last executing test programs: 6.13262936s ago: executing program 2 (id=605): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 5.12904058s ago: executing program 2 (id=614): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xfffe, 0x2) r1 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x2e, 0x61, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000000009000200737e7a31000000000900010073797a3000000000080005400000000d08000640ffffff0108000340"], 0xe0}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000ffdbdf25fe8000000000000000000000000000aa00000000000000000000ffffac1414bb0000000000000000000000802f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000001d000000000000000000b4ca0004d56c"], 0xf8}, 0x1, 0x0, 0x0, 0x8064}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001680)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES16=r4], 0xf8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x5c, &(0x7f0000001780)=[@in6={0xa, 0x4e21, 0x5, @mcast1, 0xb0ba}, @in={0x2, 0x6ea2, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000140)=0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r8, 0x0, 0x9) 4.256588667s ago: executing program 2 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = epoll_create(0xf) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) add_key$fscrypt_v1(0x0, &(0x7f0000000780)={'fscrypt:', @auto=[0x33, 0x31, 0x61, 0x63, 0x33, 0x31, 0x37, 0x32, 0x32, 0x0, 0x31, 0x56, 0x65, 0x34, 0x31, 0x35]}, &(0x7f00000007c0)={0x0, "39a0ad0b034162fe8e7c4ce914db211ccb64df2e9934a27b618a1da73a1a6fff3a2313f1ce39da7db811f1a0b4fffcf496945bceef4f1d1343d056883b493c7d", 0x39}, 0x48, r6) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x12, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r7, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) 3.180810788s ago: executing program 2 (id=640): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) setreuid(0x0, 0xee00) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r0, 0x4c02ec9b7d57ab6e, r0}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf00000007000000bc"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x0) 2.776832626s ago: executing program 4 (id=643): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000000000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 2.320990844s ago: executing program 0 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x9, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 2.306850755s ago: executing program 1 (id=648): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0x9, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x81800) sendto$unix(r4, &(0x7f0000000200)="b7e898cfa98060b7703bda4508b1e3a4db2e3efffb1d7b659207e4351d1f50f4ecc139b62c4c223b609936e73baeafa563f527ed9e9400fc8b4755a5cef67d43417c37080eb6f1df2e227e27dbfb6ad45cc31ed8ceb601ba733cebbff73240564b7e808217f4f16880e9fc4cbeb680b34749620ed490a4c74f6d184981e00dc4d2fedf3bf5acb0150beef90a65155f3e88ba8865acc0b5c71e2c5d31576806d17c5ab94a7b2d6280667437e7884f", 0xae, 0x10, 0x0, 0x0) socket$inet(0x2, 0x0, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000040), &(0x7f0000000740)}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) r8 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r8, 0x0, 0x0, 0x1, 0x3000) msgsnd(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="ffd64531a869986b"], 0x8, 0x0) msgrcv(r8, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000680)={{0x3, r10, r11, r12, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0xfffffffffffffff7, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r9}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@sr0, r10, &(0x7f0000000180)={0x996, 0x7, 0x0, 0x3}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xc}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x20000) 2.281068015s ago: executing program 0 (id=649): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) (fail_nth: 3) 1.996740161s ago: executing program 0 (id=651): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72"], 0x4c}}, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x200000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x8014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = semget(0x1, 0x4, 0x39c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c040007001a030700", 0x33a) socket$vsock_stream(0x28, 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r5, &(0x7f0000000280)=[{0x1, 0xbbdd, 0x1000}, {0x2, 0xd, 0x800}], 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x4, "c3fbcee8"}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000540)={0x7ff8, 0xa, 0xf, 0x0, 0x3, 0x0, 0x6c2, 0x9, r7}, &(0x7f00000004c0)=0x20) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x5988]) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x8001, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x8, 0x3, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) statx(0xffffffffffffff9c, 0x0, 0x800, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000580)={0x7ff, 0x3ff, 0x3, 0x7fffffff, 0xf6, "ed7f5dda7aa4fe2b6dd3f5c09158b23b81ab28", 0x7fff, 0x7}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000000500)={0xb, 0x7, 0xd}) semctl$GETPID(r5, 0x3, 0xb, &(0x7f0000000100)=""/4) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) 1.970024841s ago: executing program 4 (id=652): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000880)={0x4, 0x11, 0x5, 0x1, 0x51, 0x4, &(0x7f0000000800)="db3d9c2a2f265f09d6e4c012cbdd0660893301c11b3ef32358373d7436e2232244061c6f4bbf664117569d50cc239979a41cea4e52fb6edd4701847ec1fdade913476f0c600717e797319bfcf3b803dbaf"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r4 = gettid() gettid() tkill(r4, 0x12) tkill(r4, 0x1) 1.456989571s ago: executing program 1 (id=653): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x4, 0x0, 0x0, 0x4, 0x18530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x100000001, 0xfffffff8, 0x1, 0x8, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x90580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x20008844) 1.364325413s ago: executing program 1 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) r4 = epoll_create(0xf) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) add_key$fscrypt_v1(0x0, &(0x7f0000000780)={'fscrypt:', @auto=[0x33, 0x31, 0x61, 0x63, 0x33, 0x31, 0x37, 0x32, 0x32, 0x0, 0x31, 0x56, 0x65, 0x34, 0x31, 0x35]}, &(0x7f00000007c0)={0x0, "39a0ad0b034162fe8e7c4ce914db211ccb64df2e9934a27b618a1da73a1a6fff3a2313f1ce39da7db811f1a0b4fffcf496945bceef4f1d1343d056883b493c7d", 0x39}, 0x48, r6) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1.218514386s ago: executing program 3 (id=656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 1.185774376s ago: executing program 3 (id=657): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140020"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) alarm(0x8000000000000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="43585711499291d0ffc48d923ee54954e775b85e368f85fd798000b8"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x9}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r10, 0x0, 0x80000}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) 1.116480728s ago: executing program 0 (id=658): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (fail_nth: 1) 1.115452648s ago: executing program 4 (id=659): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x995) listen(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000204740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 828.695364ms ago: executing program 0 (id=660): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00"}) r3 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 828.412353ms ago: executing program 4 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7ffffffffffffffe, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 818.475203ms ago: executing program 4 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7ffffffffffffffe, 0x0) (fail_nth: 1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 573.745968ms ago: executing program 4 (id=663): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000000000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 469.71387ms ago: executing program 1 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x3}, 0x8) socket$netlink(0x10, 0x3, 0x4) 404.723251ms ago: executing program 0 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r4 = epoll_create(0xf) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) add_key$fscrypt_v1(0x0, &(0x7f0000000780)={'fscrypt:', @auto=[0x33, 0x31, 0x61, 0x63, 0x33, 0x31, 0x37, 0x32, 0x32, 0x0, 0x31, 0x56, 0x65, 0x34, 0x31, 0x35]}, &(0x7f00000007c0)={0x0, "39a0ad0b034162fe8e7c4ce914db211ccb64df2e9934a27b618a1da73a1a6fff3a2313f1ce39da7db811f1a0b4fffcf496945bceef4f1d1343d056883b493c7d", 0x39}, 0x48, r6) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x12, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r7, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) 404.404712ms ago: executing program 3 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7ffffffffffffffe, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x69, 0x0, &(0x7f0000001440), 0x6233b6c0c7f7c29d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 402.738712ms ago: executing program 1 (id=667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_setup(0x403, &(0x7f0000000080)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) 376.749372ms ago: executing program 3 (id=668): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r6 = socket$inet6(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file1\x00', 0x0, 0x4000, r9}, 0x18) syz_io_uring_setup(0x5c5c, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x3, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 341.483253ms ago: executing program 3 (id=669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_setup(0x403, &(0x7f0000000080)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 309.141023ms ago: executing program 1 (id=670): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000880)={0x4, 0x11, 0x5, 0x1, 0x51, 0x4, &(0x7f0000000800)="db3d9c2a2f265f09d6e4c012cbdd0660893301c11b3ef32358373d7436e2232244061c6f4bbf664117569d50cc239979a41cea4e52fb6edd4701847ec1fdade913476f0c600717e797319bfcf3b803dbaf"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r4 = gettid() gettid() tkill(r4, 0x12) tkill(r4, 0x1) 76.828748ms ago: executing program 2 (id=671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x11, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) io_setup(0x403, &(0x7f0000000080)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) 8.491789ms ago: executing program 3 (id=672): r0 = io_uring_setup(0xe0d, &(0x7f0000000080)={0x0, 0x2c50, 0x80, 0x3, 0x180}) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18, 0x0, r0}, 0x0, &(0x7f0000000000)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) close(r1) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000040)={0x80000037db, 0x538d28a0, 0x0, 0x0, 0x0, 0x1000000081, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0x10, &(0x7f00000010c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="1c0ace9cd80b6941455fc1bc2717d1bf1b353ec39168a2c19398f1ccf046b520ed", @ANYRESDEC=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002240)=[{0x3, 0x1, 0x0, &(0x7f0000001140)=[{&(0x7f0000001440)=""/197, 0xc5}, {&(0x7f0000001540)=""/205, 0xcd}, {&(0x7f0000001640)=""/250, 0xfa}], &(0x7f0000001180)=[0x4a7, 0x9, 0x1]}, {0x2, 0x1, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001880)=""/189, 0xbd}, {&(0x7f0000001940)=""/187, 0xbb}], &(0x7f0000001740)=[0x2, 0x6, 0x3, 0xfff]}, {0x0, 0x0, 0x0, &(0x7f0000001780), &(0x7f0000001a00)=[0x4434, 0xfffffffffffff000]}, {0x1, 0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/226, 0xe2}], &(0x7f0000001b80)=[0x4]}, {0x7, 0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/93, 0x5d}, {&(0x7f0000001d00)=""/162, 0xa2}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001ec0)=""/85, 0x55}, {&(0x7f0000001f40)=""/223, 0xdf}, {&(0x7f0000002040)=""/196, 0xc4}], &(0x7f00000021c0)=[0x4127eebf, 0x100, 0x0, 0x2, 0x0, 0x5, 0x29, 0x1, 0x0]}], 0x5) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=r6, @ANYRES32], 0x48) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) write$cgroup_devices(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x51b, &(0x7f0000000b80)="$eJzs3c9vHFcdAPDvjL1tNnFZF3oIlWgrWmRHkLVdk9bqoVAJwakSUO7B2Btjee2N7HUaWxVxxB+AhBAgISG4wAWJA8dIKH8CQopE7ggQCEECBw6BQbs7Gxxn1z/Irie1Px9pMm/ezu73+7Ka2XlvxjMBnFqvRMRkRGRpll2IiEpen+ZT7HSm1nr3732w0JqSyLL3/laOJK/rftaz+fxc/rYzEfHVL0V8I3k87sbW9sp8vV5bz5enmqvJgyzbvri8Or9UW6qtzc7OvDH35tyluemBtHM8It7+wp++/52ff/HtX3/m/d9f/svktzoN7NjdjkFKovxY3WhErA8jWEFa7Snl5UsHrXxz+PkAANBf63j/oxHxyYi4EJUYaR/NAQAAACdJ9rmxeJBEZAAAAMCJlUbEWCRpNSKuvdAqp2m12rmG94U4m9YbG81PZ5WH4wXjUUqvLNdr0/m1A+NRSlrLM/k1tt3l1/csz0bE8xHxvUq5vVxdaNQXCx35AAAAgNPj3K7+fxoR/6x0+v8AAADACTN+xPVHhpQHAAAAMDxH7f8DAAAAHz5H7f+/s/mr2SGlAgAAAAzel999t/2w7u7zrxevbW2uNK5dXKxtrFRXNxeqC431q9WlRmOpfc++1YM+r95oXP1srG1en2rWNppTG1vbl1cbm2vNy8vtx4EDAAAABXj+5dt3k4jYeaucduueyeeliKz7p/63fvbj88VkCAxLepSV/zi8PIDj51Y+cHqNFp0AUJhS0QkAhXt8P/DokUHfi3d+c/BnJw+y7P9MCwAAGKCJj9++2z3U33mr3J53z/8nN4rLCxi+/Px/khSdCHDsnP+H06sz7v/NctF5AMevtN8RgE4BnHjpITb1Jzn/3+EaAAAAKNpYe0rSat4PGHs5TavViOfajwUoJVeW67XpiPhIRPyuUnq2tTzTfmdieAAAAAAAAAAAAAAAAAAAAAAAAAAADinLksgAAACAEy0i/XPSHgcYiYnKa2N7xweeSf5Vac8j4v0fvfeD6/PN5vpMq/7vD+ubP8zrXy9iBAMAAADYq9tP7/bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCQ7t/7YKE7HWfcv74TEeO94o/Gmfb8TJQi4uw/khjd9b4kIkYGEH/nZkSc7xU/aaUV43kWe+OnEVEuOP65AcSH0+x2a//z+V7bXxqvtOe9t7/RfHpS/fd/6cP930if/d9zh4zx4p1fTvWNfzPixdHe+59u/KRP/FcPGf/rX9ve7vda9tOIiZ6/P8kjsaaaq1enNra2Ly6vzi/Vlmprs7Mzb8y9OXdpbnrqynK9lv/bM8Z3P3HrP/u1/2yf+OMHtP+1Q7b/33eu3/tYp1ja81IpfpJlk6/2/v7Pt+eVbG/87m/fp/LfgdbyRLe80ynv9tIvfvvSfu1f7NP+g77/yUO2/8JXvv2HQ64KAByDja3tlfl6vbaucGoK5WMPWo5jbOB8PCX/zzfybexp+d6PVih4xwQAAAzc/w76H6lOC0sIAAAAAAAAAAAAAAAAAAAATqGDbgMWA7id2N6YO8U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX/8NAAD//6ul3rE=") (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 0s ago: executing program 2 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) kernel console output (not intermixed with test programs): 4111][ T29] audit: type=1326 audit(1759101194.597:35699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 58.320661][ T3028] audit: audit_lost=7101 audit_rate_limit=0 audit_backlog_limit=64 [ 58.344041][ T29] audit: type=1400 audit(1759101194.597:35700): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.351894][ T3028] audit: backlog limit exceeded [ 58.383987][ T4643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.390568][ T4643] audit: audit_lost=7102 audit_rate_limit=0 audit_backlog_limit=64 [ 58.398502][ T4643] audit: backlog limit exceeded [ 59.112657][ T4649] FAULT_INJECTION: forcing a failure. [ 59.112657][ T4649] name failslab, interval 1, probability 0, space 0, times 0 [ 59.125465][ T4649] CPU: 1 UID: 0 PID: 4649 Comm: syz.2.295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.125489][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.125499][ T4649] Call Trace: [ 59.125559][ T4649] [ 59.125566][ T4649] __dump_stack+0x1d/0x30 [ 59.125604][ T4649] dump_stack_lvl+0xe8/0x140 [ 59.125626][ T4649] dump_stack+0x15/0x1b [ 59.125640][ T4649] should_fail_ex+0x265/0x280 [ 59.125661][ T4649] ? audit_log_d_path+0x8d/0x150 [ 59.125687][ T4649] should_failslab+0x8c/0xb0 [ 59.125759][ T4649] __kmalloc_cache_noprof+0x4c/0x320 [ 59.125787][ T4649] audit_log_d_path+0x8d/0x150 [ 59.125862][ T4649] audit_log_d_path_exe+0x42/0x70 [ 59.126039][ T4649] audit_log_task+0x1e9/0x250 [ 59.126065][ T4649] audit_seccomp+0x61/0x100 [ 59.126088][ T4649] ? __seccomp_filter+0x68c/0x10d0 [ 59.126107][ T4649] __seccomp_filter+0x69d/0x10d0 [ 59.126128][ T4649] ? _raw_spin_unlock_irq+0x26/0x50 [ 59.126219][ T4649] ? signal_setup_done+0x266/0x290 [ 59.126280][ T4649] ? xfd_validate_state+0x45/0xf0 [ 59.126324][ T4649] ? fpu__clear_user_states+0x63/0x1e0 [ 59.126356][ T4649] ? fpregs_mark_activate+0x66/0x140 [ 59.126485][ T4649] ? fpu__clear_user_states+0x63/0x1e0 [ 59.126522][ T4649] __secure_computing+0x82/0x150 [ 59.126566][ T4649] syscall_trace_enter+0xcf/0x1e0 [ 59.126590][ T4649] do_syscall_64+0xac/0x200 [ 59.126623][ T4649] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.126645][ T4649] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.126701][ T4649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.126796][ T4649] RIP: 0033:0x7fd4fc0baf79 [ 59.126810][ T4649] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 59.126923][ T4649] RSP: 002b:00007fd4fab7ea80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 59.126940][ T4649] RAX: ffffffffffffffda RBX: 00007fd4fc375fa0 RCX: 00007fd4fc0baf79 [ 59.126951][ T4649] RDX: 00007fd4fab7ea80 RSI: 00007fd4fab7ebb0 RDI: 0000000000000011 [ 59.126961][ T4649] RBP: 00007fd4fab7f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.126978][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.126989][ T4649] R13: 00007fd4fc376038 R14: 00007fd4fc375fa0 R15: 00007ffc10917aa8 [ 59.127005][ T4649] [ 59.382206][ T4658] loop3: detected capacity change from 0 to 512 [ 59.404618][ T4662] FAULT_INJECTION: forcing a failure. [ 59.404618][ T4662] name failslab, interval 1, probability 0, space 0, times 0 [ 59.417423][ T4662] CPU: 1 UID: 0 PID: 4662 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.417457][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.417474][ T4662] Call Trace: [ 59.417482][ T4662] [ 59.417491][ T4662] __dump_stack+0x1d/0x30 [ 59.417521][ T4662] dump_stack_lvl+0xe8/0x140 [ 59.417636][ T4662] dump_stack+0x15/0x1b [ 59.417665][ T4662] should_fail_ex+0x265/0x280 [ 59.417697][ T4662] should_failslab+0x8c/0xb0 [ 59.417730][ T4662] kmem_cache_alloc_noprof+0x50/0x310 [ 59.417767][ T4662] ? skb_clone+0x151/0x1f0 [ 59.417806][ T4662] skb_clone+0x151/0x1f0 [ 59.417837][ T4662] __netlink_deliver_tap+0x2c9/0x500 [ 59.417873][ T4662] netlink_unicast+0x66b/0x690 [ 59.417902][ T4662] netlink_sendmsg+0x58b/0x6b0 [ 59.417979][ T4662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.418011][ T4662] __sock_sendmsg+0x145/0x180 [ 59.418101][ T4662] ____sys_sendmsg+0x31e/0x4e0 [ 59.418143][ T4662] ___sys_sendmsg+0x17b/0x1d0 [ 59.418192][ T4662] __x64_sys_sendmsg+0xd4/0x160 [ 59.418230][ T4662] x64_sys_call+0x191e/0x2ff0 [ 59.418259][ T4662] do_syscall_64+0xd2/0x200 [ 59.418359][ T4662] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.418391][ T4662] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.418430][ T4662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.418509][ T4662] RIP: 0033:0x7fd81e8aeec9 [ 59.418529][ T4662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.418552][ T4662] RSP: 002b:00007fd81d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.418578][ T4662] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8aeec9 [ 59.418595][ T4662] RDX: 0000000000004006 RSI: 00002000000004c0 RDI: 0000000000000006 [ 59.418685][ T4662] RBP: 00007fd81d317090 R08: 0000000000000000 R09: 0000000000000000 [ 59.418701][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.418717][ T4662] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 59.418742][ T4662] [ 59.631943][ T4662] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.641949][ T4662] SELinux: failed to load policy [ 59.642681][ T4658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.660785][ T4658] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.703854][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 59.704256][ T4658] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 59.715726][ T4664] bridge0: entered promiscuous mode [ 59.720710][ T4658] netlink: 224 bytes leftover after parsing attributes in process `syz.3.297'. [ 59.737653][ T4664] bridge0: port 3(macvlan2) entered blocking state [ 59.744206][ T4664] bridge0: port 3(macvlan2) entered disabled state [ 59.751157][ T4664] macvlan2: entered allmulticast mode [ 59.756579][ T4664] bridge0: entered allmulticast mode [ 59.762746][ T4664] macvlan2: left allmulticast mode [ 59.767962][ T4664] bridge0: left allmulticast mode [ 59.773587][ T4664] bridge0: left promiscuous mode [ 59.776194][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 59.790953][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.886672][ T4679] team0: Device ip6gre1 is of different type [ 59.938719][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 59.990190][ T4689] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.011790][ T4689] SELinux: failed to load policy [ 60.040213][ T4691] lo speed is unknown, defaulting to 1000 [ 60.046034][ T4691] lo speed is unknown, defaulting to 1000 [ 60.052067][ T4691] lo speed is unknown, defaulting to 1000 [ 60.058234][ T4691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.065876][ T4691] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.076183][ T4691] lo speed is unknown, defaulting to 1000 [ 60.082427][ T4691] lo speed is unknown, defaulting to 1000 [ 60.088664][ T4691] lo speed is unknown, defaulting to 1000 [ 60.094741][ T4691] lo speed is unknown, defaulting to 1000 [ 60.100969][ T4691] lo speed is unknown, defaulting to 1000 [ 60.122733][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 60.131663][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.139111][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.146833][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.154258][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.185568][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.196697][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.205350][ T4696] FAULT_INJECTION: forcing a failure. [ 60.205350][ T4696] name failslab, interval 1, probability 0, space 0, times 0 [ 60.218138][ T4696] CPU: 1 UID: 0 PID: 4696 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.218166][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.218179][ T4696] Call Trace: [ 60.218186][ T4696] [ 60.218194][ T4696] __dump_stack+0x1d/0x30 [ 60.218271][ T4696] dump_stack_lvl+0xe8/0x140 [ 60.218343][ T4696] dump_stack+0x15/0x1b [ 60.218360][ T4696] should_fail_ex+0x265/0x280 [ 60.218466][ T4696] should_failslab+0x8c/0xb0 [ 60.218491][ T4696] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 60.218532][ T4696] ? __d_alloc+0x3d/0x340 [ 60.218591][ T4696] __d_alloc+0x3d/0x340 [ 60.218627][ T4696] d_alloc_parallel+0x53/0xc60 [ 60.218664][ T4696] ? selinux_inode_permission+0x62d/0x740 [ 60.218711][ T4696] ? lockref_get_not_dead+0x120/0x1c0 [ 60.218796][ T4696] ? __rcu_read_unlock+0x4f/0x70 [ 60.218897][ T4696] __lookup_slow+0x8c/0x250 [ 60.218940][ T4696] lookup_slow+0x3c/0x60 [ 60.219035][ T4696] walk_component+0x1ec/0x220 [ 60.219071][ T4696] path_lookupat+0xfe/0x2a0 [ 60.219111][ T4696] filename_lookup+0x147/0x340 [ 60.219183][ T4696] user_path_at+0x3e/0x130 [ 60.219274][ T4696] __se_sys_mount+0x25b/0x2e0 [ 60.219348][ T4696] ? fput+0x8f/0xc0 [ 60.219379][ T4696] __x64_sys_mount+0x67/0x80 [ 60.219409][ T4696] x64_sys_call+0x2b4d/0x2ff0 [ 60.219433][ T4696] do_syscall_64+0xd2/0x200 [ 60.219532][ T4696] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.219562][ T4696] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.219598][ T4696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.219700][ T4696] RIP: 0033:0x7f53dce9eec9 [ 60.219716][ T4696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.219796][ T4696] RSP: 002b:00007f53db8ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.219818][ T4696] RAX: ffffffffffffffda RBX: 00007f53dd0f5fa0 RCX: 00007f53dce9eec9 [ 60.219833][ T4696] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 60.219904][ T4696] RBP: 00007f53db8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 60.219989][ T4696] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 60.220004][ T4696] R13: 00007f53dd0f6038 R14: 00007f53dd0f5fa0 R15: 00007ffd086a44e8 [ 60.220028][ T4696] [ 60.771181][ T4740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.832306][ T4740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.957441][ T4766] loop3: detected capacity change from 0 to 164 [ 61.001006][ T4740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.089960][ T4740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.152986][ T4800] FAULT_INJECTION: forcing a failure. [ 61.152986][ T4800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.165910][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.166125][ T4800] CPU: 0 UID: 0 PID: 4800 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.166161][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.166181][ T4800] Call Trace: [ 61.166189][ T4800] [ 61.166199][ T4800] __dump_stack+0x1d/0x30 [ 61.166287][ T4800] dump_stack_lvl+0xe8/0x140 [ 61.166343][ T4800] dump_stack+0x15/0x1b [ 61.166368][ T4800] should_fail_ex+0x265/0x280 [ 61.166439][ T4800] should_fail+0xb/0x20 [ 61.166469][ T4800] should_fail_usercopy+0x1a/0x20 [ 61.166508][ T4800] _copy_to_user+0x20/0xa0 [ 61.166596][ T4800] simple_read_from_buffer+0xb5/0x130 [ 61.166630][ T4800] proc_fail_nth_read+0x10e/0x150 [ 61.166670][ T4800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.166710][ T4800] vfs_read+0x1a5/0x770 [ 61.166821][ T4800] ? mnt_drop_write+0xbc/0x120 [ 61.166863][ T4800] ? chmod_common+0x23e/0x270 [ 61.167028][ T4800] ksys_read+0xda/0x1a0 [ 61.167061][ T4800] __x64_sys_read+0x40/0x50 [ 61.167093][ T4800] x64_sys_call+0x27bc/0x2ff0 [ 61.167122][ T4800] do_syscall_64+0xd2/0x200 [ 61.167213][ T4800] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.167238][ T4800] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.167347][ T4800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.167395][ T4800] RIP: 0033:0x7f7acf91d8dc [ 61.167474][ T4800] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.167499][ T4800] RSP: 002b:00007f7ace387030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.167572][ T4800] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91d8dc [ 61.167593][ T4800] RDX: 000000000000000f RSI: 00007f7ace3870a0 RDI: 0000000000000004 [ 61.167611][ T4800] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 61.167630][ T4800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.167648][ T4800] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 61.167725][ T4800] [ 61.380114][ T4803] FAULT_INJECTION: forcing a failure. [ 61.380114][ T4803] name failslab, interval 1, probability 0, space 0, times 0 [ 61.393019][ T4803] CPU: 0 UID: 0 PID: 4803 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.393045][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.393056][ T4803] Call Trace: [ 61.393062][ T4803] [ 61.393070][ T4803] __dump_stack+0x1d/0x30 [ 61.393142][ T4803] dump_stack_lvl+0xe8/0x140 [ 61.393167][ T4803] dump_stack+0x15/0x1b [ 61.393188][ T4803] should_fail_ex+0x265/0x280 [ 61.393217][ T4803] should_failslab+0x8c/0xb0 [ 61.393247][ T4803] kmem_cache_alloc_node_noprof+0x57/0x320 [ 61.393346][ T4803] ? __alloc_skb+0x101/0x320 [ 61.393368][ T4803] __alloc_skb+0x101/0x320 [ 61.393400][ T4803] netlink_ack+0xfd/0x500 [ 61.393432][ T4803] netlink_rcv_skb+0x192/0x220 [ 61.393454][ T4803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.393558][ T4803] rtnetlink_rcv+0x1c/0x30 [ 61.393584][ T4803] netlink_unicast+0x5bd/0x690 [ 61.393609][ T4803] netlink_sendmsg+0x58b/0x6b0 [ 61.393718][ T4803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.393743][ T4803] __sock_sendmsg+0x145/0x180 [ 61.393777][ T4803] ____sys_sendmsg+0x31e/0x4e0 [ 61.393811][ T4803] ___sys_sendmsg+0x17b/0x1d0 [ 61.393933][ T4803] __x64_sys_sendmsg+0xd4/0x160 [ 61.393970][ T4803] x64_sys_call+0x191e/0x2ff0 [ 61.394027][ T4803] do_syscall_64+0xd2/0x200 [ 61.394065][ T4803] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.394096][ T4803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.394203][ T4803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.394230][ T4803] RIP: 0033:0x7f7acf91eec9 [ 61.394249][ T4803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.394308][ T4803] RSP: 002b:00007f7ace387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.394333][ T4803] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91eec9 [ 61.394349][ T4803] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000004 [ 61.394364][ T4803] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 61.394386][ T4803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.394401][ T4803] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 61.394424][ T4803] [ 61.619578][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.640408][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.652712][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.791506][ T4864] loop3: detected capacity change from 0 to 8192 [ 61.933361][ T4873] FAULT_INJECTION: forcing a failure. [ 61.933361][ T4873] name failslab, interval 1, probability 0, space 0, times 0 [ 61.946159][ T4873] CPU: 1 UID: 0 PID: 4873 Comm: syz.3.329 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.946191][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.946246][ T4873] Call Trace: [ 61.946252][ T4873] [ 61.946262][ T4873] __dump_stack+0x1d/0x30 [ 61.946285][ T4873] dump_stack_lvl+0xe8/0x140 [ 61.946309][ T4873] dump_stack+0x15/0x1b [ 61.946338][ T4873] should_fail_ex+0x265/0x280 [ 61.946400][ T4854] loop4: detected capacity change from 0 to 8192 [ 61.946367][ T4873] should_failslab+0x8c/0xb0 [ 61.946429][ T4873] kmem_cache_alloc_noprof+0x50/0x310 [ 61.946465][ T4873] ? audit_log_start+0x365/0x6c0 [ 61.946508][ T4873] ? vsscanf+0x11b4/0x1270 [ 61.946611][ T4873] audit_log_start+0x365/0x6c0 [ 61.946733][ T4873] audit_log+0x5e/0xd0 [ 61.946859][ T4873] sel_write_enforce+0x260/0x2d0 [ 61.946901][ T4873] vfs_writev+0x406/0x8b0 [ 61.946942][ T4873] ? __pfx_sel_write_enforce+0x10/0x10 [ 61.946986][ T4873] ? mutex_lock+0xd/0x30 [ 61.947019][ T4873] do_writev+0xe7/0x210 [ 61.947073][ T4873] __x64_sys_writev+0x45/0x50 [ 61.947108][ T4873] x64_sys_call+0x1e9a/0x2ff0 [ 61.947142][ T4873] do_syscall_64+0xd2/0x200 [ 61.947307][ T4873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.947428][ T4873] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.947469][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.947519][ T4873] RIP: 0033:0x7f53dce9eec9 [ 61.947541][ T4873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.947567][ T4873] RSP: 002b:00007f53db8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 61.947607][ T4873] RAX: ffffffffffffffda RBX: 00007f53dd0f5fa0 RCX: 00007f53dce9eec9 [ 61.947698][ T4873] RDX: 0000000000000003 RSI: 0000200000000940 RDI: 0000000000000003 [ 61.947716][ T4873] RBP: 00007f53db8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 61.947748][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.947764][ T4873] R13: 00007f53dd0f6038 R14: 00007f53dd0f5fa0 R15: 00007ffd086a44e8 [ 61.947790][ T4873] [ 62.253757][ T4879] loop3: detected capacity change from 0 to 164 [ 62.562406][ T4881] SELinux: Context Ü is not valid (left unmapped). [ 62.572166][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 62.599663][ T4883] netlink: 44 bytes leftover after parsing attributes in process `syz.0.333'. [ 62.609011][ T4883] netlink: 84 bytes leftover after parsing attributes in process `syz.0.333'. [ 62.851341][ T4895] loop4: detected capacity change from 0 to 8192 [ 63.062881][ T4908] loop3: detected capacity change from 0 to 764 [ 63.241067][ T4915] loop3: detected capacity change from 0 to 512 [ 63.248257][ T4915] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.261313][ T4915] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.274764][ T4915] EXT4-fs (loop3): 1 truncate cleaned up [ 63.280956][ T4915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.293468][ T29] kauditd_printk_skb: 1272 callbacks suppressed [ 63.293486][ T29] audit: type=1326 audit(1759101199.617:36926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff09f02ef57 code=0x7ffc0000 [ 63.300342][ T4906] loop4: detected capacity change from 0 to 8192 [ 63.325250][ T29] audit: type=1326 audit(1759101199.627:36927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff09f02d710 code=0x7ffc0000 [ 63.353039][ T29] audit: type=1326 audit(1759101199.627:36928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff09f02eacb code=0x7ffc0000 [ 63.376471][ T29] audit: type=1400 audit(1759101199.667:36929): avc: denied { mount } for pid=4914 comm="syz.3.346" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.398174][ T29] audit: type=1326 audit(1759101199.677:36930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff09f02db2a code=0x7ffc0000 [ 63.421488][ T29] audit: type=1326 audit(1759101199.677:36931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff09f02eacb code=0x7ffc0000 [ 63.444836][ T29] audit: type=1326 audit(1759101199.677:36932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff09f02eacb code=0x7ffc0000 [ 63.478474][ T29] audit: type=1400 audit(1759101199.807:36933): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.479404][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.513998][ T29] audit: type=1326 audit(1759101199.837:36934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff09f02d5ba code=0x7ffc0000 [ 63.537554][ T29] audit: type=1326 audit(1759101199.837:36935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff09f02d5ba code=0x7ffc0000 [ 63.563874][ T4921] netlink: 556 bytes leftover after parsing attributes in process `syz.0.348'. [ 63.612721][ T4929] netlink: 48 bytes leftover after parsing attributes in process `syz.0.351'. [ 63.659307][ T4933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.353'. [ 63.668256][ T4933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.353'. [ 63.677380][ T4933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.353'. [ 63.688265][ T4933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 63.688335][ T4933] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 63.761297][ T4947] IPv6: sit1: Disabled Multicast RS [ 63.767338][ T4947] sit1: entered allmulticast mode [ 63.829833][ T4950] 9pnet: Could not find request transport: f [ 63.964259][ T4965] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 64.382329][ T4996] loop4: detected capacity change from 0 to 8192 [ 64.574413][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 64.730982][ T5091] pim6reg: entered allmulticast mode [ 64.753878][ T5091] pim6reg: left allmulticast mode [ 64.978243][ T5121] loop4: detected capacity change from 0 to 512 [ 64.991019][ T5121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.003999][ T5121] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.045254][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.099450][ T5132] program syz.4.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.126070][ T5134] FAULT_INJECTION: forcing a failure. [ 65.126070][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 65.138759][ T5134] CPU: 0 UID: 0 PID: 5134 Comm: syz.4.382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.138790][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.138813][ T5134] Call Trace: [ 65.138821][ T5134] [ 65.138832][ T5134] __dump_stack+0x1d/0x30 [ 65.138851][ T5134] dump_stack_lvl+0xe8/0x140 [ 65.138898][ T5134] dump_stack+0x15/0x1b [ 65.138912][ T5134] should_fail_ex+0x265/0x280 [ 65.138986][ T5134] should_failslab+0x8c/0xb0 [ 65.139085][ T5134] kmem_cache_alloc_node_noprof+0x57/0x320 [ 65.139112][ T5134] ? __alloc_skb+0x101/0x320 [ 65.139130][ T5134] __alloc_skb+0x101/0x320 [ 65.139203][ T5134] netlink_alloc_large_skb+0xba/0xf0 [ 65.139221][ T5134] netlink_sendmsg+0x3cf/0x6b0 [ 65.139243][ T5134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.139263][ T5134] __sock_sendmsg+0x145/0x180 [ 65.139349][ T5134] ____sys_sendmsg+0x31e/0x4e0 [ 65.139372][ T5134] ___sys_sendmsg+0x17b/0x1d0 [ 65.139440][ T5134] __x64_sys_sendmsg+0xd4/0x160 [ 65.139465][ T5134] x64_sys_call+0x191e/0x2ff0 [ 65.139482][ T5134] do_syscall_64+0xd2/0x200 [ 65.139507][ T5134] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.139600][ T5134] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.139623][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.139641][ T5134] RIP: 0033:0x7ff09f02eec9 [ 65.139654][ T5134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.139737][ T5134] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.139762][ T5134] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 65.139775][ T5134] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 65.139787][ T5134] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 65.139839][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.139854][ T5134] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 65.139878][ T5134] [ 65.355294][ T5136] FAULT_INJECTION: forcing a failure. [ 65.355294][ T5136] name failslab, interval 1, probability 0, space 0, times 0 [ 65.367991][ T5136] CPU: 0 UID: 0 PID: 5136 Comm: syz.4.383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.368031][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.368047][ T5136] Call Trace: [ 65.368053][ T5136] [ 65.368061][ T5136] __dump_stack+0x1d/0x30 [ 65.368082][ T5136] dump_stack_lvl+0xe8/0x140 [ 65.368159][ T5136] dump_stack+0x15/0x1b [ 65.368182][ T5136] should_fail_ex+0x265/0x280 [ 65.368214][ T5136] should_failslab+0x8c/0xb0 [ 65.368290][ T5136] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 65.368318][ T5136] ? shmem_alloc_inode+0x34/0x50 [ 65.368339][ T5136] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 65.368359][ T5136] shmem_alloc_inode+0x34/0x50 [ 65.368378][ T5136] alloc_inode+0x40/0x170 [ 65.368475][ T5136] new_inode+0x1d/0xe0 [ 65.368496][ T5136] shmem_get_inode+0x244/0x750 [ 65.368517][ T5136] __shmem_file_setup+0x113/0x210 [ 65.368548][ T5136] shmem_file_setup+0x3b/0x50 [ 65.368615][ T5136] __se_sys_memfd_create+0x2c3/0x590 [ 65.368636][ T5136] __x64_sys_memfd_create+0x31/0x40 [ 65.368654][ T5136] x64_sys_call+0x2abe/0x2ff0 [ 65.368674][ T5136] do_syscall_64+0xd2/0x200 [ 65.368729][ T5136] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.368751][ T5136] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.368845][ T5136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.368890][ T5136] RIP: 0033:0x7ff09f02eec9 [ 65.368903][ T5136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.368918][ T5136] RSP: 002b:00007ff09da96e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 65.368934][ T5136] RAX: ffffffffffffffda RBX: 000000000000052f RCX: 00007ff09f02eec9 [ 65.368945][ T5136] RDX: 00007ff09da96ef0 RSI: 0000000000000000 RDI: 00007ff09f0b2960 [ 65.368956][ T5136] RBP: 0000200000001100 R08: 00007ff09da96bb7 R09: 00007ff09da96e40 [ 65.368967][ T5136] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000380 [ 65.368977][ T5136] R13: 00007ff09da96ef0 R14: 00007ff09da96eb0 R15: 0000200000000340 [ 65.369042][ T5136] [ 65.756768][ T5156] program syz.3.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.894746][ T5142] loop4: detected capacity change from 0 to 8192 [ 66.262509][ T3298] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 66.273456][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.273511][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.273525][ T3298] Call Trace: [ 66.273532][ T3298] [ 66.273541][ T3298] __dump_stack+0x1d/0x30 [ 66.273564][ T3298] dump_stack_lvl+0xe8/0x140 [ 66.273585][ T3298] dump_stack+0x15/0x1b [ 66.273602][ T3298] dump_header+0x81/0x220 [ 66.273687][ T3298] oom_kill_process+0x342/0x400 [ 66.273729][ T3298] out_of_memory+0x979/0xb80 [ 66.273767][ T3298] try_charge_memcg+0x5e6/0x9e0 [ 66.273796][ T3298] charge_memcg+0x51/0xc0 [ 66.273815][ T3298] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 66.273867][ T3298] __read_swap_cache_async+0x1df/0x350 [ 66.273908][ T3298] swap_cluster_readahead+0x277/0x3e0 [ 66.273952][ T3298] swapin_readahead+0xde/0x6f0 [ 66.274090][ T3298] ? __filemap_get_folio+0x4f7/0x6b0 [ 66.274131][ T3298] ? swap_cache_get_folio+0x77/0x200 [ 66.274170][ T3298] do_swap_page+0x301/0x2430 [ 66.274255][ T3298] ? finish_task_switch+0xad/0x2b0 [ 66.274280][ T3298] ? __pfx_default_wake_function+0x10/0x10 [ 66.274308][ T3298] handle_mm_fault+0x9a5/0x2c20 [ 66.274363][ T3298] do_user_addr_fault+0x636/0x1090 [ 66.274415][ T3298] ? fpregs_restore_userregs+0xe2/0x1d0 [ 66.274449][ T3298] ? switch_fpu_return+0xe/0x20 [ 66.274489][ T3298] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.274592][ T3298] exc_page_fault+0x62/0xa0 [ 66.274634][ T3298] asm_exc_page_fault+0x26/0x30 [ 66.274671][ T3298] RIP: 0033:0x7f7acf951745 [ 66.274688][ T3298] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 66.274709][ T3298] RSP: 002b:00007ffc387495e8 EFLAGS: 00010246 [ 66.274727][ T3298] RAX: 0000000000000000 RBX: 000000000000009c RCX: 00007f7acf951743 [ 66.274741][ T3298] RDX: 00007ffc38749600 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.274756][ T3298] RBP: 00007ffc3874966c R08: 000000000cd0b54c R09: 0000000000000000 [ 66.274770][ T3298] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 66.274787][ T3298] R13: 00000000000927c0 R14: 0000000000010093 R15: 00007ffc387496c0 [ 66.274809][ T3298] [ 66.274817][ T3298] memory: usage 307200kB, limit 307200kB, failcnt 271 [ 66.500886][ T3298] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 66.508805][ T3298] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 66.516089][ T3298] Memory cgroup stats for /syz0: [ 66.516508][ T3298] cache 0 [ 66.524554][ T3298] rss 4096 [ 66.527730][ T3298] shmem 0 [ 66.530753][ T3298] mapped_file 0 [ 66.534241][ T3298] dirty 0 [ 66.537209][ T3298] writeback 4096 [ 66.540777][ T3298] workingset_refault_anon 5 [ 66.545388][ T3298] workingset_refault_file 376 [ 66.550122][ T3298] swap 106496 [ 66.553588][ T3298] swapcached 24576 [ 66.557378][ T3298] pgpgin 40289 [ 66.560761][ T3298] pgpgout 40283 [ 66.564273][ T3298] pgfault 48335 [ 66.568046][ T3298] pgmajfault 7 [ 66.571450][ T3298] inactive_anon 20480 [ 66.575442][ T3298] active_anon 4096 [ 66.579230][ T3298] inactive_file 0 [ 66.582877][ T3298] active_file 0 [ 66.586343][ T3298] unevictable 0 [ 66.589838][ T3298] hierarchical_memory_limit 314572800 [ 66.595364][ T3298] hierarchical_memsw_limit 9223372036854771712 [ 66.601570][ T3298] total_cache 0 [ 66.605042][ T3298] total_rss 4096 [ 66.608615][ T3298] total_shmem 0 [ 66.612064][ T3298] total_mapped_file 0 [ 66.616054][ T3298] total_dirty 0 [ 66.619536][ T3298] total_writeback 4096 [ 66.623607][ T3298] total_workingset_refault_anon 5 [ 66.628660][ T3298] total_workingset_refault_file 376 [ 66.633949][ T3298] total_swap 106496 [ 66.637792][ T3298] total_swapcached 24576 [ 66.642039][ T3298] total_pgpgin 40289 [ 66.645966][ T3298] total_pgpgout 40283 [ 66.650053][ T3298] total_pgfault 48335 [ 66.654111][ T3298] total_pgmajfault 7 [ 66.658065][ T3298] total_inactive_anon 20480 [ 66.662566][ T3298] total_active_anon 4096 [ 66.666802][ T3298] total_inactive_file 0 [ 66.671041][ T3298] total_active_file 0 [ 66.675033][ T3298] total_unevictable 0 [ 66.679031][ T3298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.386,pid=5143,uid=0 [ 66.693731][ T3298] Memory cgroup out of memory: Killed process 5143 (syz.0.386) total-vm:90176kB, anon-rss:1132kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 66.877712][ T5144] syz.0.386 (5144) used greatest stack depth: 7344 bytes left [ 66.894693][ T5179] FAULT_INJECTION: forcing a failure. [ 66.894693][ T5179] name failslab, interval 1, probability 0, space 0, times 0 [ 66.907476][ T5179] CPU: 1 UID: 0 PID: 5179 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.907503][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.907515][ T5179] Call Trace: [ 66.907520][ T5179] [ 66.907528][ T5179] __dump_stack+0x1d/0x30 [ 66.907604][ T5179] dump_stack_lvl+0xe8/0x140 [ 66.907623][ T5179] dump_stack+0x15/0x1b [ 66.907639][ T5179] should_fail_ex+0x265/0x280 [ 66.907692][ T5179] should_failslab+0x8c/0xb0 [ 66.907772][ T5179] kmem_cache_alloc_node_noprof+0x57/0x320 [ 66.907802][ T5179] ? __alloc_skb+0x101/0x320 [ 66.907824][ T5179] __alloc_skb+0x101/0x320 [ 66.907846][ T5179] ? audit_log_start+0x365/0x6c0 [ 66.907943][ T5179] audit_log_start+0x380/0x6c0 [ 66.907986][ T5179] audit_seccomp+0x48/0x100 [ 66.908096][ T5179] ? __seccomp_filter+0x68c/0x10d0 [ 66.908119][ T5179] __seccomp_filter+0x69d/0x10d0 [ 66.908144][ T5179] ? __rcu_read_unlock+0x4f/0x70 [ 66.908173][ T5179] ? bpf_trace_run2+0x124/0x1c0 [ 66.908201][ T5179] ? __rcu_read_unlock+0x4f/0x70 [ 66.908234][ T5179] __secure_computing+0x82/0x150 [ 66.908259][ T5179] syscall_trace_enter+0xcf/0x1e0 [ 66.908291][ T5179] do_syscall_64+0xac/0x200 [ 66.908326][ T5179] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.908418][ T5179] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.908451][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.908471][ T5179] RIP: 0033:0x7f7acf91d8dc [ 66.908486][ T5179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.908509][ T5179] RSP: 002b:00007f7ace387030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.908604][ T5179] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91d8dc [ 66.908619][ T5179] RDX: 000000000000000f RSI: 00007f7ace3870a0 RDI: 0000000000000003 [ 66.908635][ T5179] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 66.908650][ T5179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.908665][ T5179] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 66.908761][ T5179] [ 67.442443][ T5191] FAULT_INJECTION: forcing a failure. [ 67.442443][ T5191] name failslab, interval 1, probability 0, space 0, times 0 [ 67.455145][ T5191] CPU: 0 UID: 0 PID: 5191 Comm: syz.4.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.455178][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.455189][ T5191] Call Trace: [ 67.455196][ T5191] [ 67.455202][ T5191] __dump_stack+0x1d/0x30 [ 67.455275][ T5191] dump_stack_lvl+0xe8/0x140 [ 67.455300][ T5191] dump_stack+0x15/0x1b [ 67.455314][ T5191] should_fail_ex+0x265/0x280 [ 67.455414][ T5191] should_failslab+0x8c/0xb0 [ 67.455447][ T5191] kmem_cache_alloc_noprof+0x50/0x310 [ 67.455470][ T5191] ? audit_log_start+0x365/0x6c0 [ 67.455497][ T5191] audit_log_start+0x365/0x6c0 [ 67.455590][ T5191] audit_seccomp+0x48/0x100 [ 67.455613][ T5191] ? __seccomp_filter+0x68c/0x10d0 [ 67.455632][ T5191] __seccomp_filter+0x69d/0x10d0 [ 67.455652][ T5191] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.455749][ T5191] ? vfs_write+0x7e8/0x960 [ 67.455840][ T5191] ? __rcu_read_unlock+0x4f/0x70 [ 67.455858][ T5191] ? __fget_files+0x184/0x1c0 [ 67.455883][ T5191] __secure_computing+0x82/0x150 [ 67.455902][ T5191] syscall_trace_enter+0xcf/0x1e0 [ 67.455992][ T5191] do_syscall_64+0xac/0x200 [ 67.456019][ T5191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.456045][ T5191] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.456120][ T5191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.456143][ T5191] RIP: 0033:0x7ff09f02d8dc [ 67.456223][ T5191] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 67.456238][ T5191] RSP: 002b:00007ff09da97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.456254][ T5191] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02d8dc [ 67.456264][ T5191] RDX: 000000000000000f RSI: 00007ff09da970a0 RDI: 0000000000000006 [ 67.456274][ T5191] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 67.456284][ T5191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.456295][ T5191] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 67.456376][ T5191] [ 67.930098][ T5193] loop4: detected capacity change from 0 to 8192 [ 68.495831][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 68.495849][ T29] audit: type=1400 audit(1759101204.817:37754): avc: denied { open } for pid=5212 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.510761][ T5213] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.521312][ T29] audit: type=1400 audit(1759101204.817:37755): avc: denied { kernel } for pid=5212 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.548575][ T29] audit: type=1400 audit(1759101204.817:37756): avc: denied { tracepoint } for pid=5212 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.633816][ T29] audit: type=1400 audit(1759101204.957:37757): avc: denied { read } for pid=5214 comm="syz.4.416" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.657813][ T29] audit: type=1400 audit(1759101204.957:37758): avc: denied { open } for pid=5214 comm="syz.4.416" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.682081][ T29] audit: type=1400 audit(1759101204.987:37759): avc: denied { create } for pid=5214 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.701893][ T29] audit: type=1400 audit(1759101204.987:37760): avc: denied { connect } for pid=5214 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.722225][ T29] audit: type=1400 audit(1759101205.007:37761): avc: denied { write } for pid=5214 comm="syz.4.416" path="socket:[8712]" dev="sockfs" ino=8712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.820069][ T29] audit: type=1326 audit(1759101205.147:37762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 68.869140][ T29] audit: type=1326 audit(1759101205.167:37763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 69.097219][ T5243] loop3: detected capacity change from 0 to 164 [ 69.103959][ T5221] loop4: detected capacity change from 0 to 8192 [ 69.132749][ T5244] program syz.2.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.690294][ T5246] FAULT_INJECTION: forcing a failure. [ 69.690294][ T5246] name failslab, interval 1, probability 0, space 0, times 0 [ 69.703037][ T5246] CPU: 1 UID: 0 PID: 5246 Comm: syz.4.428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.703067][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.703078][ T5246] Call Trace: [ 69.703084][ T5246] [ 69.703091][ T5246] __dump_stack+0x1d/0x30 [ 69.703110][ T5246] dump_stack_lvl+0xe8/0x140 [ 69.703188][ T5246] dump_stack+0x15/0x1b [ 69.703203][ T5246] should_fail_ex+0x265/0x280 [ 69.703225][ T5246] should_failslab+0x8c/0xb0 [ 69.703247][ T5246] kmem_cache_alloc_node_noprof+0x57/0x320 [ 69.703342][ T5246] ? __alloc_skb+0x101/0x320 [ 69.703361][ T5246] __alloc_skb+0x101/0x320 [ 69.703379][ T5246] __ip6_append_data+0x190f/0x2390 [ 69.703481][ T5246] ? __pfx_raw6_getfrag+0x10/0x10 [ 69.703502][ T5246] ? __rcu_read_unlock+0x4f/0x70 [ 69.703522][ T5246] ? __pfx_ip6_mtu+0x10/0x10 [ 69.703569][ T5246] ? ip6_mtu+0xf5/0x120 [ 69.703587][ T5246] ip6_append_data+0x13b/0x250 [ 69.703609][ T5246] ? __pfx_raw6_getfrag+0x10/0x10 [ 69.703631][ T5246] rawv6_sendmsg+0xdce/0xf80 [ 69.703668][ T5246] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 69.703709][ T5246] inet_sendmsg+0xc2/0xd0 [ 69.703740][ T5246] __sock_sendmsg+0x102/0x180 [ 69.703790][ T5246] sock_write_iter+0x165/0x1b0 [ 69.703876][ T5246] do_iter_readv_writev+0x499/0x540 [ 69.703916][ T5246] vfs_writev+0x2df/0x8b0 [ 69.703952][ T5246] do_writev+0xe7/0x210 [ 69.704032][ T5246] __x64_sys_writev+0x45/0x50 [ 69.704055][ T5246] x64_sys_call+0x1e9a/0x2ff0 [ 69.704075][ T5246] do_syscall_64+0xd2/0x200 [ 69.704117][ T5246] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.704139][ T5246] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.704165][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.704185][ T5246] RIP: 0033:0x7ff09f02eec9 [ 69.704198][ T5246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.704250][ T5246] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 69.704275][ T5246] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 69.704286][ T5246] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 69.704297][ T5246] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 69.704307][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.704318][ T5246] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 69.704335][ T5246] [ 70.069149][ T5259] loop4: detected capacity change from 0 to 512 [ 70.075985][ T5259] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.103084][ T5259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.147416][ T5259] EXT4-fs (loop4): 1 truncate cleaned up [ 70.153650][ T5259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.270643][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.895619][ T5283] loop3: detected capacity change from 0 to 164 [ 71.158206][ T5285] loop4: detected capacity change from 0 to 8192 [ 71.634850][ T5309] FAULT_INJECTION: forcing a failure. [ 71.634850][ T5309] name failslab, interval 1, probability 0, space 0, times 0 [ 71.647597][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.647631][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.647647][ T5309] Call Trace: [ 71.647655][ T5309] [ 71.647709][ T5309] __dump_stack+0x1d/0x30 [ 71.647729][ T5309] dump_stack_lvl+0xe8/0x140 [ 71.647792][ T5309] dump_stack+0x15/0x1b [ 71.647812][ T5309] should_fail_ex+0x265/0x280 [ 71.647836][ T5309] should_failslab+0x8c/0xb0 [ 71.647861][ T5309] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 71.647893][ T5309] ? sidtab_sid2str_get+0xa0/0x130 [ 71.647977][ T5309] ? skb_put+0xa9/0xf0 [ 71.647997][ T5309] kmemdup_noprof+0x2b/0x70 [ 71.648024][ T5309] sidtab_sid2str_get+0xa0/0x130 [ 71.648107][ T5309] security_sid_to_context_core+0x1eb/0x2e0 [ 71.648138][ T5309] security_sid_to_context+0x27/0x40 [ 71.648164][ T5309] avc_audit_post_callback+0x9d/0x520 [ 71.648190][ T5309] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 71.648223][ T5309] common_lsm_audit+0x1bb/0x230 [ 71.648319][ T5309] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 71.648468][ T5309] slow_avc_audit+0x104/0x140 [ 71.648514][ T5309] avc_has_perm+0x13a/0x180 [ 71.648546][ T5309] selinux_socket_connect_helper+0x421/0x470 [ 71.648639][ T5309] selinux_sctp_bind_connect+0x178/0x250 [ 71.648684][ T5309] security_sctp_bind_connect+0x50/0x90 [ 71.648776][ T5309] sctp_sendmsg+0xee3/0x18d0 [ 71.648894][ T5309] ? selinux_socket_sendmsg+0x91/0x1b0 [ 71.649001][ T5309] ? __pfx_sctp_sendmsg+0x10/0x10 [ 71.649120][ T5309] inet_sendmsg+0xc2/0xd0 [ 71.649149][ T5309] __sock_sendmsg+0x102/0x180 [ 71.649188][ T5309] ____sys_sendmsg+0x345/0x4e0 [ 71.649281][ T5309] ___sys_sendmsg+0x17b/0x1d0 [ 71.649319][ T5309] __sys_sendmmsg+0x178/0x300 [ 71.649350][ T5309] __x64_sys_sendmmsg+0x57/0x70 [ 71.649372][ T5309] x64_sys_call+0x1c4a/0x2ff0 [ 71.649403][ T5309] do_syscall_64+0xd2/0x200 [ 71.649430][ T5309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.649451][ T5309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.649607][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.649626][ T5309] RIP: 0033:0x7fd81e8aeec9 [ 71.649639][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.649654][ T5309] RSP: 002b:00007fd81d317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.649676][ T5309] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8aeec9 [ 71.649686][ T5309] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 71.649696][ T5309] RBP: 00007fd81d317090 R08: 0000000000000000 R09: 0000000000000000 [ 71.649742][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.649751][ T5309] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 71.649767][ T5309] [ 71.978388][ T5313] bond1: entered promiscuous mode [ 71.983488][ T5313] bond1: entered allmulticast mode [ 71.989073][ T5313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.999130][ T5313] bond1 (unregistering): Released all slaves [ 72.183312][ T5328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.215452][ T5332] FAULT_INJECTION: forcing a failure. [ 72.215452][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 72.228151][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: syz.1.458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.228184][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.228198][ T5332] Call Trace: [ 72.228203][ T5332] [ 72.228211][ T5332] __dump_stack+0x1d/0x30 [ 72.228232][ T5332] dump_stack_lvl+0xe8/0x140 [ 72.228286][ T5332] dump_stack+0x15/0x1b [ 72.228303][ T5332] should_fail_ex+0x265/0x280 [ 72.228328][ T5332] should_failslab+0x8c/0xb0 [ 72.228355][ T5332] __kmalloc_noprof+0xa5/0x3e0 [ 72.228455][ T5332] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 72.228491][ T5332] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 72.228525][ T5332] genl_family_rcv_msg_doit+0x48/0x1b0 [ 72.228583][ T5332] ? selinux_capable+0x31/0x40 [ 72.228612][ T5332] ? security_capable+0x83/0x90 [ 72.228636][ T5332] ? ns_capable+0x7d/0xb0 [ 72.228657][ T5332] genl_rcv_msg+0x422/0x460 [ 72.228762][ T5332] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 72.228796][ T5332] netlink_rcv_skb+0x123/0x220 [ 72.228816][ T5332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.228900][ T5332] genl_rcv+0x28/0x40 [ 72.228927][ T5332] netlink_unicast+0x5bd/0x690 [ 72.228950][ T5332] netlink_sendmsg+0x58b/0x6b0 [ 72.229019][ T5332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.229045][ T5332] __sock_sendmsg+0x145/0x180 [ 72.229104][ T5332] ____sys_sendmsg+0x31e/0x4e0 [ 72.229134][ T5332] ___sys_sendmsg+0x17b/0x1d0 [ 72.229176][ T5332] __x64_sys_sendmsg+0xd4/0x160 [ 72.229277][ T5332] x64_sys_call+0x191e/0x2ff0 [ 72.229297][ T5332] do_syscall_64+0xd2/0x200 [ 72.229326][ T5332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.229350][ T5332] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.229423][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.229444][ T5332] RIP: 0033:0x7fd81e8aeec9 [ 72.229458][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.229495][ T5332] RSP: 002b:00007fd81d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.229513][ T5332] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8aeec9 [ 72.229525][ T5332] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 72.229537][ T5332] RBP: 00007fd81d317090 R08: 0000000000000000 R09: 0000000000000000 [ 72.229548][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.229560][ T5332] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 72.229588][ T5332] [ 72.487484][ T5334] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 72.521310][ T5315] loop4: detected capacity change from 0 to 8192 [ 72.521711][ T5340] __nla_validate_parse: 7 callbacks suppressed [ 72.521751][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 72.551180][ T5340] IPVS: Error joining to the multicast group [ 72.673240][ T5340] netlink: 104 bytes leftover after parsing attributes in process `syz.1.461'. [ 72.770066][ T5350] program syz.1.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.915897][ T5352] loop3: detected capacity change from 0 to 764 [ 72.986563][ T5354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'. [ 73.050079][ T5358] loop3: detected capacity change from 0 to 1024 [ 73.056585][ T5358] ======================================================= [ 73.056585][ T5358] WARNING: The mand mount option has been deprecated and [ 73.056585][ T5358] and is ignored by this kernel. Remove the mand [ 73.056585][ T5358] option from the mount to silence this warning. [ 73.056585][ T5358] ======================================================= [ 73.117372][ T5358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.178057][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.211758][ T5370] loop3: detected capacity change from 0 to 1024 [ 73.230784][ T5370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.253122][ T5370] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 73.265512][ T5370] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.265512][ T5370] [ 73.275291][ T5370] EXT4-fs (loop3): Total free blocks count 0 [ 73.281301][ T5370] EXT4-fs (loop3): Free/Dirty block details [ 73.287227][ T5370] EXT4-fs (loop3): free_blocks=0 [ 73.292268][ T5370] EXT4-fs (loop3): dirty_blocks=0 [ 73.297333][ T5370] EXT4-fs (loop3): Block reservation details [ 73.303310][ T5370] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 73.342767][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.418032][ T5380] IPVS: Error connecting to the multicast addr [ 73.691371][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 73.691388][ T29] audit: type=1326 audit(1759101210.017:38421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.722284][ T29] audit: type=1326 audit(1759101210.017:38422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.745805][ T29] audit: type=1326 audit(1759101210.017:38423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4fc11d710 code=0x7ffc0000 [ 73.769246][ T29] audit: type=1326 audit(1759101210.017:38424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4fc11eacb code=0x7ffc0000 [ 73.792557][ T29] audit: type=1326 audit(1759101210.017:38425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.815982][ T29] audit: type=1326 audit(1759101210.017:38426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.839344][ T29] audit: type=1326 audit(1759101210.017:38427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.862841][ T29] audit: type=1326 audit(1759101210.017:38428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.886244][ T29] audit: type=1326 audit(1759101210.017:38429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 73.909797][ T29] audit: type=1326 audit(1759101210.017:38430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd4fc11eec9 code=0x7ffc0000 [ 74.008066][ T5399] loop4: detected capacity change from 0 to 512 [ 74.014671][ T5399] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.058175][ T5404] IPVS: Error connecting to the multicast addr [ 74.162978][ T5409] loop3: detected capacity change from 0 to 164 [ 74.633276][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 74.643567][ T5427] tipc: Started in network mode [ 74.648528][ T5427] tipc: Node identity ac14140f, cluster identity 4711 [ 74.655472][ T5427] tipc: New replicast peer: 255.255.255.255 [ 74.661605][ T5427] tipc: Enabled bearer , priority 10 [ 74.684490][ T5429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 74.700571][ T5429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.773541][ T5431] FAULT_INJECTION: forcing a failure. [ 74.773541][ T5431] name failslab, interval 1, probability 0, space 0, times 0 [ 74.786234][ T5431] CPU: 1 UID: 0 PID: 5431 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.786369][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.786381][ T5431] Call Trace: [ 74.786389][ T5431] [ 74.786396][ T5431] __dump_stack+0x1d/0x30 [ 74.786416][ T5431] dump_stack_lvl+0xe8/0x140 [ 74.786440][ T5431] dump_stack+0x15/0x1b [ 74.786460][ T5431] should_fail_ex+0x265/0x280 [ 74.786556][ T5431] ? sctp_add_bind_addr+0x71/0x1e0 [ 74.786588][ T5431] should_failslab+0x8c/0xb0 [ 74.786620][ T5431] __kmalloc_cache_noprof+0x4c/0x320 [ 74.786655][ T5431] sctp_add_bind_addr+0x71/0x1e0 [ 74.786795][ T5431] sctp_copy_local_addr_list+0x199/0x220 [ 74.786866][ T5431] sctp_copy_one_addr+0x7f/0x280 [ 74.786902][ T5431] sctp_bind_addr_copy+0x79/0x290 [ 74.786939][ T5431] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 74.787027][ T5431] sctp_connect_new_asoc+0x1c3/0x3a0 [ 74.787057][ T5431] sctp_sendmsg+0xf10/0x18d0 [ 74.787176][ T5431] ? selinux_socket_sendmsg+0x91/0x1b0 [ 74.787210][ T5431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 74.787243][ T5431] inet_sendmsg+0xc2/0xd0 [ 74.787266][ T5431] __sock_sendmsg+0x102/0x180 [ 74.787348][ T5431] ____sys_sendmsg+0x31e/0x4e0 [ 74.787382][ T5431] ___sys_sendmsg+0x17b/0x1d0 [ 74.787424][ T5431] __x64_sys_sendmsg+0xd4/0x160 [ 74.787510][ T5431] x64_sys_call+0x191e/0x2ff0 [ 74.787529][ T5431] do_syscall_64+0xd2/0x200 [ 74.787633][ T5431] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.787655][ T5431] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.787681][ T5431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.787700][ T5431] RIP: 0033:0x7ff09f02eec9 [ 74.787766][ T5431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.787809][ T5431] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.787891][ T5431] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 74.787902][ T5431] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 000000000000000a [ 74.787912][ T5431] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 74.787962][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.787972][ T5431] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 74.787993][ T5431] [ 75.039878][ T5433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 75.111711][ T5435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.495'. [ 75.122323][ T5441] netlink: 68 bytes leftover after parsing attributes in process `syz.0.497'. [ 75.152177][ T5444] FAULT_INJECTION: forcing a failure. [ 75.152177][ T5444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.165387][ T5444] CPU: 1 UID: 0 PID: 5444 Comm: syz.4.499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.165437][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.165452][ T5444] Call Trace: [ 75.165460][ T5444] [ 75.165469][ T5444] __dump_stack+0x1d/0x30 [ 75.165496][ T5444] dump_stack_lvl+0xe8/0x140 [ 75.165517][ T5444] dump_stack+0x15/0x1b [ 75.165580][ T5444] should_fail_ex+0x265/0x280 [ 75.165612][ T5444] should_fail+0xb/0x20 [ 75.165634][ T5444] should_fail_usercopy+0x1a/0x20 [ 75.165668][ T5444] _copy_from_user+0x1c/0xb0 [ 75.165734][ T5444] ___sys_sendmsg+0xc1/0x1d0 [ 75.165787][ T5444] __x64_sys_sendmsg+0xd4/0x160 [ 75.165826][ T5444] x64_sys_call+0x191e/0x2ff0 [ 75.165900][ T5444] do_syscall_64+0xd2/0x200 [ 75.165941][ T5444] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.165969][ T5444] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.166067][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.166092][ T5444] RIP: 0033:0x7ff09f02eec9 [ 75.166107][ T5444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.166124][ T5444] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.166200][ T5444] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 75.166218][ T5444] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000008 [ 75.166233][ T5444] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 75.166248][ T5444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.166264][ T5444] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 75.166368][ T5444] [ 75.182007][ T5445] binfmt_misc: register: failed to install interpreter file ./file2 [ 75.359791][ T5449] loop4: detected capacity change from 0 to 1024 [ 75.389324][ T5438] loop3: detected capacity change from 0 to 8192 [ 75.400849][ T5449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.415019][ T5449] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.469047][ T5449] Invalid option length (1045175) for dns_resolver key [ 75.479019][ T5449] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm \.: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.494315][ T5449] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 75.506738][ T5449] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.506738][ T5449] [ 75.533799][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.560078][ T3401] IPVS: starting estimator thread 0... [ 75.645188][ T5475] FAULT_INJECTION: forcing a failure. [ 75.645188][ T5475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.658377][ T5475] CPU: 0 UID: 0 PID: 5475 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.658410][ T5475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.658426][ T5475] Call Trace: [ 75.658434][ T5475] [ 75.658443][ T5475] __dump_stack+0x1d/0x30 [ 75.658524][ T5475] dump_stack_lvl+0xe8/0x140 [ 75.658541][ T5475] dump_stack+0x15/0x1b [ 75.658606][ T5475] should_fail_ex+0x265/0x280 [ 75.658627][ T5475] should_fail+0xb/0x20 [ 75.658646][ T5475] should_fail_usercopy+0x1a/0x20 [ 75.658743][ T5475] _copy_from_user+0x1c/0xb0 [ 75.658772][ T5475] x25_route_ioctl+0x6b/0x6a0 [ 75.658804][ T5475] x25_ioctl+0x485/0xb90 [ 75.658904][ T5475] ? ioctl_has_perm+0x257/0x2a0 [ 75.658926][ T5475] sock_do_ioctl+0x70/0x220 [ 75.658960][ T5475] sock_ioctl+0x41b/0x610 [ 75.658986][ T5475] ? __pfx_sock_ioctl+0x10/0x10 [ 75.659032][ T5475] __se_sys_ioctl+0xce/0x140 [ 75.659049][ T5475] __x64_sys_ioctl+0x43/0x50 [ 75.659065][ T5475] x64_sys_call+0x1816/0x2ff0 [ 75.659084][ T5475] do_syscall_64+0xd2/0x200 [ 75.659122][ T5475] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.659223][ T5475] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.659298][ T5475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.659318][ T5475] RIP: 0033:0x7ff09f02eec9 [ 75.659332][ T5475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.659386][ T5475] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.659403][ T5475] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 75.659413][ T5475] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 75.659424][ T5475] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 75.659434][ T5475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.659444][ T5475] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 75.659460][ T5475] [ 75.667449][ T5466] IPVS: using max 2352 ests per chain, 117600 per kthread [ 75.871580][ T3401] tipc: Node number set to 2886997007 [ 76.238759][ T5496] loop3: detected capacity change from 0 to 256 [ 76.504602][ T5516] program syz.2.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.517599][ T5507] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 76.525608][ T5507] team0: Device dummy0 is up. Set it down before adding it as a team port [ 76.697870][ T5532] loop4: detected capacity change from 0 to 512 [ 76.704741][ T5532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.716506][ T5532] EXT4-fs (loop4): 1 truncate cleaned up [ 76.722533][ T5532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.935482][ T5536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.530'. [ 76.944752][ T5535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.530'. [ 77.259258][ T5542] loop3: detected capacity change from 0 to 164 [ 77.572890][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.821959][ T5554] loop4: detected capacity change from 0 to 8192 [ 78.197202][ T5562] __nla_validate_parse: 1 callbacks suppressed [ 78.197221][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 78.303854][ T5567] netlink: 'syz.3.542': attribute type 2 has an invalid length. [ 78.311563][ T5567] netlink: 'syz.3.542': attribute type 9 has an invalid length. [ 78.319265][ T5567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.542'. [ 78.409706][ T5574] FAULT_INJECTION: forcing a failure. [ 78.409706][ T5574] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.423043][ T5574] CPU: 1 UID: 0 PID: 5574 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.423083][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.423100][ T5574] Call Trace: [ 78.423108][ T5574] [ 78.423117][ T5574] __dump_stack+0x1d/0x30 [ 78.423202][ T5574] dump_stack_lvl+0xe8/0x140 [ 78.423300][ T5574] dump_stack+0x15/0x1b [ 78.423320][ T5574] should_fail_ex+0x265/0x280 [ 78.423410][ T5574] should_fail_alloc_page+0xf2/0x100 [ 78.423446][ T5574] __alloc_frozen_pages_noprof+0xff/0x360 [ 78.423494][ T5574] alloc_pages_mpol+0xb3/0x250 [ 78.423601][ T5574] folio_alloc_mpol_noprof+0x39/0x80 [ 78.423665][ T5574] shmem_get_folio_gfp+0x3cf/0xd60 [ 78.423714][ T5574] shmem_fallocate+0x57c/0x840 [ 78.423766][ T5574] vfs_fallocate+0x3b6/0x400 [ 78.423800][ T5574] __x64_sys_fallocate+0x7a/0xd0 [ 78.423868][ T5574] x64_sys_call+0x2514/0x2ff0 [ 78.423939][ T5574] do_syscall_64+0xd2/0x200 [ 78.423969][ T5574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.423995][ T5574] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.424039][ T5574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.424059][ T5574] RIP: 0033:0x7ff09f02eec9 [ 78.424074][ T5574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.424094][ T5574] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 78.424117][ T5574] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 78.424132][ T5574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 78.424204][ T5574] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 78.424215][ T5574] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 78.424227][ T5574] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 78.424275][ T5574] [ 78.424716][ T5575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.474377][ T5565] FAULT_INJECTION: forcing a failure. [ 78.474377][ T5565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.474760][ T5575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.480317][ T5565] CPU: 0 UID: 0 PID: 5565 Comm: syz.1.541 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.480377][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.480395][ T5565] Call Trace: [ 78.480404][ T5565] [ 78.480417][ T5565] __dump_stack+0x1d/0x30 [ 78.480447][ T5565] dump_stack_lvl+0xe8/0x140 [ 78.480474][ T5565] dump_stack+0x15/0x1b [ 78.480524][ T5565] should_fail_ex+0x265/0x280 [ 78.480558][ T5565] should_fail+0xb/0x20 [ 78.480588][ T5565] should_fail_usercopy+0x1a/0x20 [ 78.480624][ T5565] _copy_to_user+0x20/0xa0 [ 78.480726][ T5565] simple_read_from_buffer+0xb5/0x130 [ 78.480764][ T5565] proc_fail_nth_read+0x10e/0x150 [ 78.480803][ T5565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.480866][ T5565] vfs_read+0x1a5/0x770 [ 78.480910][ T5565] ? __rcu_read_unlock+0x4f/0x70 [ 78.480972][ T5565] ? __fget_files+0x184/0x1c0 [ 78.481011][ T5565] ksys_read+0xda/0x1a0 [ 78.481059][ T5565] __x64_sys_read+0x40/0x50 [ 78.481095][ T5565] x64_sys_call+0x27bc/0x2ff0 [ 78.481126][ T5565] do_syscall_64+0xd2/0x200 [ 78.481171][ T5565] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.481206][ T5565] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.481315][ T5565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.481345][ T5565] RIP: 0033:0x7fd81e8ad8dc [ 78.481367][ T5565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.481404][ T5565] RSP: 002b:00007fd81d317030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.481430][ T5565] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8ad8dc [ 78.481448][ T5565] RDX: 000000000000000f RSI: 00007fd81d3170a0 RDI: 0000000000000005 [ 78.481555][ T5565] RBP: 00007fd81d317090 R08: 0000000000000000 R09: 0000000000000000 [ 78.481573][ T5565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.481590][ T5565] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 78.481617][ T5565] [ 78.857278][ T29] kauditd_printk_skb: 950 callbacks suppressed [ 78.857295][ T29] audit: type=1326 audit(1759101215.167:39379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.887231][ T29] audit: type=1326 audit(1759101215.167:39380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.910876][ T29] audit: type=1326 audit(1759101215.167:39381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.934320][ T29] audit: type=1326 audit(1759101215.167:39382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.934625][ T5579] loop4: detected capacity change from 0 to 256 [ 78.957776][ T29] audit: type=1326 audit(1759101215.167:39383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.957813][ T29] audit: type=1326 audit(1759101215.167:39384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.957884][ T29] audit: type=1326 audit(1759101215.167:39385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 78.969751][ T5579] msdos: Bad value for 'uid' [ 78.987505][ T29] audit: type=1326 audit(1759101215.167:39386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 79.010975][ T5579] msdos: Bad value for 'uid' [ 79.034369][ T29] audit: type=1326 audit(1759101215.167:39387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 79.090333][ T29] audit: type=1326 audit(1759101215.167:39388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acf91eec9 code=0x7ffc0000 [ 79.190267][ T5586] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 79.267000][ T5589] loop4: detected capacity change from 0 to 164 [ 79.473398][ T5591] FAULT_INJECTION: forcing a failure. [ 79.473398][ T5591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.486506][ T5591] CPU: 1 UID: 0 PID: 5591 Comm: syz.2.550 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.486565][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.486577][ T5591] Call Trace: [ 79.486586][ T5591] [ 79.486595][ T5591] __dump_stack+0x1d/0x30 [ 79.486641][ T5591] dump_stack_lvl+0xe8/0x140 [ 79.486658][ T5591] dump_stack+0x15/0x1b [ 79.486672][ T5591] should_fail_ex+0x265/0x280 [ 79.486693][ T5591] should_fail+0xb/0x20 [ 79.486767][ T5591] should_fail_usercopy+0x1a/0x20 [ 79.486788][ T5591] _copy_from_iter+0xd2/0xe80 [ 79.486859][ T5591] ? __build_skb_around+0x1a0/0x200 [ 79.486930][ T5591] ? __alloc_skb+0x223/0x320 [ 79.486949][ T5591] netlink_sendmsg+0x471/0x6b0 [ 79.487032][ T5591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.487053][ T5591] __sock_sendmsg+0x145/0x180 [ 79.487088][ T5591] ____sys_sendmsg+0x31e/0x4e0 [ 79.487112][ T5591] ___sys_sendmsg+0x17b/0x1d0 [ 79.487179][ T5591] __x64_sys_sendmsg+0xd4/0x160 [ 79.487214][ T5591] x64_sys_call+0x191e/0x2ff0 [ 79.487240][ T5591] do_syscall_64+0xd2/0x200 [ 79.487326][ T5591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.487363][ T5591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.487391][ T5591] RIP: 0033:0x7fd4fc11eec9 [ 79.487409][ T5591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.487472][ T5591] RSP: 002b:00007fd4fab7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.487495][ T5591] RAX: ffffffffffffffda RBX: 00007fd4fc375fa0 RCX: 00007fd4fc11eec9 [ 79.487559][ T5591] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 79.487575][ T5591] RBP: 00007fd4fab7f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.487603][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.487614][ T5591] R13: 00007fd4fc376038 R14: 00007fd4fc375fa0 R15: 00007ffc10917aa8 [ 79.487650][ T5591] [ 79.724129][ T5597] FAULT_INJECTION: forcing a failure. [ 79.724129][ T5597] name failslab, interval 1, probability 0, space 0, times 0 [ 79.736888][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz.0.553 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.736923][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.736940][ T5597] Call Trace: [ 79.736947][ T5597] [ 79.736956][ T5597] __dump_stack+0x1d/0x30 [ 79.736984][ T5597] dump_stack_lvl+0xe8/0x140 [ 79.737010][ T5597] dump_stack+0x15/0x1b [ 79.737067][ T5597] should_fail_ex+0x265/0x280 [ 79.737099][ T5597] should_failslab+0x8c/0xb0 [ 79.737136][ T5597] kmem_cache_alloc_noprof+0x50/0x310 [ 79.737242][ T5597] ? alloc_empty_file+0x76/0x200 [ 79.737282][ T5597] ? mntput+0x4b/0x80 [ 79.737405][ T5597] alloc_empty_file+0x76/0x200 [ 79.737445][ T5597] path_openat+0x68/0x2170 [ 79.737471][ T5597] ? _parse_integer_limit+0x170/0x190 [ 79.737522][ T5597] ? kstrtoull+0x111/0x140 [ 79.737641][ T5597] ? kstrtouint+0x76/0xc0 [ 79.737672][ T5597] do_filp_open+0x109/0x230 [ 79.737711][ T5597] do_sys_openat2+0xa6/0x110 [ 79.737869][ T5597] __x64_sys_openat+0xf2/0x120 [ 79.737913][ T5597] x64_sys_call+0x2e9c/0x2ff0 [ 79.737957][ T5597] do_syscall_64+0xd2/0x200 [ 79.738116][ T5597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.738148][ T5597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.738201][ T5597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.738228][ T5597] RIP: 0033:0x7f7acf91eec9 [ 79.738246][ T5597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.738269][ T5597] RSP: 002b:00007f7ace387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.738294][ T5597] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91eec9 [ 79.738310][ T5597] RDX: 0000000000081000 RSI: 0000200000000940 RDI: ffffffffffffff9c [ 79.738326][ T5597] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 79.738372][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.738387][ T5597] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 79.738413][ T5597] [ 79.983914][ T5606] FAULT_INJECTION: forcing a failure. [ 79.983914][ T5606] name failslab, interval 1, probability 0, space 0, times 0 [ 79.996644][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: syz.0.557 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.996676][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.996710][ T5606] Call Trace: [ 79.996718][ T5606] [ 79.996727][ T5606] __dump_stack+0x1d/0x30 [ 79.996827][ T5606] dump_stack_lvl+0xe8/0x140 [ 79.996852][ T5606] dump_stack+0x15/0x1b [ 79.996936][ T5606] should_fail_ex+0x265/0x280 [ 79.997003][ T5606] should_failslab+0x8c/0xb0 [ 79.997036][ T5606] __kmalloc_noprof+0xa5/0x3e0 [ 79.997073][ T5606] ? security_prepare_creds+0x52/0x120 [ 79.997102][ T5606] security_prepare_creds+0x52/0x120 [ 79.997131][ T5606] prepare_creds+0x34a/0x4c0 [ 79.997235][ T5606] copy_creds+0x8f/0x3f0 [ 79.997265][ T5606] copy_process+0x658/0x2000 [ 79.997318][ T5606] ? copy_clone_args_from_user+0x3ce/0x490 [ 79.997361][ T5606] kernel_clone+0x16c/0x5c0 [ 79.997398][ T5606] __se_sys_clone3+0x1c2/0x200 [ 79.997445][ T5606] __x64_sys_clone3+0x31/0x40 [ 79.997520][ T5606] x64_sys_call+0x1fc9/0x2ff0 [ 79.997551][ T5606] do_syscall_64+0xd2/0x200 [ 79.997590][ T5606] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.997621][ T5606] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.997681][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.997707][ T5606] RIP: 0033:0x7f7acf91eec9 [ 79.997744][ T5606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.997767][ T5606] RSP: 002b:00007f7ace386f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 79.997792][ T5606] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7acf91eec9 [ 79.997809][ T5606] RDX: 00007f7ace386f20 RSI: 0000000000000058 RDI: 00007f7ace386f20 [ 79.997824][ T5606] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000058 [ 79.997840][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.997863][ T5606] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 79.997884][ T5606] [ 80.029970][ C0] hrtimer: interrupt took 36707 ns [ 80.275894][ T5614] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 80.312587][ T5615] program syz.4.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.509717][ T5599] loop3: detected capacity change from 0 to 1024 [ 80.532595][ T5599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.560731][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.816707][ T5622] loop3: detected capacity change from 0 to 8192 [ 80.857374][ T5631] FAULT_INJECTION: forcing a failure. [ 80.857374][ T5631] name failslab, interval 1, probability 0, space 0, times 0 [ 80.870085][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz.1.564 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.870119][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.870141][ T5631] Call Trace: [ 80.870148][ T5631] [ 80.870168][ T5631] __dump_stack+0x1d/0x30 [ 80.870194][ T5631] dump_stack_lvl+0xe8/0x140 [ 80.870217][ T5631] dump_stack+0x15/0x1b [ 80.870236][ T5631] should_fail_ex+0x265/0x280 [ 80.870315][ T5631] should_failslab+0x8c/0xb0 [ 80.870345][ T5631] __kmalloc_noprof+0xa5/0x3e0 [ 80.870377][ T5631] ? iovec_from_user+0x84/0x210 [ 80.870456][ T5631] ? mntput_no_expire+0x6f/0x460 [ 80.870496][ T5631] iovec_from_user+0x84/0x210 [ 80.870549][ T5631] __import_iovec+0xf3/0x540 [ 80.870591][ T5631] import_iovec+0x61/0x80 [ 80.870633][ T5631] ___sys_recvmsg+0x358/0x370 [ 80.870695][ T5631] do_recvmmsg+0x1ef/0x540 [ 80.870731][ T5631] ? get_timespec64+0xc9/0x100 [ 80.870752][ T5631] __x64_sys_recvmmsg+0xfb/0x170 [ 80.870812][ T5631] x64_sys_call+0x27a6/0x2ff0 [ 80.870841][ T5631] do_syscall_64+0xd2/0x200 [ 80.870889][ T5631] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.870969][ T5631] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.871008][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.871064][ T5631] RIP: 0033:0x7fd81e8aeec9 [ 80.871080][ T5631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.871098][ T5631] RSP: 002b:00007fd81d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 80.871120][ T5631] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8aeec9 [ 80.871148][ T5631] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 80.871164][ T5631] RBP: 00007fd81d317090 R08: 0000200000003700 R09: 0000000000000000 [ 80.871181][ T5631] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 80.871196][ T5631] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 80.871215][ T5631] [ 81.325267][ T5647] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 81.333282][ T5647] team0: Device dummy0 is up. Set it down before adding it as a team port [ 82.778556][ T5674] FAULT_INJECTION: forcing a failure. [ 82.778556][ T5674] name failslab, interval 1, probability 0, space 0, times 0 [ 82.791295][ T5674] CPU: 0 UID: 0 PID: 5674 Comm: syz.3.580 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.791329][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.791344][ T5674] Call Trace: [ 82.791352][ T5674] [ 82.791360][ T5674] __dump_stack+0x1d/0x30 [ 82.791381][ T5674] dump_stack_lvl+0xe8/0x140 [ 82.791411][ T5674] dump_stack+0x15/0x1b [ 82.791431][ T5674] should_fail_ex+0x265/0x280 [ 82.791457][ T5674] ? rtnl_newlink+0x5c/0x12d0 [ 82.791521][ T5674] should_failslab+0x8c/0xb0 [ 82.791547][ T5674] __kmalloc_cache_noprof+0x4c/0x320 [ 82.791578][ T5674] rtnl_newlink+0x5c/0x12d0 [ 82.791641][ T5674] ? vfree+0x295/0x3a0 [ 82.791669][ T5674] ? kfree+0xd9/0x320 [ 82.791752][ T5674] ? vfree+0x295/0x3a0 [ 82.791824][ T5674] ? xas_load+0x413/0x430 [ 82.791902][ T5674] ? xas_load+0x413/0x430 [ 82.791932][ T5674] ? css_rstat_updated+0xb7/0x240 [ 82.791972][ T5674] ? __memcg_slab_free_hook+0x135/0x230 [ 82.792015][ T5674] ? __rcu_read_unlock+0x4f/0x70 [ 82.792042][ T5674] ? avc_has_perm_noaudit+0x1b1/0x200 [ 82.792151][ T5674] ? cred_has_capability+0x210/0x280 [ 82.792191][ T5674] ? selinux_capable+0x31/0x40 [ 82.792228][ T5674] ? security_capable+0x83/0x90 [ 82.792318][ T5674] ? ns_capable+0x7d/0xb0 [ 82.792347][ T5674] ? __pfx_rtnl_newlink+0x10/0x10 [ 82.792386][ T5674] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 82.792430][ T5674] netlink_rcv_skb+0x123/0x220 [ 82.792459][ T5674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.792515][ T5674] rtnetlink_rcv+0x1c/0x30 [ 82.792561][ T5674] netlink_unicast+0x5bd/0x690 [ 82.792647][ T5674] netlink_sendmsg+0x58b/0x6b0 [ 82.792680][ T5674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.792703][ T5674] __sock_sendmsg+0x145/0x180 [ 82.792755][ T5674] ____sys_sendmsg+0x31e/0x4e0 [ 82.792866][ T5674] ___sys_sendmsg+0x17b/0x1d0 [ 82.792913][ T5674] __x64_sys_sendmsg+0xd4/0x160 [ 82.792952][ T5674] x64_sys_call+0x191e/0x2ff0 [ 82.792981][ T5674] do_syscall_64+0xd2/0x200 [ 82.793074][ T5674] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.793107][ T5674] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.793157][ T5674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.793193][ T5674] RIP: 0033:0x7f53dce9eec9 [ 82.793259][ T5674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.793287][ T5674] RSP: 002b:00007f53db8ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.793306][ T5674] RAX: ffffffffffffffda RBX: 00007f53dd0f5fa0 RCX: 00007f53dce9eec9 [ 82.793322][ T5674] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 82.793368][ T5674] RBP: 00007f53db8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 82.793384][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.793396][ T5674] R13: 00007f53dd0f6038 R14: 00007f53dd0f5fa0 R15: 00007ffd086a44e8 [ 82.793421][ T5674] [ 83.129363][ T5678] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 83.144939][ T5678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.180771][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 83.214956][ T5678] bond1 (unregistering): Released all slaves [ 83.434919][ T5693] loop4: detected capacity change from 0 to 164 [ 83.486439][ T5696] FAULT_INJECTION: forcing a failure. [ 83.486439][ T5696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.499614][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: syz.3.585 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.499644][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.499658][ T5696] Call Trace: [ 83.499737][ T5696] [ 83.499745][ T5696] __dump_stack+0x1d/0x30 [ 83.499769][ T5696] dump_stack_lvl+0xe8/0x140 [ 83.499790][ T5696] dump_stack+0x15/0x1b [ 83.499846][ T5696] should_fail_ex+0x265/0x280 [ 83.499876][ T5696] should_fail+0xb/0x20 [ 83.499903][ T5696] should_fail_usercopy+0x1a/0x20 [ 83.500003][ T5696] _copy_to_user+0x20/0xa0 [ 83.500044][ T5696] simple_read_from_buffer+0xb5/0x130 [ 83.500074][ T5696] proc_fail_nth_read+0x10e/0x150 [ 83.500196][ T5696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.500229][ T5696] vfs_read+0x1a5/0x770 [ 83.500255][ T5696] ? __rcu_read_unlock+0x4f/0x70 [ 83.500295][ T5696] ? __fget_files+0x184/0x1c0 [ 83.500323][ T5696] ? __sys_bind+0x223/0x2a0 [ 83.500410][ T5696] ksys_read+0xda/0x1a0 [ 83.500438][ T5696] __x64_sys_read+0x40/0x50 [ 83.500507][ T5696] x64_sys_call+0x27bc/0x2ff0 [ 83.500534][ T5696] do_syscall_64+0xd2/0x200 [ 83.500570][ T5696] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.500678][ T5696] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.500713][ T5696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.500739][ T5696] RIP: 0033:0x7f53dce9d8dc [ 83.500762][ T5696] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.500784][ T5696] RSP: 002b:00007f53db8ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.500807][ T5696] RAX: ffffffffffffffda RBX: 00007f53dd0f5fa0 RCX: 00007f53dce9d8dc [ 83.500860][ T5696] RDX: 000000000000000f RSI: 00007f53db8ff0a0 RDI: 0000000000000005 [ 83.500875][ T5696] RBP: 00007f53db8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 83.500890][ T5696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.500905][ T5696] R13: 00007f53dd0f6038 R14: 00007f53dd0f5fa0 R15: 00007ffd086a44e8 [ 83.500994][ T5696] [ 83.731059][ T5684] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 83.745755][ T5699] loop3: detected capacity change from 0 to 1024 [ 83.769935][ T5699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.794654][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.830587][ T5709] loop3: detected capacity change from 0 to 1024 [ 83.837273][ T5709] EXT4-fs: Ignoring removed i_version option [ 83.843278][ T5709] EXT4-fs: Ignoring removed oldalloc option [ 83.869634][ T5709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.882014][ T5709] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.898372][ T5709] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.589: lblock 3 mapped to illegal pblock 3 (length 3) [ 83.913619][ T5709] EXT4-fs (loop3): Remounting filesystem read-only [ 83.932554][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.951468][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 83.951511][ T29] audit: type=1400 audit(1759101220.277:39666): avc: denied { create } for pid=5716 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.977379][ T29] audit: type=1400 audit(1759101220.277:39667): avc: denied { read } for pid=5716 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.036609][ T29] audit: type=1400 audit(1759101220.357:39668): avc: denied { connect } for pid=5720 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.136621][ T5728] program syz.3.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.231483][ T5730] loop4: detected capacity change from 0 to 1024 [ 84.238396][ T5730] EXT4-fs: Ignoring removed i_version option [ 84.244526][ T5730] EXT4-fs: Ignoring removed oldalloc option [ 84.258968][ T5730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.271348][ T5730] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.283819][ T5730] FAULT_INJECTION: forcing a failure. [ 84.283819][ T5730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.297347][ T5730] CPU: 0 UID: 0 PID: 5730 Comm: syz.4.595 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.297447][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.297460][ T5730] Call Trace: [ 84.297518][ T5730] [ 84.297526][ T5730] __dump_stack+0x1d/0x30 [ 84.297549][ T5730] dump_stack_lvl+0xe8/0x140 [ 84.297585][ T5730] dump_stack+0x15/0x1b [ 84.297602][ T5730] should_fail_ex+0x265/0x280 [ 84.297642][ T5730] should_fail_alloc_page+0xf2/0x100 [ 84.297671][ T5730] __alloc_frozen_pages_noprof+0xff/0x360 [ 84.297771][ T5730] alloc_pages_mpol+0xb3/0x250 [ 84.297809][ T5730] folio_alloc_noprof+0x97/0x150 [ 84.297877][ T5730] filemap_alloc_folio_noprof+0x66/0x210 [ 84.297913][ T5730] __filemap_get_folio+0x28f/0x6b0 [ 84.297950][ T5730] ext4_da_write_begin+0x3ac/0x6e0 [ 84.298036][ T5730] generic_perform_write+0x184/0x490 [ 84.298071][ T5730] ext4_buffered_write_iter+0x1ee/0x3c0 [ 84.298161][ T5730] ? ext4_file_write_iter+0xfe/0xf00 [ 84.298195][ T5730] ext4_file_write_iter+0x383/0xf00 [ 84.298228][ T5730] ? 0xffffffff81000000 [ 84.298310][ T5730] ? __rcu_read_unlock+0x4f/0x70 [ 84.298332][ T5730] ? avc_policy_seqno+0x15/0x30 [ 84.298358][ T5730] ? selinux_file_permission+0x1e4/0x320 [ 84.298385][ T5730] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 84.298417][ T5730] vfs_write+0x527/0x960 [ 84.298519][ T5730] __x64_sys_pwrite64+0xfd/0x150 [ 84.298546][ T5730] x64_sys_call+0xc4d/0x2ff0 [ 84.298568][ T5730] do_syscall_64+0xd2/0x200 [ 84.298679][ T5730] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.298722][ T5730] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.298752][ T5730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.298775][ T5730] RIP: 0033:0x7ff09f02eec9 [ 84.298790][ T5730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.298855][ T5730] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 84.298875][ T5730] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 84.298948][ T5730] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 84.298962][ T5730] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 84.298985][ T5730] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 84.298998][ T5730] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 84.299018][ T5730] [ 84.552805][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.582705][ T29] audit: type=1326 audit(1759101220.907:39669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 84.612885][ T29] audit: type=1326 audit(1759101220.907:39670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 84.636641][ T29] audit: type=1326 audit(1759101220.907:39671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 84.660335][ T29] audit: type=1326 audit(1759101220.907:39672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 84.660390][ T29] audit: type=1326 audit(1759101220.907:39673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff09f02d710 code=0x7ffc0000 [ 84.660423][ T29] audit: type=1326 audit(1759101220.907:39674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09f02eec9 code=0x7ffc0000 [ 84.660486][ T29] audit: type=1326 audit(1759101220.907:39675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff09f02db2a code=0x7ffc0000 [ 84.851200][ T5737] loop4: detected capacity change from 0 to 8192 [ 84.917991][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 84.930120][ T5751] bridge0: entered promiscuous mode [ 84.936824][ T5751] bridge0: port 3(macvlan2) entered blocking state [ 84.943550][ T5751] bridge0: port 3(macvlan2) entered disabled state [ 84.950208][ T5751] macvlan2: entered allmulticast mode [ 84.955626][ T5751] bridge0: entered allmulticast mode [ 84.961345][ T5751] macvlan2: left allmulticast mode [ 84.966456][ T5751] bridge0: left allmulticast mode [ 84.972066][ T5751] bridge0: left promiscuous mode [ 85.068907][ T5766] syzkaller1: entered promiscuous mode [ 85.074390][ T5766] syzkaller1: entered allmulticast mode [ 85.438298][ T5773] loop4: detected capacity change from 0 to 1024 [ 85.450151][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.473476][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.490570][ T5777] netlink: 'syz.4.611': attribute type 10 has an invalid length. [ 85.501286][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.509654][ T5777] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.520100][ T5777] netlink: 'syz.4.611': attribute type 10 has an invalid length. [ 85.527875][ T5777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.611'. [ 85.536837][ T5777] batadv0: entered promiscuous mode [ 85.542064][ T5777] batadv0: entered allmulticast mode [ 85.548407][ T5777] bond0: (slave batadv0): Releasing backup interface [ 85.557516][ T5777] bridge0: port 1(batadv0) entered blocking state [ 85.563968][ T5777] bridge0: port 1(batadv0) entered disabled state [ 85.606496][ T5781] FAULT_INJECTION: forcing a failure. [ 85.606496][ T5781] name failslab, interval 1, probability 0, space 0, times 0 [ 85.619228][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.4.613 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.619319][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.619330][ T5781] Call Trace: [ 85.619335][ T5781] [ 85.619342][ T5781] __dump_stack+0x1d/0x30 [ 85.619360][ T5781] dump_stack_lvl+0xe8/0x140 [ 85.619376][ T5781] dump_stack+0x15/0x1b [ 85.619465][ T5781] should_fail_ex+0x265/0x280 [ 85.619486][ T5781] should_failslab+0x8c/0xb0 [ 85.619587][ T5781] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 85.619651][ T5781] ? set_secret+0x96/0x250 [ 85.619672][ T5781] kmemdup_noprof+0x2b/0x70 [ 85.619698][ T5781] set_secret+0x96/0x250 [ 85.619730][ T5781] ? should_failslab+0x8c/0xb0 [ 85.619802][ T5781] ceph_crypto_key_decode+0x104/0x170 [ 85.619834][ T5781] ceph_key_preparse+0xbb/0x140 [ 85.619858][ T5781] __key_create_or_update+0x28b/0x750 [ 85.619950][ T5781] ? key_validate+0xad/0xd0 [ 85.620010][ T5781] key_create_or_update+0x42/0x60 [ 85.620040][ T5781] __se_sys_add_key+0x296/0x350 [ 85.620063][ T5781] __x64_sys_add_key+0x67/0x80 [ 85.620103][ T5781] x64_sys_call+0x28c4/0x2ff0 [ 85.620123][ T5781] do_syscall_64+0xd2/0x200 [ 85.620150][ T5781] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.620255][ T5781] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.620280][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.620298][ T5781] RIP: 0033:0x7ff09f02eec9 [ 85.620311][ T5781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.620381][ T5781] RSP: 002b:00007ff09da97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 85.620397][ T5781] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02eec9 [ 85.620408][ T5781] RDX: 0000200000000bc0 RSI: 0000000000000000 RDI: 0000200000000040 [ 85.620418][ T5781] RBP: 00007ff09da97090 R08: 0000000009f40275 R09: 0000000000000000 [ 85.620428][ T5781] R10: 000000000000012d R11: 0000000000000246 R12: 0000000000000001 [ 85.620438][ T5781] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 85.620531][ T5781] [ 85.852541][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 85.861802][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 85.888345][ T5791] FAULT_INJECTION: forcing a failure. [ 85.888345][ T5791] name failslab, interval 1, probability 0, space 0, times 0 [ 85.901340][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.0.617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.901409][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.901422][ T5791] Call Trace: [ 85.901428][ T5791] [ 85.901437][ T5791] __dump_stack+0x1d/0x30 [ 85.901463][ T5791] dump_stack_lvl+0xe8/0x140 [ 85.901484][ T5791] dump_stack+0x15/0x1b [ 85.901503][ T5791] should_fail_ex+0x265/0x280 [ 85.901649][ T5791] should_failslab+0x8c/0xb0 [ 85.901720][ T5791] kmem_cache_alloc_noprof+0x50/0x310 [ 85.901755][ T5791] ? skb_clone+0x151/0x1f0 [ 85.901788][ T5791] skb_clone+0x151/0x1f0 [ 85.901820][ T5791] __netlink_deliver_tap+0x2c9/0x500 [ 85.901866][ T5791] netlink_unicast+0x66b/0x690 [ 85.901943][ T5791] netlink_sendmsg+0x58b/0x6b0 [ 85.901974][ T5791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.902017][ T5791] __sock_sendmsg+0x145/0x180 [ 85.902058][ T5791] ____sys_sendmsg+0x31e/0x4e0 [ 85.902137][ T5791] ___sys_sendmsg+0x17b/0x1d0 [ 85.902188][ T5791] __x64_sys_sendmsg+0xd4/0x160 [ 85.902223][ T5791] x64_sys_call+0x191e/0x2ff0 [ 85.902243][ T5791] do_syscall_64+0xd2/0x200 [ 85.902272][ T5791] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.902294][ T5791] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.902320][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.902395][ T5791] RIP: 0033:0x7f7acf91eec9 [ 85.902408][ T5791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.902424][ T5791] RSP: 002b:00007f7ace387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.902441][ T5791] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91eec9 [ 85.902452][ T5791] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 85.902540][ T5791] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 85.902550][ T5791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.902561][ T5791] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 85.902601][ T5791] [ 85.902701][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'. [ 86.230982][ T5807] FAULT_INJECTION: forcing a failure. [ 86.230982][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.244176][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.244262][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.244280][ T5807] Call Trace: [ 86.244285][ T5807] [ 86.244292][ T5807] __dump_stack+0x1d/0x30 [ 86.244310][ T5807] dump_stack_lvl+0xe8/0x140 [ 86.244327][ T5807] dump_stack+0x15/0x1b [ 86.244414][ T5807] should_fail_ex+0x265/0x280 [ 86.244435][ T5807] should_fail+0xb/0x20 [ 86.244507][ T5807] should_fail_usercopy+0x1a/0x20 [ 86.244530][ T5807] _copy_from_iter+0xd2/0xe80 [ 86.244576][ T5807] ? mntput_no_expire+0x6f/0x460 [ 86.244698][ T5807] ? mntput+0x4b/0x80 [ 86.244726][ T5807] tun_get_user+0x14d/0x26e0 [ 86.244743][ T5807] ? path_openat+0x1bf8/0x2170 [ 86.244776][ T5807] ? _parse_integer_limit+0x170/0x190 [ 86.244801][ T5807] ? ref_tracker_alloc+0x1f2/0x2f0 [ 86.244824][ T5807] ? selinux_file_permission+0x1e4/0x320 [ 86.244844][ T5807] tun_chr_write_iter+0x15e/0x210 [ 86.244906][ T5807] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 86.244930][ T5807] vfs_write+0x527/0x960 [ 86.244961][ T5807] ksys_write+0xda/0x1a0 [ 86.244982][ T5807] __x64_sys_write+0x40/0x50 [ 86.245002][ T5807] x64_sys_call+0x27fe/0x2ff0 [ 86.245081][ T5807] do_syscall_64+0xd2/0x200 [ 86.245108][ T5807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.245130][ T5807] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.245174][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.245245][ T5807] RIP: 0033:0x7fd81e8aeec9 [ 86.245258][ T5807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.245274][ T5807] RSP: 002b:00007fd81d317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.245291][ T5807] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8aeec9 [ 86.245302][ T5807] RDX: 0000000000000078 RSI: 0000200000000380 RDI: 0000000000000004 [ 86.245370][ T5807] RBP: 00007fd81d317090 R08: 0000000000000000 R09: 0000000000000000 [ 86.245381][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.245392][ T5807] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 86.245409][ T5807] [ 86.473913][ T5806] loop4: detected capacity change from 0 to 8192 [ 86.988770][ T5816] FAULT_INJECTION: forcing a failure. [ 86.988770][ T5816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.001933][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz.0.626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.001960][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.001972][ T5816] Call Trace: [ 87.001978][ T5816] [ 87.001984][ T5816] __dump_stack+0x1d/0x30 [ 87.002003][ T5816] dump_stack_lvl+0xe8/0x140 [ 87.002057][ T5816] dump_stack+0x15/0x1b [ 87.002071][ T5816] should_fail_ex+0x265/0x280 [ 87.002092][ T5816] should_fail+0xb/0x20 [ 87.002147][ T5816] should_fail_usercopy+0x1a/0x20 [ 87.002169][ T5816] _copy_from_user+0x1c/0xb0 [ 87.002196][ T5816] ___sys_sendmsg+0xc1/0x1d0 [ 87.002229][ T5816] __x64_sys_sendmsg+0xd4/0x160 [ 87.002319][ T5816] x64_sys_call+0x191e/0x2ff0 [ 87.002338][ T5816] do_syscall_64+0xd2/0x200 [ 87.002364][ T5816] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.002385][ T5816] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.002491][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.002517][ T5816] RIP: 0033:0x7f7acf91eec9 [ 87.002530][ T5816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.002590][ T5816] RSP: 002b:00007f7ace387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.002617][ T5816] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91eec9 [ 87.002632][ T5816] RDX: 0000000000000800 RSI: 0000200000000540 RDI: 0000000000000007 [ 87.002648][ T5816] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 87.002667][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.002679][ T5816] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 87.002696][ T5816] [ 87.204268][ T5820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.254081][ T5828] FAULT_INJECTION: forcing a failure. [ 87.254081][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 87.266841][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.266875][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.266931][ T5828] Call Trace: [ 87.266937][ T5828] [ 87.266944][ T5828] __dump_stack+0x1d/0x30 [ 87.266965][ T5828] dump_stack_lvl+0xe8/0x140 [ 87.266988][ T5828] dump_stack+0x15/0x1b [ 87.267009][ T5828] should_fail_ex+0x265/0x280 [ 87.267037][ T5828] ? __se_sys_memfd_create+0x1cc/0x590 [ 87.267139][ T5828] should_failslab+0x8c/0xb0 [ 87.267169][ T5828] __kmalloc_cache_noprof+0x4c/0x320 [ 87.267206][ T5828] __se_sys_memfd_create+0x1cc/0x590 [ 87.267292][ T5828] __x64_sys_memfd_create+0x31/0x40 [ 87.267315][ T5828] x64_sys_call+0x2abe/0x2ff0 [ 87.267340][ T5828] do_syscall_64+0xd2/0x200 [ 87.267388][ T5828] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.267420][ T5828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.267456][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.267482][ T5828] RIP: 0033:0x7f7acf91eec9 [ 87.267501][ T5828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.267525][ T5828] RSP: 002b:00007f7ace386e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 87.267546][ T5828] RAX: ffffffffffffffda RBX: 0000000000000553 RCX: 00007f7acf91eec9 [ 87.267558][ T5828] RDX: 00007f7ace386ef0 RSI: 0000000000000000 RDI: 00007f7acf9a2960 [ 87.267647][ T5828] RBP: 0000200000001080 R08: 00007f7ace386bb7 R09: 00007f7ace386e40 [ 87.267663][ T5828] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 87.267680][ T5828] R13: 00007f7ace386ef0 R14: 00007f7ace386eb0 R15: 00002000000002c0 [ 87.267705][ T5828] [ 87.462402][ T5830] loop4: detected capacity change from 0 to 164 [ 87.471638][ T5834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.634'. [ 87.515332][ T5840] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 87.549781][ T5842] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 87.811622][ T5857] program syz.2.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.216299][ T5867] loop4: detected capacity change from 0 to 164 [ 88.436268][ T5871] FAULT_INJECTION: forcing a failure. [ 88.436268][ T5871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.449563][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz.1.645 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.449606][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.449623][ T5871] Call Trace: [ 88.449630][ T5871] [ 88.449638][ T5871] __dump_stack+0x1d/0x30 [ 88.449738][ T5871] dump_stack_lvl+0xe8/0x140 [ 88.449756][ T5871] dump_stack+0x15/0x1b [ 88.449772][ T5871] should_fail_ex+0x265/0x280 [ 88.449824][ T5871] should_fail+0xb/0x20 [ 88.449851][ T5871] should_fail_usercopy+0x1a/0x20 [ 88.449884][ T5871] _copy_to_user+0x20/0xa0 [ 88.449946][ T5871] simple_read_from_buffer+0xb5/0x130 [ 88.450034][ T5871] proc_fail_nth_read+0x10e/0x150 [ 88.450065][ T5871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.450132][ T5871] vfs_read+0x1a5/0x770 [ 88.450155][ T5871] ? __rcu_read_unlock+0x4f/0x70 [ 88.450176][ T5871] ? __fget_files+0x184/0x1c0 [ 88.450246][ T5871] ksys_read+0xda/0x1a0 [ 88.450277][ T5871] __x64_sys_read+0x40/0x50 [ 88.450306][ T5871] x64_sys_call+0x27bc/0x2ff0 [ 88.450335][ T5871] do_syscall_64+0xd2/0x200 [ 88.450433][ T5871] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.450458][ T5871] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.450486][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.450523][ T5871] RIP: 0033:0x7fd81e8ad8dc [ 88.450542][ T5871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.450560][ T5871] RSP: 002b:00007fd81d317030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.450585][ T5871] RAX: ffffffffffffffda RBX: 00007fd81eb05fa0 RCX: 00007fd81e8ad8dc [ 88.450632][ T5871] RDX: 000000000000000f RSI: 00007fd81d3170a0 RDI: 0000000000000004 [ 88.450649][ T5871] RBP: 00007fd81d317090 R08: 0000000000000000 R09: 0000000000000000 [ 88.450669][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.450681][ T5871] R13: 00007fd81eb06038 R14: 00007fd81eb05fa0 R15: 00007ffccd44bcd8 [ 88.450780][ T5871] [ 88.671949][ T5876] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 88.679171][ T5878] veth0: entered promiscuous mode [ 88.684888][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 88.709089][ T5880] FAULT_INJECTION: forcing a failure. [ 88.709089][ T5880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.722215][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: syz.0.649 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.722271][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.722287][ T5880] Call Trace: [ 88.722294][ T5880] [ 88.722304][ T5880] __dump_stack+0x1d/0x30 [ 88.722330][ T5880] dump_stack_lvl+0xe8/0x140 [ 88.722353][ T5880] dump_stack+0x15/0x1b [ 88.722375][ T5880] should_fail_ex+0x265/0x280 [ 88.722450][ T5880] should_fail+0xb/0x20 [ 88.722477][ T5880] should_fail_usercopy+0x1a/0x20 [ 88.722565][ T5880] _copy_from_user+0x1c/0xb0 [ 88.722613][ T5880] proc_do_submiturb+0x866/0x1d20 [ 88.722639][ T5880] ? proc_do_submiturb+0xf1/0x1d20 [ 88.722688][ T5880] ? should_fail_ex+0xdb/0x280 [ 88.722718][ T5880] proc_submiturb+0x7b/0xa0 [ 88.722760][ T5880] usbdev_ioctl+0xcc2/0x1710 [ 88.722831][ T5880] ? __pfx_usbdev_ioctl+0x10/0x10 [ 88.722859][ T5880] __se_sys_ioctl+0xce/0x140 [ 88.722877][ T5880] __x64_sys_ioctl+0x43/0x50 [ 88.722941][ T5880] x64_sys_call+0x1816/0x2ff0 [ 88.722967][ T5880] do_syscall_64+0xd2/0x200 [ 88.722998][ T5880] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.723030][ T5880] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.723098][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.723181][ T5880] RIP: 0033:0x7f7acf91eec9 [ 88.723200][ T5880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.723224][ T5880] RSP: 002b:00007f7ace387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.723323][ T5880] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91eec9 [ 88.723337][ T5880] RDX: 0000200000000080 RSI: 000000008038550a RDI: 0000000000000003 [ 88.723353][ T5880] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 88.723370][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.723385][ T5880] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 88.723408][ T5880] [ 88.972346][ T5882] loop3: detected capacity change from 0 to 8192 [ 89.013480][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 89.013507][ T29] audit: type=1326 audit(1759101225.337:39878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.4.652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09f02eec9 code=0x0 [ 89.068251][ T5892] loop4: detected capacity change from 0 to 164 [ 89.540512][ T29] audit: type=1326 audit(1759101225.867:39879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e8aeec9 code=0x7ffc0000 [ 89.564397][ T29] audit: type=1326 audit(1759101225.867:39880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e8aeec9 code=0x7ffc0000 [ 89.588004][ T29] audit: type=1326 audit(1759101225.877:39881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd81e8aeec9 code=0x7ffc0000 [ 89.611696][ T29] audit: type=1326 audit(1759101225.877:39882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e8aeec9 code=0x7ffc0000 [ 89.635365][ T29] audit: type=1326 audit(1759101225.877:39883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd81e8ad710 code=0x7ffc0000 [ 89.658844][ T29] audit: type=1326 audit(1759101225.877:39884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e8aeec9 code=0x7ffc0000 [ 89.682283][ T29] audit: type=1326 audit(1759101225.877:39885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd81e8adb2a code=0x7ffc0000 [ 89.705543][ T29] audit: type=1326 audit(1759101225.887:39886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd81e8e1785 code=0x7ffc0000 [ 89.729044][ T29] audit: type=1400 audit(1759101226.037:39887): avc: denied { remount } for pid=5897 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.853619][ T5905] random: crng reseeded on system resumption [ 89.862626][ T5907] FAULT_INJECTION: forcing a failure. [ 89.862626][ T5907] name failslab, interval 1, probability 0, space 0, times 0 [ 89.875373][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.0.658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.875404][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.875421][ T5907] Call Trace: [ 89.875428][ T5907] [ 89.875549][ T5907] __dump_stack+0x1d/0x30 [ 89.875580][ T5907] dump_stack_lvl+0xe8/0x140 [ 89.875654][ T5907] dump_stack+0x15/0x1b [ 89.875670][ T5907] should_fail_ex+0x265/0x280 [ 89.875694][ T5907] should_failslab+0x8c/0xb0 [ 89.875769][ T5907] kmem_cache_alloc_noprof+0x50/0x310 [ 89.875803][ T5907] ? audit_log_start+0x365/0x6c0 [ 89.875986][ T5907] audit_log_start+0x365/0x6c0 [ 89.876028][ T5907] audit_seccomp+0x48/0x100 [ 89.876057][ T5907] ? __seccomp_filter+0x68c/0x10d0 [ 89.876078][ T5907] __seccomp_filter+0x69d/0x10d0 [ 89.876121][ T5907] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.876152][ T5907] ? vfs_write+0x7e8/0x960 [ 89.876186][ T5907] ? __rcu_read_unlock+0x4f/0x70 [ 89.876272][ T5907] ? __fget_files+0x184/0x1c0 [ 89.876333][ T5907] __secure_computing+0x82/0x150 [ 89.876427][ T5907] syscall_trace_enter+0xcf/0x1e0 [ 89.876466][ T5907] do_syscall_64+0xac/0x200 [ 89.876504][ T5907] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.876541][ T5907] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.876638][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.876720][ T5907] RIP: 0033:0x7f7acf91eec9 [ 89.876735][ T5907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.876753][ T5907] RSP: 002b:00007f7ace387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 89.876771][ T5907] RAX: ffffffffffffffda RBX: 00007f7acfb75fa0 RCX: 00007f7acf91eec9 [ 89.876786][ T5907] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000008006 [ 89.876847][ T5907] RBP: 00007f7ace387090 R08: 0000000000000000 R09: 0000000000000000 [ 89.876863][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.876912][ T5907] R13: 00007f7acfb76038 R14: 00007f7acfb75fa0 R15: 00007ffc387492a8 [ 89.876934][ T5907] [ 90.086119][ T5904] netlink: 'syz.3.657': attribute type 13 has an invalid length. [ 90.095305][ T5909] netlink: 96 bytes leftover after parsing attributes in process `syz.4.659'. [ 90.134714][ T5913] mmap: syz.4.661 (5913) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.159742][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.167070][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.174600][ T5915] FAULT_INJECTION: forcing a failure. [ 90.174600][ T5915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.187800][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.4.662 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.187898][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.187911][ T5915] Call Trace: [ 90.187918][ T5915] [ 90.187925][ T5915] __dump_stack+0x1d/0x30 [ 90.187950][ T5915] dump_stack_lvl+0xe8/0x140 [ 90.187976][ T5915] dump_stack+0x15/0x1b [ 90.187998][ T5915] should_fail_ex+0x265/0x280 [ 90.188026][ T5915] should_fail+0xb/0x20 [ 90.188169][ T5915] should_fail_usercopy+0x1a/0x20 [ 90.188200][ T5915] _copy_to_user+0x20/0xa0 [ 90.188320][ T5915] simple_read_from_buffer+0xb5/0x130 [ 90.188351][ T5915] proc_fail_nth_read+0x10e/0x150 [ 90.188385][ T5915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.188520][ T5915] vfs_read+0x1a5/0x770 [ 90.188545][ T5915] ? bpf_trace_run2+0x124/0x1c0 [ 90.188567][ T5915] ? __rcu_read_unlock+0x4f/0x70 [ 90.188590][ T5915] ? __fget_files+0x184/0x1c0 [ 90.188702][ T5915] ksys_read+0xda/0x1a0 [ 90.188757][ T5915] __x64_sys_read+0x40/0x50 [ 90.188786][ T5915] x64_sys_call+0x27bc/0x2ff0 [ 90.188852][ T5915] do_syscall_64+0xd2/0x200 [ 90.188931][ T5915] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.188965][ T5915] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.189005][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.189028][ T5915] RIP: 0033:0x7ff09f02d8dc [ 90.189043][ T5915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.189122][ T5915] RSP: 002b:00007ff09da97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.189141][ T5915] RAX: ffffffffffffffda RBX: 00007ff09f285fa0 RCX: 00007ff09f02d8dc [ 90.189163][ T5915] RDX: 000000000000000f RSI: 00007ff09da970a0 RDI: 0000000000000005 [ 90.189180][ T5915] RBP: 00007ff09da97090 R08: 0000000000000000 R09: 0000000000000000 [ 90.189203][ T5915] R10: 7ffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 90.189218][ T5915] R13: 00007ff09f286038 R14: 00007ff09f285fa0 R15: 00007ffc1ece47e8 [ 90.189313][ T5915] [ 90.421203][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.431027][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.462841][ T5919] loop4: detected capacity change from 0 to 164 [ 90.486420][ T1034] syz1: Port: 1 Link DOWN [ 90.495356][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.509650][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.531614][ T5921] sctp: [Deprecated]: syz.1.664 (pid 5921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.531614][ T5921] Use struct sctp_sack_info instead [ 90.531727][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.572770][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.609912][ T5929] ÿÿÿÿÿÿ: renamed from vlan1 [ 90.616304][ T5929] netlink: 96 bytes leftover after parsing attributes in process `syz.3.668'. [ 90.640987][ T5931] FAULT_INJECTION: forcing a failure. [ 90.640987][ T5931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.654133][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.3.669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.654165][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.654182][ T5931] Call Trace: [ 90.654190][ T5931] [ 90.654200][ T5931] __dump_stack+0x1d/0x30 [ 90.654294][ T5931] dump_stack_lvl+0xe8/0x140 [ 90.654336][ T5931] dump_stack+0x15/0x1b [ 90.654353][ T5931] should_fail_ex+0x265/0x280 [ 90.654384][ T5931] should_fail+0xb/0x20 [ 90.654405][ T5931] should_fail_usercopy+0x1a/0x20 [ 90.654468][ T5931] _copy_to_user+0x20/0xa0 [ 90.654502][ T5931] simple_read_from_buffer+0xb5/0x130 [ 90.654528][ T5931] proc_fail_nth_read+0x10e/0x150 [ 90.654606][ T5931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.654647][ T5931] vfs_read+0x1a5/0x770 [ 90.654745][ T5931] ? __rcu_read_unlock+0x4f/0x70 [ 90.654768][ T5931] ? __fget_files+0x184/0x1c0 [ 90.654816][ T5931] ksys_read+0xda/0x1a0 [ 90.654841][ T5931] __x64_sys_read+0x40/0x50 [ 90.654865][ T5931] x64_sys_call+0x27bc/0x2ff0 [ 90.654958][ T5931] do_syscall_64+0xd2/0x200 [ 90.654990][ T5931] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.655016][ T5931] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.655045][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.655140][ T5931] RIP: 0033:0x7f53dce9d8dc [ 90.655157][ T5931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.655176][ T5931] RSP: 002b:00007f53db8ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.655196][ T5931] RAX: ffffffffffffffda RBX: 00007f53dd0f5fa0 RCX: 00007f53dce9d8dc [ 90.655209][ T5931] RDX: 000000000000000f RSI: 00007f53db8ff0a0 RDI: 0000000000000005 [ 90.655222][ T5931] RBP: 00007f53db8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 90.655234][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.655269][ T5931] R13: 00007f53dd0f6038 R14: 00007f53dd0f5fa0 R15: 00007ffd086a44e8 [ 90.655308][ T5931] [ 90.976650][ T5940] ================================================================== [ 90.984779][ T5940] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 90.991497][ T5940] [ 90.993824][ T5940] write to 0xffff8881036cd510 of 8 bytes by task 5937 on cpu 1: [ 91.001456][ T5940] call_rcu+0x44/0x3f0 [ 91.005546][ T5940] mas_wmb_replace+0xc6a/0x14a0 [ 91.010405][ T5940] mas_wr_store_entry+0x1773/0x2b50 [ 91.015614][ T5940] mas_store_prealloc+0x74d/0x9e0 [ 91.020655][ T5940] vma_iter_store_new+0x1c5/0x200 [ 91.025687][ T5940] vma_complete+0x125/0x580 [ 91.030207][ T5940] __split_vma+0x5d9/0x650 [ 91.034628][ T5940] vma_modify+0x3f2/0xc80 [ 91.038965][ T5940] vma_modify_flags+0x101/0x130 [ 91.043822][ T5940] mprotect_fixup+0x2cc/0x570 [ 91.048507][ T5940] do_mprotect_pkey+0x6d6/0x980 [ 91.053379][ T5940] __x64_sys_mprotect+0x48/0x60 [ 91.058254][ T5940] x64_sys_call+0x274e/0x2ff0 [ 91.062938][ T5940] do_syscall_64+0xd2/0x200 [ 91.067465][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.073371][ T5940] [ 91.075700][ T5940] read to 0xffff8881036cd510 of 8 bytes by task 5940 on cpu 0: [ 91.083279][ T5940] mas_state_walk+0x2f5/0x650 [ 91.087977][ T5940] mas_walk+0x60/0x150 [ 91.092054][ T5940] lock_vma_under_rcu+0x8d/0x160 [ 91.097019][ T5940] do_user_addr_fault+0x233/0x1090 [ 91.102173][ T5940] exc_page_fault+0x62/0xa0 [ 91.106685][ T5940] asm_exc_page_fault+0x26/0x30 [ 91.111539][ T5940] [ 91.113866][ T5940] value changed: 0x00007f53dcd06fff -> 0xffffffff85646c50 [ 91.120969][ T5940] [ 91.123291][ T5940] Reported by Kernel Concurrency Sanitizer on: [ 91.129439][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.3.672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.139084][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.149142][ T5940] ==================================================================