last executing test programs: 11.670314572s ago: executing program 4 (id=1708): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000003140)=""/4107, 0x694}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0xb4, 0xa00d, @vifc_lcl_addr=@empty, @local}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='GPL\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.439299559s ago: executing program 4 (id=1712): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14796, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4083, 0x0, 0xfffff5a8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.418697305s ago: executing program 4 (id=1728): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00']) (fail_nth: 6) 9.181379913s ago: executing program 4 (id=1731): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) readv(r4, &(0x7f0000007680)=[{&(0x7f0000006180)=""/153, 0x99}], 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000cc0)="18", 0x1}], 0x1}}], 0x1, 0x8000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0xff7fffff}, &(0x7f0000000080)=0x8) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xe78) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.765049329s ago: executing program 4 (id=1741): mount$tmpfs(0xebffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00']) 7.701435421s ago: executing program 4 (id=1742): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x0, 0x6}, 0x10e028, 0x200, 0xfffffffa, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x47}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x47}, 0x94) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xff) (async) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt(r2, 0x4, 0x2, &(0x7f0000000780)="946ad9ebf619a917d727f43fa43da052a3efd7b16582eed0a8d13de71b6b9a678e05210b26506f22bdf95d2892a2145084e8e1449381af5ba04df2e230740268c028f26fc77d77f3672548dde142d82aef9dfa150db576b0450aa564a5b009ef7788e293352e429a8ddbaec512844e8176af240a30e6383414da17a1445dbb40db0cc074571751bd610688f048788ca2a31f605bc8016386e87054abcf03add413e9a8cf77bef81502d4c82ac11fb6665cb1254017f22bb7c81a4412446095c5433e7818ea2ec0a6848e8c61af4e534c7f71a8c50d448c49336cf02a2b1f20ba95967bd26f86c1649a2bf8ac7a62c7a832255de9f662", 0xf6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xff, 0xffff}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf25620000000600b300020000000600b400b70e00000600b400e10300000600b4003c0200000600b300030000000600b400200300"/70], 0x4c}, 0x1, 0x0, 0x0, 0x8046050}, 0x20060000) r3 = socket$igmp(0x2, 0x3, 0x2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r7, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r7, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x114, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20048044}, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x7, 0x0, {0x5, 0x4, 0x2, 0xc, 0x9, 0x66, 0xb, 0xf8, 0x2, 0x5, @loopback, @broadcast}}}}}}, 0x0) 2.389915873s ago: executing program 1 (id=1841): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0xffffffffffff0000}, 0x9721, 0x0, 0x0, 0x9, 0xb803, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open(0x0, 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) syz_clone3(&(0x7f0000000240)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (fail_nth: 1) 2.389354143s ago: executing program 1 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000003140)=""/4107, 0x694}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0xb4, 0xa00d, @vifc_lcl_addr=@empty, @local}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='GPL\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.080075002s ago: executing program 1 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x52}, 0x28) syz_open_dev$evdev(0x0, 0x3, 0x181080) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x880) 1.546416739s ago: executing program 2 (id=1856): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=0']) (fail_nth: 20) 1.273391248s ago: executing program 2 (id=1858): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x200}) 1.253146719s ago: executing program 2 (id=1859): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 1.181660051s ago: executing program 2 (id=1861): r0 = semget(0x0, 0x2, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000340)=""/185) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x3, 0x800}, 0x19105d55dfc068f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000005c0)="4a7b8370a138d0d94c395e291f8caae07c5a8f644e1d11e467dd00122b528821", 0x20}], 0x1}, 0x2000c8c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}}, 0x4040000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xc8, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x65}, @NFTA_LOG_PREFIX={0x13, 0x2, 0x1, 0x0, ':#N},+([@.@,e:\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3f0200cf", @ANYRES16=r7, @ANYBLOB="04002bbd7000ffdbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="0c00060002000000020000000c00060000000000000000000600090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48094}, 0x8081) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 1.122808684s ago: executing program 1 (id=1862): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x31, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1003, 0x2000, 0xebb, 0x12d64, 0xf}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.093050264s ago: executing program 1 (id=1864): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e20, 0x8, @loopback}}}, 0x80) 1.008800127s ago: executing program 2 (id=1868): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) signalfd(r0, &(0x7f0000000040)={[0x6]}, 0x8) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x82, "000000ffff0000000141000000000057bd69f8"}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, 'kfree\x00'}}]}) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000001a40)=""/4096, 0x1000) 781.760304ms ago: executing program 3 (id=1879): tkill(0x0, 0x3c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b7fffffe0000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) socket$nl_generic(0x10, 0x3, 0x10) 781.060455ms ago: executing program 3 (id=1880): r0 = semget(0x0, 0x2, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000340)=""/185) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x3, 0x800}, 0x19105d55dfc068f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000005c0)="4a7b8370a138d0d94c395e291f8caae07c5a8f644e1d11e467dd00122b528821", 0x20}], 0x1}, 0x2000c8c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}}, 0x4040000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xc8, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x65}, @NFTA_LOG_PREFIX={0x13, 0x2, 0x1, 0x0, ':#N},+([@.@,e:\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3f0200cf", @ANYRES16=r7, @ANYBLOB="04002bbd7000ffdbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="0c00060002000000020000000c00060000000000000000000600090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48094}, 0x8081) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 642.726549ms ago: executing program 3 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000003140)=""/4107, 0x694}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0xb4, 0xa00d, @vifc_lcl_addr=@empty, @local}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='GPL\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 591.134771ms ago: executing program 0 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async, rerun: 64) r1 = creat(&(0x7f0000000580)='./file0\x00', 0x20) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000000600), 0x81, 0x301000) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000640)={{0x0, 0x0, 0x6, 0xfff, 0x4, 0x7f, 0x8, 0xffffba00, 0x0, 0x6, 0x10000, 0x6, 0x8, 0x68, 0x7}}) (async, rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000005c0)=0x7, 0x4) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) unshare(0x62040200) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89b0, &(0x7f0000000380)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) socket(0x2d, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0xffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 248.467612ms ago: executing program 3 (id=1889): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, 0x0, 0x0) 237.351462ms ago: executing program 0 (id=1890): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f80) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 181.872914ms ago: executing program 3 (id=1891): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100002, 0x3, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) (fail_nth: 3) 11.37231ms ago: executing program 1 (id=1892): r0 = semget(0x0, 0x2, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000340)=""/185) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x3, 0x800}, 0x19105d55dfc068f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000005c0)="4a7b8370a138d0d94c395e291f8caae07c5a8f644e1d11e467dd00122b528821", 0x20}], 0x1}, 0x2000c8c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}}, 0x4040000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xc8, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x65}, @NFTA_LOG_PREFIX={0x13, 0x2, 0x1, 0x0, ':#N},+([@.@,e:\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3f0200cf", @ANYRES16=r7, @ANYBLOB="04002bbd7000ffdbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="0c00060002000000020000000c00060000000000000000000600090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48094}, 0x8081) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 11.16793ms ago: executing program 3 (id=1893): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[], 0x1100}, 0x1, 0x7}, 0x0) 0s ago: executing program 2 (id=1894): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$eJzs27tvHEUcAODfrh8hL2xCeOQBGALC4mHHToAUFIBAogAJiSaUJnaiECdGsZFIhEhAKJQoEhUNokTiL6CCBgEVEi30CCmCNERUh/Z21/fIPYi584Xc90nrm9nHzczNzN3MjjeAoTWV/UkidkTELxExkUcbT5jKX65drVzId1Yqr/+RVM/76+p7x8pTy+u2F5HpNCL9KIl9LdJdPXf+1MLy8tLZIj67dvrt2dVz5588eXrhxNKJpTPzR44cPjT3zNPzT/WknHdked37/sr+PS+/cfnVY0cvv/nDV0lZ/qZy9MhUp4OPVCo9Tm6wdtaFk9EBZoQbMhIRWXWNVfv/RIxErfIm4qUPB5o5oK8qhTaHL1aAW1gS9bHxGFxOgM1V/tBn899y27zRx+BdeT6fAGXlvlZs+ZHRSCOfGGVzo37N1qci4ujFvz/PtujPfQgAgAbfZOOfJxrHf39Wj6Rxd915txdrQ5PFWsquiLgzInZHxF0R1XPviYh7m94/7ZJ+8yLJ9eOftK+rCdn479nq2lbz+G8955MjRWxnNTKWHD+5vHSw+EymY2xLFp/rkMa3L/78Sbtj9eO/bMvSL8eCRT5+H93SeM3iwtrCfylzvSsfROwdbVX+ZH0lIImIPRGxd4NpnHzsy/3tjjWXv5J0eqfnGqM9aBmVLyIezev/YjSVv5R0Xp+cvS2Wlw7Olq3iej/+dOm1dul3r//+yup/W8v2v17+yaR+vXb1xtO49OvHbec0Mxtq/7Ud48Xruwtra2fnIsaTV/JM1++fr11bxsvzs/JPH2jd/3dF7ZPYFxFZI74vIu6PiAeKunswIh6KiAMdyv/9Cw+/1e7YzVD/i031P9l4SlP91wLj0byndWDk1HdfN75jLfjvvv8OV0PTxZ5u339lm+iWr421ZgAAAPj/SSNiRyTpzHo4TWdm8v/h3x3b0uWV1bXHj6+8c2Yxf0ZgMsbS8k5Xfj84vx86V0zry/h8U/xQcd/405Gt1fjMsZXlxUEXHobc9jb9P/PbyKBzB/Sd57VgeOn/MLz0fxhe+j8Mrxb9f2uXS8b6lRdgc7X6/b9QC1YmNjMzwKZq6v+W/WCImP/D8NL/YXjV9/+Oz98Dt5LVrdH9IXkBgesCkd4U2ehNIKn1gs+iD0nsGHQBbzww6G8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgnAAD//2Gb4I4=") (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x47498985d9f38bc8) (async) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440b4}, 0x40000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 [ 187.148200][ T7320] __dump_stack+0x1d/0x30 [ 187.148292][ T7320] dump_stack_lvl+0x95/0xd0 [ 187.148309][ T7320] dump_stack+0x15/0x1b [ 187.148393][ T7320] dump_header+0x80/0x240 [ 187.148416][ T7320] oom_kill_process+0x295/0x350 [ 187.148440][ T7320] out_of_memory+0x97d/0xb80 [ 187.148536][ T7320] try_charge_memcg+0x62f/0xa10 [ 187.148611][ T7320] charge_memcg+0x6d/0x120 [ 187.148662][ T7320] __mem_cgroup_charge+0x28/0xb0 [ 187.148712][ T7320] shmem_get_folio_gfp+0x47b/0xd60 [ 187.148740][ T7320] shmem_write_begin+0xfc/0x1f0 [ 187.148759][ T7320] generic_perform_write+0x183/0x490 [ 187.148780][ T7320] shmem_file_write_iter+0xc5/0xf0 [ 187.148876][ T7320] __kernel_write_iter+0x319/0x590 [ 187.148898][ T7320] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 187.148925][ T7320] dump_user_range+0xa73/0xd00 [ 187.149008][ T7320] elf_core_dump+0x21a2/0x2330 [ 187.149039][ T7320] ? 0xffffffffff600000 [ 187.149061][ T7320] coredump_write+0xabd/0xdb0 [ 187.149155][ T7320] vfs_coredump+0x26dd/0x31e0 [ 187.149188][ T7320] ? __memcg_slab_free_hook+0x75/0x2c0 [ 187.149214][ T7320] ? __sigqueue_free+0xf4/0x130 [ 187.149238][ T7320] ? proc_coredump_connector+0x160/0x2b0 [ 187.149290][ T7320] ? __sigqueue_free+0xf4/0x130 [ 187.149306][ T7320] ? kmem_cache_free+0xca/0x380 [ 187.149325][ T7320] get_signal+0xd5c/0xf20 [ 187.149439][ T7320] arch_do_signal_or_restart+0x96/0x480 [ 187.149548][ T7320] irqentry_exit+0x145/0x5d0 [ 187.149575][ T7320] asm_exc_page_fault+0x26/0x30 [ 187.149595][ T7320] RIP: 0033:0x7f4e0382ce61 [ 187.149608][ T7320] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 187.149654][ T7320] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 187.149670][ T7320] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 187.149682][ T7320] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 187.149695][ T7320] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 187.149708][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.149721][ T7320] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 187.149814][ T7320] [ 187.149885][ T7320] memory: usage 307200kB, limit 307200kB, failcnt 38073 [ 187.483720][ T7320] memory+swap: usage 421648kB, limit 9007199254740988kB, failcnt 0 [ 187.617517][ T7320] kmem: usage 4844kB, limit 9007199254740988kB, failcnt 0 [ 187.746320][ T7320] Memory cgroup stats for /syz1: [ 187.746607][ T7320] cache 298459136 [ 187.755216][ T7320] rss 196608 [ 187.758475][ T7320] shmem 298450944 [ 187.762123][ T7320] mapped_file 0 [ 187.766831][ T7320] dirty 0 [ 187.769767][ T7320] writeback 0 [ 187.773074][ T7320] workingset_refault_anon 34 [ 187.777961][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 187.830670][ T7320] workingset_refault_file 6303 [ 187.847054][ T7320] swap 121470976 [ 187.859403][ T7320] swapcached 162250752 [ 187.886009][ T7320] pgpgin 288641 [ 187.896128][ T7320] pgpgout 215664 [ 187.927352][ T7320] pgfault 159356 [ 187.930932][ T7320] pgmajfault 86 [ 187.934428][ T7320] inactive_anon 7024640 [ 187.938895][ T7320] active_anon 291848192 [ 187.943057][ T7320] inactive_file 0 [ 187.947240][ T7320] active_file 8192 [ 187.951098][ T7320] unevictable 0 [ 187.954576][ T7320] hierarchical_memory_limit 314572800 [ 187.961364][ T7320] hierarchical_memsw_limit 9223372036854771712 [ 187.968335][ T7320] total_cache 298459136 [ 187.972528][ T7320] total_rss 196608 [ 187.976347][ T7320] total_shmem 298450944 [ 187.980547][ T7320] total_mapped_file 0 [ 187.984573][ T7320] total_dirty 0 [ 187.988019][ T7320] total_writeback 0 [ 187.991901][ T7320] total_workingset_refault_anon 34 [ 188.981663][ T7320] total_workingset_refault_file 6303 [ 189.048919][ T7320] total_swap 121470976 [ 189.099077][ T7320] total_swapcached 162250752 [ 189.162434][ T7320] total_pgpgin 288641 [ 189.166832][ T7320] total_pgpgout 215664 [ 189.170994][ T7320] total_pgfault 159356 [ 189.175063][ T7320] total_pgmajfault 86 [ 189.179055][ T7320] total_inactive_anon 7024640 [ 189.183729][ T7320] total_active_anon 291848192 [ 189.188407][ T7320] total_inactive_file 0 [ 189.192553][ T7320] total_active_file 8192 [ 189.196872][ T7320] total_unevictable 0 [ 189.200870][ T7320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7324,uid=0 [ 189.215486][ T7320] Memory cgroup out of memory: Killed process 7324 (syz.1.1123) total-vm:90328kB, anon-rss:1232kB, file-rss:53828kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 189.398876][ T7911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7911 comm=syz.2.1290 [ 189.590280][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 189.734653][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 190.054471][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 190.054486][ T28] audit: type=1400 audit(1780226317.565:2329): avc: denied { read write } for pid=7954 comm="syz.1.1306" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 190.097057][ T28] audit: type=1400 audit(1780226317.565:2330): avc: denied { open } for pid=7954 comm="syz.1.1306" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 190.133480][ T28] audit: type=1400 audit(1780226317.621:2331): avc: denied { create } for pid=7954 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.161019][ T28] audit: type=1400 audit(1780226317.649:2332): avc: denied { create } for pid=7954 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.166838][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.214208][ T28] audit: type=1400 audit(1780226317.658:2333): avc: denied { read write } for pid=7954 comm="syz.1.1306" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.244502][ T28] audit: type=1400 audit(1780226317.658:2334): avc: denied { open } for pid=7954 comm="syz.1.1306" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.289034][ T28] audit: type=1400 audit(1780226317.658:2335): avc: denied { ioctl } for pid=7954 comm="syz.1.1306" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.393301][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.544325][ T28] audit: type=1400 audit(1780226318.014:2336): avc: denied { execute } for pid=7964 comm="syz.3.1310" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.599914][ T28] audit: type=1400 audit(1780226318.014:2337): avc: denied { execute_no_trans } for pid=7964 comm="syz.3.1310" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.668289][ T28] audit: type=1400 audit(1780226318.051:2338): avc: denied { ioctl } for pid=7971 comm="syz.2.1312" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.865511][ T7984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7984 comm=syz.0.1317 [ 190.988732][ T7324] syz.1.1123 (7324) used greatest stack depth: 6984 bytes left [ 191.065262][ T7326] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 191.075488][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 191.075514][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.075526][ T7326] Call Trace: [ 191.075566][ T7326] [ 191.075573][ T7326] __dump_stack+0x1d/0x30 [ 191.075596][ T7326] dump_stack_lvl+0x95/0xd0 [ 191.075617][ T7326] dump_stack+0x15/0x1b [ 191.075705][ T7326] dump_header+0x80/0x240 [ 191.075723][ T7326] oom_kill_process+0x295/0x350 [ 191.075753][ T7326] out_of_memory+0x97d/0xb80 [ 191.075825][ T7326] try_charge_memcg+0x62f/0xa10 [ 191.075924][ T7326] charge_memcg+0x6d/0x120 [ 191.076005][ T7326] __mem_cgroup_charge+0x28/0xb0 [ 191.076031][ T7326] shmem_get_folio_gfp+0x47b/0xd60 [ 191.076058][ T7326] shmem_write_begin+0xfc/0x1f0 [ 191.076081][ T7326] generic_perform_write+0x183/0x490 [ 191.076186][ T7326] shmem_file_write_iter+0xc5/0xf0 [ 191.076208][ T7326] __kernel_write_iter+0x319/0x590 [ 191.076229][ T7326] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 191.076254][ T7326] dump_user_range+0xa73/0xd00 [ 191.076284][ T7326] elf_core_dump+0x21a2/0x2330 [ 191.076314][ T7326] ? 0xffffffffff600000 [ 191.076341][ T7326] coredump_write+0xabd/0xdb0 [ 191.076431][ T7326] vfs_coredump+0x26dd/0x31e0 [ 191.076477][ T7326] ? __memcg_slab_free_hook+0x75/0x2c0 [ 191.076565][ T7326] ? __sigqueue_free+0xf4/0x130 [ 191.076587][ T7326] ? proc_coredump_connector+0x160/0x2b0 [ 191.076608][ T7326] ? __sigqueue_free+0xf4/0x130 [ 191.076625][ T7326] ? kmem_cache_free+0xca/0x380 [ 191.076689][ T7326] get_signal+0xd5c/0xf20 [ 191.076722][ T7326] arch_do_signal_or_restart+0x96/0x480 [ 191.076754][ T7326] irqentry_exit+0x145/0x5d0 [ 191.076781][ T7326] asm_exc_page_fault+0x26/0x30 [ 191.076803][ T7326] RIP: 0033:0x7f4e0382ce61 [ 191.076819][ T7326] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 191.076836][ T7326] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 191.076852][ T7326] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 191.076939][ T7326] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 191.076952][ T7326] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 191.076980][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.077028][ T7326] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 191.077059][ T7326] [ 191.077119][ T7326] memory: usage 307200kB, limit 307200kB, failcnt 44643 [ 191.145087][ T8011] 9p: Bad value for 'wfdno' [ 191.186630][ T7326] memory+swap: usage 428740kB, limit 9007199254740988kB, failcnt 0 [ 191.397702][ T7326] kmem: usage 4828kB, limit 9007199254740988kB, failcnt 0 [ 191.418593][ T7326] Memory cgroup stats for /syz1: [ 191.418861][ T7326] cache 306044928 [ 191.439293][ T7326] rss 315392 [ 191.447016][ T7326] shmem 306040832 [ 191.455028][ T7326] mapped_file 0 [ 191.462971][ T7326] dirty 0 [ 191.469279][ T7326] writeback 0 [ 191.473602][ T7326] workingset_refault_anon 879 [ 191.478315][ T7326] workingset_refault_file 9598 [ 191.483147][ T7326] swap 124456960 [ 191.486722][ T7326] swapcached 185257984 [ 191.490772][ T7326] pgpgin 309716 [ 191.494244][ T7326] pgpgout 234123 [ 191.497880][ T7326] pgfault 160850 [ 191.501422][ T7326] pgmajfault 140 [ 191.504972][ T7326] inactive_anon 44400640 [ 191.509218][ T7326] active_anon 265224192 [ 191.513355][ T7326] inactive_file 0 [ 191.517024][ T7326] active_file 4096 [ 191.520836][ T7326] unevictable 0 [ 191.524283][ T7326] hierarchical_memory_limit 314572800 [ 191.529663][ T7326] hierarchical_memsw_limit 9223372036854771712 [ 191.535831][ T7326] total_cache 306044928 [ 191.540125][ T7326] total_rss 315392 [ 191.543850][ T7326] total_shmem 306040832 [ 191.548057][ T7326] total_mapped_file 0 [ 191.552407][ T7326] total_dirty 0 [ 191.555911][ T7326] total_writeback 0 [ 191.559784][ T7326] total_workingset_refault_anon 879 [ 191.565009][ T7326] total_workingset_refault_file 9598 [ 191.570364][ T7326] total_swap 124456960 [ 191.574633][ T7326] total_swapcached 185257984 [ 191.579316][ T7326] total_pgpgin 309716 [ 191.583481][ T7326] total_pgpgout 234123 [ 191.587751][ T7326] total_pgfault 160850 [ 191.591854][ T7326] total_pgmajfault 140 [ 191.596070][ T7326] total_inactive_anon 44400640 [ 191.600943][ T7326] total_active_anon 265224192 [ 191.605923][ T7326] total_inactive_file 0 [ 191.610213][ T7326] total_active_file 4096 [ 191.614593][ T7326] total_unevictable 0 [ 191.618617][ T7326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7326,uid=0 [ 191.633355][ T7326] Memory cgroup out of memory: Killed process 7326 (syz.1.1123) total-vm:90328kB, anon-rss:1264kB, file-rss:54084kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 191.652832][ T7321] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 191.688227][ T7321] CPU: 0 UID: 0 PID: 7321 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 191.688258][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.688274][ T7321] Call Trace: [ 191.688281][ T7321] [ 191.688288][ T7321] __dump_stack+0x1d/0x30 [ 191.688420][ T7321] dump_stack_lvl+0x95/0xd0 [ 191.688441][ T7321] dump_stack+0x15/0x1b [ 191.688460][ T7321] dump_header+0x80/0x240 [ 191.688481][ T7321] oom_kill_process+0x295/0x350 [ 191.688515][ T7321] out_of_memory+0x97d/0xb80 [ 191.688652][ T7321] try_charge_memcg+0x62f/0xa10 [ 191.688749][ T7321] charge_memcg+0x6d/0x120 [ 191.688770][ T7321] __mem_cgroup_charge+0x28/0xb0 [ 191.688858][ T7321] shmem_get_folio_gfp+0x47b/0xd60 [ 191.688964][ T7321] shmem_write_begin+0xfc/0x1f0 [ 191.688983][ T7321] generic_perform_write+0x183/0x490 [ 191.689001][ T7321] ? current_time+0x188/0x240 [ 191.689025][ T7321] shmem_file_write_iter+0xc5/0xf0 [ 191.689065][ T7321] __kernel_write_iter+0x319/0x590 [ 191.689088][ T7321] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 191.689190][ T7321] dump_user_range+0xa73/0xd00 [ 191.689231][ T7321] elf_core_dump+0x21a2/0x2330 [ 191.689316][ T7321] ? 0xffffffffff600000 [ 191.689343][ T7321] coredump_write+0xabd/0xdb0 [ 191.689373][ T7321] vfs_coredump+0x26dd/0x31e0 [ 191.689475][ T7321] ? __memcg_slab_free_hook+0x75/0x2c0 [ 191.689501][ T7321] ? __sigqueue_free+0xf4/0x130 [ 191.689572][ T7321] ? proc_coredump_connector+0x160/0x2b0 [ 191.689592][ T7321] ? __sigqueue_free+0xf4/0x130 [ 191.689613][ T7321] ? kmem_cache_free+0xca/0x380 [ 191.689669][ T7321] get_signal+0xd5c/0xf20 [ 191.689696][ T7321] arch_do_signal_or_restart+0x96/0x480 [ 191.689722][ T7321] irqentry_exit+0x145/0x5d0 [ 191.689749][ T7321] asm_exc_page_fault+0x26/0x30 [ 191.689829][ T7321] RIP: 0033:0x7f4e0382ce61 [ 191.689844][ T7321] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 191.689862][ T7321] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 191.689879][ T7321] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 191.689969][ T7321] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 191.689982][ T7321] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 191.689996][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.690031][ T7321] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 191.690050][ T7321] [ 191.690278][ T7321] memory: usage 306376kB, limit 307200kB, failcnt 44778 [ 191.940595][ T7321] memory+swap: usage 387488kB, limit 9007199254740988kB, failcnt 0 [ 191.949552][ T7321] kmem: usage 4784kB, limit 9007199254740988kB, failcnt 0 [ 191.957539][ T7321] Memory cgroup stats for /syz1: [ 191.957861][ T7321] cache 278986752 [ 191.967113][ T7321] rss 307200 [ 191.970340][ T7321] shmem 278982656 [ 191.990328][ T7321] mapped_file 0 [ 192.185336][ T7321] dirty 0 [ 192.206994][ T7321] writeback 0 [ 192.230764][ T7321] workingset_refault_anon 879 [ 192.243491][ T8051] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1339'. [ 192.271488][ T7321] workingset_refault_file 9598 [ 192.306105][ T7321] swap 109637632 [ 192.331149][ T7321] swapcached 184905728 [ 192.367016][ T7321] pgpgin 309717 [ 192.401467][ T7321] pgpgout 240818 [ 192.431068][ T7321] pgfault 160851 [ 192.483909][ T7321] pgmajfault 140 [ 192.498231][ T7321] inactive_anon 41467904 [ 192.516387][ T7321] active_anon 240738304 [ 192.534672][ T7321] inactive_file 0 [ 192.548928][ T7321] active_file 4096 [ 192.565162][ T7321] unevictable 0 [ 192.575514][ T7321] hierarchical_memory_limit 314572800 [ 192.590865][ T7321] hierarchical_memsw_limit 9223372036854771712 [ 192.611579][ T7321] total_cache 278986752 [ 192.625044][ T7321] total_rss 307200 [ 192.634975][ T7321] total_shmem 278982656 [ 192.644007][ T7321] total_mapped_file 0 [ 192.651079][ T7321] total_dirty 0 [ 192.658408][ T7321] total_writeback 0 [ 192.666870][ T7321] total_workingset_refault_anon 879 [ 192.672370][ T8063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8063 comm=syz.0.1344 [ 192.697485][ T7321] total_workingset_refault_file 9598 [ 192.702781][ T7321] total_swap 109637632 [ 192.710485][ T7321] total_swapcached 184905728 [ 192.720951][ T7321] total_pgpgin 309717 [ 192.728338][ T7321] total_pgpgout 240818 [ 192.737331][ T7321] total_pgfault 160851 [ 192.746209][ T7321] total_pgmajfault 140 [ 192.753724][ T7321] total_inactive_anon 41467904 [ 192.764951][ T7321] total_active_anon 240738304 [ 192.774591][ T7321] total_inactive_file 0 [ 192.782280][ T7321] total_active_file 4096 [ 192.791156][ T7321] total_unevictable 0 [ 192.800246][ T7321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7323,uid=0 [ 192.829412][ T7321] Memory cgroup out of memory: Killed process 7323 (syz.1.1123) total-vm:90328kB, anon-rss:1268kB, file-rss:54084kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 194.000235][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1348'. [ 194.086671][ T8080] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1351'. [ 194.141792][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 194.259168][ T8087] tmpfs: Bad value for 'mode' [ 194.831255][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 195.187517][ T8110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1361'. [ 196.628398][ T8144] FAULT_INJECTION: forcing a failure. [ 196.628398][ T8144] name failslab, interval 1, probability 0, space 0, times 0 [ 196.668744][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.3.1375 Not tainted syzkaller #0 PREEMPT(lazy) [ 196.668769][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.668846][ T8144] Call Trace: [ 196.668852][ T8144] [ 196.668860][ T8144] __dump_stack+0x1d/0x30 [ 196.668965][ T8144] dump_stack_lvl+0x95/0xd0 [ 196.669048][ T8144] dump_stack+0x15/0x1b [ 196.669065][ T8144] should_fail_ex+0x263/0x280 [ 196.669097][ T8144] should_failslab+0x8c/0xb0 [ 196.669124][ T8144] __kmalloc_noprof+0xb8/0x4d0 [ 196.669161][ T8144] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 196.669187][ T8144] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 196.669268][ T8144] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 196.669329][ T8144] ? selinux_capable+0x31/0x40 [ 196.669358][ T8144] ? security_capable+0x7b/0x90 [ 196.669452][ T8144] ? ns_capable+0x7c/0xb0 [ 196.669596][ T8144] genl_rcv_msg+0x432/0x470 [ 196.669614][ T8144] ? __pfx_netlbl_cipsov4_remove+0x10/0x10 [ 196.669638][ T8144] netlink_rcv_skb+0x123/0x220 [ 196.669660][ T8144] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.669732][ T8144] genl_rcv+0x28/0x40 [ 196.669752][ T8144] netlink_unicast+0x5a8/0x680 [ 196.669779][ T8144] netlink_sendmsg+0x5c8/0x6f0 [ 196.669836][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.669864][ T8144] ____sys_sendmsg+0x563/0x5b0 [ 196.669894][ T8144] ___sys_sendmsg+0x195/0x1e0 [ 196.669987][ T8144] __x64_sys_sendmsg+0xd4/0x160 [ 196.670084][ T8144] x64_sys_call+0x194c/0x3020 [ 196.670104][ T8144] do_syscall_64+0x12c/0x3b0 [ 196.670141][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.670163][ T8144] RIP: 0033:0x7f8e3930ce59 [ 196.670180][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.670216][ T8144] RSP: 002b:00007f8e37d67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.670233][ T8144] RAX: ffffffffffffffda RBX: 00007f8e39585fa0 RCX: 00007f8e3930ce59 [ 196.670246][ T8144] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000004 [ 196.670260][ T8144] RBP: 00007f8e37d67090 R08: 0000000000000000 R09: 0000000000000000 [ 196.670274][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.670322][ T8144] R13: 00007f8e39586038 R14: 00007f8e39585fa0 R15: 00007fff1161d2c8 [ 196.670343][ T8144] [ 197.749823][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 197.749837][ T28] audit: type=1400 audit(1780226324.720:2347): avc: denied { read } for pid=8178 comm="syz.4.1390" dev="sockfs" ino=19864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.838998][ T8188] FAULT_INJECTION: forcing a failure. [ 197.838998][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 197.880572][ T7335] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 197.881345][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.0.1391 Not tainted syzkaller #0 PREEMPT(lazy) [ 197.881370][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.881382][ T8188] Call Trace: [ 197.881389][ T8188] [ 197.881396][ T8188] __dump_stack+0x1d/0x30 [ 197.881415][ T8188] dump_stack_lvl+0x95/0xd0 [ 197.881433][ T8188] dump_stack+0x15/0x1b [ 197.881504][ T8188] should_fail_ex+0x263/0x280 [ 197.881523][ T8188] should_failslab+0x8c/0xb0 [ 197.881550][ T8188] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 197.881644][ T8188] ? __alloc_skb+0x2d6/0x690 [ 197.881744][ T8188] __alloc_skb+0x2d6/0x690 [ 197.881763][ T8188] ? __alloc_skb+0x200/0x690 [ 197.881818][ T8188] netlink_ack+0xfd/0x500 [ 197.881879][ T8188] ? __pfx_netlbl_cipsov4_remove+0x10/0x10 [ 197.881906][ T8188] netlink_rcv_skb+0x192/0x220 [ 197.881931][ T8188] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.882013][ T8188] genl_rcv+0x28/0x40 [ 197.882031][ T8188] netlink_unicast+0x5a8/0x680 [ 197.882058][ T8188] netlink_sendmsg+0x5c8/0x6f0 [ 197.882144][ T8188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.882193][ T8188] ____sys_sendmsg+0x563/0x5b0 [ 197.882220][ T8188] ___sys_sendmsg+0x195/0x1e0 [ 197.882257][ T8188] __x64_sys_sendmsg+0xd4/0x160 [ 197.882284][ T8188] x64_sys_call+0x194c/0x3020 [ 197.882404][ T8188] do_syscall_64+0x12c/0x3b0 [ 197.882432][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.882453][ T8188] RIP: 0033:0x7fd7173ece59 [ 197.882469][ T8188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.882499][ T8188] RSP: 002b:00007fd715e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.882563][ T8188] RAX: ffffffffffffffda RBX: 00007fd717665fa0 RCX: 00007fd7173ece59 [ 197.882587][ T8188] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000004 [ 197.882599][ T8188] RBP: 00007fd715e47090 R08: 0000000000000000 R09: 0000000000000000 [ 197.882612][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.882624][ T8188] R13: 00007fd717666038 R14: 00007fd717665fa0 R15: 00007ffede1bd2d8 [ 197.882683][ T8188] [ 198.155217][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.155287][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.155298][ T7335] Call Trace: [ 198.155304][ T7335] [ 198.155310][ T7335] __dump_stack+0x1d/0x30 [ 198.155335][ T7335] dump_stack_lvl+0x95/0xd0 [ 198.155356][ T7335] dump_stack+0x15/0x1b [ 198.155409][ T7335] dump_header+0x80/0x240 [ 198.155430][ T7335] oom_kill_process+0x295/0x350 [ 198.155461][ T7335] out_of_memory+0x97d/0xb80 [ 198.155563][ T7335] try_charge_memcg+0x62f/0xa10 [ 198.155596][ T7335] charge_memcg+0x6d/0x120 [ 198.155620][ T7335] __mem_cgroup_charge+0x28/0xb0 [ 198.155688][ T7335] shmem_get_folio_gfp+0x47b/0xd60 [ 198.155714][ T7335] shmem_write_begin+0xfc/0x1f0 [ 198.155738][ T7335] generic_perform_write+0x183/0x490 [ 198.155792][ T7335] ? current_time+0x188/0x240 [ 198.155842][ T7335] shmem_file_write_iter+0xc5/0xf0 [ 198.155864][ T7335] __kernel_write_iter+0x319/0x590 [ 198.155886][ T7335] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 198.155918][ T7335] dump_user_range+0xa73/0xd00 [ 198.155970][ T7335] elf_core_dump+0x21a2/0x2330 [ 198.155994][ T7335] ? 0xffffffffff600000 [ 198.156082][ T7335] coredump_write+0xabd/0xdb0 [ 198.156107][ T7335] vfs_coredump+0x26dd/0x31e0 [ 198.156176][ T7335] ? __memcg_slab_free_hook+0x75/0x2c0 [ 198.156201][ T7335] ? __sigqueue_free+0xf4/0x130 [ 198.156223][ T7335] ? proc_coredump_connector+0x160/0x2b0 [ 198.156312][ T7335] ? __sigqueue_free+0xf4/0x130 [ 198.156393][ T7335] ? kmem_cache_free+0xca/0x380 [ 198.156415][ T7335] get_signal+0xd5c/0xf20 [ 198.156441][ T7335] arch_do_signal_or_restart+0x96/0x480 [ 198.156469][ T7335] irqentry_exit+0x145/0x5d0 [ 198.156534][ T7335] asm_exc_page_fault+0x26/0x30 [ 198.156552][ T7335] RIP: 0033:0x7f4e0382ce61 [ 198.156567][ T7335] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 198.156658][ T7335] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 198.156676][ T7335] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 198.156688][ T7335] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 198.156702][ T7335] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 198.156714][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.156729][ T7335] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 198.156749][ T7335] [ 198.918060][ T7335] memory: usage 307192kB, limit 307200kB, failcnt 52275 [ 198.932243][ T7335] memory+swap: usage 429544kB, limit 9007199254740988kB, failcnt 0 [ 198.942986][ T7335] kmem: usage 4400kB, limit 9007199254740988kB, failcnt 0 [ 198.950286][ T7335] Memory cgroup stats for /syz1: [ 198.950469][ T7335] cache 307101696 [ 198.959737][ T7335] rss 253952 [ 198.962985][ T7335] shmem 307101696 [ 198.966616][ T7335] mapped_file 0 [ 198.970245][ T7335] dirty 0 [ 198.973288][ T7335] writeback 0 [ 198.976638][ T7335] workingset_refault_anon 907 [ 198.981662][ T7335] workingset_refault_file 10495 [ 198.986579][ T7335] swap 125288448 [ 198.990298][ T7335] swapcached 218181632 [ 198.994366][ T7335] pgpgin 331084 [ 198.997843][ T7335] pgpgout 255387 [ 199.001740][ T7335] pgfault 161741 [ 199.005346][ T7335] pgmajfault 166 [ 199.008901][ T7335] inactive_anon 291368960 [ 199.014707][ T7335] active_anon 18685952 [ 199.018930][ T7335] inactive_file 0 [ 199.022736][ T7335] active_file 0 [ 199.026319][ T7335] unevictable 0 [ 199.029817][ T7335] hierarchical_memory_limit 314572800 [ 199.035441][ T7335] hierarchical_memsw_limit 9223372036854771712 [ 199.041705][ T7335] total_cache 307101696 [ 199.046008][ T7335] total_rss 253952 [ 199.049833][ T7335] total_shmem 307101696 [ 199.054274][ T7335] total_mapped_file 0 [ 199.058286][ T7335] total_dirty 0 [ 199.061762][ T7335] total_writeback 0 [ 199.065990][ T7335] total_workingset_refault_anon 907 [ 199.071271][ T7335] total_workingset_refault_file 10495 [ 199.076966][ T7335] total_swap 125288448 [ 199.081051][ T7335] total_swapcached 218181632 [ 199.085719][ T7335] total_pgpgin 331084 [ 199.090106][ T7335] total_pgpgout 255387 [ 199.094191][ T7335] total_pgfault 161741 [ 199.098602][ T7335] total_pgmajfault 166 [ 199.102763][ T7335] total_inactive_anon 291368960 [ 199.108227][ T7335] total_active_anon 18685952 [ 199.112829][ T7335] total_inactive_file 0 [ 199.117141][ T7335] total_active_file 0 [ 199.144619][ T7335] total_unevictable 0 [ 199.148721][ T7335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7337,uid=0 [ 199.163703][ T7335] Memory cgroup out of memory: Killed process 7337 (syz.1.1123) total-vm:90460kB, anon-rss:1276kB, file-rss:54084kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 199.199721][ T7320] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 199.237826][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 199.237854][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.237866][ T7320] Call Trace: [ 199.237873][ T7320] [ 199.237881][ T7320] __dump_stack+0x1d/0x30 [ 199.237960][ T7320] dump_stack_lvl+0x95/0xd0 [ 199.237976][ T7320] dump_stack+0x15/0x1b [ 199.237991][ T7320] dump_header+0x80/0x240 [ 199.238011][ T7320] oom_kill_process+0x295/0x350 [ 199.238085][ T7320] out_of_memory+0x97d/0xb80 [ 199.238164][ T7320] try_charge_memcg+0x62f/0xa10 [ 199.238203][ T7320] charge_memcg+0x6d/0x120 [ 199.238226][ T7320] __mem_cgroup_charge+0x28/0xb0 [ 199.238253][ T7320] shmem_get_folio_gfp+0x47b/0xd60 [ 199.238280][ T7320] shmem_write_begin+0xfc/0x1f0 [ 199.238304][ T7320] generic_perform_write+0x183/0x490 [ 199.238322][ T7320] ? current_time+0x188/0x240 [ 199.238372][ T7320] shmem_file_write_iter+0xc5/0xf0 [ 199.238398][ T7320] __kernel_write_iter+0x319/0x590 [ 199.238471][ T7320] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 199.238655][ T7320] dump_user_range+0xa73/0xd00 [ 199.238685][ T7320] elf_core_dump+0x21a2/0x2330 [ 199.238710][ T7320] ? 0xffffffffff600000 [ 199.238736][ T7320] coredump_write+0xabd/0xdb0 [ 199.238860][ T7320] vfs_coredump+0x26dd/0x31e0 [ 199.238924][ T7320] ? __memcg_slab_free_hook+0x75/0x2c0 [ 199.238945][ T7320] ? __sigqueue_free+0xf4/0x130 [ 199.239019][ T7320] ? proc_coredump_connector+0x160/0x2b0 [ 199.239035][ T7320] ? __sigqueue_free+0xf4/0x130 [ 199.239054][ T7320] ? kmem_cache_free+0xca/0x380 [ 199.239152][ T7320] get_signal+0xd5c/0xf20 [ 199.239183][ T7320] arch_do_signal_or_restart+0x96/0x480 [ 199.239264][ T7320] irqentry_exit+0x145/0x5d0 [ 199.239332][ T7320] asm_exc_page_fault+0x26/0x30 [ 199.239348][ T7320] RIP: 0033:0x7f4e0382ce61 [ 199.239447][ T7320] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 199.239465][ T7320] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 199.239508][ T7320] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 199.239522][ T7320] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 199.239535][ T7320] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 199.239548][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.239562][ T7320] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 199.239631][ T7320] [ 199.241213][ T7320] memory: usage 307192kB, limit 307200kB, failcnt 52316 [ 199.563603][ T7320] memory+swap: usage 416524kB, limit 9007199254740988kB, failcnt 0 [ 199.573166][ T7320] kmem: usage 4376kB, limit 9007199254740988kB, failcnt 0 [ 199.580338][ T7320] Memory cgroup stats for /syz1: [ 199.580576][ T7320] cache 298917888 [ 199.589349][ T7320] rss 245760 [ 199.592555][ T7320] shmem 298917888 [ 199.597427][ T7320] mapped_file 0 [ 199.600902][ T7320] dirty 0 [ 199.603829][ T7320] writeback 0 [ 199.607103][ T7320] workingset_refault_anon 907 [ 199.611863][ T7320] workingset_refault_file 10495 [ 199.616699][ T7320] swap 120152064 [ 199.620245][ T7320] swapcached 218091520 [ 199.624401][ T7320] pgpgin 331090 [ 199.627848][ T7320] pgpgout 257390 [ 199.631430][ T7320] pgfault 161741 [ 199.635929][ T7320] pgmajfault 166 [ 199.645178][ T7320] inactive_anon 283172864 [ 199.649736][ T7320] active_anon 18702336 [ 199.664139][ T7320] inactive_file 0 [ 199.668492][ T7320] active_file 0 [ 199.672117][ T7320] unevictable 0 [ 199.676070][ T7320] hierarchical_memory_limit 314572800 [ 199.681564][ T7320] hierarchical_memsw_limit 9223372036854771712 [ 199.688002][ T7320] total_cache 298917888 [ 199.706571][ T7320] total_rss 245760 [ 199.710392][ T7320] total_shmem 298917888 [ 199.714631][ T7320] total_mapped_file 0 [ 199.719437][ T7320] total_dirty 0 [ 199.723772][ T7320] total_writeback 0 [ 199.728548][ T7320] total_workingset_refault_anon 907 [ 199.734969][ T7320] total_workingset_refault_file 10495 [ 199.740705][ T7320] total_swap 120152064 [ 199.751967][ T28] audit: type=1400 audit(1780226326.629:2348): avc: denied { create } for pid=8228 comm="syz.4.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.755404][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 199.773037][ T7320] total_swapcached 218091520 [ 199.789994][ T8224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8224 comm=syz.3.1405 [ 199.801139][ T8231] FAULT_INJECTION: forcing a failure. [ 199.801139][ T8231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.809201][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 199.815645][ T7320] total_pgpgin 331090 [ 199.828484][ T8231] CPU: 1 UID: 0 PID: 8231 Comm: syz.4.1408 Not tainted syzkaller #0 PREEMPT(lazy) [ 199.828506][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.828516][ T8231] Call Trace: [ 199.828522][ T8231] [ 199.828530][ T8231] __dump_stack+0x1d/0x30 [ 199.828553][ T8231] dump_stack_lvl+0x95/0xd0 [ 199.828577][ T8231] dump_stack+0x15/0x1b [ 199.828592][ T8231] should_fail_ex+0x263/0x280 [ 199.828655][ T8231] should_fail+0xb/0x20 [ 199.828668][ T8231] should_fail_usercopy+0x1a/0x20 [ 199.828691][ T8231] _copy_from_user+0x1c/0xb0 [ 199.828718][ T8231] ___sys_sendmsg+0xc1/0x1e0 [ 199.828754][ T8231] __x64_sys_sendmsg+0xd4/0x160 [ 199.828777][ T8231] x64_sys_call+0x194c/0x3020 [ 199.828838][ T8231] do_syscall_64+0x12c/0x3b0 [ 199.828912][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.828930][ T8231] RIP: 0033:0x7fa17d3ace59 [ 199.828945][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.828960][ T8231] RSP: 002b:00007fa17be07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.828998][ T8231] RAX: ffffffffffffffda RBX: 00007fa17d625fa0 RCX: 00007fa17d3ace59 [ 199.829011][ T8231] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 199.829034][ T8231] RBP: 00007fa17be07090 R08: 0000000000000000 R09: 0000000000000000 [ 199.829045][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.829056][ T8231] R13: 00007fa17d626038 R14: 00007fa17d625fa0 R15: 00007fffa7094558 [ 199.829072][ T8231] [ 199.840495][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 199.843709][ T4609] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.854049][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 199.858620][ T4609] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.861779][ T7320] total_pgpgout 257390 [ 199.890061][ T28] audit: type=1400 audit(1780226326.760:2349): avc: denied { name_bind } for pid=8234 comm="syz.4.1410" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 199.892084][ T7320] total_pgfault 161741 [ 199.896135][ T4609] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.896165][ T4609] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.985718][ T28] audit: type=1400 audit(1780226326.844:2350): avc: denied { create } for pid=8234 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.988837][ T7320] total_pgmajfault 166 [ 200.000684][ T28] audit: type=1400 audit(1780226326.844:2351): avc: denied { bind } for pid=8234 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.026869][ T7320] total_inactive_anon 283172864 [ 200.098254][ T28] audit: type=1400 audit(1780226326.947:2352): avc: denied { write } for pid=8234 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.141346][ T7320] total_active_anon 18702336 [ 200.146240][ T7320] total_inactive_file 0 [ 200.150440][ T7320] total_active_file 0 [ 200.154662][ T7320] total_unevictable 0 [ 200.158998][ T7320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7336,uid=0 [ 200.174071][ T7320] Memory cgroup out of memory: Killed process 7336 (syz.1.1123) total-vm:90460kB, anon-rss:1276kB, file-rss:54084kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 200.799868][ T28] audit: type=1400 audit(1780226327.611:2353): avc: denied { ioctl } for pid=8252 comm="syz.3.1415" path="socket:[20019]" dev="sockfs" ino=20019 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.808629][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1415'. [ 200.889023][ T28] audit: type=1400 audit(1780226327.686:2354): avc: denied { getopt } for pid=8246 comm="syz.1.1412" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.910086][ T8255] batadv_slave_1: entered promiscuous mode [ 200.953239][ T28] audit: type=1400 audit(1780226327.751:2355): avc: denied { create } for pid=8261 comm="syz.0.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.464319][ T28] audit: type=1400 audit(1780226328.210:2356): avc: denied { read } for pid=8279 comm="syz.3.1424" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.492092][ T8283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8283 comm=syz.0.1425 [ 201.850646][ T8246] batadv_slave_1: left promiscuous mode [ 202.867445][ T8353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1430'. [ 202.896369][ T8353] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1430'. [ 202.931107][ T8353] netlink: 'syz.2.1430': attribute type 5 has an invalid length. [ 202.966005][ T8353] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1430'. [ 203.016475][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1433'. [ 203.385867][ T8377] unsupported nla_type 210 [ 203.446813][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 203.446825][ T28] audit: type=1400 audit(1780226330.080:2369): avc: denied { create } for pid=8382 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.478066][ T7319] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 203.556911][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 203.556935][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.556945][ T7319] Call Trace: [ 203.556951][ T7319] [ 203.556957][ T7319] __dump_stack+0x1d/0x30 [ 203.556980][ T7319] dump_stack_lvl+0x95/0xd0 [ 203.557046][ T7319] dump_stack+0x15/0x1b [ 203.557064][ T7319] dump_header+0x80/0x240 [ 203.557086][ T7319] oom_kill_process+0x295/0x350 [ 203.557115][ T7319] out_of_memory+0x97d/0xb80 [ 203.557147][ T7319] try_charge_memcg+0x62f/0xa10 [ 203.557182][ T7319] charge_memcg+0x6d/0x120 [ 203.557355][ T7319] __mem_cgroup_charge+0x28/0xb0 [ 203.557379][ T7319] shmem_get_folio_gfp+0x47b/0xd60 [ 203.557428][ T7319] shmem_write_begin+0xfc/0x1f0 [ 203.557476][ T7319] generic_perform_write+0x183/0x490 [ 203.557493][ T7319] ? current_time+0x188/0x240 [ 203.557517][ T7319] shmem_file_write_iter+0xc5/0xf0 [ 203.557538][ T7319] __kernel_write_iter+0x319/0x590 [ 203.557561][ T7319] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 203.557660][ T7319] dump_user_range+0xa73/0xd00 [ 203.557685][ T7319] elf_core_dump+0x21a2/0x2330 [ 203.557777][ T7319] ? 0xffffffffff600000 [ 203.557883][ T7319] coredump_write+0xabd/0xdb0 [ 203.557908][ T7319] vfs_coredump+0x26dd/0x31e0 [ 203.557968][ T7319] ? __memcg_slab_free_hook+0x75/0x2c0 [ 203.557994][ T7319] ? __sigqueue_free+0xf4/0x130 [ 203.558013][ T7319] ? proc_coredump_connector+0x160/0x2b0 [ 203.558034][ T7319] ? __sigqueue_free+0xf4/0x130 [ 203.558109][ T7319] ? kmem_cache_free+0xca/0x380 [ 203.558131][ T7319] get_signal+0xd5c/0xf20 [ 203.558165][ T7319] arch_do_signal_or_restart+0x96/0x480 [ 203.558194][ T7319] irqentry_exit+0x145/0x5d0 [ 203.558297][ T7319] asm_exc_page_fault+0x26/0x30 [ 203.558314][ T7319] RIP: 0033:0x7f4e0382ce61 [ 203.558329][ T7319] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 203.558402][ T7319] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 203.558419][ T7319] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 203.558434][ T7319] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 203.558448][ T7319] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 203.558461][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.558550][ T7319] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 203.558565][ T7319] [ 203.789943][ T7319] memory: usage 307200kB, limit 307200kB, failcnt 58866 [ 203.820072][ T7319] memory+swap: usage 429252kB, limit 9007199254740988kB, failcnt 0 [ 203.828528][ T7319] kmem: usage 3760kB, limit 9007199254740988kB, failcnt 0 [ 203.892070][ T7319] Memory cgroup stats for /syz1: [ 203.892318][ T7319] cache 307724288 [ 203.901050][ T7319] rss 176128 [ 203.904246][ T7319] shmem 307724288 [ 203.908126][ T7319] mapped_file 0 [ 203.914809][ T7319] dirty 0 [ 203.923891][ T7319] writeback 0 [ 203.933347][ T7319] workingset_refault_anon 907 [ 203.969984][ T7319] workingset_refault_file 10495 [ 203.975241][ T7319] swap 124981248 [ 203.978834][ T7319] swapcached 245317632 [ 203.983221][ T7319] pgpgin 351787 [ 203.983229][ T7319] pgpgout 275935 [ 203.983234][ T7319] pgfault 162495 [ 203.983240][ T7319] pgmajfault 166 [ 203.983280][ T7319] inactive_anon 41705472 [ 203.983286][ T7319] active_anon 268984320 [ 203.983292][ T7319] inactive_file 0 [ 203.983298][ T7319] active_file 0 [ 203.983303][ T7319] unevictable 0 [ 203.983309][ T7319] hierarchical_memory_limit 314572800 [ 203.983316][ T7319] hierarchical_memsw_limit 9223372036854771712 [ 203.983323][ T7319] total_cache 307724288 [ 203.983330][ T7319] total_rss 176128 [ 203.983336][ T7319] total_shmem 307724288 [ 203.983343][ T7319] total_mapped_file 0 [ 203.983409][ T7319] total_dirty 0 [ 203.983415][ T7319] total_writeback 0 [ 203.983421][ T7319] total_workingset_refault_anon 907 [ 203.983430][ T7319] total_workingset_refault_file 10495 [ 203.983439][ T7319] total_swap 124981248 [ 203.983446][ T7319] total_swapcached 245317632 [ 203.983453][ T7319] total_pgpgin 351787 [ 203.983459][ T7319] total_pgpgout 275935 [ 203.983542][ T7319] total_pgfault 162495 [ 203.983548][ T7319] total_pgmajfault 166 [ 203.983554][ T7319] total_inactive_anon 41705472 [ 203.983581][ T7319] total_active_anon 268984320 [ 203.983589][ T7319] total_inactive_file 0 [ 203.983597][ T7319] total_active_file 0 [ 203.983603][ T7319] total_unevictable 0 [ 203.983610][ T7319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7321,uid=0 [ 203.983688][ T7319] Memory cgroup out of memory: Killed process 7321 (syz.1.1123) total-vm:90328kB, anon-rss:1260kB, file-rss:55692kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 204.203843][ T28] audit: type=1400 audit(1780226330.670:2370): avc: denied { getopt } for pid=8390 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.569478][ T7335] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 204.569648][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 204.569674][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.569685][ T7335] Call Trace: [ 204.569691][ T7335] [ 204.569698][ T7335] __dump_stack+0x1d/0x30 [ 204.569717][ T7335] dump_stack_lvl+0x95/0xd0 [ 204.569733][ T7335] dump_stack+0x15/0x1b [ 204.569797][ T7335] dump_header+0x80/0x240 [ 204.569815][ T7335] oom_kill_process+0x295/0x350 [ 204.569896][ T7335] out_of_memory+0x97d/0xb80 [ 204.569924][ T7335] try_charge_memcg+0x62f/0xa10 [ 204.570037][ T7335] charge_memcg+0x6d/0x120 [ 204.570062][ T7335] __mem_cgroup_charge+0x28/0xb0 [ 204.570085][ T7335] shmem_get_folio_gfp+0x47b/0xd60 [ 204.570132][ T7335] shmem_write_begin+0xfc/0x1f0 [ 204.570156][ T7335] generic_perform_write+0x183/0x490 [ 204.570177][ T7335] ? current_time+0x188/0x240 [ 204.570203][ T7335] shmem_file_write_iter+0xc5/0xf0 [ 204.570234][ T7335] __kernel_write_iter+0x319/0x590 [ 204.570293][ T7335] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 204.570321][ T7335] dump_user_range+0xa73/0xd00 [ 204.570396][ T7335] elf_core_dump+0x21a2/0x2330 [ 204.570467][ T7335] ? 0xffffffffff600000 [ 204.570489][ T7335] coredump_write+0xabd/0xdb0 [ 204.570619][ T7335] vfs_coredump+0x26dd/0x31e0 [ 204.570646][ T7335] ? __memcg_slab_free_hook+0x75/0x2c0 [ 204.570667][ T7335] ? __sigqueue_free+0xf4/0x130 [ 204.570801][ T7335] ? proc_coredump_connector+0x160/0x2b0 [ 204.570831][ T7335] ? __sigqueue_free+0xf4/0x130 [ 204.570853][ T7335] ? kmem_cache_free+0xca/0x380 [ 204.570874][ T7335] get_signal+0xd5c/0xf20 [ 204.570915][ T7335] arch_do_signal_or_restart+0x96/0x480 [ 204.570944][ T7335] irqentry_exit+0x145/0x5d0 [ 204.570971][ T7335] asm_exc_page_fault+0x26/0x30 [ 204.571043][ T7335] RIP: 0033:0x7f4e0382ce61 [ 204.571056][ T7335] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 204.571131][ T7335] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 204.571145][ T7335] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 204.571156][ T7335] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 204.571166][ T7335] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 204.571177][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.571189][ T7335] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 204.571204][ T7335] [ 204.673235][ T7335] memory: usage 307200kB, limit 307200kB, failcnt 59064 [ 204.673252][ T7335] memory+swap: usage 429252kB, limit 9007199254740988kB, failcnt 0 [ 204.673304][ T7335] kmem: usage 3704kB, limit 9007199254740988kB, failcnt 0 [ 204.673315][ T7335] Memory cgroup stats for /syz1: [ 204.674976][ T7335] cache 307724288 [ 204.674983][ T7335] rss 176128 [ 204.675289][ T7335] shmem 307724288 [ 204.675295][ T7335] mapped_file 0 [ 204.684216][ T7335] dirty 0 [ 204.684224][ T7335] writeback 0 [ 204.684230][ T7335] workingset_refault_anon 907 [ 204.684246][ T7335] workingset_refault_file 10495 [ 204.684253][ T7335] swap 124981248 [ 204.685488][ T7335] swapcached 245317632 [ 204.685537][ T7335] pgpgin 351787 [ 204.685854][ T7335] pgpgout 275935 [ 204.685949][ T7335] pgfault 162495 [ 204.685955][ T7335] pgmajfault 166 [ 204.685961][ T7335] inactive_anon 41705472 [ 204.685967][ T7335] active_anon 268984320 [ 204.685973][ T7335] inactive_file 0 [ 204.685979][ T7335] active_file 0 [ 204.685984][ T7335] unevictable 0 [ 204.686685][ T7335] hierarchical_memory_limit 314572800 [ 204.686702][ T7335] hierarchical_memsw_limit 9223372036854771712 [ 204.686710][ T7335] total_cache 307724288 [ 204.686716][ T7335] total_rss 176128 [ 204.686722][ T7335] total_shmem 307724288 [ 204.686728][ T7335] total_mapped_file 0 [ 204.687082][ T7335] total_dirty 0 [ 204.687089][ T7335] total_writeback 0 [ 204.687095][ T7335] total_workingset_refault_anon 907 [ 204.687102][ T7335] total_workingset_refault_file 10495 [ 204.687462][ T7335] total_swap 124981248 [ 204.687691][ T7335] total_swapcached 245317632 [ 204.687698][ T7335] total_pgpgin 351787 [ 204.692120][ T7335] total_pgpgout 275935 [ 204.692138][ T7335] total_pgfault 162495 [ 204.701573][ T7335] total_pgmajfault 166 [ 204.701581][ T7335] total_inactive_anon 41705472 [ 204.701676][ T7335] total_active_anon 268984320 [ 204.701973][ T7335] total_inactive_file 0 [ 204.702017][ T7335] total_active_file 0 [ 204.702195][ T7335] total_unevictable 0 [ 204.702290][ T7335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7320,uid=0 [ 204.702902][ T7335] Memory cgroup out of memory: Killed process 7320 (syz.1.1123) total-vm:90328kB, anon-rss:1268kB, file-rss:55180kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 205.324066][ T7328] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 205.324097][ T7328] CPU: 1 UID: 0 PID: 7328 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.324122][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.324134][ T7328] Call Trace: [ 205.324141][ T7328] [ 205.324157][ T7328] __dump_stack+0x1d/0x30 [ 205.324177][ T7328] dump_stack_lvl+0x95/0xd0 [ 205.324224][ T7328] dump_stack+0x15/0x1b [ 205.324243][ T7328] dump_header+0x80/0x240 [ 205.324266][ T7328] oom_kill_process+0x295/0x350 [ 205.324293][ T7328] out_of_memory+0x97d/0xb80 [ 205.324387][ T7328] try_charge_memcg+0x62f/0xa10 [ 205.324420][ T7328] charge_memcg+0x6d/0x120 [ 205.324440][ T7328] __mem_cgroup_charge+0x28/0xb0 [ 205.324583][ T7328] shmem_get_folio_gfp+0x47b/0xd60 [ 205.324651][ T7328] shmem_write_begin+0xfc/0x1f0 [ 205.324680][ T7328] generic_perform_write+0x183/0x490 [ 205.324699][ T7328] ? current_time+0x188/0x240 [ 205.324796][ T7328] shmem_file_write_iter+0xc5/0xf0 [ 205.324839][ T7328] __kernel_write_iter+0x319/0x590 [ 205.324928][ T7328] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 205.324953][ T7328] dump_user_range+0xa73/0xd00 [ 205.325063][ T7328] elf_core_dump+0x21a2/0x2330 [ 205.325094][ T7328] ? 0xffffffffff600000 [ 205.325116][ T7328] coredump_write+0xabd/0xdb0 [ 205.325142][ T7328] vfs_coredump+0x26dd/0x31e0 [ 205.325204][ T7328] ? __memcg_slab_free_hook+0x75/0x2c0 [ 205.325231][ T7328] ? __sigqueue_free+0xf4/0x130 [ 205.325252][ T7328] ? proc_coredump_connector+0x160/0x2b0 [ 205.325331][ T7328] ? __sigqueue_free+0xf4/0x130 [ 205.325424][ T7328] ? kmem_cache_free+0xca/0x380 [ 205.325442][ T7328] get_signal+0xd5c/0xf20 [ 205.325470][ T7328] arch_do_signal_or_restart+0x96/0x480 [ 205.325541][ T7328] irqentry_exit+0x145/0x5d0 [ 205.325566][ T7328] asm_exc_page_fault+0x26/0x30 [ 205.325584][ T7328] RIP: 0033:0x7f4e0382ce61 [ 205.325604][ T7328] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 205.325622][ T7328] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 205.325692][ T7328] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 205.325706][ T7328] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 205.325719][ T7328] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 205.325733][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.325745][ T7328] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 205.325764][ T7328] [ 205.394136][ T7328] memory: usage 307200kB, limit 307200kB, failcnt 59254 [ 205.394155][ T7328] memory+swap: usage 429248kB, limit 9007199254740988kB, failcnt 0 [ 205.394220][ T7328] kmem: usage 3704kB, limit 9007199254740988kB, failcnt 0 [ 205.394233][ T7328] Memory cgroup stats for /syz1: [ 205.394436][ T7328] cache 307724288 [ 205.394445][ T7328] rss 176128 [ 205.394451][ T7328] shmem 307724288 [ 205.394460][ T7328] mapped_file 0 [ 205.394467][ T7328] dirty 0 [ 205.394475][ T7328] writeback 0 [ 205.394486][ T7328] workingset_refault_anon 907 [ 205.394557][ T7328] workingset_refault_file 10495 [ 205.394566][ T7328] swap 124981248 [ 205.394574][ T7328] swapcached 245317632 [ 205.394582][ T7328] pgpgin 351787 [ 205.394588][ T7328] pgpgout 275935 [ 205.394595][ T7328] pgfault 162495 [ 205.394603][ T7328] pgmajfault 166 [ 205.394609][ T7328] inactive_anon 41705472 [ 205.394616][ T7328] active_anon 268984320 [ 205.394622][ T7328] inactive_file 0 [ 205.394756][ T7328] active_file 0 [ 205.394762][ T7328] unevictable 0 [ 205.394768][ T7328] hierarchical_memory_limit 314572800 [ 205.394776][ T7328] hierarchical_memsw_limit 9223372036854771712 [ 205.394783][ T7328] total_cache 307724288 [ 205.394791][ T7328] total_rss 176128 [ 205.394799][ T7328] total_shmem 307724288 [ 205.394807][ T7328] total_mapped_file 0 [ 205.394815][ T7328] total_dirty 0 [ 205.394822][ T7328] total_writeback 0 [ 205.394829][ T7328] total_workingset_refault_anon 907 [ 205.394903][ T7328] total_workingset_refault_file 10495 [ 205.394910][ T7328] total_swap 124981248 [ 205.394916][ T7328] total_swapcached 245317632 [ 205.394922][ T7328] total_pgpgin 351787 [ 205.394953][ T7328] total_pgpgout 275935 [ 205.394959][ T7328] total_pgfault 162495 [ 205.394966][ T7328] total_pgmajfault 166 [ 205.394973][ T7328] total_inactive_anon 41705472 [ 205.394979][ T7328] total_active_anon 268984320 [ 205.394988][ T7328] total_inactive_file 0 [ 205.394996][ T7328] total_active_file 0 [ 205.395004][ T7328] total_unevictable 0 [ 205.395012][ T7328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7335,uid=0 [ 205.395160][ T7328] Memory cgroup out of memory: Killed process 7335 (syz.1.1123) total-vm:90460kB, anon-rss:1276kB, file-rss:54084kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 205.507525][ T7322] syz.1.1123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 205.507570][ T7322] CPU: 1 UID: 0 PID: 7322 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.507595][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.507652][ T7322] Call Trace: [ 205.507657][ T7322] [ 205.507664][ T7322] __dump_stack+0x1d/0x30 [ 205.507683][ T7322] dump_stack_lvl+0x95/0xd0 [ 205.507702][ T7322] dump_stack+0x15/0x1b [ 205.507721][ T7322] dump_header+0x80/0x240 [ 205.507817][ T7322] oom_kill_process+0x295/0x350 [ 205.507841][ T7322] out_of_memory+0x97d/0xb80 [ 205.507864][ T7322] try_charge_memcg+0x62f/0xa10 [ 205.507968][ T7322] charge_memcg+0x6d/0x120 [ 205.508002][ T7322] __mem_cgroup_charge+0x28/0xb0 [ 205.508027][ T7322] shmem_get_folio_gfp+0x47b/0xd60 [ 205.508054][ T7322] shmem_write_begin+0xfc/0x1f0 [ 205.508094][ T7322] generic_perform_write+0x183/0x490 [ 205.508110][ T7322] ? current_time+0x188/0x240 [ 205.508132][ T7322] shmem_file_write_iter+0xc5/0xf0 [ 205.508159][ T7322] __kernel_write_iter+0x319/0x590 [ 205.508188][ T7322] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 205.508268][ T7322] dump_user_range+0xa73/0xd00 [ 205.508298][ T7322] elf_core_dump+0x21a2/0x2330 [ 205.508407][ T7322] ? 0xffffffffff600000 [ 205.508434][ T7322] coredump_write+0xabd/0xdb0 [ 205.508538][ T7322] vfs_coredump+0x26dd/0x31e0 [ 205.508699][ T7322] ? __memcg_slab_free_hook+0x75/0x2c0 [ 205.508724][ T7322] ? __sigqueue_free+0xf4/0x130 [ 205.508798][ T7322] ? proc_coredump_connector+0x160/0x2b0 [ 205.508819][ T7322] ? __sigqueue_free+0xf4/0x130 [ 205.508909][ T7322] ? kmem_cache_free+0xca/0x380 [ 205.508929][ T7322] get_signal+0xd5c/0xf20 [ 205.508962][ T7322] arch_do_signal_or_restart+0x96/0x480 [ 205.508996][ T7322] irqentry_exit+0x145/0x5d0 [ 205.509017][ T7322] asm_exc_page_fault+0x26/0x30 [ 205.509035][ T7322] RIP: 0033:0x7f4e0382ce61 [ 205.509051][ T7322] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 205.509133][ T7322] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 205.509151][ T7322] RAX: 0000000000000000 RBX: 00007f4e03aa6090 RCX: 00007f4e0382ce59 [ 205.509164][ T7322] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 205.509174][ T7322] RBP: 00007f4e038c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 205.509185][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.509259][ T7322] R13: 00007f4e03aa6128 R14: 00007f4e03aa6090 R15: 00007ffc6fdfaa88 [ 205.509279][ T7322] [ 205.599833][ T7322] memory: usage 307200kB, limit 307200kB, failcnt 59351 [ 206.163066][ T8462] vlan2: entered allmulticast mode [ 206.169181][ T7322] memory+swap: usage 382668kB, limit 9007199254740988kB, failcnt 0 [ 206.281334][ T28] audit: type=1400 audit(1780226332.727:2371): avc: denied { bind } for pid=8464 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.319852][ T7322] kmem: usage 4104kB, limit 9007199254740988kB, failcnt 0 [ 206.319867][ T7322] Memory cgroup stats for /syz1: [ 206.348090][ T8462] bond_slave_1: entered allmulticast mode [ 206.413588][ T7322] cache 271417344 [ 206.420919][ T28] audit: type=1400 audit(1780226332.784:2372): avc: denied { setopt } for pid=8464 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.589960][ T7322] rss 315392 [ 206.592408][ T28] audit: type=1400 audit(1780226332.793:2373): avc: denied { ioctl } for pid=8464 comm="syz.4.1453" path="socket:[20677]" dev="sockfs" ino=20677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.640632][ T7322] shmem 271417344 [ 206.645781][ T28] audit: type=1400 audit(1780226332.905:2374): avc: denied { ioctl } for pid=8464 comm="syz.4.1453" path="socket:[20676]" dev="sockfs" ino=20676 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.701722][ T7322] mapped_file 0 [ 206.707716][ T28] audit: type=1400 audit(1780226333.017:2375): avc: denied { read } for pid=8464 comm="syz.4.1453" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 206.800760][ T7322] dirty 0 [ 206.807793][ T28] audit: type=1400 audit(1780226333.017:2376): avc: denied { open } for pid=8464 comm="syz.4.1453" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 206.838577][ T7322] writeback 0 [ 206.927328][ T8463] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1452'. [ 207.006010][ T28] audit: type=1400 audit(1780226333.410:2377): avc: denied { read } for pid=3026 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 207.020937][ T7322] workingset_refault_anon 907 [ 207.033592][ T28] audit: type=1400 audit(1780226333.410:2378): avc: denied { write } for pid=8488 comm="syz.2.1461" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.214148][ T7322] workingset_refault_file 10495 [ 207.288733][ T7322] swap 100708352 [ 207.292312][ T7322] swapcached 244703232 [ 207.296369][ T7322] pgpgin 352995 [ 207.299975][ T7322] pgpgout 286229 [ 207.424546][ T7322] pgfault 162840 [ 207.472015][ T7322] pgmajfault 166 [ 207.496135][ T7322] inactive_anon 41172992 [ 207.542795][ T7322] active_anon 232165376 [ 207.586431][ T8525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8525 comm=syz.4.1467 [ 207.612316][ T7322] inactive_file 0 [ 207.648324][ T7322] active_file 0 [ 207.670360][ T7322] unevictable 0 [ 207.694787][ T7322] hierarchical_memory_limit 314572800 [ 207.720771][ T7322] hierarchical_memsw_limit 9223372036854771712 [ 207.739107][ T7322] total_cache 271417344 [ 207.752692][ T7322] total_rss 315392 [ 207.766146][ T7322] total_shmem 271417344 [ 207.776827][ T7322] total_mapped_file 0 [ 207.788991][ T7322] total_dirty 0 [ 207.802102][ T7322] total_writeback 0 [ 207.830428][ T7322] total_workingset_refault_anon 907 [ 207.861711][ T7322] total_workingset_refault_file 10495 [ 207.885512][ T7322] total_swap 100708352 [ 207.922758][ T7322] total_swapcached 244703232 [ 207.935494][ T7322] total_pgpgin 352995 [ 207.948837][ T7322] total_pgpgout 286229 [ 207.958727][ T7322] total_pgfault 162840 [ 207.970804][ T7322] total_pgmajfault 166 [ 207.986909][ T7322] total_inactive_anon 41172992 [ 208.006847][ T7322] total_active_anon 232165376 [ 208.054561][ T7322] total_inactive_file 0 [ 208.062524][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 208.078231][ T7322] total_active_file 0 [ 208.110984][ T7322] total_unevictable 0 [ 208.118252][ T8558] tmpfs: Unknown parameter '0x0000000000000008' [ 208.145573][ T7322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1123,pid=7333,uid=0 [ 208.187641][ T7322] Memory cgroup out of memory: OOM victim 7333 (syz.1.1123) is already exiting. Skip killing the task [ 208.326562][ T8573] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1481'. [ 208.425505][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1486'. [ 208.497159][ T8587] FAULT_INJECTION: forcing a failure. [ 208.497159][ T8587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.521848][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 208.555516][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.1.1487 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.555541][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.555599][ T8587] Call Trace: [ 208.555606][ T8587] [ 208.555614][ T8587] __dump_stack+0x1d/0x30 [ 208.555638][ T8587] dump_stack_lvl+0x95/0xd0 [ 208.555658][ T8587] dump_stack+0x15/0x1b [ 208.555720][ T8587] should_fail_ex+0x263/0x280 [ 208.555741][ T8587] should_fail+0xb/0x20 [ 208.555757][ T8587] should_fail_usercopy+0x1a/0x20 [ 208.555776][ T8587] _copy_from_user+0x1c/0xb0 [ 208.555794][ T8587] ___sys_sendmsg+0xc1/0x1e0 [ 208.555872][ T8587] __x64_sys_sendmsg+0xd4/0x160 [ 208.555899][ T8587] x64_sys_call+0x194c/0x3020 [ 208.555977][ T8587] do_syscall_64+0x12c/0x3b0 [ 208.556003][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.556027][ T8587] RIP: 0033:0x7f4e0382ce59 [ 208.556065][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.556081][ T8587] RSP: 002b:00007f4e0227f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.556099][ T8587] RAX: ffffffffffffffda RBX: 00007f4e03aa5fa0 RCX: 00007f4e0382ce59 [ 208.556200][ T8587] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 208.556213][ T8587] RBP: 00007f4e0227f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.556225][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.556235][ T8587] R13: 00007f4e03aa6038 R14: 00007f4e03aa5fa0 R15: 00007ffc6fdfaa88 [ 208.556250][ T8587] [ 209.055482][ T8607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8607 comm=syz.3.1495 [ 209.293669][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.338777][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.142186][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 210.142201][ T28] audit: type=1400 audit(1780226336.347:2464): avc: denied { cmd } for pid=8657 comm="syz.4.1514" path="socket:[21132]" dev="sockfs" ino=21132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 210.296652][ T8663] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1516'. [ 210.496095][ T8680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.503393][ T8680] IPv6: NLM_F_CREATE should be set when creating new route [ 210.510617][ T8680] IPv6: NLM_F_CREATE should be set when creating new route [ 210.517858][ T8680] IPv6: NLM_F_CREATE should be set when creating new route [ 210.539514][ T8676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1519'. [ 210.542866][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'. [ 210.548962][ T8676] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1519'. [ 210.557558][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'. [ 210.575879][ T8676] netlink: 'syz.1.1519': attribute type 5 has an invalid length. [ 210.588261][ T8685] FAULT_INJECTION: forcing a failure. [ 210.588261][ T8685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.601461][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.601560][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.601596][ T8685] Call Trace: [ 210.601602][ T8685] [ 210.601609][ T8685] __dump_stack+0x1d/0x30 [ 210.601631][ T8685] dump_stack_lvl+0x95/0xd0 [ 210.601648][ T8685] dump_stack+0x15/0x1b [ 210.601663][ T8685] should_fail_ex+0x263/0x280 [ 210.601687][ T8685] should_fail+0xb/0x20 [ 210.601702][ T8685] should_fail_usercopy+0x1a/0x20 [ 210.601759][ T8685] _copy_from_iter+0xcf/0xea0 [ 210.601847][ T8685] ? __alloc_skb+0x4f6/0x690 [ 210.601864][ T8685] ? __alloc_skb+0x200/0x690 [ 210.601886][ T8685] netlink_sendmsg+0x4ae/0x6f0 [ 210.601964][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.601989][ T8685] ____sys_sendmsg+0x563/0x5b0 [ 210.602014][ T8685] ___sys_sendmsg+0x195/0x1e0 [ 210.602093][ T8685] __x64_sys_sendmsg+0xd4/0x160 [ 210.602150][ T8685] x64_sys_call+0x194c/0x3020 [ 210.602181][ T8685] do_syscall_64+0x12c/0x3b0 [ 210.602280][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.602356][ T8685] RIP: 0033:0x7f399b16ce59 [ 210.602373][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.602387][ T8685] RSP: 002b:00007f3999bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.602467][ T8685] RAX: ffffffffffffffda RBX: 00007f399b3e5fa0 RCX: 00007f399b16ce59 [ 210.602475][ T8685] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 210.602482][ T8685] RBP: 00007f3999bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.602489][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.602496][ T8685] R13: 00007f399b3e6038 R14: 00007f399b3e5fa0 R15: 00007ffc6dffce28 [ 210.602557][ T8685] [ 210.803196][ T8690] tmpfs: Bad value for 'mode' [ 210.875251][ T28] audit: type=1400 audit(1780226337.021:2465): avc: denied { ioctl } for pid=8691 comm="syz.3.1526" path="socket:[21531]" dev="sockfs" ino=21531 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.913537][ T28] audit: type=1400 audit(1780226337.058:2466): avc: denied { read } for pid=8697 comm="syz.3.1529" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.950015][ T8702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8702 comm=syz.3.1530 [ 211.095594][ T8718] FAULT_INJECTION: forcing a failure. [ 211.095594][ T8718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.109706][ T8718] CPU: 0 UID: 0 PID: 8718 Comm: syz.3.1535 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.109732][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.109742][ T8718] Call Trace: [ 211.109747][ T8718] [ 211.109782][ T8718] __dump_stack+0x1d/0x30 [ 211.109805][ T8718] dump_stack_lvl+0x95/0xd0 [ 211.109825][ T8718] dump_stack+0x15/0x1b [ 211.109844][ T8718] should_fail_ex+0x263/0x280 [ 211.109916][ T8718] should_fail+0xb/0x20 [ 211.109933][ T8718] should_fail_usercopy+0x1a/0x20 [ 211.109955][ T8718] _copy_from_user+0x1c/0xb0 [ 211.109979][ T8718] __sys_bpf+0x183/0x7e0 [ 211.110051][ T8718] __x64_sys_bpf+0x41/0x50 [ 211.110071][ T8718] x64_sys_call+0x10cb/0x3020 [ 211.110192][ T8718] do_syscall_64+0x12c/0x3b0 [ 211.110226][ T8718] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 211.110314][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.110333][ T8718] RIP: 0033:0x7f8e3930ce59 [ 211.110349][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.110408][ T8718] RSP: 002b:00007f8e37d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.110429][ T8718] RAX: ffffffffffffffda RBX: 00007f8e39585fa0 RCX: 00007f8e3930ce59 [ 211.110443][ T8718] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a [ 211.110456][ T8718] RBP: 00007f8e37d67090 R08: 0000000000000000 R09: 0000000000000000 [ 211.110469][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.110480][ T8718] R13: 00007f8e39586038 R14: 00007f8e39585fa0 R15: 00007fff1161d2c8 [ 211.110509][ T8718] [ 211.309253][ T8725] tmpfs: Bad value for 'mode' [ 211.372410][ T28] audit: type=1326 audit(1780226337.498:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.409096][ T28] audit: type=1326 audit(1780226337.498:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.435717][ T28] audit: type=1326 audit(1780226337.498:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.461788][ T28] audit: type=1326 audit(1780226337.498:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.503110][ T8733] netlink: 'syz.3.1541': attribute type 6 has an invalid length. [ 211.546625][ T28] audit: type=1326 audit(1780226337.498:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.593892][ T28] audit: type=1326 audit(1780226337.498:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.667574][ T28] audit: type=1326 audit(1780226337.498:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17d3ace59 code=0x7ffc0000 [ 211.701294][ T8739] siw: device registration error -23 [ 212.556788][ T8786] FAULT_INJECTION: forcing a failure. [ 212.556788][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 212.569657][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.2.1561 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.569738][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.569748][ T8786] Call Trace: [ 212.569754][ T8786] [ 212.569762][ T8786] __dump_stack+0x1d/0x30 [ 212.569786][ T8786] dump_stack_lvl+0x95/0xd0 [ 212.569806][ T8786] dump_stack+0x15/0x1b [ 212.569855][ T8786] should_fail_ex+0x263/0x280 [ 212.569875][ T8786] should_failslab+0x8c/0xb0 [ 212.569905][ T8786] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 212.569933][ T8786] ? __alloc_skb+0x2d6/0x690 [ 212.569974][ T8786] __alloc_skb+0x2d6/0x690 [ 212.569995][ T8786] ? __alloc_skb+0x200/0x690 [ 212.570015][ T8786] netlink_alloc_large_skb+0xbf/0xf0 [ 212.570039][ T8786] netlink_sendmsg+0x40c/0x6f0 [ 212.570108][ T8786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.570132][ T8786] ____sys_sendmsg+0x563/0x5b0 [ 212.570154][ T8786] ___sys_sendmsg+0x195/0x1e0 [ 212.570216][ T8786] __x64_sys_sendmsg+0xd4/0x160 [ 212.570239][ T8786] x64_sys_call+0x194c/0x3020 [ 212.570327][ T8786] do_syscall_64+0x12c/0x3b0 [ 212.570358][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.570380][ T8786] RIP: 0033:0x7f399b16ce59 [ 212.570396][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.570479][ T8786] RSP: 002b:00007f3999bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.570496][ T8786] RAX: ffffffffffffffda RBX: 00007f399b3e5fa0 RCX: 00007f399b16ce59 [ 212.570509][ T8786] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 212.570521][ T8786] RBP: 00007f3999bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.570535][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.570605][ T8786] R13: 00007f399b3e6038 R14: 00007f399b3e5fa0 R15: 00007ffc6dffce28 [ 212.570628][ T8786] [ 212.809693][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.820866][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.829882][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.838736][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.882995][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 212.893798][ T3384] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.544413][ T8814] __nla_validate_parse: 3 callbacks suppressed [ 213.544424][ T8814] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1573'. [ 214.194213][ T8838] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1582'. [ 214.203449][ T8838] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1582'. [ 214.212391][ T8838] netlink: 'syz.2.1582': attribute type 5 has an invalid length. [ 214.220479][ T8838] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1582'. [ 214.277103][ T8851] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 214.285219][ T8851] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 214.293092][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 214.930876][ T8887] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1598'. [ 215.009761][ T8902] netlink: 'syz.4.1605': attribute type 6 has an invalid length. [ 215.017689][ T8902] FAULT_INJECTION: forcing a failure. [ 215.017689][ T8902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.031107][ T8902] CPU: 1 UID: 0 PID: 8902 Comm: syz.4.1605 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.031131][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.031142][ T8902] Call Trace: [ 215.031190][ T8902] [ 215.031198][ T8902] __dump_stack+0x1d/0x30 [ 215.031222][ T8902] dump_stack_lvl+0x95/0xd0 [ 215.031242][ T8902] dump_stack+0x15/0x1b [ 215.031260][ T8902] should_fail_ex+0x263/0x280 [ 215.031305][ T8902] should_fail+0xb/0x20 [ 215.031323][ T8902] should_fail_usercopy+0x1a/0x20 [ 215.031345][ T8902] _copy_to_user+0x20/0xa0 [ 215.031392][ T8902] simple_read_from_buffer+0xb5/0x130 [ 215.031495][ T8902] proc_fail_nth_read+0x10e/0x150 [ 215.031523][ T8902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.031584][ T8902] vfs_read+0x1ab/0x7f0 [ 215.031609][ T8902] ? __rcu_read_unlock+0x4e/0x70 [ 215.031630][ T8902] ? __fget_files+0x184/0x1c0 [ 215.031651][ T8902] ? mutex_lock+0x57/0x90 [ 215.031756][ T8902] ksys_read+0xdc/0x1a0 [ 215.031783][ T8902] __x64_sys_read+0x40/0x50 [ 215.031808][ T8902] x64_sys_call+0x2886/0x3020 [ 215.031923][ T8902] do_syscall_64+0x12c/0x3b0 [ 215.031950][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.031997][ T8902] RIP: 0033:0x7fa17d36d68e [ 215.032013][ T8902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.032101][ T8902] RSP: 002b:00007fa17be06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.032122][ T8902] RAX: ffffffffffffffda RBX: 00007fa17be076c0 RCX: 00007fa17d36d68e [ 215.032139][ T8902] RDX: 000000000000000f RSI: 00007fa17be070a0 RDI: 0000000000000004 [ 215.032152][ T8902] RBP: 00007fa17be07090 R08: 0000000000000000 R09: 0000000000000000 [ 215.032173][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.032185][ T8902] R13: 00007fa17d626038 R14: 00007fa17d625fa0 R15: 00007fffa7094558 [ 215.032206][ T8902] [ 215.365976][ T8904] veth1_macvtap: left promiscuous mode [ 215.372254][ T8904] veth1_macvtap: entered promiscuous mode [ 215.382183][ T8904] veth1_macvtap: entered allmulticast mode [ 215.894996][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 215.895081][ T28] audit: type=1400 audit(1780226341.726:2545): avc: denied { write } for pid=8913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.968412][ T28] audit: type=1400 audit(1780226341.801:2546): avc: denied { write } for pid=8940 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.014693][ T8943] netlink: 'syz.3.1614': attribute type 1 has an invalid length. [ 216.030940][ T8943] netlink: 'syz.3.1614': attribute type 2 has an invalid length. [ 216.126827][ T28] audit: type=1400 audit(1780226341.941:2547): avc: denied { write } for pid=8948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.188901][ T28] audit: type=1400 audit(1780226341.997:2548): avc: denied { write } for pid=8963 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.213008][ T8951] FAULT_INJECTION: forcing a failure. [ 216.213008][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.226251][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.3.1616 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.226299][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.226311][ T8951] Call Trace: [ 216.226318][ T8951] [ 216.226326][ T8951] __dump_stack+0x1d/0x30 [ 216.226350][ T8951] dump_stack_lvl+0x95/0xd0 [ 216.226383][ T8951] dump_stack+0x15/0x1b [ 216.226402][ T8951] should_fail_ex+0x263/0x280 [ 216.226486][ T8951] should_fail+0xb/0x20 [ 216.226504][ T8951] should_fail_usercopy+0x1a/0x20 [ 216.226526][ T8951] _copy_to_user+0x20/0xa0 [ 216.226550][ T8951] bpf_test_finish+0x157/0x4e0 [ 216.226596][ T8951] bpf_prog_test_run_xdp+0x663/0xa10 [ 216.226763][ T8951] ? __rcu_read_unlock+0x4e/0x70 [ 216.226789][ T8951] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 216.226818][ T8951] bpf_prog_test_run+0x204/0x340 [ 216.226846][ T8951] __sys_bpf+0x52e/0x7e0 [ 216.226911][ T8951] __x64_sys_bpf+0x41/0x50 [ 216.226933][ T8951] x64_sys_call+0x10cb/0x3020 [ 216.226957][ T8951] do_syscall_64+0x12c/0x3b0 [ 216.227022][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.227044][ T8951] RIP: 0033:0x7f8e3930ce59 [ 216.227061][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.227078][ T8951] RSP: 002b:00007f8e37d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.227114][ T8951] RAX: ffffffffffffffda RBX: 00007f8e39585fa0 RCX: 00007f8e3930ce59 [ 216.227128][ T8951] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a [ 216.227142][ T8951] RBP: 00007f8e37d67090 R08: 0000000000000000 R09: 0000000000000000 [ 216.227156][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.227213][ T8951] R13: 00007f8e39586038 R14: 00007f8e39585fa0 R15: 00007fff1161d2c8 [ 216.227233][ T8951] [ 216.452545][ T8922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1610'. [ 216.457721][ T8973] FAULT_INJECTION: forcing a failure. [ 216.457721][ T8973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.464979][ T8922] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1610'. [ 216.474589][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.3.1622 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.474612][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.474622][ T8973] Call Trace: [ 216.474628][ T8973] [ 216.474634][ T8973] __dump_stack+0x1d/0x30 [ 216.474655][ T8973] dump_stack_lvl+0x95/0xd0 [ 216.474739][ T8973] dump_stack+0x15/0x1b [ 216.474757][ T8973] should_fail_ex+0x263/0x280 [ 216.474784][ T8973] should_fail+0xb/0x20 [ 216.474800][ T8973] should_fail_usercopy+0x1a/0x20 [ 216.474890][ T8973] _copy_from_iter+0xcf/0xea0 [ 216.475051][ T8973] ? __alloc_skb+0x4f6/0x690 [ 216.475071][ T8973] ? __alloc_skb+0x200/0x690 [ 216.475092][ T8973] netlink_sendmsg+0x4ae/0x6f0 [ 216.475122][ T8973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.475165][ T8973] ____sys_sendmsg+0x563/0x5b0 [ 216.475190][ T8973] ___sys_sendmsg+0x195/0x1e0 [ 216.475224][ T8973] __x64_sys_sendmsg+0xd4/0x160 [ 216.475321][ T8973] x64_sys_call+0x194c/0x3020 [ 216.475343][ T8973] do_syscall_64+0x12c/0x3b0 [ 216.475371][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.475392][ T8973] RIP: 0033:0x7f8e3930ce59 [ 216.475408][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.475499][ T8973] RSP: 002b:00007f8e37d67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.475519][ T8973] RAX: ffffffffffffffda RBX: 00007f8e39585fa0 RCX: 00007f8e3930ce59 [ 216.475582][ T8973] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 216.475595][ T8973] RBP: 00007f8e37d67090 R08: 0000000000000000 R09: 0000000000000000 [ 216.475608][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.475620][ T8973] R13: 00007f8e39586038 R14: 00007f8e39585fa0 R15: 00007fff1161d2c8 [ 216.475662][ T8973] [ 216.669419][ T8922] netlink: 'syz.4.1610': attribute type 5 has an invalid length. [ 216.677186][ T8922] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1610'. [ 216.761373][ T8992] netlink: 79 bytes leftover after parsing attributes in process `syz.0.1621'. [ 216.798188][ T28] audit: type=1400 audit(1780226342.474:2549): avc: denied { read } for pid=8990 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.855620][ T28] audit: type=1400 audit(1780226342.633:2550): avc: denied { read } for pid=8994 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.340153][ T9006] gretap0: entered promiscuous mode [ 217.347538][ T9006] 0ªî{X¹¦: renamed from gretap0 [ 217.353015][ T9006] 0ªî{X¹¦: left promiscuous mode [ 217.358020][ T9006] 0ªî{X¹¦: entered allmulticast mode [ 217.363529][ T9006] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 217.587896][ T28] audit: type=1400 audit(1780226343.260:2551): avc: denied { write } for pid=9019 comm="syz.2.1638" lport=38233 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 217.614454][ T28] audit: type=1400 audit(1780226343.260:2552): avc: denied { setopt } for pid=9019 comm="syz.2.1638" lport=38233 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 217.639114][ T28] audit: type=1400 audit(1780226343.260:2553): avc: denied { bind } for pid=9015 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.679432][ T28] audit: type=1400 audit(1780226343.400:2554): avc: denied { mount } for pid=9021 comm="syz.3.1639" name="/" dev="configfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 218.043939][ T9056] netlink: 'syz.1.1651': attribute type 5 has an invalid length. [ 218.141485][ T9071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.075646][ T9120] __nla_validate_parse: 10 callbacks suppressed [ 219.075666][ T9120] netlink: 79 bytes leftover after parsing attributes in process `syz.4.1675'. [ 219.194722][ T9134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=9134 comm=syz.1.1680 [ 219.326182][ T9141] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 219.337951][ T9141] bond1 (unregistering): Released all slaves [ 219.424911][ T9143] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1683'. [ 219.435253][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'. [ 219.444560][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'. [ 219.459589][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 219.544808][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 219.620979][ T9159] pimreg: tun_chr_ioctl cmd 2148553947 [ 219.627230][ T9159] netlink: 'syz.1.1688': attribute type 8 has an invalid length. [ 219.867588][ T9166] FAULT_INJECTION: forcing a failure. [ 219.867588][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 219.894421][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.931963][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.951939][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.1.1691 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.952028][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.952040][ T9166] Call Trace: [ 219.952048][ T9166] [ 219.952056][ T9166] __dump_stack+0x1d/0x30 [ 219.952146][ T9166] dump_stack_lvl+0x95/0xd0 [ 219.952257][ T9166] dump_stack+0x15/0x1b [ 219.952272][ T9166] should_fail_ex+0x263/0x280 [ 219.952292][ T9166] should_failslab+0x8c/0xb0 [ 219.952357][ T9166] __kmalloc_noprof+0xb8/0x4d0 [ 219.952385][ T9166] ? __list_lru_init+0x72/0x2e0 [ 219.952404][ T9166] __list_lru_init+0x72/0x2e0 [ 219.952424][ T9166] alloc_super+0x4d3/0x580 [ 219.952516][ T9166] sget_fc+0x24e/0x6d0 [ 219.952534][ T9166] ? __pfx_set_anon_super_fc+0x10/0x10 [ 219.952561][ T9166] ? __pfx_shmem_fill_super+0x10/0x10 [ 219.952665][ T9166] get_tree_nodev+0x2a/0x100 [ 219.952691][ T9166] shmem_get_tree+0x1c/0x30 [ 219.952726][ T9166] vfs_get_tree+0x57/0x1d0 [ 219.952748][ T9166] do_new_mount+0x288/0x8d0 [ 219.952775][ T9166] ? security_capable+0x7b/0x90 [ 219.952860][ T9166] path_mount+0x4d0/0xbc0 [ 219.952884][ T9166] __se_sys_mount+0x28c/0x2e0 [ 219.952992][ T9166] __x64_sys_mount+0x67/0x80 [ 219.953027][ T9166] x64_sys_call+0x2d61/0x3020 [ 219.953051][ T9166] do_syscall_64+0x12c/0x3b0 [ 219.953140][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.953165][ T9166] RIP: 0033:0x7f4e0382ce59 [ 219.953182][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.953200][ T9166] RSP: 002b:00007f4e0227f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.953220][ T9166] RAX: ffffffffffffffda RBX: 00007f4e03aa5fa0 RCX: 00007f4e0382ce59 [ 219.953270][ T9166] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 219.953363][ T9166] RBP: 00007f4e0227f090 R08: 0000200000000100 R09: 0000000000000000 [ 219.953375][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.953385][ T9166] R13: 00007f4e03aa6038 R14: 00007f4e03aa5fa0 R15: 00007ffc6fdfaa88 [ 219.953404][ T9166] [ 220.035184][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.050467][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.211260][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 220.220467][ T9168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9168 comm=syz.3.1692 [ 220.561851][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 220.616352][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 221.666566][ T9249] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1720'. [ 221.855223][ T9247] FAULT_INJECTION: forcing a failure. [ 221.855223][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.975027][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.3.1719 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.975065][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.975076][ T9247] Call Trace: [ 221.975081][ T9247] [ 221.975088][ T9247] __dump_stack+0x1d/0x30 [ 221.975110][ T9247] dump_stack_lvl+0x95/0xd0 [ 221.975189][ T9247] dump_stack+0x15/0x1b [ 221.975289][ T9247] should_fail_ex+0x263/0x280 [ 221.975309][ T9247] should_fail+0xb/0x20 [ 221.975324][ T9247] should_fail_usercopy+0x1a/0x20 [ 221.975366][ T9247] _copy_to_user+0x20/0xa0 [ 221.975388][ T9247] simple_read_from_buffer+0xb5/0x130 [ 221.975416][ T9247] proc_fail_nth_read+0x10e/0x150 [ 221.975513][ T9247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.975534][ T9247] vfs_read+0x1ab/0x7f0 [ 221.975558][ T9247] ? __rcu_read_unlock+0x4e/0x70 [ 221.975593][ T9247] ? __fget_files+0x184/0x1c0 [ 221.975610][ T9247] ? mutex_lock+0x57/0x90 [ 221.975634][ T9247] ksys_read+0xdc/0x1a0 [ 221.975662][ T9247] __x64_sys_read+0x40/0x50 [ 221.975704][ T9247] x64_sys_call+0x2886/0x3020 [ 221.975725][ T9247] do_syscall_64+0x12c/0x3b0 [ 221.975750][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.975847][ T9247] RIP: 0033:0x7f8e392cd68e [ 221.975863][ T9247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.975877][ T9247] RSP: 002b:00007f8e37d66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.975895][ T9247] RAX: ffffffffffffffda RBX: 00007f8e37d676c0 RCX: 00007f8e392cd68e [ 221.975910][ T9247] RDX: 000000000000000f RSI: 00007f8e37d670a0 RDI: 0000000000000006 [ 221.975974][ T9247] RBP: 00007f8e37d67090 R08: 0000000000000000 R09: 0000000000000000 [ 221.975985][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.975999][ T9247] R13: 00007f8e39586038 R14: 00007f8e39585fa0 R15: 00007fff1161d2c8 [ 221.976020][ T9247] [ 222.321118][ T9258] macsec1: entered promiscuous mode [ 222.327738][ T9258] dummy0: entered promiscuous mode [ 222.333100][ T9258] macsec1: entered allmulticast mode [ 222.343763][ T9258] dummy0: entered allmulticast mode [ 222.749138][ T9273] FAULT_INJECTION: forcing a failure. [ 222.749138][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 222.775399][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.0.1713 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.775425][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.775503][ T9273] Call Trace: [ 222.775510][ T9273] [ 222.775519][ T9273] __dump_stack+0x1d/0x30 [ 222.775543][ T9273] dump_stack_lvl+0x95/0xd0 [ 222.775563][ T9273] dump_stack+0x15/0x1b [ 222.775583][ T9273] should_fail_ex+0x263/0x280 [ 222.775620][ T9273] should_failslab+0x8c/0xb0 [ 222.775650][ T9273] __kmalloc_noprof+0xb8/0x4d0 [ 222.775688][ T9273] ? __list_lru_init+0x72/0x2e0 [ 222.775744][ T9273] __list_lru_init+0x72/0x2e0 [ 222.775764][ T9273] alloc_super+0x519/0x580 [ 222.775898][ T9273] sget_fc+0x24e/0x6d0 [ 222.775976][ T9273] ? __pfx_set_anon_super_fc+0x10/0x10 [ 222.776063][ T9273] ? __pfx_shmem_fill_super+0x10/0x10 [ 222.776085][ T9273] get_tree_nodev+0x2a/0x100 [ 222.776119][ T9273] shmem_get_tree+0x1c/0x30 [ 222.776141][ T9273] vfs_get_tree+0x57/0x1d0 [ 222.776166][ T9273] do_new_mount+0x288/0x8d0 [ 222.776273][ T9273] ? security_capable+0x7b/0x90 [ 222.776298][ T9273] path_mount+0x4d0/0xbc0 [ 222.776323][ T9273] __se_sys_mount+0x28c/0x2e0 [ 222.776457][ T9273] ? fput+0x8f/0xc0 [ 222.776475][ T9273] __x64_sys_mount+0x67/0x80 [ 222.776504][ T9273] x64_sys_call+0x2d61/0x3020 [ 222.776588][ T9273] do_syscall_64+0x12c/0x3b0 [ 222.776613][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.776634][ T9273] RIP: 0033:0x7fd7173ece59 [ 222.776656][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.776672][ T9273] RSP: 002b:00007fd715e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.776692][ T9273] RAX: ffffffffffffffda RBX: 00007fd717665fa0 RCX: 00007fd7173ece59 [ 222.776706][ T9273] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 222.776718][ T9273] RBP: 00007fd715e47090 R08: 0000200000000100 R09: 0000000000000000 [ 222.776731][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.776820][ T9273] R13: 00007fd717666038 R14: 00007fd717665fa0 R15: 00007ffede1bd2d8 [ 222.776840][ T9273] [ 222.992193][ T9275] FAULT_INJECTION: forcing a failure. [ 222.992193][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.005325][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.4.1728 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.005350][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.005361][ T9275] Call Trace: [ 223.005367][ T9275] [ 223.005373][ T9275] __dump_stack+0x1d/0x30 [ 223.005460][ T9275] dump_stack_lvl+0x95/0xd0 [ 223.005478][ T9275] dump_stack+0x15/0x1b [ 223.005536][ T9275] should_fail_ex+0x263/0x280 [ 223.005557][ T9275] should_fail+0xb/0x20 [ 223.005619][ T9275] should_fail_usercopy+0x1a/0x20 [ 223.005642][ T9275] strncpy_from_user+0x27/0x250 [ 223.005669][ T9275] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 223.005704][ T9275] do_getname+0x59/0x1c0 [ 223.005724][ T9275] user_path_at+0x28/0x100 [ 223.005747][ T9275] __se_sys_mount+0x25b/0x2e0 [ 223.005819][ T9275] ? fput+0x8f/0xc0 [ 223.005841][ T9275] __x64_sys_mount+0x67/0x80 [ 223.005873][ T9275] x64_sys_call+0x2d61/0x3020 [ 223.005896][ T9275] do_syscall_64+0x12c/0x3b0 [ 223.005958][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.005980][ T9275] RIP: 0033:0x7fa17d3ace59 [ 223.005995][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.006018][ T9275] RSP: 002b:00007fa17be07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.006039][ T9275] RAX: ffffffffffffffda RBX: 00007fa17d625fa0 RCX: 00007fa17d3ace59 [ 223.006054][ T9275] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 223.006080][ T9275] RBP: 00007fa17be07090 R08: 0000200000000100 R09: 0000000000000000 [ 223.006093][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.006106][ T9275] R13: 00007fa17d626038 R14: 00007fa17d625fa0 R15: 00007fffa7094558 [ 223.006126][ T9275] [ 223.517332][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 223.517347][ T28] audit: type=1400 audit(1780226348.844:2572): avc: denied { write } for pid=9305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.554384][ T28] audit: type=1400 audit(1780226348.872:2573): avc: denied { write } for pid=9316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.584297][ T28] audit: type=1400 audit(1780226349.275:2574): avc: denied { write } for pid=9318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.607555][ T28] audit: type=1400 audit(1780226349.836:2575): avc: denied { write } for pid=9340 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.839448][ T28] audit: type=1400 audit(1780226350.060:2576): avc: denied { mounton } for pid=9343 comm="syz.0.1740" path="/" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 225.342192][ T9367] FAULT_INJECTION: forcing a failure. [ 225.342192][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 225.354864][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.1.1747 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.354890][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.354963][ T9367] Call Trace: [ 225.354998][ T9367] [ 225.355003][ T9367] __dump_stack+0x1d/0x30 [ 225.355017][ T9367] dump_stack_lvl+0x95/0xd0 [ 225.355027][ T9367] dump_stack+0x15/0x1b [ 225.355066][ T9367] should_fail_ex+0x263/0x280 [ 225.355088][ T9367] ? shmem_fill_super+0x59/0x600 [ 225.355159][ T9367] should_failslab+0x8c/0xb0 [ 225.355176][ T9367] __kmalloc_cache_noprof+0x5f/0x400 [ 225.355194][ T9367] ? __pfx_shmem_fill_super+0x10/0x10 [ 225.355213][ T9367] shmem_fill_super+0x59/0x600 [ 225.355225][ T9367] ? sget_fc+0x681/0x6d0 [ 225.355237][ T9367] ? __pfx_set_anon_super_fc+0x10/0x10 [ 225.355256][ T9367] ? __pfx_shmem_fill_super+0x10/0x10 [ 225.355289][ T9367] get_tree_nodev+0x83/0x100 [ 225.355303][ T9367] shmem_get_tree+0x1c/0x30 [ 225.355315][ T9367] vfs_get_tree+0x57/0x1d0 [ 225.355361][ T9367] do_new_mount+0x288/0x8d0 [ 225.355378][ T9367] ? security_capable+0x7b/0x90 [ 225.355393][ T9367] path_mount+0x4d0/0xbc0 [ 225.355425][ T9367] __se_sys_mount+0x28c/0x2e0 [ 225.355453][ T9367] ? fput+0x8f/0xc0 [ 225.355464][ T9367] __x64_sys_mount+0x67/0x80 [ 225.355481][ T9367] x64_sys_call+0x2d61/0x3020 [ 225.355552][ T9367] do_syscall_64+0x12c/0x3b0 [ 225.355570][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.355660][ T9367] RIP: 0033:0x7f4e0382ce59 [ 225.355670][ T9367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.355679][ T9367] RSP: 002b:00007f4e0227f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.355691][ T9367] RAX: ffffffffffffffda RBX: 00007f4e03aa5fa0 RCX: 00007f4e0382ce59 [ 225.355751][ T9367] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 225.355758][ T9367] RBP: 00007f4e0227f090 R08: 0000200000000100 R09: 0000000000000000 [ 225.355765][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.355772][ T9367] R13: 00007f4e03aa6038 R14: 00007f4e03aa5fa0 R15: 00007ffc6fdfaa88 [ 225.355833][ T9367] [ 225.780154][ T28] audit: type=1400 audit(1780226350.968:2577): avc: denied { setopt } for pid=9389 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 225.839905][ T9394] __nla_validate_parse: 1 callbacks suppressed [ 225.839918][ T9394] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1757'. [ 225.881901][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 225.903761][ T9384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1753'. [ 225.920384][ T9384] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1753'. [ 225.940918][ T9384] netlink: 'syz.2.1753': attribute type 5 has an invalid length. [ 225.948660][ T9384] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1753'. [ 225.992813][ T28] audit: type=1400 audit(1780226351.174:2578): avc: denied { bind } for pid=9389 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 225.993169][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 226.038420][ T28] audit: type=1400 audit(1780226351.211:2579): avc: denied { create } for pid=9405 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.059502][ T28] audit: type=1400 audit(1780226351.211:2580): avc: denied { setopt } for pid=9405 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.098915][ T9414] FAULT_INJECTION: forcing a failure. [ 226.098915][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 226.115079][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.1.1764 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.115133][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.115211][ T9414] Call Trace: [ 226.115218][ T9414] [ 226.115224][ T9414] __dump_stack+0x1d/0x30 [ 226.115257][ T9414] dump_stack_lvl+0x95/0xd0 [ 226.115278][ T9414] dump_stack+0x15/0x1b [ 226.115296][ T9414] should_fail_ex+0x263/0x280 [ 226.115317][ T9414] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 226.115372][ T9414] should_failslab+0x8c/0xb0 [ 226.115445][ T9414] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 226.115470][ T9414] ? shmem_alloc_inode+0x34/0x50 [ 226.115519][ T9414] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 226.115542][ T9414] shmem_alloc_inode+0x34/0x50 [ 226.115562][ T9414] alloc_inode+0x40/0x170 [ 226.115651][ T9414] new_inode+0x1d/0xe0 [ 226.115671][ T9414] shmem_get_inode+0x25a/0x790 [ 226.115692][ T9414] shmem_fill_super+0x4d4/0x600 [ 226.115757][ T9414] ? __pfx_shmem_fill_super+0x10/0x10 [ 226.115780][ T9414] get_tree_nodev+0x83/0x100 [ 226.115871][ T9414] shmem_get_tree+0x1c/0x30 [ 226.115913][ T9414] vfs_get_tree+0x57/0x1d0 [ 226.115940][ T9414] do_new_mount+0x288/0x8d0 [ 226.115969][ T9414] ? security_capable+0x7b/0x90 [ 226.116072][ T9414] path_mount+0x4d0/0xbc0 [ 226.116103][ T9414] __se_sys_mount+0x28c/0x2e0 [ 226.116199][ T9414] ? fput+0x8f/0xc0 [ 226.116217][ T9414] __x64_sys_mount+0x67/0x80 [ 226.116291][ T9414] x64_sys_call+0x2d61/0x3020 [ 226.116327][ T9414] do_syscall_64+0x12c/0x3b0 [ 226.116488][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.116505][ T9414] RIP: 0033:0x7f4e0382ce59 [ 226.116522][ T9414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.116539][ T9414] RSP: 002b:00007f4e0227f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.116559][ T9414] RAX: ffffffffffffffda RBX: 00007f4e03aa5fa0 RCX: 00007f4e0382ce59 [ 226.116592][ T9414] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 226.116602][ T9414] RBP: 00007f4e0227f090 R08: 0000200000000100 R09: 0000000000000000 [ 226.116613][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.116624][ T9414] R13: 00007f4e03aa6038 R14: 00007f4e03aa5fa0 R15: 00007ffc6fdfaa88 [ 226.116643][ T9414] [ 226.633448][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 226.677804][ T9455] FAULT_INJECTION: forcing a failure. [ 226.677804][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 226.692414][ T28] audit: type=1400 audit(1780226351.828:2581): avc: denied { write } for pid=9452 comm="syz.3.1781" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.729857][ T9455] CPU: 1 UID: 0 PID: 9455 Comm: syz.2.1782 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.729895][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.729907][ T9455] Call Trace: [ 226.729915][ T9455] [ 226.729923][ T9455] __dump_stack+0x1d/0x30 [ 226.730028][ T9455] dump_stack_lvl+0x95/0xd0 [ 226.730049][ T9455] dump_stack+0x15/0x1b [ 226.730068][ T9455] should_fail_ex+0x263/0x280 [ 226.730088][ T9455] ? alloc_super+0x3d/0x580 [ 226.730133][ T9455] should_failslab+0x8c/0xb0 [ 226.730163][ T9455] __kmalloc_cache_noprof+0x5f/0x400 [ 226.730196][ T9455] alloc_super+0x3d/0x580 [ 226.730281][ T9455] sget_fc+0x24e/0x6d0 [ 226.730303][ T9455] ? __pfx_set_anon_super_fc+0x10/0x10 [ 226.730330][ T9455] ? __pfx_shmem_fill_super+0x10/0x10 [ 226.730355][ T9455] get_tree_nodev+0x2a/0x100 [ 226.730383][ T9455] shmem_get_tree+0x1c/0x30 [ 226.730466][ T9455] vfs_get_tree+0x57/0x1d0 [ 226.730493][ T9455] do_new_mount+0x288/0x8d0 [ 226.730524][ T9455] ? security_capable+0x7b/0x90 [ 226.730629][ T9455] path_mount+0x4d0/0xbc0 [ 226.730661][ T9455] __se_sys_mount+0x28c/0x2e0 [ 226.730727][ T9455] ? fput+0x8f/0xc0 [ 226.730758][ T9455] __x64_sys_mount+0x67/0x80 [ 226.730790][ T9455] x64_sys_call+0x2d61/0x3020 [ 226.730814][ T9455] do_syscall_64+0x12c/0x3b0 [ 226.730877][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.730898][ T9455] RIP: 0033:0x7f399b16ce59 [ 226.730914][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.730931][ T9455] RSP: 002b:00007f3999bc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.730957][ T9455] RAX: ffffffffffffffda RBX: 00007f399b3e5fa0 RCX: 00007f399b16ce59 [ 226.730971][ T9455] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 226.730985][ T9455] RBP: 00007f3999bc7090 R08: 0000200000000100 R09: 0000000000000000 [ 226.730999][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.731012][ T9455] R13: 00007f399b3e6038 R14: 00007f399b3e5fa0 R15: 00007ffc6dffce28 [ 226.731032][ T9455] [ 226.996747][ T9463] netlink: 'syz.2.1785': attribute type 6 has an invalid length. [ 227.053421][ T9448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1778'. [ 227.083041][ T9448] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1778'. [ 227.107479][ T9448] netlink: 'syz.1.1778': attribute type 5 has an invalid length. [ 227.120626][ T9448] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1778'. [ 227.182800][ T9485] netlink: 'syz.3.1794': attribute type 18 has an invalid length. [ 227.357909][ T9512] FAULT_INJECTION: forcing a failure. [ 227.357909][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 227.371084][ T9512] CPU: 1 UID: 0 PID: 9512 Comm: syz.0.1805 Not tainted syzkaller #0 PREEMPT(lazy) [ 227.371112][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.371124][ T9512] Call Trace: [ 227.371130][ T9512] [ 227.371138][ T9512] __dump_stack+0x1d/0x30 [ 227.371162][ T9512] dump_stack_lvl+0x95/0xd0 [ 227.371213][ T9512] dump_stack+0x15/0x1b [ 227.371233][ T9512] should_fail_ex+0x263/0x280 [ 227.371254][ T9512] should_failslab+0x8c/0xb0 [ 227.371347][ T9512] __kmalloc_noprof+0xb8/0x4d0 [ 227.371375][ T9512] ? security_sb_alloc+0x48/0x100 [ 227.371397][ T9512] security_sb_alloc+0x48/0x100 [ 227.371477][ T9512] alloc_super+0x10d/0x580 [ 227.371574][ T9512] sget_fc+0x24e/0x6d0 [ 227.371595][ T9512] ? __pfx_set_anon_super_fc+0x10/0x10 [ 227.371619][ T9512] ? __pfx_shmem_fill_super+0x10/0x10 [ 227.371660][ T9512] get_tree_nodev+0x2a/0x100 [ 227.371683][ T9512] shmem_get_tree+0x1c/0x30 [ 227.371704][ T9512] vfs_get_tree+0x57/0x1d0 [ 227.371731][ T9512] do_new_mount+0x288/0x8d0 [ 227.371813][ T9512] ? security_capable+0x7b/0x90 [ 227.371858][ T9512] path_mount+0x4d0/0xbc0 [ 227.371894][ T9512] __se_sys_mount+0x28c/0x2e0 [ 227.371923][ T9512] ? fput+0x8f/0xc0 [ 227.371962][ T9512] __x64_sys_mount+0x67/0x80 [ 227.371993][ T9512] x64_sys_call+0x2d61/0x3020 [ 227.372017][ T9512] do_syscall_64+0x12c/0x3b0 [ 227.372076][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.372093][ T9512] RIP: 0033:0x7fd7173ece59 [ 227.372182][ T9512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.372240][ T9512] RSP: 002b:00007fd715e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.372258][ T9512] RAX: ffffffffffffffda RBX: 00007fd717665fa0 RCX: 00007fd7173ece59 [ 227.372270][ T9512] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 227.372289][ T9512] RBP: 00007fd715e47090 R08: 0000200000000100 R09: 0000000000000000 [ 227.372311][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.372322][ T9512] R13: 00007fd717666038 R14: 00007fd717665fa0 R15: 00007ffede1bd2d8 [ 227.372340][ T9512] [ 228.162623][ T9547] netlink: 'syz.0.1816': attribute type 5 has an invalid length. [ 228.334737][ T9574] block device autoloading is deprecated and will be removed. [ 228.361780][ T9574] netlink: 'syz.0.1821': attribute type 2 has an invalid length. [ 228.847627][ T9602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.856549][ T9602] macsec1: left promiscuous mode [ 228.861649][ T9602] macsec1: left allmulticast mode [ 228.866673][ T9602] dummy0: left allmulticast mode [ 228.879759][ T4153] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.896738][ T4153] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.919933][ T4153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.928854][ T4153] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.937801][ T4153] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.946564][ T4153] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.964020][ T4153] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.973460][ T4153] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.007588][ T9609] FAULT_INJECTION: forcing a failure. [ 229.007588][ T9609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.029221][ T9609] CPU: 0 UID: 0 PID: 9609 Comm: syz.0.1832 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.029245][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.029261][ T9609] Call Trace: [ 229.029268][ T9609] [ 229.029276][ T9609] __dump_stack+0x1d/0x30 [ 229.029331][ T9609] dump_stack_lvl+0x95/0xd0 [ 229.029347][ T9609] dump_stack+0x15/0x1b [ 229.029364][ T9609] should_fail_ex+0x263/0x280 [ 229.029450][ T9609] should_fail+0xb/0x20 [ 229.029498][ T9609] should_fail_usercopy+0x1a/0x20 [ 229.029520][ T9609] _copy_from_user+0x1c/0xb0 [ 229.029540][ T9609] __sys_bpf+0x183/0x7e0 [ 229.029566][ T9609] __x64_sys_bpf+0x41/0x50 [ 229.029588][ T9609] x64_sys_call+0x10cb/0x3020 [ 229.029653][ T9609] do_syscall_64+0x12c/0x3b0 [ 229.029709][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.029735][ T9609] RIP: 0033:0x7fd7173ece59 [ 229.029748][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.029762][ T9609] RSP: 002b:00007fd715e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.029789][ T9609] RAX: ffffffffffffffda RBX: 00007fd717665fa0 RCX: 00007fd7173ece59 [ 229.029803][ T9609] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a [ 229.029816][ T9609] RBP: 00007fd715e47090 R08: 0000000000000000 R09: 0000000000000000 [ 229.029867][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.029878][ T9609] R13: 00007fd717666038 R14: 00007fd717665fa0 R15: 00007ffede1bd2d8 [ 229.029899][ T9609] [ 229.208567][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 229.208582][ T28] audit: type=1400 audit(1780226354.176:2597): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.258013][ T28] audit: type=1400 audit(1780226354.176:2598): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.374156][ T28] audit: type=1400 audit(1780226354.214:2599): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.696720][ T28] audit: type=1400 audit(1780226354.644:2600): avc: denied { connect } for pid=9617 comm="syz.2.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.768926][ T9628] tmpfs: Bad value for 'mode' [ 229.970175][ T9637] loop1: detected capacity change from 0 to 512 [ 230.034552][ T9641] loop1: detected capacity change from 0 to 512 [ 230.045084][ T9641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.055641][ T9641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.065200][ T9641] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.080867][ T9641] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.1842: inode #0: comm syz.1.1842: iget: illegal inode # [ 230.095236][ T9641] loop1: lost filesystem error report for type 5 error -117 [ 230.095704][ T9641] EXT4-fs (loop1): Remounting filesystem read-only [ 230.103297][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 230.103370][ C1] EXT4-fs (loop1): initial error at time 1780226355: ext4_init_orphan_info:583 [ 230.103638][ C1] EXT4-fs (loop1): last error at time 1780226355: ext4_init_orphan_info:583 [ 230.135851][ T9641] EXT4-fs (loop1): get orphan inode failed [ 230.143109][ T9641] EXT4-fs (loop1): mount failed [ 230.496472][ T9668] FAULT_INJECTION: forcing a failure. [ 230.496472][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 230.509485][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.0.1852 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.509512][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.509524][ T9668] Call Trace: [ 230.509531][ T9668] [ 230.509540][ T9668] __dump_stack+0x1d/0x30 [ 230.509614][ T9668] dump_stack_lvl+0x95/0xd0 [ 230.509631][ T9668] dump_stack+0x15/0x1b [ 230.509646][ T9668] should_fail_ex+0x263/0x280 [ 230.509662][ T9668] should_failslab+0x8c/0xb0 [ 230.509723][ T9668] __kmalloc_noprof+0xb8/0x4d0 [ 230.509796][ T9668] ? bpf_test_init+0x86/0x130 [ 230.509954][ T9668] bpf_test_init+0x86/0x130 [ 230.510020][ T9668] bpf_prog_test_run_xdp+0x306/0xa10 [ 230.510125][ T9668] ? __rcu_read_unlock+0x4e/0x70 [ 230.510252][ T9668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.510277][ T9668] bpf_prog_test_run+0x204/0x340 [ 230.510333][ T9668] __sys_bpf+0x52e/0x7e0 [ 230.510408][ T9668] __x64_sys_bpf+0x41/0x50 [ 230.510426][ T9668] x64_sys_call+0x10cb/0x3020 [ 230.510491][ T9668] do_syscall_64+0x12c/0x3b0 [ 230.510521][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.510543][ T9668] RIP: 0033:0x7fd7173ece59 [ 230.510557][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.510671][ T9668] RSP: 002b:00007fd715e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.510689][ T9668] RAX: ffffffffffffffda RBX: 00007fd717665fa0 RCX: 00007fd7173ece59 [ 230.510701][ T9668] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a [ 230.510711][ T9668] RBP: 00007fd715e47090 R08: 0000000000000000 R09: 0000000000000000 [ 230.510722][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.510804][ T9668] R13: 00007fd717666038 R14: 00007fd717665fa0 R15: 00007ffede1bd2d8 [ 230.510828][ T9668] [ 230.875145][ T9678] FAULT_INJECTION: forcing a failure. [ 230.875145][ T9678] name failslab, interval 1, probability 0, space 0, times 0 [ 230.889023][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.2.1856 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.889051][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.889063][ T9678] Call Trace: [ 230.889070][ T9678] [ 230.889078][ T9678] __dump_stack+0x1d/0x30 [ 230.889098][ T9678] dump_stack_lvl+0x95/0xd0 [ 230.889177][ T9678] dump_stack+0x15/0x1b [ 230.889204][ T9678] should_fail_ex+0x263/0x280 [ 230.889224][ T9678] should_failslab+0x8c/0xb0 [ 230.889253][ T9678] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 230.889320][ T9678] ? __d_alloc+0x37/0x340 [ 230.889340][ T9678] __d_alloc+0x37/0x340 [ 230.889366][ T9678] d_make_root+0x28/0x70 [ 230.889425][ T9678] shmem_fill_super+0x530/0x600 [ 230.889530][ T9678] ? __pfx_shmem_fill_super+0x10/0x10 [ 230.889550][ T9678] get_tree_nodev+0x83/0x100 [ 230.889597][ T9678] shmem_get_tree+0x1c/0x30 [ 230.889617][ T9678] vfs_get_tree+0x57/0x1d0 [ 230.889639][ T9678] do_new_mount+0x288/0x8d0 [ 230.889753][ T9678] ? security_capable+0x7b/0x90 [ 230.889803][ T9678] path_mount+0x4d0/0xbc0 [ 230.889828][ T9678] __se_sys_mount+0x28c/0x2e0 [ 230.889913][ T9678] ? fput+0x8f/0xc0 [ 230.889938][ T9678] __x64_sys_mount+0x67/0x80 [ 230.889964][ T9678] x64_sys_call+0x2d61/0x3020 [ 230.890016][ T9678] do_syscall_64+0x12c/0x3b0 [ 230.890071][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.890089][ T9678] RIP: 0033:0x7f399b16ce59 [ 230.890102][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.890115][ T9678] RSP: 002b:00007f3999bc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.890221][ T9678] RAX: ffffffffffffffda RBX: 00007f399b3e5fa0 RCX: 00007f399b16ce59 [ 230.890231][ T9678] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 230.890241][ T9678] RBP: 00007f3999bc7090 R08: 0000200000000100 R09: 0000000000000000 [ 230.890251][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.890261][ T9678] R13: 00007f399b3e6038 R14: 00007f399b3e5fa0 R15: 00007ffc6dffce28 [ 230.890318][ T9678] [ 231.311354][ T7855] IPVS: starting estimator thread 0... [ 231.386000][ T9712] __nla_validate_parse: 8 callbacks suppressed [ 231.386026][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 231.436146][ T9700] IPVS: using max 2736 ests per chain, 136800 per kthread [ 231.485273][ T9721] cgroup: name respecified [ 231.492169][ T28] audit: type=1400 audit(1780226356.309:2601): avc: denied { mounton } for pid=9713 comm="syz.2.1868" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 231.564308][ T9728] IPVS: dh: FWM 3 0x00000003 - no destination available [ 231.827839][ T9752] FAULT_INJECTION: forcing a failure. [ 231.827839][ T9752] name failslab, interval 1, probability 0, space 0, times 0 [ 231.840507][ T9752] CPU: 0 UID: 0 PID: 9752 Comm: syz.0.1885 Not tainted syzkaller #0 PREEMPT(lazy) [ 231.840534][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.840547][ T9752] Call Trace: [ 231.840595][ T9752] [ 231.840603][ T9752] __dump_stack+0x1d/0x30 [ 231.840652][ T9752] dump_stack_lvl+0x95/0xd0 [ 231.840672][ T9752] dump_stack+0x15/0x1b [ 231.840691][ T9752] should_fail_ex+0x263/0x280 [ 231.840734][ T9752] should_failslab+0x8c/0xb0 [ 231.840764][ T9752] __kmalloc_noprof+0xb8/0x4d0 [ 231.840792][ T9752] ? __list_lru_init+0x72/0x2e0 [ 231.840883][ T9752] __list_lru_init+0x72/0x2e0 [ 231.840906][ T9752] alloc_super+0x519/0x580 [ 231.840949][ T9752] sget_fc+0x24e/0x6d0 [ 231.840970][ T9752] ? __pfx_set_anon_super_fc+0x10/0x10 [ 231.841076][ T9752] ? __pfx_shmem_fill_super+0x10/0x10 [ 231.841099][ T9752] get_tree_nodev+0x2a/0x100 [ 231.841125][ T9752] shmem_get_tree+0x1c/0x30 [ 231.841175][ T9752] vfs_get_tree+0x57/0x1d0 [ 231.841213][ T9752] do_new_mount+0x288/0x8d0 [ 231.841316][ T9752] ? security_capable+0x7b/0x90 [ 231.841415][ T9752] path_mount+0x4d0/0xbc0 [ 231.841441][ T9752] __se_sys_mount+0x28c/0x2e0 [ 231.841590][ T9752] ? fput+0x8f/0xc0 [ 231.841607][ T9752] __x64_sys_mount+0x67/0x80 [ 231.841633][ T9752] x64_sys_call+0x2d61/0x3020 [ 231.841722][ T9752] do_syscall_64+0x12c/0x3b0 [ 231.841751][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.841770][ T9752] RIP: 0033:0x7fd7173ece59 [ 231.841866][ T9752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.841884][ T9752] RSP: 002b:00007fd715e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.841905][ T9752] RAX: ffffffffffffffda RBX: 00007fd717665fa0 RCX: 00007fd7173ece59 [ 231.841920][ T9752] RDX: 0000200000000f80 RSI: 0000200000000040 RDI: 0000000000000000 [ 231.841934][ T9752] RBP: 00007fd715e47090 R08: 0000200000000100 R09: 0000000000000000 [ 231.841947][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.842083][ T9752] R13: 00007fd717666038 R14: 00007fd717665fa0 R15: 00007ffede1bd2d8 [ 231.842101][ T9752] [ 232.200353][ T9766] FAULT_INJECTION: forcing a failure. [ 232.200353][ T9766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.213450][ T9766] CPU: 0 UID: 0 PID: 9766 Comm: syz.3.1891 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.213574][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.213582][ T9766] Call Trace: [ 232.213586][ T9766] [ 232.213591][ T9766] __dump_stack+0x1d/0x30 [ 232.213719][ T9766] dump_stack_lvl+0x95/0xd0 [ 232.213731][ T9766] dump_stack+0x15/0x1b [ 232.213741][ T9766] should_fail_ex+0x263/0x280 [ 232.213791][ T9766] should_fail+0xb/0x20 [ 232.213801][ T9766] should_fail_usercopy+0x1a/0x20 [ 232.213826][ T9766] _copy_from_user+0x1c/0xb0 [ 232.213839][ T9766] bpf_test_init+0xb9/0x130 [ 232.213947][ T9766] bpf_prog_test_run_xdp+0x306/0xa10 [ 232.213964][ T9766] ? __rcu_read_unlock+0x4e/0x70 [ 232.213978][ T9766] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 232.214024][ T9766] bpf_prog_test_run+0x204/0x340 [ 232.214040][ T9766] __sys_bpf+0x52e/0x7e0 [ 232.214109][ T9766] __x64_sys_bpf+0x41/0x50 [ 232.214121][ T9766] x64_sys_call+0x10cb/0x3020 [ 232.214134][ T9766] do_syscall_64+0x12c/0x3b0 [ 232.214194][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.214206][ T9766] RIP: 0033:0x7f8e3930ce59 [ 232.214216][ T9766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.214225][ T9766] RSP: 002b:00007f8e37d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.214288][ T9766] RAX: ffffffffffffffda RBX: 00007f8e39585fa0 RCX: 00007f8e3930ce59 [ 232.214296][ T9766] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a [ 232.214304][ T9766] RBP: 00007f8e37d67090 R08: 0000000000000000 R09: 0000000000000000 [ 232.214311][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.214318][ T9766] R13: 00007f8e39586038 R14: 00007f8e39585fa0 R15: 00007fff1161d2c8 [ 232.214329][ T9766] [ 232.426519][ T9773] ================================================================== [ 232.434610][ T9773] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 232.442059][ T9773] [ 232.444364][ T9773] write to 0xffff888105bdc500 of 8 bytes by task 9772 on cpu 0: [ 232.451976][ T9773] mas_wmb_replace+0x908/0x1760 [ 232.456821][ T9773] mas_wr_store_entry+0x54ff/0x5ad0 [ 232.462009][ T9773] mas_store_prealloc+0x43e/0x690 [ 232.467027][ T9773] vma_complete+0x3c7/0x850 [ 232.471519][ T9773] __split_vma+0x5db/0x640 [ 232.475925][ T9773] vma_modify+0xbee/0xca0 [ 232.480243][ T9773] vma_modify_flags+0x182/0x210 [ 232.485084][ T9773] mprotect_fixup+0x3a2/0x680 [ 232.489752][ T9773] do_mprotect_pkey+0x6ae/0x960 [ 232.494593][ T9773] __x64_sys_mprotect+0x48/0x60 [ 232.499432][ T9773] x64_sys_call+0x2768/0x3020 [ 232.504095][ T9773] do_syscall_64+0x12c/0x3b0 [ 232.508676][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.514552][ T9773] [ 232.516857][ T9773] read to 0xffff888105bdc500 of 8 bytes by task 9773 on cpu 1: [ 232.524384][ T9773] mtree_range_walk+0x350/0x490 [ 232.529223][ T9773] mas_walk+0x1cc/0x370 [ 232.533367][ T9773] lock_vma_under_rcu+0xc9/0x210 [ 232.538298][ T9773] do_user_addr_fault+0x232/0x1050 [ 232.543404][ T9773] exc_page_fault+0x62/0xa0 [ 232.547891][ T9773] asm_exc_page_fault+0x26/0x30 [ 232.552727][ T9773] [ 232.555038][ T9773] value changed: 0xffff888105c40316 -> 0xffff888104e76216 [ 232.562124][ T9773] [ 232.564439][ T9773] Reported by Kernel Concurrency Sanitizer on: [ 232.570571][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.2.1894 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.579836][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.589873][ T9773] ================================================================== [ 232.598888][ T9764] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1890'.