 truncate cleaned up [ 75.233166][ T5784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.246185][ T5784] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.336767][ T5795] FAULT_INJECTION: forcing a failure. [ 75.336767][ T5795] name failslab, interval 1, probability 0, space 0, times 0 [ 75.349495][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.1.847 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.349604][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.349637][ T5795] Call Trace: [ 75.349644][ T5795] [ 75.349653][ T5795] __dump_stack+0x1d/0x30 [ 75.349671][ T5795] dump_stack_lvl+0xe8/0x140 [ 75.349688][ T5795] dump_stack+0x15/0x1b [ 75.349704][ T5795] should_fail_ex+0x265/0x280 [ 75.349735][ T5795] should_failslab+0x8c/0xb0 [ 75.349761][ T5795] __kmalloc_noprof+0xa5/0x3e0 [ 75.349788][ T5795] ? alloc_pipe_info+0x1c9/0x350 [ 75.349846][ T5795] alloc_pipe_info+0x1c9/0x350 [ 75.349866][ T5795] fifo_open+0xa1/0x5d0 [ 75.349932][ T5795] do_dentry_open+0x646/0xa20 [ 75.349969][ T5795] ? __pfx_fifo_open+0x10/0x10 [ 75.350000][ T5795] vfs_open+0x37/0x1e0 [ 75.350049][ T5795] path_openat+0x1c5e/0x2170 [ 75.350067][ T5795] ? __schedule+0x6b9/0xb30 [ 75.350134][ T5795] ? getname_kernel+0x3c/0x1f0 [ 75.350164][ T5795] do_file_open_root+0x1d0/0x3f0 [ 75.350190][ T5795] file_open_root+0xfd/0x130 [ 75.350259][ T5795] do_handle_open+0x626/0x6b0 [ 75.350347][ T5795] __x64_sys_open_by_handle_at+0x44/0x50 [ 75.350369][ T5795] x64_sys_call+0x279b/0x2ff0 [ 75.350387][ T5795] do_syscall_64+0xd2/0x200 [ 75.350419][ T5795] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.350480][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.350497][ T5795] RIP: 0033:0x7f8c8aafeba9 [ 75.350511][ T5795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.350569][ T5795] RSP: 002b:00007f8c89567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 75.350600][ T5795] RAX: ffffffffffffffda RBX: 00007f8c8ad45fa0 RCX: 00007f8c8aafeba9 [ 75.350612][ T5795] RDX: 0000000000040080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 75.350629][ T5795] RBP: 00007f8c89567090 R08: 0000000000000000 R09: 0000000000000000 [ 75.350642][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.350673][ T5795] R13: 00007f8c8ad46038 R14: 00007f8c8ad45fa0 R15: 00007fffe7f13ac8 [ 75.350733][ T5795] [ 75.686908][ T5801] hub 9-0:1.0: USB hub found [ 75.696308][ T5801] hub 9-0:1.0: 8 ports detected [ 75.736149][ T5803] hub 9-0:1.0: USB hub found [ 75.749998][ T5803] hub 9-0:1.0: 8 ports detected [ 75.853469][ T5811] netlink: 'syz.1.854': attribute type 21 has an invalid length. [ 75.942211][ T5784] syz.0.842 (5784) used greatest stack depth: 9200 bytes left [ 75.985545][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.995318][ T5819] lo speed is unknown, defaulting to 1000 [ 75.995913][ T5821] netlink: 'syz.2.859': attribute type 3 has an invalid length. [ 76.003067][ T5819] lo speed is unknown, defaulting to 1000 [ 76.035109][ T29] audit: type=1400 audit(1757699798.465:2069): avc: denied { listen } for pid=5822 comm="syz.1.860" lport=52775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.144085][ T29] audit: type=1400 audit(1757699798.485:2070): avc: denied { accept } for pid=5822 comm="syz.1.860" lport=52775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.164590][ T29] audit: type=1326 audit(1757699798.565:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 76.187608][ T29] audit: type=1326 audit(1757699798.565:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 76.210490][ T29] audit: type=1326 audit(1757699798.565:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0262a80ac7 code=0x7ffc0000 [ 76.233479][ T29] audit: type=1326 audit(1757699798.565:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0262a80a3c code=0x7ffc0000 [ 76.256639][ T29] audit: type=1326 audit(1757699798.575:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0262a80974 code=0x7ffc0000 [ 76.279532][ T29] audit: type=1326 audit(1757699798.575:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0262a80974 code=0x7ffc0000 [ 76.312355][ T5825] loop0: detected capacity change from 0 to 1024 [ 76.322626][ T5825] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.334884][ T5825] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.343087][ T5825] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.349654][ T5825] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 76.364306][ T5825] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 76.371148][ T5825] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.861: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.385984][ T5825] EXT4-fs (loop0): 1 orphan inode deleted [ 76.392289][ T5825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.405879][ T5825] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.861: iget: bad extended attribute block 6 [ 76.531652][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.595247][ T5845] siw: device registration error -23 [ 76.615460][ T5847] loop1: detected capacity change from 0 to 512 [ 76.617302][ T5845] netlink: 'syz.0.867': attribute type 21 has an invalid length. [ 76.622261][ T5847] EXT4-fs: Ignoring removed bh option [ 76.640280][ T5847] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 76.651776][ T5847] EXT4-fs (loop1): 1 truncate cleaned up [ 76.655233][ T5850] netlink: 'syz.0.869': attribute type 21 has an invalid length. [ 76.658697][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.695957][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.735858][ T5855] netlink: 'syz.1.871': attribute type 21 has an invalid length. [ 76.764368][ T5859] lo speed is unknown, defaulting to 1000 [ 76.770505][ T5859] lo speed is unknown, defaulting to 1000 [ 76.789248][ T5861] hub 9-0:1.0: USB hub found [ 76.794481][ T5861] hub 9-0:1.0: 8 ports detected [ 76.848953][ T5869] Falling back ldisc for ptm0. [ 76.860108][ T5869] loop0: detected capacity change from 0 to 1024 [ 76.965808][ T5875] FAULT_INJECTION: forcing a failure. [ 76.965808][ T5875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.978915][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.4.879 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.978938][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.978948][ T5875] Call Trace: [ 76.978954][ T5875] [ 76.978961][ T5875] __dump_stack+0x1d/0x30 [ 76.979007][ T5875] dump_stack_lvl+0xe8/0x140 [ 76.979104][ T5875] dump_stack+0x15/0x1b [ 76.979121][ T5875] should_fail_ex+0x265/0x280 [ 76.979144][ T5875] should_fail+0xb/0x20 [ 76.979256][ T5875] should_fail_usercopy+0x1a/0x20 [ 76.979281][ T5875] _copy_to_user+0x20/0xa0 [ 76.979319][ T5875] simple_read_from_buffer+0xb5/0x130 [ 76.979341][ T5875] proc_fail_nth_read+0x10e/0x150 [ 76.979432][ T5875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.979456][ T5875] vfs_read+0x1a8/0x770 [ 76.979476][ T5875] ? __rcu_read_unlock+0x4f/0x70 [ 76.979551][ T5875] ? __fget_files+0x184/0x1c0 [ 76.979578][ T5875] ksys_read+0xda/0x1a0 [ 76.979600][ T5875] __x64_sys_read+0x40/0x50 [ 76.979697][ T5875] x64_sys_call+0x27bc/0x2ff0 [ 76.979718][ T5875] do_syscall_64+0xd2/0x200 [ 76.979755][ T5875] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.979778][ T5875] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.979824][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.979845][ T5875] RIP: 0033:0x7f2e995ed5bc [ 76.979860][ T5875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.979933][ T5875] RSP: 002b:00007f2e9804f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.979954][ T5875] RAX: ffffffffffffffda RBX: 00007f2e99835fa0 RCX: 00007f2e995ed5bc [ 76.979974][ T5875] RDX: 000000000000000f RSI: 00007f2e9804f0a0 RDI: 0000000000000004 [ 76.979987][ T5875] RBP: 00007f2e9804f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.980000][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.980078][ T5875] R13: 00007f2e99836038 R14: 00007f2e99835fa0 R15: 00007ffc2b7a40b8 [ 76.980095][ T5875] [ 77.203004][ T5878] loop2: detected capacity change from 0 to 512 [ 77.212075][ T5880] netlink: 'syz.4.880': attribute type 21 has an invalid length. [ 77.219823][ T5880] __nla_validate_parse: 19 callbacks suppressed [ 77.219836][ T5880] netlink: 156 bytes leftover after parsing attributes in process `syz.4.880'. [ 77.231262][ T5878] EXT4-fs: Ignoring removed bh option [ 77.235178][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 77.262005][ T5878] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 77.278947][ T5878] EXT4-fs (loop2): 1 truncate cleaned up [ 77.291616][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.304927][ T5887] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 77.325915][ T5889] loop0: detected capacity change from 0 to 512 [ 77.343354][ T5889] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.885: bg 0: block 131: padding at end of block bitmap is not set [ 77.379243][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.389581][ T5889] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 77.398906][ T5889] EXT4-fs (loop0): 1 truncate cleaned up [ 77.405266][ T5889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.427853][ T5895] loop4: detected capacity change from 0 to 512 [ 77.435194][ T5895] journal_path: Lookup failure for './bus' [ 77.441052][ T5895] EXT4-fs: error: could not find journal device path [ 77.482268][ T5900] delete_channel: no stack [ 77.512297][ T5905] loop2: detected capacity change from 0 to 512 [ 77.524064][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.537033][ T5905] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.548874][ T5905] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.891: corrupted inode contents [ 77.560789][ T5905] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.891: mark_inode_dirty error [ 77.561134][ T5912] pim6reg1: entered promiscuous mode [ 77.577437][ T5912] pim6reg1: entered allmulticast mode [ 77.588083][ T5905] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.891: corrupted inode contents [ 77.604405][ T5905] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.891: mark_inode_dirty error [ 77.629854][ T5914] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 77.650907][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.716626][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 77.736987][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 77.799184][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 77.827967][ T5927] hub 9-0:1.0: USB hub found [ 77.842165][ T5927] hub 9-0:1.0: 8 ports detected [ 77.923628][ T5931] loop3: detected capacity change from 0 to 512 [ 77.930554][ T5931] journal_path: Lookup failure for './bus' [ 77.936430][ T5931] EXT4-fs: error: could not find journal device path [ 77.993873][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 78.166048][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.223462][ T5944] lo speed is unknown, defaulting to 1000 [ 78.229516][ T5944] lo speed is unknown, defaulting to 1000 [ 78.465746][ T5955] loop2: detected capacity change from 0 to 1024 [ 78.472698][ T5955] EXT4-fs: quotafile must be on filesystem root [ 78.521415][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.911'. [ 78.544635][ T5955] loop2: detected capacity change from 0 to 8192 [ 78.555343][ T5955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.565742][ T5961] FAULT_INJECTION: forcing a failure. [ 78.565742][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 78.578395][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.4.913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.578471][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.578483][ T5961] Call Trace: [ 78.578490][ T5961] [ 78.578497][ T5961] __dump_stack+0x1d/0x30 [ 78.578564][ T5961] dump_stack_lvl+0xe8/0x140 [ 78.578592][ T5961] dump_stack+0x15/0x1b [ 78.578606][ T5961] should_fail_ex+0x265/0x280 [ 78.578626][ T5961] should_failslab+0x8c/0xb0 [ 78.578650][ T5961] kmem_cache_alloc_node_noprof+0x57/0x320 [ 78.578722][ T5961] ? __alloc_skb+0x101/0x320 [ 78.578742][ T5961] __alloc_skb+0x101/0x320 [ 78.578762][ T5961] rtmsg_fib+0x99/0x230 [ 78.578783][ T5961] ? call_fib_notifiers+0x7e/0xa0 [ 78.578855][ T5961] fib_table_delete+0x777/0x830 [ 78.578927][ T5961] fib_magic+0x1ba/0x1f0 [ 78.578954][ T5961] fib_del_ifaddr+0x8fc/0xa90 [ 78.578976][ T5961] ? queue_work_on+0xf9/0x160 [ 78.578998][ T5961] fib_inetaddr_event+0x79/0x1f0 [ 78.579022][ T5961] ? inetaddr_event+0x71/0xa0 [ 78.579038][ T5961] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 78.579058][ T5961] blocking_notifier_call_chain+0x9b/0x1f0 [ 78.579078][ T5961] __inet_del_ifa+0x4e5/0x7f0 [ 78.579097][ T5961] ? netdev_name_node_lookup+0xa4/0xd0 [ 78.579188][ T5961] devinet_ioctl+0x7bd/0xe40 [ 78.579207][ T5961] inet_ioctl+0x2f8/0x3a0 [ 78.579234][ T5961] sock_do_ioctl+0x70/0x220 [ 78.579265][ T5961] sock_ioctl+0x41b/0x610 [ 78.579290][ T5961] ? __pfx_sock_ioctl+0x10/0x10 [ 78.579357][ T5961] __se_sys_ioctl+0xce/0x140 [ 78.579373][ T5961] __x64_sys_ioctl+0x43/0x50 [ 78.579447][ T5961] x64_sys_call+0x1816/0x2ff0 [ 78.579466][ T5961] do_syscall_64+0xd2/0x200 [ 78.579496][ T5961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.579517][ T5961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.579602][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.579620][ T5961] RIP: 0033:0x7f2e995eeba9 [ 78.579639][ T5961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.579653][ T5961] RSP: 002b:00007f2e9804f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.579670][ T5961] RAX: ffffffffffffffda RBX: 00007f2e99835fa0 RCX: 00007f2e995eeba9 [ 78.579683][ T5961] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 78.579732][ T5961] RBP: 00007f2e9804f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.579744][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.579755][ T5961] R13: 00007f2e99836038 R14: 00007f2e99835fa0 R15: 00007ffc2b7a40b8 [ 78.579774][ T5961] [ 78.872903][ T5965] loop4: detected capacity change from 0 to 512 [ 78.883325][ T5965] EXT4-fs: Ignoring removed bh option [ 78.889063][ T5965] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 78.920686][ T5972] FAULT_INJECTION: forcing a failure. [ 78.920686][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 78.930954][ T5965] EXT4-fs (loop4): 1 truncate cleaned up [ 78.933387][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.3.918 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.933414][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.933425][ T5972] Call Trace: [ 78.933464][ T5972] [ 78.933472][ T5972] __dump_stack+0x1d/0x30 [ 78.933492][ T5972] dump_stack_lvl+0xe8/0x140 [ 78.933510][ T5972] dump_stack+0x15/0x1b [ 78.933526][ T5972] should_fail_ex+0x265/0x280 [ 78.933579][ T5972] should_failslab+0x8c/0xb0 [ 78.933631][ T5972] kmem_cache_alloc_noprof+0x50/0x310 [ 78.933657][ T5972] ? alloc_empty_file+0x76/0x200 [ 78.933687][ T5972] alloc_empty_file+0x76/0x200 [ 78.933725][ T5972] alloc_file_pseudo+0xc6/0x160 [ 78.933755][ T5972] anon_inode_getfile+0xa0/0x120 [ 78.933808][ T5972] do_epoll_create+0x1d0/0x270 [ 78.933835][ T5972] __x64_sys_epoll_create+0x35/0x60 [ 78.933866][ T5972] x64_sys_call+0x2d89/0x2ff0 [ 78.933886][ T5972] do_syscall_64+0xd2/0x200 [ 78.933935][ T5972] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.934025][ T5972] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.934051][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.934071][ T5972] RIP: 0033:0x7f5af071eba9 [ 78.934086][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.934103][ T5972] RSP: 002b:00007f5aef187038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 78.934170][ T5972] RAX: ffffffffffffffda RBX: 00007f5af0965fa0 RCX: 00007f5af071eba9 [ 78.934245][ T5972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003ff [ 78.934257][ T5972] RBP: 00007f5aef187090 R08: 0000000000000000 R09: 0000000000000000 [ 78.934269][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.934281][ T5972] R13: 00007f5af0966038 R14: 00007f5af0965fa0 R15: 00007ffdfa9ffec8 [ 78.934298][ T5972] [ 79.010508][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 79.012774][ T5965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.117162][ T5985] pim6reg: entered allmulticast mode [ 79.159545][ T5985] pim6reg: left allmulticast mode [ 79.159776][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.190451][ T5986] pim6reg1: entered promiscuous mode [ 79.195792][ T5986] pim6reg1: entered allmulticast mode [ 79.216628][ T5988] SELinux: failed to load policy [ 79.216634][ T5990] FAULT_INJECTION: forcing a failure. [ 79.216634][ T5990] name failslab, interval 1, probability 0, space 0, times 0 [ 79.234282][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.1.925 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.234310][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.234322][ T5990] Call Trace: [ 79.234328][ T5990] [ 79.234336][ T5990] __dump_stack+0x1d/0x30 [ 79.234354][ T5990] dump_stack_lvl+0xe8/0x140 [ 79.234370][ T5990] dump_stack+0x15/0x1b [ 79.234393][ T5990] should_fail_ex+0x265/0x280 [ 79.234428][ T5990] should_failslab+0x8c/0xb0 [ 79.234453][ T5990] kmem_cache_alloc_noprof+0x50/0x310 [ 79.234478][ T5990] ? alloc_empty_file+0x76/0x200 [ 79.234503][ T5990] alloc_empty_file+0x76/0x200 [ 79.234576][ T5990] alloc_file_pseudo+0xc6/0x160 [ 79.234607][ T5990] anon_inode_getfile+0xa0/0x120 [ 79.234712][ T5990] do_epoll_create+0x1d0/0x270 [ 79.234809][ T5990] __x64_sys_epoll_create+0x35/0x60 [ 79.234832][ T5990] x64_sys_call+0x2d89/0x2ff0 [ 79.234885][ T5990] do_syscall_64+0xd2/0x200 [ 79.234914][ T5990] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.234993][ T5990] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.235101][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.235122][ T5990] RIP: 0033:0x7f8c8aafeba9 [ 79.235135][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.235203][ T5990] RSP: 002b:00007f8c89567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 79.235219][ T5990] RAX: ffffffffffffffda RBX: 00007f8c8ad45fa0 RCX: 00007f8c8aafeba9 [ 79.235230][ T5990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003ff [ 79.235241][ T5990] RBP: 00007f8c89567090 R08: 0000000000000000 R09: 0000000000000000 [ 79.235252][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.235265][ T5990] R13: 00007f8c8ad46038 R14: 00007f8c8ad45fa0 R15: 00007fffe7f13ac8 [ 79.235284][ T5990] [ 79.433765][ T5994] FAULT_INJECTION: forcing a failure. [ 79.433765][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.446976][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.447005][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.447017][ T5994] Call Trace: [ 79.447022][ T5994] [ 79.447028][ T5994] __dump_stack+0x1d/0x30 [ 79.447046][ T5994] dump_stack_lvl+0xe8/0x140 [ 79.447062][ T5994] dump_stack+0x15/0x1b [ 79.447108][ T5994] should_fail_ex+0x265/0x280 [ 79.447128][ T5994] should_fail+0xb/0x20 [ 79.447145][ T5994] should_fail_usercopy+0x1a/0x20 [ 79.447168][ T5994] strncpy_from_user+0x25/0x230 [ 79.447195][ T5994] ? audit_log_end+0x1d7/0x1f0 [ 79.447228][ T5994] path_setxattrat+0xeb/0x310 [ 79.447336][ T5994] __x64_sys_setxattr+0x6e/0x90 [ 79.447356][ T5994] x64_sys_call+0xad2/0x2ff0 [ 79.447376][ T5994] do_syscall_64+0xd2/0x200 [ 79.447483][ T5994] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.447504][ T5994] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.447579][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.447601][ T5994] RIP: 0033:0x7f71ed21eba9 [ 79.447613][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.447628][ T5994] RSP: 002b:00007f71ebc87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 79.447695][ T5994] RAX: ffffffffffffffda RBX: 00007f71ed465fa0 RCX: 00007f71ed21eba9 [ 79.447706][ T5994] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000080 [ 79.447718][ T5994] RBP: 00007f71ebc87090 R08: 0000000000000000 R09: 0000000000000000 [ 79.447731][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.447751][ T5994] R13: 00007f71ed466038 R14: 00007f71ed465fa0 R15: 00007ffdb43ca5c8 [ 79.447768][ T5994] [ 79.489803][ T5997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5997 comm=syz.1.928 [ 79.489824][ T5997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5997 comm=syz.1.928 [ 79.531054][ T6003] siw: device registration error -23 [ 79.541081][ T6008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.931'. [ 79.541100][ T6008] team0: No ports can be present during mode change [ 79.580042][ T6003] netlink: 'syz.4.930': attribute type 21 has an invalid length. [ 79.580073][ T6003] netlink: 156 bytes leftover after parsing attributes in process `syz.4.930'. [ 79.608522][ T6013] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 79.687957][ T6022] loop1: detected capacity change from 0 to 1024 [ 79.833628][ T6029] loop3: detected capacity change from 0 to 2048 [ 79.871324][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.893922][ T3296] loop3: p1 < > p4 [ 79.898664][ T3296] loop3: p4 size 8388608 extends beyond EOD, truncated [ 79.933590][ T6029] loop3: p1 < > p4 [ 79.937907][ T6029] loop3: p4 size 8388608 extends beyond EOD, truncated [ 79.984325][ T6031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 79.991007][ T6031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.998539][ T6031] vhci_hcd vhci_hcd.0: Device attached [ 80.123006][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.209773][ T6049] SELinux: policydb version 877299592 does not match my version range 15-35 [ 80.235585][ T6049] SELinux: failed to load policy [ 80.240973][ T3835] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 80.260924][ T29] kauditd_printk_skb: 832 callbacks suppressed [ 80.260938][ T29] audit: type=1400 audit(1757699802.675:2908): avc: denied { ioctl } for pid=6048 comm="syz.1.946" path="socket:[15163]" dev="sockfs" ino=15163 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.295702][ T6051] hub 9-0:1.0: USB hub found [ 80.311351][ T6051] hub 9-0:1.0: 8 ports detected [ 80.391442][ T6054] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 80.409137][ T6042] vhci_hcd: connection reset by peer [ 80.415232][ T31] vhci_hcd: stop threads [ 80.419488][ T31] vhci_hcd: release socket [ 80.423946][ T31] vhci_hcd: disconnect device [ 80.468757][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 80.495522][ T6064] lo speed is unknown, defaulting to 1000 [ 80.513004][ T6064] lo speed is unknown, defaulting to 1000 [ 80.562577][ T6067] loop1: detected capacity change from 0 to 2048 [ 80.586322][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.609768][ T29] audit: type=1400 audit(1757699803.035:2909): avc: denied { validate_trans } for pid=6066 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.663832][ T6067] SELinux: failed to load policy [ 80.690477][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.787054][ T29] audit: type=1326 audit(1757699803.215:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.810510][ T29] audit: type=1326 audit(1757699803.215:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.833942][ T29] audit: type=1326 audit(1757699803.215:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.857302][ T29] audit: type=1326 audit(1757699803.215:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.880785][ T29] audit: type=1326 audit(1757699803.215:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.904136][ T29] audit: type=1326 audit(1757699803.215:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.933121][ T29] audit: type=1326 audit(1757699803.215:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.956471][ T29] audit: type=1326 audit(1757699803.215:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 80.965796][ T6097] hub 9-0:1.0: USB hub found [ 80.996212][ T6097] hub 9-0:1.0: 8 ports detected [ 81.154444][ T6113] lo speed is unknown, defaulting to 1000 [ 81.162161][ T6113] lo speed is unknown, defaulting to 1000 [ 81.170342][ T6116] FAULT_INJECTION: forcing a failure. [ 81.170342][ T6116] name failslab, interval 1, probability 0, space 0, times 0 [ 81.182991][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.4.965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.183019][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.183033][ T6116] Call Trace: [ 81.183039][ T6116] [ 81.183045][ T6116] __dump_stack+0x1d/0x30 [ 81.183084][ T6116] dump_stack_lvl+0xe8/0x140 [ 81.183105][ T6116] dump_stack+0x15/0x1b [ 81.183186][ T6116] should_fail_ex+0x265/0x280 [ 81.183206][ T6116] ? alloc_fdtable+0x8c/0x1d0 [ 81.183303][ T6116] should_failslab+0x8c/0xb0 [ 81.183328][ T6116] __kmalloc_cache_noprof+0x4c/0x320 [ 81.183359][ T6116] alloc_fdtable+0x8c/0x1d0 [ 81.183455][ T6116] dup_fd+0x4c7/0x540 [ 81.183474][ T6116] copy_files+0x98/0xf0 [ 81.183494][ T6116] copy_process+0xc5b/0x2000 [ 81.183546][ T6116] kernel_clone+0x16c/0x5c0 [ 81.183567][ T6116] ? vfs_write+0x7e8/0x960 [ 81.183591][ T6116] __x64_sys_clone+0xe6/0x120 [ 81.183682][ T6116] x64_sys_call+0x119c/0x2ff0 [ 81.183704][ T6116] do_syscall_64+0xd2/0x200 [ 81.183737][ T6116] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.183852][ T6116] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.183882][ T6116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.183962][ T6116] RIP: 0033:0x7f2e995eeba9 [ 81.183978][ T6116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.183996][ T6116] RSP: 002b:00007f2e9800cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.184014][ T6116] RAX: ffffffffffffffda RBX: 00007f2e99836180 RCX: 00007f2e995eeba9 [ 81.184024][ T6116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 81.184035][ T6116] RBP: 00007f2e9800d090 R08: 0000000000000000 R09: 0000000000000000 [ 81.184045][ T6116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 81.184055][ T6116] R13: 00007f2e99836218 R14: 00007f2e99836180 R15: 00007ffc2b7a40b8 [ 81.184182][ T6116] [ 81.187552][ T6116] loop4: detected capacity change from 0 to 256 [ 81.531792][ T6127] FAULT_INJECTION: forcing a failure. [ 81.531792][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.544875][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.1.973 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.544904][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.544917][ T6127] Call Trace: [ 81.544924][ T6127] [ 81.544942][ T6127] __dump_stack+0x1d/0x30 [ 81.544964][ T6127] dump_stack_lvl+0xe8/0x140 [ 81.544984][ T6127] dump_stack+0x15/0x1b [ 81.545057][ T6127] should_fail_ex+0x265/0x280 [ 81.545083][ T6127] should_fail+0xb/0x20 [ 81.545125][ T6127] should_fail_usercopy+0x1a/0x20 [ 81.545150][ T6127] _copy_from_user+0x1c/0xb0 [ 81.545180][ T6127] ___sys_sendmsg+0xc1/0x1d0 [ 81.545254][ T6127] __x64_sys_sendmsg+0xd4/0x160 [ 81.545333][ T6127] x64_sys_call+0x191e/0x2ff0 [ 81.545354][ T6127] do_syscall_64+0xd2/0x200 [ 81.545381][ T6127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.545405][ T6127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.545450][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.545502][ T6127] RIP: 0033:0x7f8c8aafeba9 [ 81.545545][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.545563][ T6127] RSP: 002b:00007f8c89567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.545625][ T6127] RAX: ffffffffffffffda RBX: 00007f8c8ad45fa0 RCX: 00007f8c8aafeba9 [ 81.545638][ T6127] RDX: 0000000004000011 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 81.545652][ T6127] RBP: 00007f8c89567090 R08: 0000000000000000 R09: 0000000000000000 [ 81.545673][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.545685][ T6127] R13: 00007f8c8ad46038 R14: 00007f8c8ad45fa0 R15: 00007fffe7f13ac8 [ 81.545704][ T6127] [ 81.754287][ T6117] FAULT_INJECTION: forcing a failure. [ 81.754287][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 81.766971][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.2.969 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.766995][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.767006][ T6117] Call Trace: [ 81.767012][ T6117] [ 81.767019][ T6117] __dump_stack+0x1d/0x30 [ 81.767038][ T6117] dump_stack_lvl+0xe8/0x140 [ 81.767056][ T6117] dump_stack+0x15/0x1b [ 81.767071][ T6117] should_fail_ex+0x265/0x280 [ 81.767092][ T6117] should_failslab+0x8c/0xb0 [ 81.767112][ T6117] kmem_cache_alloc_noprof+0x50/0x310 [ 81.767136][ T6117] ? vm_area_dup+0x33/0x2c0 [ 81.767162][ T6117] vm_area_dup+0x33/0x2c0 [ 81.767186][ T6117] copy_vma+0x2e2/0x580 [ 81.767213][ T6117] move_vma+0x42e/0xcf0 [ 81.767237][ T6117] ? mm_get_unmapped_area+0x8f/0xb0 [ 81.767255][ T6117] ? shmem_get_unmapped_area+0xe5/0x100 [ 81.767286][ T6117] mremap_to+0x3eb/0x440 [ 81.767317][ T6117] ? check_prep_vma+0x5d6/0x660 [ 81.767340][ T6117] __se_sys_mremap+0x650/0xb40 [ 81.767366][ T6117] ? fput+0x8f/0xc0 [ 81.767392][ T6117] ? ksys_write+0x192/0x1a0 [ 81.767411][ T6117] __x64_sys_mremap+0x67/0x80 [ 81.767434][ T6117] x64_sys_call+0x2a24/0x2ff0 [ 81.767453][ T6117] do_syscall_64+0xd2/0x200 [ 81.767482][ T6117] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.767504][ T6117] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.767529][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.767549][ T6117] RIP: 0033:0x7f0262a7eba9 [ 81.767564][ T6117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.767580][ T6117] RSP: 002b:00007f02614c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 81.767597][ T6117] RAX: ffffffffffffffda RBX: 00007f0262cc6090 RCX: 00007f0262a7eba9 [ 81.767608][ T6117] RDX: 0000000000600000 RSI: 0000000000200003 RDI: 0000200000000000 [ 81.767620][ T6117] RBP: 00007f02614c6090 R08: 0000200000a00000 R09: 0000000000000000 [ 81.767630][ T6117] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 81.767640][ T6117] R13: 00007f0262cc6128 R14: 00007f0262cc6090 R15: 00007fff4a372a28 [ 81.767655][ T6117] [ 82.035876][ T6135] netlink: 'syz.4.977': attribute type 13 has an invalid length. [ 82.065458][ T6137] netlink: 'syz.4.978': attribute type 21 has an invalid length. [ 82.076700][ T6137] loop4: detected capacity change from 0 to 764 [ 82.077790][ T6133] lo speed is unknown, defaulting to 1000 [ 82.097880][ T6137] rock: directory entry would overflow storage [ 82.104175][ T6137] rock: sig=0x4f50, size=4, remaining=3 [ 82.109738][ T6137] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 82.117800][ T6133] lo speed is unknown, defaulting to 1000 [ 82.340336][ T6147] loop4: detected capacity change from 0 to 512 [ 82.362402][ T6147] EXT4-fs: Ignoring removed bh option [ 82.375468][ T6147] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 82.389501][ T6152] loop2: detected capacity change from 0 to 512 [ 82.399816][ T6152] EXT4-fs: Mount option(s) incompatible with ext3 [ 82.416792][ T6147] EXT4-fs (loop4): 1 truncate cleaned up [ 82.581346][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.596426][ T6152] random: crng reseeded on system resumption [ 82.678928][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.760471][ T6165] lo speed is unknown, defaulting to 1000 [ 82.773316][ T6165] lo speed is unknown, defaulting to 1000 [ 82.789654][ T6168] loop4: detected capacity change from 0 to 256 [ 82.850160][ T6168] FAT-fs (loop4): bogus logical sector size 133 [ 82.856503][ T6168] FAT-fs (loop4): Can't find a valid FAT filesystem [ 82.996343][ T6182] siw: device registration error -23 [ 83.006343][ T6130] loop1: detected capacity change from 0 to 8192 [ 83.006442][ T6182] netlink: 'syz.0.994': attribute type 21 has an invalid length. [ 83.011282][ T6169] FAULT_INJECTION: forcing a failure. [ 83.011282][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 83.033329][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.3.985 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.033392][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.033404][ T6169] Call Trace: [ 83.033410][ T6169] [ 83.033418][ T6169] __dump_stack+0x1d/0x30 [ 83.033440][ T6169] dump_stack_lvl+0xe8/0x140 [ 83.033478][ T6169] dump_stack+0x15/0x1b [ 83.033495][ T6169] should_fail_ex+0x265/0x280 [ 83.033519][ T6169] should_failslab+0x8c/0xb0 [ 83.033544][ T6169] __kvmalloc_node_noprof+0x123/0x4e0 [ 83.033571][ T6169] ? file_tty_write+0x19e/0x690 [ 83.033710][ T6169] file_tty_write+0x19e/0x690 [ 83.033813][ T6169] tty_write+0x25/0x30 [ 83.033838][ T6169] iter_file_splice_write+0x663/0xa60 [ 83.033968][ T6169] ? __pfx_iter_file_splice_write+0x10/0x10 [ 83.033989][ T6169] direct_splice_actor+0x153/0x2a0 [ 83.034037][ T6169] ? splice_grow_spd+0xa1/0xe0 [ 83.034074][ T6169] splice_direct_to_actor+0x30f/0x680 [ 83.034094][ T6169] ? __pfx_direct_splice_actor+0x10/0x10 [ 83.034119][ T6169] do_splice_direct+0xda/0x150 [ 83.034135][ T6169] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 83.034160][ T6169] do_sendfile+0x380/0x650 [ 83.034207][ T6169] __x64_sys_sendfile64+0x105/0x150 [ 83.034243][ T6169] x64_sys_call+0x2bb0/0x2ff0 [ 83.034265][ T6169] do_syscall_64+0xd2/0x200 [ 83.034412][ T6169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.034435][ T6169] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.034487][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.034505][ T6169] RIP: 0033:0x7f5af071eba9 [ 83.034521][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.034536][ T6169] RSP: 002b:00007f5aef166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.034553][ T6169] RAX: ffffffffffffffda RBX: 00007f5af0966090 RCX: 00007f5af071eba9 [ 83.034571][ T6169] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 83.034584][ T6169] RBP: 00007f5aef166090 R08: 0000000000000000 R09: 0000000000000000 [ 83.034596][ T6169] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 83.034608][ T6169] R13: 00007f5af0966128 R14: 00007f5af0966090 R15: 00007ffdfa9ffec8 [ 83.034626][ T6169] [ 83.053414][ T6182] __nla_validate_parse: 4 callbacks suppressed [ 83.053429][ T6182] netlink: 156 bytes leftover after parsing attributes in process `syz.0.994'. [ 83.263591][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.996'. [ 83.269187][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 83.274285][ T6197] loop4: detected capacity change from 0 to 512 [ 83.297931][ T6193] pim6reg: entered allmulticast mode [ 83.303652][ T6197] EXT4-fs: Ignoring removed bh option [ 83.317682][ T6196] pim6reg: left allmulticast mode [ 83.324447][ T6197] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 83.337765][ T6197] EXT4-fs (loop4): 1 truncate cleaned up [ 83.349753][ T6197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.419580][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.504199][ T6211] pim6reg: entered allmulticast mode [ 83.527907][ T6211] pim6reg: left allmulticast mode [ 83.579810][ T6223] netlink: 'syz.3.1011': attribute type 21 has an invalid length. [ 83.587701][ T6223] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1011'. [ 83.630072][ T6225] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1012'. [ 83.639316][ T6223] loop3: detected capacity change from 0 to 764 [ 83.666453][ T6223] rock: directory entry would overflow storage [ 83.666807][ T6227] FAULT_INJECTION: forcing a failure. [ 83.666807][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 83.672769][ T6223] rock: sig=0x4f50, size=4, remaining=3 [ 83.672784][ T6223] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 83.698443][ T6227] CPU: 1 UID: 0 PID: 6227 Comm: syz.2.1013 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.698550][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.698562][ T6227] Call Trace: [ 83.698570][ T6227] [ 83.698577][ T6227] __dump_stack+0x1d/0x30 [ 83.698598][ T6227] dump_stack_lvl+0xe8/0x140 [ 83.698614][ T6227] dump_stack+0x15/0x1b [ 83.698674][ T6227] should_fail_ex+0x265/0x280 [ 83.698694][ T6227] should_failslab+0x8c/0xb0 [ 83.698715][ T6227] kmem_cache_alloc_noprof+0x50/0x310 [ 83.698815][ T6227] ? alloc_empty_file+0x76/0x200 [ 83.698919][ T6227] alloc_empty_file+0x76/0x200 [ 83.698947][ T6227] alloc_file_pseudo+0xc6/0x160 [ 83.699056][ T6227] anon_inode_getfd+0xc1/0x150 [ 83.699087][ T6227] __se_sys_fsopen+0x193/0x1e0 [ 83.699110][ T6227] __x64_sys_fsopen+0x31/0x40 [ 83.699134][ T6227] x64_sys_call+0x2a9d/0x2ff0 [ 83.699219][ T6227] do_syscall_64+0xd2/0x200 [ 83.699247][ T6227] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.699270][ T6227] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.699297][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.699397][ T6227] RIP: 0033:0x7f0262a7eba9 [ 83.699413][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.699429][ T6227] RSP: 002b:00007f02614e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 83.699448][ T6227] RAX: ffffffffffffffda RBX: 00007f0262cc5fa0 RCX: 00007f0262a7eba9 [ 83.699460][ T6227] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000006c0 [ 83.699473][ T6227] RBP: 00007f02614e7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.699499][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.699523][ T6227] R13: 00007f0262cc6038 R14: 00007f0262cc5fa0 R15: 00007fff4a372a28 [ 83.699541][ T6227] [ 83.719804][ T6225] team0: No ports can be present during mode change [ 83.837136][ T6229] loop1: detected capacity change from 0 to 4096 [ 83.913322][ T6232] pim6reg: entered allmulticast mode [ 83.928425][ T6232] pim6reg: left allmulticast mode [ 84.092364][ T6249] FAULT_INJECTION: forcing a failure. [ 84.092364][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.105521][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.4.1019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.105546][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.105557][ T6249] Call Trace: [ 84.105564][ T6249] [ 84.105572][ T6249] __dump_stack+0x1d/0x30 [ 84.105591][ T6249] dump_stack_lvl+0xe8/0x140 [ 84.105607][ T6249] dump_stack+0x15/0x1b [ 84.105696][ T6249] should_fail_ex+0x265/0x280 [ 84.105720][ T6249] should_fail+0xb/0x20 [ 84.105741][ T6249] should_fail_usercopy+0x1a/0x20 [ 84.105814][ T6249] _copy_from_iter+0xd2/0xe80 [ 84.105837][ T6249] ? __build_skb_around+0x1a0/0x200 [ 84.105858][ T6249] ? __alloc_skb+0x223/0x320 [ 84.105877][ T6249] netlink_sendmsg+0x471/0x6b0 [ 84.105973][ T6249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.105994][ T6249] __sock_sendmsg+0x145/0x180 [ 84.106035][ T6249] ____sys_sendmsg+0x31e/0x4e0 [ 84.106080][ T6249] ___sys_sendmsg+0x17b/0x1d0 [ 84.106110][ T6249] __x64_sys_sendmsg+0xd4/0x160 [ 84.106145][ T6249] x64_sys_call+0x191e/0x2ff0 [ 84.106167][ T6249] do_syscall_64+0xd2/0x200 [ 84.106271][ T6249] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.106295][ T6249] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.106324][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.106375][ T6249] RIP: 0033:0x7f2e995eeba9 [ 84.106389][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.106404][ T6249] RSP: 002b:00007f2e9802e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.106424][ T6249] RAX: ffffffffffffffda RBX: 00007f2e99836090 RCX: 00007f2e995eeba9 [ 84.106437][ T6249] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 000000000000000a [ 84.106450][ T6249] RBP: 00007f2e9802e090 R08: 0000000000000000 R09: 0000000000000000 [ 84.106515][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.106528][ T6249] R13: 00007f2e99836128 R14: 00007f2e99836090 R15: 00007ffc2b7a40b8 [ 84.106547][ T6249] [ 84.404059][ T6252] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 84.411955][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 84.465217][ T6257] netlink: 'syz.1.1025': attribute type 21 has an invalid length. [ 84.473142][ T6257] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1025'. [ 84.494662][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 84.503572][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 84.516329][ T6257] loop1: detected capacity change from 0 to 764 [ 84.527761][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 84.553885][ T6257] rock: directory entry would overflow storage [ 84.560073][ T6257] rock: sig=0x4f50, size=4, remaining=3 [ 84.565689][ T6257] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 84.585167][ T6261] netlink: 'syz.2.1027': attribute type 21 has an invalid length. [ 84.887671][ T6279] netlink: 'syz.1.1033': attribute type 21 has an invalid length. [ 85.033901][ T6209] loop0: detected capacity change from 0 to 8192 [ 85.045995][ T6283] loop1: detected capacity change from 0 to 8192 [ 85.321056][ T3835] usb 7-1: enqueue for inactive port 0 [ 85.334474][ T3835] usb 7-1: enqueue for inactive port 0 [ 85.405916][ T6306] lo speed is unknown, defaulting to 1000 [ 85.413696][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 85.413710][ T29] audit: type=1326 audit(1757699807.845:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.417565][ T6306] lo speed is unknown, defaulting to 1000 [ 85.422024][ T29] audit: type=1326 audit(1757699807.845:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.464647][ T3843] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.472377][ T3835] vhci_hcd: vhci_device speed not set [ 85.486414][ T29] audit: type=1326 audit(1757699807.875:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.488403][ T3843] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.509847][ T29] audit: type=1326 audit(1757699807.875:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.509872][ T29] audit: type=1326 audit(1757699807.875:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.509893][ T29] audit: type=1326 audit(1757699807.875:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.589561][ T29] audit: type=1326 audit(1757699807.875:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.612950][ T29] audit: type=1326 audit(1757699807.875:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.636382][ T29] audit: type=1326 audit(1757699807.875:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.659904][ T29] audit: type=1326 audit(1757699807.875:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0262a7eba9 code=0x7ffc0000 [ 85.707892][ T6312] pim6reg: entered allmulticast mode [ 85.715323][ T6312] pim6reg: left allmulticast mode [ 85.852792][ T6308] tc_dump_action: action bad kind [ 85.894262][ T6320] pim6reg: entered allmulticast mode [ 85.902239][ T6320] pim6reg: left allmulticast mode [ 85.998626][ T6327] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 86.100581][ T6335] loop4: detected capacity change from 0 to 2048 [ 86.131707][ T3298] loop4: p1 < > p4 [ 86.145818][ T3298] loop4: p4 size 8388608 extends beyond EOD, truncated [ 86.181115][ T6335] loop4: p1 < > p4 [ 86.185537][ T6335] loop4: p4 size 8388608 extends beyond EOD, truncated [ 86.227587][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 86.248865][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 86.276875][ T6340] loop3: detected capacity change from 0 to 8192 [ 86.786258][ T6323] loop2: detected capacity change from 0 to 8192 [ 86.907972][ T6363] loop1: detected capacity change from 0 to 8192 [ 87.175156][ T6375] netlink: 'syz.3.1072': attribute type 21 has an invalid length. [ 87.191515][ T6376] loop0: detected capacity change from 0 to 256 [ 87.208441][ T6376] FAT-fs (loop0): Invalid FSINFO signature: 0x0ffffff8, 0x00000000 (sector = 33) [ 87.218056][ T6376] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start df000002) [ 87.228054][ T6376] FAT-fs (loop0): Filesystem has been set read-only [ 87.279326][ T6380] pim6reg: entered allmulticast mode [ 87.292057][ T6378] hub 9-0:1.0: USB hub found [ 87.299265][ T6380] pim6reg: left allmulticast mode [ 87.299325][ T6378] hub 9-0:1.0: 8 ports detected [ 87.398201][ T6382] loop3: detected capacity change from 0 to 1024 [ 87.433913][ T6382] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.445106][ T6382] FAULT_INJECTION: forcing a failure. [ 87.445106][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 87.457753][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.3.1075 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.457783][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.457809][ T6382] Call Trace: [ 87.457815][ T6382] [ 87.457821][ T6382] __dump_stack+0x1d/0x30 [ 87.457841][ T6382] dump_stack_lvl+0xe8/0x140 [ 87.457880][ T6382] dump_stack+0x15/0x1b [ 87.457895][ T6382] should_fail_ex+0x265/0x280 [ 87.457917][ T6382] should_failslab+0x8c/0xb0 [ 87.457939][ T6382] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 87.457978][ T6382] ? ext4_alloc_inode+0x38/0x310 [ 87.458016][ T6382] ? ext4_search_dir+0x1c4/0x1e0 [ 87.458039][ T6382] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 87.458059][ T6382] ext4_alloc_inode+0x38/0x310 [ 87.458079][ T6382] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 87.458122][ T6382] alloc_inode+0x40/0x170 [ 87.458206][ T6382] iget_locked+0xf4/0x5c0 [ 87.458236][ T6382] __ext4_iget+0x152/0x2240 [ 87.458310][ T6382] ext4_lookup+0x161/0x390 [ 87.458394][ T6382] __lookup_slow+0x193/0x250 [ 87.458428][ T6382] lookup_slow+0x3c/0x60 [ 87.458459][ T6382] walk_component+0x1ec/0x220 [ 87.458569][ T6382] path_lookupat+0xfe/0x2a0 [ 87.458599][ T6382] filename_lookup+0x147/0x340 [ 87.458708][ T6382] user_path_at+0x3e/0x130 [ 87.458806][ T6382] __se_sys_quotactl+0xb6/0x670 [ 87.458880][ T6382] __x64_sys_quotactl+0x55/0x70 [ 87.458901][ T6382] x64_sys_call+0x15d6/0x2ff0 [ 87.458976][ T6382] do_syscall_64+0xd2/0x200 [ 87.459008][ T6382] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.459032][ T6382] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.459091][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.459113][ T6382] RIP: 0033:0x7f5af071eba9 [ 87.459129][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.459147][ T6382] RSP: 002b:00007f5aef187038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 87.459168][ T6382] RAX: ffffffffffffffda RBX: 00007f5af0965fa0 RCX: 00007f5af071eba9 [ 87.459182][ T6382] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 87.459195][ T6382] RBP: 00007f5aef187090 R08: 0000000000000000 R09: 0000000000000000 [ 87.459227][ T6382] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.459240][ T6382] R13: 00007f5af0966038 R14: 00007f5af0965fa0 R15: 00007ffdfa9ffec8 [ 87.459260][ T6382] [ 87.745040][ T6390] ip6tnl1: entered allmulticast mode [ 87.755248][ T6388] loop0: detected capacity change from 0 to 8192 [ 87.799740][ T6390] can0: slcan on ttyS3. [ 87.835978][ T6406] FAULT_INJECTION: forcing a failure. [ 87.835978][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.849201][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.2.1084 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.849276][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.849364][ T6406] Call Trace: [ 87.849375][ T6406] [ 87.849458][ T6406] __dump_stack+0x1d/0x30 [ 87.849481][ T6406] dump_stack_lvl+0xe8/0x140 [ 87.849574][ T6406] dump_stack+0x15/0x1b [ 87.849591][ T6406] should_fail_ex+0x265/0x280 [ 87.849616][ T6406] should_fail+0xb/0x20 [ 87.849677][ T6406] should_fail_usercopy+0x1a/0x20 [ 87.849699][ T6406] _copy_to_user+0x20/0xa0 [ 87.849810][ T6406] simple_read_from_buffer+0xb5/0x130 [ 87.849842][ T6406] proc_fail_nth_read+0x10e/0x150 [ 87.849934][ T6406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.849959][ T6406] vfs_read+0x1a8/0x770 [ 87.849981][ T6406] ? __rcu_read_unlock+0x4f/0x70 [ 87.850032][ T6406] ? __fget_files+0x184/0x1c0 [ 87.850059][ T6406] ksys_read+0xda/0x1a0 [ 87.850081][ T6406] __x64_sys_read+0x40/0x50 [ 87.850101][ T6406] x64_sys_call+0x27bc/0x2ff0 [ 87.850166][ T6406] do_syscall_64+0xd2/0x200 [ 87.850203][ T6406] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.850228][ T6406] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.850281][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.850301][ T6406] RIP: 0033:0x7f0262a7d5bc [ 87.850323][ T6406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.850339][ T6406] RSP: 002b:00007f02614e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.850417][ T6406] RAX: ffffffffffffffda RBX: 00007f0262cc5fa0 RCX: 00007f0262a7d5bc [ 87.850430][ T6406] RDX: 000000000000000f RSI: 00007f02614e70a0 RDI: 0000000000000004 [ 87.850443][ T6406] RBP: 00007f02614e7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.850454][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.850466][ T6406] R13: 00007f0262cc6038 R14: 00007f0262cc5fa0 R15: 00007fff4a372a28 [ 87.850484][ T6406] [ 87.856570][ T6390] can0 (unregistered): slcan off ttyS3. [ 88.053943][ T6415] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 88.196930][ T6427] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 88.196930][ T6427] program syz.1.1087 not setting count and/or reply_len properly [ 88.310574][ T6446] netlink: 'syz.1.1093': attribute type 13 has an invalid length. [ 88.404696][ T6463] vlan2: entered promiscuous mode [ 88.409847][ T6463] vlan2: entered allmulticast mode [ 88.415138][ T6463] hsr_slave_1: entered allmulticast mode [ 88.444085][ T6463] __nla_validate_parse: 28 callbacks suppressed [ 88.444099][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 88.449424][ T6468] netlink: 'syz.1.1098': attribute type 21 has an invalid length. [ 88.459258][ T6463] FAULT_INJECTION: forcing a failure. [ 88.459258][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 88.467103][ T6468] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1098'. [ 88.479728][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.2.1096 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.479824][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.479835][ T6463] Call Trace: [ 88.479843][ T6463] [ 88.479850][ T6463] __dump_stack+0x1d/0x30 [ 88.479871][ T6463] dump_stack_lvl+0xe8/0x140 [ 88.479890][ T6463] dump_stack+0x15/0x1b [ 88.479926][ T6463] should_fail_ex+0x265/0x280 [ 88.480032][ T6463] should_failslab+0x8c/0xb0 [ 88.480070][ T6463] __kmalloc_noprof+0xa5/0x3e0 [ 88.480097][ T6463] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 88.480169][ T6463] ? unlist_netdevice+0x2cc/0x320 [ 88.480220][ T6463] ? __pfx_veth_dellink+0x10/0x10 [ 88.480247][ T6463] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 88.480274][ T6463] ? __list_add_valid_or_report+0x38/0xe0 [ 88.480312][ T6463] ? __pfx_veth_dellink+0x10/0x10 [ 88.480338][ T6463] ? __pfx_veth_dellink+0x10/0x10 [ 88.480363][ T6463] rtnl_dellink+0x3cb/0x550 [ 88.480430][ T6463] ? selinux_capable+0x31/0x40 [ 88.480457][ T6463] ? security_capable+0x83/0x90 [ 88.480487][ T6463] ? ns_capable+0x7d/0xb0 [ 88.480506][ T6463] ? __pfx_rtnl_dellink+0x10/0x10 [ 88.480587][ T6463] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 88.480615][ T6463] ? avc_has_perm_noaudit+0x1b1/0x200 [ 88.480640][ T6463] netlink_rcv_skb+0x123/0x220 [ 88.480663][ T6463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.480794][ T6463] rtnetlink_rcv+0x1c/0x30 [ 88.480820][ T6463] netlink_unicast+0x5bd/0x690 [ 88.480843][ T6463] netlink_sendmsg+0x58b/0x6b0 [ 88.480930][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.480982][ T6463] __sock_sendmsg+0x145/0x180 [ 88.481012][ T6463] ____sys_sendmsg+0x31e/0x4e0 [ 88.481039][ T6463] ___sys_sendmsg+0x17b/0x1d0 [ 88.481074][ T6463] __x64_sys_sendmsg+0xd4/0x160 [ 88.481111][ T6463] x64_sys_call+0x191e/0x2ff0 [ 88.481131][ T6463] do_syscall_64+0xd2/0x200 [ 88.481163][ T6463] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.481228][ T6463] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.481255][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.481282][ T6463] RIP: 0033:0x7f0262a7eba9 [ 88.481297][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.481314][ T6463] RSP: 002b:00007f02614e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.481334][ T6463] RAX: ffffffffffffffda RBX: 00007f0262cc5fa0 RCX: 00007f0262a7eba9 [ 88.481346][ T6463] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 88.481358][ T6463] RBP: 00007f02614e7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.481370][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.481387][ T6463] R13: 00007f0262cc6038 R14: 00007f0262cc5fa0 R15: 00007fff4a372a28 [ 88.481404][ T6463] [ 88.617671][ T6473] loop1: detected capacity change from 0 to 764 [ 88.630251][ T6472] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 88.643990][ T6472] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1099'. [ 88.714349][ T6472] loop0: detected capacity change from 0 to 764 [ 88.795415][ T6468] rock: directory entry would overflow storage [ 88.801628][ T6468] rock: sig=0x4f50, size=4, remaining=3 [ 88.801645][ T6468] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 88.832236][ T6472] rock: directory entry would overflow storage [ 88.838412][ T6472] rock: sig=0x4f50, size=4, remaining=3 [ 88.844169][ T6472] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 88.971468][ T6487] pim6reg: entered allmulticast mode [ 88.977386][ T6487] pim6reg: left allmulticast mode [ 89.021877][ T6492] netlink: 'syz.0.1106': attribute type 13 has an invalid length. [ 89.069957][ T6498] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1109'. [ 89.124228][ T6498] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1109'. [ 89.133322][ T6498] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1109'. [ 89.142296][ T6498] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1109'. [ 89.213321][ T6513] loop1: detected capacity change from 0 to 512 [ 89.259162][ T6513] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.298556][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 89.306085][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.313524][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.320923][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.328311][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.335816][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.343218][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.350611][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.358068][ T3835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 89.430511][ T3835] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.459301][ T6526] loop3: detected capacity change from 0 to 128 [ 89.468145][ T6526] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.506636][ T6523] SELinux: failed to load policy [ 89.513634][ T6524] fido_id[6524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.553870][ T3843] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.594670][ T6535] loop0: detected capacity change from 0 to 512 [ 89.618387][ T6533] fido_id[6533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.631005][ T6535] EXT4-fs: Ignoring removed i_version option [ 89.775295][ T6554] tmpfs: Bad value for 'nr_inodes' [ 89.801820][ T6556] netlink: 'syz.3.1133': attribute type 13 has an invalid length. [ 89.956286][ T6567] loop0: detected capacity change from 0 to 8192 [ 89.976900][ T6504] loop4: detected capacity change from 0 to 8192 [ 90.057385][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 90.060925][ T6571] vlan0: entered promiscuous mode [ 90.071667][ T6571] vlan0: entered allmulticast mode [ 90.076829][ T6571] hsr_slave_1: entered allmulticast mode [ 90.085145][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=6571 comm=syz.4.1138 [ 90.101317][ T6571] loop4: detected capacity change from 0 to 512 [ 90.113139][ T6571] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1138: bg 0: block 248: padding at end of block bitmap is not set [ 90.127710][ T6571] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1138: Failed to acquire dquot type 1 [ 90.139571][ T6571] EXT4-fs (loop4): 1 truncate cleaned up [ 90.145690][ T6571] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.156847][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 90.402838][ T6577] FAULT_INJECTION: forcing a failure. [ 90.402838][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 90.415613][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.3.1140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.415640][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.415654][ T6577] Call Trace: [ 90.415659][ T6577] [ 90.415734][ T6577] __dump_stack+0x1d/0x30 [ 90.415812][ T6577] dump_stack_lvl+0xe8/0x140 [ 90.415827][ T6577] dump_stack+0x15/0x1b [ 90.415841][ T6577] should_fail_ex+0x265/0x280 [ 90.415860][ T6577] ? dev_ethtool+0x96/0x1660 [ 90.415886][ T6577] should_failslab+0x8c/0xb0 [ 90.415987][ T6577] __kmalloc_cache_noprof+0x4c/0x320 [ 90.416012][ T6577] dev_ethtool+0x96/0x1660 [ 90.416105][ T6577] ? full_name_hash+0x92/0xe0 [ 90.416128][ T6577] ? strcmp+0x22/0x50 [ 90.416144][ T6577] dev_ioctl+0x2e0/0x960 [ 90.416172][ T6577] sock_do_ioctl+0x197/0x220 [ 90.416279][ T6577] sock_ioctl+0x41b/0x610 [ 90.416308][ T6577] ? __pfx_sock_ioctl+0x10/0x10 [ 90.416336][ T6577] __se_sys_ioctl+0xce/0x140 [ 90.416354][ T6577] __x64_sys_ioctl+0x43/0x50 [ 90.416394][ T6577] x64_sys_call+0x1816/0x2ff0 [ 90.416416][ T6577] do_syscall_64+0xd2/0x200 [ 90.416447][ T6577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.416536][ T6577] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.416592][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.416690][ T6577] RIP: 0033:0x7f5af071eba9 [ 90.416703][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.416718][ T6577] RSP: 002b:00007f5aef187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.416756][ T6577] RAX: ffffffffffffffda RBX: 00007f5af0965fa0 RCX: 00007f5af071eba9 [ 90.416767][ T6577] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000001e [ 90.416777][ T6577] RBP: 00007f5aef187090 R08: 0000000000000000 R09: 0000000000000000 [ 90.416864][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.416875][ T6577] R13: 00007f5af0966038 R14: 00007f5af0965fa0 R15: 00007ffdfa9ffec8 [ 90.416890][ T6577] [ 90.625281][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 90.625293][ T29] audit: type=1400 audit(1757699813.055:3394): avc: denied { bind } for pid=6578 comm="syz.1.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.654240][ T6579] netlink: 'syz.1.1141': attribute type 10 has an invalid length. [ 90.655823][ T29] audit: type=1400 audit(1757699813.085:3395): avc: denied { setopt } for pid=6578 comm="syz.1.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.663559][ T6579] team0: Port device dummy0 added [ 90.710264][ T6579] netlink: 'syz.1.1141': attribute type 10 has an invalid length. [ 90.718217][ T29] audit: type=1400 audit(1757699813.145:3396): avc: denied { create } for pid=6586 comm="syz.3.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.749498][ T6579] team0: Port device dummy0 removed [ 90.756250][ T3309] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 90.756406][ T6579] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.764130][ T3309] FAT-fs (loop0): Filesystem has been set read-only [ 90.793664][ T6590] netlink: 'syz.1.1146': attribute type 13 has an invalid length. [ 90.801613][ T29] audit: type=1400 audit(1757699813.235:3397): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.812911][ T6588] loop3: detected capacity change from 0 to 8192 [ 90.866943][ T29] audit: type=1400 audit(1757699813.295:3398): avc: denied { module_request } for pid=6593 comm="syz.2.1148" kmod="netdev-dvmrp0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 90.940084][ T29] audit: type=1400 audit(1757699813.345:3399): avc: denied { sys_module } for pid=6593 comm="syz.2.1148" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.961307][ T29] audit: type=1400 audit(1757699813.355:3400): avc: denied { module_request } for pid=6593 comm="syz.2.1148" kmod="dvmrp0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 90.982605][ T29] audit: type=1326 audit(1757699813.365:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 91.001505][ T6604] FAULT_INJECTION: forcing a failure. [ 91.001505][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 91.006044][ T29] audit: type=1326 audit(1757699813.365:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e995eeba9 code=0x7ffc0000 [ 91.018618][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.4.1149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.018642][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.018654][ T6604] Call Trace: [ 91.018662][ T6604] [ 91.018671][ T6604] __dump_stack+0x1d/0x30 [ 91.018691][ T6604] dump_stack_lvl+0xe8/0x140 [ 91.018719][ T6604] dump_stack+0x15/0x1b [ 91.018735][ T6604] should_fail_ex+0x265/0x280 [ 91.018797][ T6604] should_failslab+0x8c/0xb0 [ 91.018821][ T6604] kmem_cache_alloc_node_noprof+0x57/0x320 [ 91.018849][ T6604] ? __alloc_skb+0x101/0x320 [ 91.018871][ T6604] __alloc_skb+0x101/0x320 [ 91.018926][ T6604] ? audit_log_start+0x365/0x6c0 [ 91.018954][ T6604] audit_log_start+0x380/0x6c0 [ 91.018985][ T6604] audit_seccomp+0x48/0x100 [ 91.019059][ T6604] ? __seccomp_filter+0x68c/0x10d0 [ 91.019161][ T6604] __seccomp_filter+0x69d/0x10d0 [ 91.019182][ T6604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.019206][ T6604] ? vfs_write+0x7e8/0x960 [ 91.019233][ T6604] ? __rcu_read_unlock+0x4f/0x70 [ 91.019328][ T6604] ? __fget_files+0x184/0x1c0 [ 91.019355][ T6604] __secure_computing+0x82/0x150 [ 91.019375][ T6604] syscall_trace_enter+0xcf/0x1e0 [ 91.019449][ T6604] do_syscall_64+0xac/0x200 [ 91.019479][ T6604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.019555][ T6604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.019635][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.019690][ T6604] RIP: 0033:0x7f2e995eeba9 [ 91.019706][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.019723][ T6604] RSP: 002b:00007f2e9804f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 91.019742][ T6604] RAX: ffffffffffffffda RBX: 00007f2e99835fa0 RCX: 00007f2e995eeba9 [ 91.019754][ T6604] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000006 [ 91.019766][ T6604] RBP: 00007f2e9804f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.019810][ T6604] R10: 0000000000000893 R11: 0000000000000246 R12: 0000000000000001 [ 91.019869][ T6604] R13: 00007f2e99836038 R14: 00007f2e99835fa0 R15: 00007ffc2b7a40b8 [ 91.019946][ T6604] [ 91.019955][ T6604] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 91.269503][ T6607] netlink: 'syz.2.1152': attribute type 21 has an invalid length. [ 91.277656][ T6607] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1152'. [ 91.346483][ T6615] pim6reg: entered allmulticast mode [ 91.352707][ T6615] pim6reg: left allmulticast mode [ 91.380196][ T6611] loop1: detected capacity change from 0 to 512 [ 91.412076][ T6611] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 91.434576][ T6611] random: crng reseeded on system resumption [ 91.452728][ T6619] pim6reg: entered allmulticast mode [ 91.466289][ T6619] pim6reg: left allmulticast mode [ 91.504517][ T6623] loop1: detected capacity change from 0 to 128 [ 91.565927][ T6631] siw: device registration error -23 [ 91.571761][ T6625] loop4: detected capacity change from 0 to 512 [ 91.595934][ T6625] journal_path: Lookup failure for './bus' [ 91.601791][ T6625] EXT4-fs: error: could not find journal device path [ 91.608626][ T6632] loop2: detected capacity change from 0 to 1024 [ 91.732756][ T6648] openvswitch: netlink: Message has 6 unknown bytes. [ 91.746958][ T6632] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1162: Allocating blocks 497-513 which overlap fs metadata [ 91.766513][ T6652] pim6reg: entered allmulticast mode [ 91.774339][ T6652] pim6reg: left allmulticast mode [ 91.849391][ T6655] loop4: detected capacity change from 0 to 512 [ 91.858476][ T6655] EXT4-fs: Mount option(s) incompatible with ext3 [ 91.867283][ T6655] random: crng reseeded on system resumption [ 91.874075][ T6655] FAULT_INJECTION: forcing a failure. [ 91.874075][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 91.886831][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.4.1174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.886855][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.886866][ T6655] Call Trace: [ 91.886873][ T6655] [ 91.886881][ T6655] __dump_stack+0x1d/0x30 [ 91.886907][ T6655] dump_stack_lvl+0xe8/0x140 [ 91.886925][ T6655] dump_stack+0x15/0x1b [ 91.887008][ T6655] should_fail_ex+0x265/0x280 [ 91.887108][ T6655] ? create_basic_memory_bitmaps+0x8f/0x450 [ 91.887134][ T6655] should_failslab+0x8c/0xb0 [ 91.887159][ T6655] __kmalloc_cache_noprof+0x4c/0x320 [ 91.887189][ T6655] create_basic_memory_bitmaps+0x8f/0x450 [ 91.887246][ T6655] snapshot_open+0x1b4/0x270 [ 91.887331][ T6655] ? __pfx_snapshot_open+0x10/0x10 [ 91.887391][ T6655] misc_open+0x1d6/0x200 [ 91.887425][ T6655] chrdev_open+0x2eb/0x3a0 [ 91.887446][ T6655] do_dentry_open+0x646/0xa20 [ 91.887470][ T6655] ? __pfx_chrdev_open+0x10/0x10 [ 91.887535][ T6655] vfs_open+0x37/0x1e0 [ 91.887562][ T6655] path_openat+0x1c5e/0x2170 [ 91.887590][ T6655] do_filp_open+0x109/0x230 [ 91.887617][ T6655] do_sys_openat2+0xa6/0x110 [ 91.887718][ T6655] __x64_sys_openat+0xf2/0x120 [ 91.887749][ T6655] x64_sys_call+0x2e9c/0x2ff0 [ 91.887770][ T6655] do_syscall_64+0xd2/0x200 [ 91.887819][ T6655] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.887846][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.887930][ T6655] RIP: 0033:0x7f2e995eeba9 [ 91.887943][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.888002][ T6655] RSP: 002b:00007f2e9804f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.888022][ T6655] RAX: ffffffffffffffda RBX: 00007f2e99835fa0 RCX: 00007f2e995eeba9 [ 91.888033][ T6655] RDX: 0000000000084d03 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 91.888118][ T6655] RBP: 00007f2e9804f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.888130][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.888142][ T6655] R13: 00007f2e99836038 R14: 00007f2e99835fa0 R15: 00007ffc2b7a40b8 [ 91.888161][ T6655] [ 92.166626][ T6659] loop3: detected capacity change from 0 to 8192 [ 92.248241][ T6670] loop4: detected capacity change from 0 to 1024 [ 92.285776][ T6672] validate_nla: 2 callbacks suppressed [ 92.285794][ T6672] netlink: 'syz.0.1181': attribute type 13 has an invalid length. [ 92.299199][ T6670] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.1180: inode #12: comm syz.4.1180: iget: illegal inode # [ 92.316828][ T6670] EXT4-fs (loop4): Remounting filesystem read-only [ 92.411156][ T6682] pim6reg: entered allmulticast mode [ 92.421606][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.429702][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.440341][ T6682] pim6reg: left allmulticast mode [ 92.540958][ T6688] netlink: 'syz.2.1187': attribute type 21 has an invalid length. [ 92.637709][ T6700] loop0: detected capacity change from 0 to 1024 [ 92.644762][ T6700] ext4: Unknown parameter 'measure' [ 92.672208][ T6702] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 92.723300][ T6704] syzkaller1: entered promiscuous mode [ 92.728777][ T6704] syzkaller1: entered allmulticast mode [ 92.773273][ T6710] syzkaller1: entered promiscuous mode [ 92.778811][ T6710] syzkaller1: entered allmulticast mode [ 92.862880][ T6712] pim6reg: entered allmulticast mode [ 92.894906][ T6712] pim6reg: left allmulticast mode [ 93.015244][ T6718] netlink: 'syz.1.1201': attribute type 21 has an invalid length. [ 93.057100][ T6722] loop3: detected capacity change from 0 to 512 [ 93.067079][ T6722] EXT4-fs: Ignoring removed bh option [ 93.088460][ T6721] loop2: detected capacity change from 0 to 512 [ 93.101595][ T6722] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.132844][ T6721] journal_path: Lookup failure for './bus' [ 93.138747][ T6721] EXT4-fs: error: could not find journal device path [ 93.141020][ T6726] lo speed is unknown, defaulting to 1000 [ 93.152524][ T6722] EXT4-fs (loop3): 1 truncate cleaned up [ 93.164891][ T6726] lo speed is unknown, defaulting to 1000 [ 93.295440][ T6742] siw: device registration error -23 [ 93.316578][ T6742] netlink: 'syz.2.1210': attribute type 21 has an invalid length. [ 93.371064][ T6744] loop1: detected capacity change from 0 to 8192 [ 93.417953][ T6746] team0: No ports can be present during mode change [ 93.502513][ T6752] __nla_validate_parse: 24 callbacks suppressed [ 93.502526][ T6752] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1214'. [ 93.674706][ T6760] tipc: Started in network mode [ 93.679769][ T6760] tipc: Node identity a2c6d78cff0f, cluster identity 4711 [ 93.687097][ T6760] tipc: Enabled bearer , priority 0 [ 93.694414][ T6760] syzkaller0: entered promiscuous mode [ 93.699880][ T6760] syzkaller0: entered allmulticast mode [ 93.713246][ T6760] tipc: Resetting bearer [ 93.721829][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1216'. [ 93.786459][ T6764] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1219'. [ 93.796167][ T6764] xt_socket: unknown flags 0xd0 [ 93.900009][ T6774] lo speed is unknown, defaulting to 1000 [ 93.906426][ T6774] lo speed is unknown, defaulting to 1000 [ 93.938156][ T6778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1224'. [ 93.948801][ T6778] team0: No ports can be present during mode change [ 93.965847][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 93.974895][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 93.991375][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 94.018167][ T6783] netlink: 'syz.0.1226': attribute type 21 has an invalid length. [ 94.026032][ T6783] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1226'. [ 94.045917][ T6783] loop0: detected capacity change from 0 to 764 [ 94.070198][ T6783] rock: directory entry would overflow storage [ 94.076413][ T6783] rock: sig=0x4f50, size=4, remaining=3 [ 94.081985][ T6783] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 94.158698][ T6796] netlink: 'syz.0.1230': attribute type 21 has an invalid length. [ 94.180992][ T6796] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1230'. [ 94.190262][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 94.190312][ T6798] loop2: detected capacity change from 0 to 256 [ 94.233643][ T6801] lo speed is unknown, defaulting to 1000 [ 94.246701][ T6798] FAT-fs (loop2): Invalid FSINFO signature: 0x0ffffff8, 0x00000000 (sector = 33) [ 94.256713][ T6798] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start df000002) [ 94.259540][ T6801] lo speed is unknown, defaulting to 1000 [ 94.266669][ T6798] FAT-fs (loop2): Filesystem has been set read-only [ 94.324329][ T3298] ================================================================== [ 94.332428][ T3298] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 94.339466][ T3298] [ 94.341781][ T3298] write to 0xffff8881045e23d4 of 4 bytes by task 3296 on cpu 0: [ 94.349494][ T3298] shmem_unlink+0x13c/0x170 [ 94.354033][ T3298] shmem_rename2+0x1a1/0x290 [ 94.358621][ T3298] vfs_rename+0x7f3/0xa40 [ 94.362950][ T3298] do_renameat2+0x557/0xa10 [ 94.367450][ T3298] __x64_sys_rename+0x58/0x70 [ 94.372124][ T3298] x64_sys_call+0x1f9/0x2ff0 [ 94.376706][ T3298] do_syscall_64+0xd2/0x200 [ 94.381224][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.387125][ T3298] [ 94.389434][ T3298] read to 0xffff8881045e23d4 of 4 bytes by task 3298 on cpu 1: [ 94.396955][ T3298] fill_mg_cmtime+0x5b/0x260 [ 94.401533][ T3298] generic_fillattr+0x24a/0x340 [ 94.406375][ T3298] shmem_getattr+0x181/0x200 [ 94.410956][ T3298] vfs_getattr_nosec+0x143/0x1e0 [ 94.415885][ T3298] vfs_statx+0x113/0x390 [ 94.420136][ T3298] vfs_fstatat+0x115/0x170 [ 94.424547][ T3298] __se_sys_newfstatat+0x55/0x260 [ 94.429648][ T3298] __x64_sys_newfstatat+0x55/0x70 [ 94.434663][ T3298] x64_sys_call+0x135a/0x2ff0 [ 94.439340][ T3298] do_syscall_64+0xd2/0x200 [ 94.443834][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.449712][ T3298] [ 94.452013][ T3298] value changed: 0x2d41eed4 -> 0x2d45574e [ 94.457707][ T3298] [ 94.460009][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 94.466138][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.475404][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.485538][ T3298] ================================================================== [ 94.551178][ T6805] lo speed is unknown, defaulting to 1000 [ 94.558189][ T6805] lo speed is unknown, defaulting to 1000 [ 94.648957][ T6803] lo speed is unknown, defaulting to 1000 [ 94.659008][ T6803] lo speed is unknown, defaulting to 1000 [ 94.808360][ T3843] tipc: Node number set to 1573509004