last executing test programs: 1m53.269174551s ago: executing program 4 (id=271): r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000000000000000ee834b"], 0x48) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) 1m53.190335872s ago: executing program 4 (id=272): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m53.129804912s ago: executing program 4 (id=274): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3000}]) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/91, 0x5b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f0}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getgroups(0x2, &(0x7f0000000340)=[0x0, 0x0]) fchown(r7, 0x0, r8) r9 = syz_pidfd_open(0x0, 0x0) process_madvise(r9, 0x0, 0x0, 0x11, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r12, 0x20, 0x4000, 0x8000) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=r11], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4000001) 1m52.965094135s ago: executing program 4 (id=278): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 1m52.856333526s ago: executing program 4 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000020c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x40) shutdown(r1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x7, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003, [0x80002, 0x40009, 0x5, 0x1]}, &(0x7f0000000100)=0x54) 1m52.663414238s ago: executing program 4 (id=284): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m52.663224558s ago: executing program 32 (id=284): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 3.423632416s ago: executing program 5 (id=1836): setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2.582727487s ago: executing program 5 (id=1849): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2.531920658s ago: executing program 5 (id=1853): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='mctp_key_acquire\x00'}, 0x18) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x24, 0x0, &(0x7f0000001080)) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_usb_disconnect(0xffffffffffffffff) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ff0300850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf35d5affae69a39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc54a, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x50, 0x20, 0x0, 0x4}, {0x6}]}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1b0000001e", 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a30000000000900030073797a3100000000650ebd1e79da1e298eddaab01e9475c91ad3132538bae75da881d12abb26994639c51e361df37cd17009ffadba49021e904b4c9adc3142751671adeb2309d4902daa0b1b8b415077b27b32a6a41f9d038f65fc882bd7ab5823083cb191601b41e72e5818309b2ffb85ed3093f99560067727592e9ac2536bfdd4cef9"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08000100", @ANYRES16=r6, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) 2.34964216s ago: executing program 2 (id=1859): setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2.255454051s ago: executing program 1 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="a9101c0000000000956088fe0000000072f64ae25a4c62bc502a8d6ff85eb00bfd2eff0cfce6feaeb083eec598275fb62e86e7c233a1e64ecbe1455be0420780342b494d854750ae4f8593cdeb2e96ce2d0af8c360bd0032b1340a91a045095df0e2d47bcf65273efc8a1aa67861d87e8726bd355e51cc1212d75f5697369d0df25d6b55e5740fd513516eb3888a6639fbe2748c4bd514a61f3bcc2103890f0223a7564b4d46a2badf81be73d8ab02c1c813b12a560b80bc1baa0e93fa9eed2d243bcef2c65473e3c43c4171f95b6a5769f0353ff16e54ae85e546b1245acf7617f249cb6bba228df4"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000010000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@bsdgroups}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x3f, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x2, 0x1}, 0x115428, 0x1, 0x0, 0x7, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000) 2.163533132s ago: executing program 1 (id=1864): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2.076859203s ago: executing program 1 (id=1866): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x33, 0x0, @loopback, @empty, [@dstopts={0x2b}]}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.966758365s ago: executing program 0 (id=1869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000300)={0x0, 0x7f, 0x700}) 1.966302775s ago: executing program 0 (id=1870): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r6, 0x0) epoll_create1(0x80000) 1.447381072s ago: executing program 2 (id=1874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000280)=""/229, 0xe5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x810) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25017bb4db097b1cc70000000000000009410000004c00180000000265746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) 1.398808112s ago: executing program 3 (id=1875): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000680)={0xb, 0x29, 0x2, {0x4}}, 0xb) sendfile(r1, r1, &(0x7f00000002c0), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x5, 0x4b, 0x1, 0x0, 0x10001, 0x80, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x52f, 0x2}, 0x101023, 0x9, 0x5, 0x8, 0xfffffffffffffffd, 0x9, 0x200, 0x0, 0xc827, 0x0, 0xffff}, 0x0, 0xf, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 1.343549313s ago: executing program 2 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="a9101c0000000000956088fe0000000072f64ae25a4c62bc502a8d6ff85eb00bfd2eff0cfce6feaeb083eec598275fb62e86e7c233a1e64ecbe1455be0420780342b494d854750ae4f8593cdeb2e96ce2d0af8c360bd0032b1340a91a045095df0e2d47bcf65273efc8a1aa67861d87e8726bd355e51cc1212d75f5697369d0df25d6b55e5740fd513516eb3888a6639fbe2748c4bd514a61f3bcc2103890f0223a7564b4d46a2badf81be73d8ab02c1c813b12a560b80bc1baa0e93fa9eed2d243bcef2c65473e3c43c4171f95b6a5769f0353ff16e54ae85e546b1245acf7617f249cb6bba228df4"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000010000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@bsdgroups}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x3f, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x2, 0x1}, 0x115428, 0x1, 0x0, 0x7, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000) 1.271170874s ago: executing program 0 (id=1877): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3000}]) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/91, 0x5b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f0}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getgroups(0x2, &(0x7f0000000340)=[0x0, 0x0]) fchown(r7, 0x0, r8) r9 = syz_pidfd_open(0x0, 0x0) process_madvise(r9, 0x0, 0x0, 0x11, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) socket$netlink(0x10, 0x3, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r11, 0x20, 0x4000, 0x8000) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000001) 1.270824464s ago: executing program 2 (id=1878): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.256432994s ago: executing program 3 (id=1879): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 1.241448034s ago: executing program 3 (id=1880): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x33, 0x0, @loopback, @empty, [@dstopts={0x2b}]}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b40), 0x10000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$9p(&(0x7f0000000b00), 0x80800) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000013c0)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000640)=""/212, 0xd4}], 0x6, &(0x7f0000000740)=""/96, 0x60}, 0x20000002}, {{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000880)=""/107, 0x6b}, {&(0x7f0000000900)=""/219, 0xdb}], 0x2, &(0x7f0000000a00)=""/253, 0xfd}, 0x5}, {{&(0x7f00000014c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/215, 0xd7}, {&(0x7f0000000c80)=""/198, 0xc6}, {&(0x7f0000000d80)=""/7, 0x7}, {&(0x7f0000000dc0)=""/86, 0x56}], 0x4}, 0x2}, {{&(0x7f0000000e80)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f00)=""/173, 0xad}, {&(0x7f0000000fc0)=""/18, 0x12}, {&(0x7f0000001000)=""/59, 0x3b}, {&(0x7f0000001040)=""/156, 0x9c}, {&(0x7f0000001540)=""/239, 0xef}, {&(0x7f0000001200)=""/219, 0xdb}, {&(0x7f00000003c0)=""/45, 0x2d}], 0x7}, 0x402}], 0x4, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.179565025s ago: executing program 1 (id=1881): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r5, &(0x7f0000002040)=@known='system.sockprotoname\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf2517000000080003005291a22a39f9de81cb7402f5c44b76d33aaacbbfdce49297bbca8905b6dbb570c71a3259cc89866d93a8bc56d74d8250838a25a734d4fd5c44303703b45cb535799e85339799e476194a06ce6caef39882824bfa1ecd923eb2ba85235ca61556dccbc93ee7524e8e8c9568b0fda5f68ab10d2d9167eabe5c0dc7dffe4a7dceb424553c3550c586078399af8b30b6bbc2c9344d9f15903c", @ANYRES32=r9, @ANYBLOB="2000308014000400403a050c5baee2004ef2b6d713459a7a0500020000000000"], 0x3c}}, 0x0) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)={r0, r4}) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b", 0xc2}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x3, 0x240080e4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r11, 0x5425, 0x0) ioctl$TCSETSW2(r11, 0x5425, 0x0) 1.156110765s ago: executing program 0 (id=1882): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) fallocate(0xffffffffffffffff, 0x0, 0x3, 0xd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) socket(0x40000000015, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1.087338056s ago: executing program 5 (id=1883): socket$inet6_dccp(0xa, 0x6, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="03000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001b00"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x200000000200}, 0x18) socket(0x1d, 0x2, 0x6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 955.472337ms ago: executing program 2 (id=1884): setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 644.540592ms ago: executing program 5 (id=1885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 607.392423ms ago: executing program 1 (id=1886): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000280)=""/229, 0xe5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x810) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25017bb4db097b1cc70000000000000009410000004c00180000000265746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) 499.314144ms ago: executing program 2 (id=1887): socket$inet6_dccp(0xa, 0x6, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="03000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001b00"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) socket(0x1d, 0x2, 0x6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) 487.472494ms ago: executing program 5 (id=1888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 252.357687ms ago: executing program 3 (id=1889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="a9101c0000000000956088fe0000000072f64ae25a4c62bc502a8d6ff85eb00bfd2eff0cfce6feaeb083eec598275fb62e86e7c233a1e64ecbe1455be0420780342b494d854750ae4f8593cdeb2e96ce2d0af8c360bd0032b1340a91a045095df0e2d47bcf65273efc8a1aa67861d87e8726bd355e51cc1212d75f5697369d0df25d6b55e5740fd513516eb3888a6639fbe2748c4bd514a61f3bcc2103890f0223a7564b4d46a2badf81be73d8ab02c1c813b12a560b80bc1baa0e93fa9eed2d243bcef2c65473e3c43c4171f95b6a5769f0353ff16e54ae85e546b1245acf7617f249cb6bba228df4"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000010000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@bsdgroups}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x3f, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x2, 0x1}, 0x115428, 0x1, 0x0, 0x7, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000) 182.892958ms ago: executing program 0 (id=1890): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000680)={0xb, 0x29, 0x2, {0x4}}, 0xb) sendfile(r1, r1, &(0x7f00000002c0), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x5, 0x4b, 0x1, 0x0, 0x10001, 0x80, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x52f, 0x2}, 0x101023, 0x9, 0x5, 0x8, 0xfffffffffffffffd, 0x9, 0x200, 0x0, 0xc827, 0x0, 0xffff}, 0x0, 0xf, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 182.524618ms ago: executing program 1 (id=1891): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = inotify_add_watch(r6, &(0x7f0000000440)='./bus\x00', 0x1) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='svc_unregister\x00', r9, 0x0, 0x2f07}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x100010, r1, 0xe1941000) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 91.363309ms ago: executing program 3 (id=1892): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3000}]) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/91, 0x5b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f0}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getgroups(0x2, &(0x7f0000000340)=[0x0, 0x0]) fchown(r7, 0x0, r8) r9 = syz_pidfd_open(0x0, 0x0) process_madvise(r9, 0x0, 0x0, 0x11, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) socket$netlink(0x10, 0x3, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r11, 0x20, 0x4000, 0x8000) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000001) 66.641049ms ago: executing program 0 (id=1893): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='mctp_key_acquire\x00'}, 0x18) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x24, 0x0, &(0x7f0000001080)) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_usb_disconnect(0xffffffffffffffff) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ff0300850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf35d5affae69a39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc54a, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x50, 0x20, 0x0, 0x4}, {0x6}]}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1b0000001e", 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a30000000000900030073797a3100000000650ebd1e79da1e298eddaab01e9475c91ad3132538bae75da881d12abb26994639c51e361df37cd17009ffadba49021e904b4c9adc3142751671adeb2309d4902daa0b1b8b415077b27b32a6a41f9d038f65fc882bd7ab5823083cb191601b41e72e5818309b2ffb85ed3093f99560067727592e9ac2536bfdd4cef9"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08000100", @ANYRES16=r6, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) 0s ago: executing program 3 (id=1894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = inotify_add_watch(r6, &(0x7f0000000440)='./bus\x00', 0x1) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='svc_unregister\x00', r9, 0x0, 0x2f07}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x100010, r1, 0xe1941000) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): th_write+0x10/0x10 [ 80.381502][ T5074] ? vfs_write+0x75e/0x8d0 [ 80.381533][ T5074] ? __rcu_read_unlock+0x4f/0x70 [ 80.381557][ T5074] ? __fget_files+0x184/0x1c0 [ 80.381731][ T5074] __secure_computing+0x82/0x150 [ 80.381756][ T5074] syscall_trace_enter+0xcf/0x1e0 [ 80.381785][ T5074] do_syscall_64+0xaa/0x1a0 [ 80.381810][ T5074] ? clear_bhb_loop+0x25/0x80 [ 80.381907][ T5074] ? clear_bhb_loop+0x25/0x80 [ 80.381929][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.381950][ T5074] RIP: 0033:0x7fbb9a4ae969 [ 80.382039][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.382058][ T5074] RSP: 002b:00007fbb98b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 80.382076][ T5074] RAX: ffffffffffffffda RBX: 00007fbb9a6d5fa0 RCX: 00007fbb9a4ae969 [ 80.382134][ T5074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 80.382147][ T5074] RBP: 00007fbb98b17090 R08: 0000000000000000 R09: 0000000000000000 [ 80.382161][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.382241][ T5074] R13: 0000000000000000 R14: 00007fbb9a6d5fa0 R15: 00007ffc795e9808 [ 80.382264][ T5074] [ 80.943950][ T5105] bond1: entered promiscuous mode [ 80.950162][ T5105] bond1: entered allmulticast mode [ 80.957273][ T5105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.969013][ T5105] bond1 (unregistering): Released all slaves [ 81.139311][ T5120] lo speed is unknown, defaulting to 1000 [ 81.292416][ T5130] pim6reg: entered allmulticast mode [ 81.303230][ T5130] pim6reg: left allmulticast mode [ 81.353274][ T5132] FAULT_INJECTION: forcing a failure. [ 81.353274][ T5132] name failslab, interval 1, probability 0, space 0, times 0 [ 81.368701][ T5132] CPU: 0 UID: 0 PID: 5132 Comm: syz.0.596 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 81.368736][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 81.368749][ T5132] Call Trace: [ 81.368754][ T5132] [ 81.368789][ T5132] __dump_stack+0x1d/0x30 [ 81.368817][ T5132] dump_stack_lvl+0xe8/0x140 [ 81.368875][ T5132] dump_stack+0x15/0x1b [ 81.368892][ T5132] should_fail_ex+0x265/0x280 [ 81.368925][ T5132] should_failslab+0x8c/0xb0 [ 81.369020][ T5132] kmem_cache_alloc_node_noprof+0x57/0x320 [ 81.369067][ T5132] ? __alloc_skb+0x101/0x320 [ 81.369110][ T5132] __alloc_skb+0x101/0x320 [ 81.369159][ T5132] alloc_skb_with_frags+0x7d/0x470 [ 81.369251][ T5132] ? __skb_nsg+0x36c/0x390 [ 81.369286][ T5132] ? __rcu_read_unlock+0x34/0x70 [ 81.369309][ T5132] tls_decrypt_sg+0x22e/0x1af0 [ 81.369330][ T5132] ? unwind_get_return_address+0x16/0x40 [ 81.369361][ T5132] ? is_bpf_text_address+0x141/0x160 [ 81.369416][ T5132] ? skb_copy_header+0x17b/0x1a0 [ 81.369507][ T5132] ? tls_strp_msg_load+0x3db/0x450 [ 81.369623][ T5132] tls_decrypt_sw+0x4b/0x440 [ 81.369652][ T5132] ? tls_rx_rec_wait+0x10f/0x5d0 [ 81.369682][ T5132] tls_rx_one_record+0x118/0x820 [ 81.369767][ T5132] ? __pfx_woken_wake_function+0x10/0x10 [ 81.369793][ T5132] tls_sw_recvmsg+0xa7f/0x1480 [ 81.369835][ T5132] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 81.369863][ T5132] inet6_recvmsg+0x168/0x290 [ 81.369960][ T5132] sock_recvmsg_nosec+0x5f/0x130 [ 81.370060][ T5132] ____sys_recvmsg+0x26f/0x280 [ 81.370093][ T5132] ___sys_recvmsg+0x11f/0x370 [ 81.370132][ T5132] do_recvmmsg+0x1ef/0x540 [ 81.370166][ T5132] ? fput+0x8f/0xc0 [ 81.370230][ T5132] __x64_sys_recvmmsg+0xe5/0x170 [ 81.370336][ T5132] x64_sys_call+0x1c6a/0x2fb0 [ 81.370359][ T5132] do_syscall_64+0xd0/0x1a0 [ 81.370381][ T5132] ? clear_bhb_loop+0x25/0x80 [ 81.370404][ T5132] ? clear_bhb_loop+0x25/0x80 [ 81.370437][ T5132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.370473][ T5132] RIP: 0033:0x7ff40bebe969 [ 81.370502][ T5132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.370525][ T5132] RSP: 002b:00007ff40a527038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 81.370545][ T5132] RAX: ffffffffffffffda RBX: 00007ff40c0e5fa0 RCX: 00007ff40bebe969 [ 81.370557][ T5132] RDX: 0000000004000093 RSI: 0000200000001040 RDI: 0000000000000005 [ 81.370571][ T5132] RBP: 00007ff40a527090 R08: 0000000000000000 R09: 0000000000000000 [ 81.370587][ T5132] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 81.370603][ T5132] R13: 0000000000000000 R14: 00007ff40c0e5fa0 R15: 00007ffe1ab5bd98 [ 81.370628][ T5132] [ 82.098859][ T5160] FAULT_INJECTION: forcing a failure. [ 82.098859][ T5160] name failslab, interval 1, probability 0, space 0, times 0 [ 82.112892][ T5160] CPU: 1 UID: 0 PID: 5160 Comm: syz.5.607 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 82.112930][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.112943][ T5160] Call Trace: [ 82.112949][ T5160] [ 82.112958][ T5160] __dump_stack+0x1d/0x30 [ 82.112980][ T5160] dump_stack_lvl+0xe8/0x140 [ 82.113002][ T5160] dump_stack+0x15/0x1b [ 82.113073][ T5160] should_fail_ex+0x265/0x280 [ 82.113170][ T5160] should_failslab+0x8c/0xb0 [ 82.113207][ T5160] kmem_cache_alloc_noprof+0x50/0x310 [ 82.113293][ T5160] ? skb_clone+0x151/0x1f0 [ 82.113385][ T5160] skb_clone+0x151/0x1f0 [ 82.113450][ T5160] __netlink_deliver_tap+0x2c9/0x500 [ 82.113553][ T5160] netlink_unicast+0x64c/0x670 [ 82.113582][ T5160] netlink_sendmsg+0x58b/0x6b0 [ 82.113694][ T5160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.113726][ T5160] __sock_sendmsg+0x142/0x180 [ 82.113759][ T5160] ____sys_sendmsg+0x31e/0x4e0 [ 82.113861][ T5160] ___sys_sendmsg+0x17b/0x1d0 [ 82.113902][ T5160] __x64_sys_sendmsg+0xd4/0x160 [ 82.113926][ T5160] x64_sys_call+0x2999/0x2fb0 [ 82.113946][ T5160] do_syscall_64+0xd0/0x1a0 [ 82.113969][ T5160] ? clear_bhb_loop+0x25/0x80 [ 82.114018][ T5160] ? clear_bhb_loop+0x25/0x80 [ 82.114046][ T5160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.114071][ T5160] RIP: 0033:0x7f7aaaece969 [ 82.114085][ T5160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.114145][ T5160] RSP: 002b:00007f7aa9537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.114169][ T5160] RAX: ffffffffffffffda RBX: 00007f7aab0f5fa0 RCX: 00007f7aaaece969 [ 82.114186][ T5160] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000006 [ 82.114242][ T5160] RBP: 00007f7aa9537090 R08: 0000000000000000 R09: 0000000000000000 [ 82.114258][ T5160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.114273][ T5160] R13: 0000000000000000 R14: 00007f7aab0f5fa0 R15: 00007fff367ca878 [ 82.114297][ T5160] [ 82.385791][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 82.395643][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 82.416529][ T5162] wireguard0: entered promiscuous mode [ 82.422539][ T5162] wireguard0: entered allmulticast mode [ 82.434229][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 82.562545][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 82.581978][ T5175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.590057][ T5175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.617663][ T5175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.626652][ T5175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.842905][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 82.916610][ T5186] lo speed is unknown, defaulting to 1000 [ 83.376483][ T5195] netlink: 40 bytes leftover after parsing attributes in process `syz.5.616'. [ 83.394683][ T5195] netlink: 'syz.5.616': attribute type 3 has an invalid length. [ 83.404347][ T5195] netlink: 1 bytes leftover after parsing attributes in process `syz.5.616'. [ 83.556340][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 83.593125][ T5203] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.660983][ T5203] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.700839][ T5203] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.791340][ T5203] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.888588][ T5203] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.902195][ T5203] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.915311][ T5203] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.931685][ T5203] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.334984][ T5230] siw: device registration error -23 [ 84.341773][ T5230] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 84.410885][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 84.410980][ T30] audit: type=1326 audit(1746242366.931:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.457461][ T30] audit: type=1326 audit(1746242366.971:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.485225][ T30] audit: type=1326 audit(1746242366.971:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.510686][ T30] audit: type=1326 audit(1746242366.971:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.535985][ T30] audit: type=1326 audit(1746242366.971:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.561085][ T30] audit: type=1326 audit(1746242366.971:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.587773][ T30] audit: type=1326 audit(1746242366.971:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.613662][ T30] audit: type=1326 audit(1746242366.971:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.638474][ T30] audit: type=1326 audit(1746242366.971:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.654570][ T5241] lo speed is unknown, defaulting to 1000 [ 84.666363][ T30] audit: type=1326 audit(1746242366.971:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 84.737509][ T5246] x_tables: duplicate underflow at hook 1 [ 84.776256][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.639'. [ 84.956496][ T5254] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.041125][ T5254] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.092130][ T5264] hub 2-0:1.0: USB hub found [ 85.098270][ T5264] hub 2-0:1.0: 8 ports detected [ 85.130749][ T5254] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.190469][ T5254] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.258354][ T5254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.293515][ T5254] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.327688][ T5254] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.371820][ T5254] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.813956][ T5275] siw: device registration error -23 [ 85.831446][ T5275] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.170819][ T5281] lo speed is unknown, defaulting to 1000 [ 86.861559][ T5296] SET target dimension over the limit! [ 87.142036][ T5303] hub 2-0:1.0: USB hub found [ 87.147173][ T5303] hub 2-0:1.0: 8 ports detected [ 87.743741][ T5305] lo speed is unknown, defaulting to 1000 [ 87.772134][ T5305] lo speed is unknown, defaulting to 1000 [ 87.789726][ T5305] lo speed is unknown, defaulting to 1000 [ 87.812036][ T5305] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.829745][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.656'. [ 87.852854][ T5307] gtp0: entered promiscuous mode [ 87.872647][ T5305] lo speed is unknown, defaulting to 1000 [ 87.899409][ T5305] lo speed is unknown, defaulting to 1000 [ 87.906828][ T5305] lo speed is unknown, defaulting to 1000 [ 87.944721][ T5305] lo speed is unknown, defaulting to 1000 [ 87.959513][ T5305] lo speed is unknown, defaulting to 1000 [ 88.371941][ T5329] hub 9-0:1.0: USB hub found [ 88.376913][ T5329] hub 9-0:1.0: 8 ports detected [ 88.397302][ T5330] lo speed is unknown, defaulting to 1000 [ 88.405551][ T5330] lo speed is unknown, defaulting to 1000 [ 88.931586][ T5334] pim6reg1: entered promiscuous mode [ 88.937916][ T5334] pim6reg1: entered allmulticast mode [ 89.024966][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 89.094610][ T5342] program syz.1.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.449328][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 89.449478][ T30] audit: type=1400 audit(1746242371.931:1593): avc: denied { prog_load } for pid=5350 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.479632][ T30] audit: type=1400 audit(1746242371.931:1594): avc: denied { bpf } for pid=5350 comm="syz.1.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.504889][ T30] audit: type=1400 audit(1746242371.931:1595): avc: denied { perfmon } for pid=5350 comm="syz.1.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.530461][ T30] audit: type=1400 audit(1746242372.051:1596): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.556469][ T30] audit: type=1400 audit(1746242372.051:1597): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.580780][ T30] audit: type=1400 audit(1746242372.051:1598): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.610908][ T30] audit: type=1400 audit(1746242372.051:1599): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.639643][ T30] audit: type=1400 audit(1746242372.051:1600): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.675749][ T30] audit: type=1400 audit(1746242372.191:1601): avc: denied { open } for pid=5354 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.696770][ T30] audit: type=1400 audit(1746242372.191:1602): avc: denied { kernel } for pid=5354 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.843479][ T5362] program syz.3.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.874014][ T5364] hub 9-0:1.0: USB hub found [ 89.894007][ T5364] hub 9-0:1.0: 8 ports detected [ 90.086257][ T5381] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 90.215557][ T5392] program syz.5.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.372588][ T5399] ALSA: seq fatal error: cannot create timer (-19) [ 90.431351][ T5409] siw: device registration error -23 [ 90.439218][ T5409] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.485694][ T5410] lo speed is unknown, defaulting to 1000 [ 90.493252][ T5410] lo speed is unknown, defaulting to 1000 [ 90.547887][ T5421] ucma_write: process 326 (syz.1.704) changed security contexts after opening file descriptor, this is not allowed. [ 90.591578][ T5420] siw: device registration error -23 [ 90.607569][ T5420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 90.749932][ T5434] ALSA: seq fatal error: cannot create timer (-19) [ 90.844818][ T5442] siw: device registration error -23 [ 90.852404][ T5442] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.865583][ T5438] hub 2-0:1.0: USB hub found [ 90.883976][ T5438] hub 2-0:1.0: 8 ports detected [ 91.239685][ T5464] ALSA: seq fatal error: cannot create timer (-19) [ 91.398567][ T5472] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.820776][ T5487] netlink: 24 bytes leftover after parsing attributes in process `GPL'. [ 91.857747][ T5495] ALSA: seq fatal error: cannot create timer (-19) [ 91.999798][ T5504] lo speed is unknown, defaulting to 1000 [ 92.012068][ T5504] lo speed is unknown, defaulting to 1000 [ 93.402111][ T5542] netlink: 'syz.5.746': attribute type 1 has an invalid length. [ 93.557862][ T5543] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 94.284046][ T5559] program syz.5.752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.356668][ T5561] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 94.419800][ T5563] geneve0: entered allmulticast mode [ 94.551590][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 94.551606][ T30] audit: type=1326 audit(1746242377.071:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 94.581894][ T30] audit: type=1326 audit(1746242377.071:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 94.607129][ T5566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.624050][ T5573] syz_tun: entered allmulticast mode [ 94.678542][ T5574] ALSA: seq fatal error: cannot create timer (-19) [ 94.694613][ T5565] syz_tun: left allmulticast mode [ 94.749438][ T5581] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 94.757433][ T5581] audit: out of memory in audit_log_start [ 94.770347][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 94.812142][ T30] audit: type=1326 audit(1746242377.131:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 94.837011][ T30] audit: type=1326 audit(1746242377.131:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 94.864680][ T30] audit: type=1326 audit(1746242377.131:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 94.889793][ T30] audit: type=1400 audit(1746242377.141:1861): avc: denied { write } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.913430][ T30] audit: type=1400 audit(1746242377.141:1862): avc: denied { remove_name } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.937648][ T30] audit: type=1400 audit(1746242377.141:1863): avc: denied { rename } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.018164][ T5590] program syz.5.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.058391][ T5596] siw: device registration error -23 [ 95.064897][ T5596] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 95.114567][ T5593] -1: renamed from syzkaller0 [ 95.217521][ T5605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.277992][ T9] lo speed is unknown, defaulting to 1000 [ 95.285901][ T5593] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 95.287983][ T5607] syz_tun: entered allmulticast mode [ 95.299447][ T5610] netlink: 'syz.2.768': attribute type 27 has an invalid length. [ 95.317896][ T5604] syz_tun: left allmulticast mode [ 95.355889][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.363397][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.427368][ T5610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.575264][ T5610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.023489][ T5610] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.032065][ T5610] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.040531][ T5610] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.049228][ T5610] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.059696][ T5610] geneve2: left promiscuous mode [ 96.128007][ T5612] lo speed is unknown, defaulting to 1000 [ 96.135140][ T5612] lo speed is unknown, defaulting to 1000 [ 96.284583][ T5621] lo speed is unknown, defaulting to 1000 [ 96.292199][ T5621] lo speed is unknown, defaulting to 1000 [ 96.578024][ T5628] program syz.3.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.005048][ T5639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.060941][ T5639] syz_tun: entered allmulticast mode [ 97.078551][ T5638] syz_tun: left allmulticast mode [ 97.141130][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.782'. [ 97.233453][ T5645] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.411216][ T5658] program syz.0.788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.869870][ T5687] program syz.3.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.958944][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 98.208308][ T5697] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.210408][ T5690] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 99.106458][ T5726] program syz.5.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.665783][ T5744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.809413][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 99.809434][ T30] audit: type=1326 audit(1746242382.271:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 99.840194][ T30] audit: type=1326 audit(1746242382.281:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 99.864534][ T30] audit: type=1326 audit(1746242382.281:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 99.889757][ T30] audit: type=1326 audit(1746242382.281:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 99.913330][ T30] audit: type=1326 audit(1746242382.281:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 100.070307][ T5744] syz_tun: entered allmulticast mode [ 100.092142][ T5743] syz_tun: left allmulticast mode [ 100.256973][ T5759] program syz.0.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.456521][ T5769] siw: device registration error -23 [ 100.500552][ T5769] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 100.649887][ T30] audit: type=1326 audit(1746242383.161:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5776 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 100.676092][ T30] audit: type=1326 audit(1746242383.161:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5776 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 100.705397][ T30] audit: type=1326 audit(1746242383.161:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5776 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 100.735590][ T30] audit: type=1326 audit(1746242383.161:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5776 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 100.770927][ T30] audit: type=1326 audit(1746242383.161:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5776 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 100.876938][ T5779] ALSA: seq fatal error: cannot create timer (-19) [ 101.048221][ T5792] hub 9-0:1.0: USB hub found [ 101.067650][ T5792] hub 9-0:1.0: 8 ports detected [ 101.152508][ T5797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.172609][ T5800] syz_tun: entered allmulticast mode [ 101.195089][ T5796] syz_tun: left allmulticast mode [ 101.227557][ T5802] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 101.422935][ T5805] xt_HMARK: proto mask must be zero with L3 mode [ 102.193565][ T5825] hub 9-0:1.0: USB hub found [ 102.242010][ T5825] hub 9-0:1.0: 8 ports detected [ 102.507489][ T5832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.559398][ T5835] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.584010][ T5836] syz_tun: entered allmulticast mode [ 102.605968][ T5830] syz_tun: left allmulticast mode [ 102.863302][ T5850] xt_HMARK: proto mask must be zero with L3 mode [ 103.082943][ T5860] ÿÿÿÿÿÿ: renamed from vlan1 [ 103.188866][ T5864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.223012][ T5867] syz_tun: entered allmulticast mode [ 103.240661][ T5862] syz_tun: left allmulticast mode [ 104.715267][ T5913] bridge0: port 3(macvlan0) entered blocking state [ 104.722098][ T5913] bridge0: port 3(macvlan0) entered disabled state [ 104.779279][ T5913] macvlan0: entered allmulticast mode [ 104.891446][ T5913] macvlan0: left allmulticast mode [ 105.468485][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 105.468505][ T30] audit: type=1400 audit(1746242387.981:2026): avc: denied { map_create } for pid=5919 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.495239][ T30] audit: type=1400 audit(1746242387.981:2027): avc: denied { map_read map_write } for pid=5919 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.538143][ T5922] netlink: 44 bytes leftover after parsing attributes in process `syz.5.891'. [ 105.547493][ T30] audit: type=1400 audit(1746242388.031:2028): avc: denied { prog_load } for pid=5921 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.566926][ T30] audit: type=1400 audit(1746242388.031:2029): avc: denied { bpf } for pid=5921 comm="syz.5.891" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.589547][ T30] audit: type=1400 audit(1746242388.031:2030): avc: denied { perfmon } for pid=5921 comm="syz.5.891" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.611967][ T30] audit: type=1400 audit(1746242388.041:2031): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 105.635713][ T30] audit: type=1400 audit(1746242388.041:2032): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.658584][ T30] audit: type=1400 audit(1746242388.041:2033): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.682820][ T30] audit: type=1400 audit(1746242388.041:2034): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.706635][ T30] audit: type=1400 audit(1746242388.041:2035): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.740503][ T5934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.896'. [ 106.468504][ T5956] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 106.940249][ T5963] FAULT_INJECTION: forcing a failure. [ 106.940249][ T5963] name failslab, interval 1, probability 0, space 0, times 0 [ 106.953332][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: syz.2.906 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 106.953381][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.953398][ T5963] Call Trace: [ 106.953414][ T5963] [ 106.953425][ T5963] __dump_stack+0x1d/0x30 [ 106.953452][ T5963] dump_stack_lvl+0xe8/0x140 [ 106.953472][ T5963] dump_stack+0x15/0x1b [ 106.953626][ T5963] should_fail_ex+0x265/0x280 [ 106.953736][ T5963] ? audit_log_d_path+0x8d/0x150 [ 106.953766][ T5963] should_failslab+0x8c/0xb0 [ 106.953846][ T5963] __kmalloc_cache_noprof+0x4c/0x320 [ 106.953876][ T5963] audit_log_d_path+0x8d/0x150 [ 106.953906][ T5963] audit_log_d_path_exe+0x42/0x70 [ 106.954011][ T5963] audit_log_task+0x1e9/0x250 [ 106.954056][ T5963] audit_seccomp+0x61/0x100 [ 106.954092][ T5963] ? __seccomp_filter+0x68c/0x10d0 [ 106.954115][ T5963] __seccomp_filter+0x69d/0x10d0 [ 106.954215][ T5963] ? plist_check_list+0x1e4/0x210 [ 106.954314][ T5963] ? perf_cgroup_switch+0x132/0x450 [ 106.954360][ T5963] __secure_computing+0x82/0x150 [ 106.954404][ T5963] syscall_trace_enter+0xcf/0x1e0 [ 106.954516][ T5963] do_syscall_64+0xaa/0x1a0 [ 106.954537][ T5963] ? clear_bhb_loop+0x25/0x80 [ 106.954621][ T5963] ? clear_bhb_loop+0x25/0x80 [ 106.954648][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.954703][ T5963] RIP: 0033:0x7fbb9a4ae969 [ 106.954722][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.954750][ T5963] RSP: 002b:00007fbb98b17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 106.954771][ T5963] RAX: ffffffffffffffda RBX: 00007fbb9a6d5fa0 RCX: 00007fbb9a4ae969 [ 106.954787][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 106.954875][ T5963] RBP: 00007fbb98b17090 R08: 0000000000000000 R09: 0000000000000000 [ 106.954886][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.954899][ T5963] R13: 0000000000000000 R14: 00007fbb9a6d5fa0 R15: 00007ffc795e9808 [ 106.954931][ T5963] [ 107.503184][ T5970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.768167][ T5980] siw: device registration error -23 [ 107.775838][ T5980] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 108.648646][ T6021] siw: device registration error -23 [ 108.655809][ T6021] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.061159][ T6035] netlink: 180 bytes leftover after parsing attributes in process `syz.0.933'. [ 109.584714][ T6047] FAULT_INJECTION: forcing a failure. [ 109.584714][ T6047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.598691][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.2.939 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 109.598723][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.598744][ T6047] Call Trace: [ 109.598752][ T6047] [ 109.598762][ T6047] __dump_stack+0x1d/0x30 [ 109.598788][ T6047] dump_stack_lvl+0xe8/0x140 [ 109.598811][ T6047] dump_stack+0x15/0x1b [ 109.598827][ T6047] should_fail_ex+0x265/0x280 [ 109.598932][ T6047] should_fail+0xb/0x20 [ 109.598971][ T6047] should_fail_usercopy+0x1a/0x20 [ 109.599012][ T6047] _copy_to_user+0x20/0xa0 [ 109.599035][ T6047] simple_read_from_buffer+0xb5/0x130 [ 109.599124][ T6047] proc_fail_nth_read+0x100/0x140 [ 109.599148][ T6047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.599174][ T6047] vfs_read+0x19d/0x6f0 [ 109.599215][ T6047] ? __rcu_read_unlock+0x4f/0x70 [ 109.599234][ T6047] ? __fget_files+0x184/0x1c0 [ 109.599338][ T6047] ksys_read+0xda/0x1a0 [ 109.599366][ T6047] __x64_sys_read+0x40/0x50 [ 109.599389][ T6047] x64_sys_call+0x2d77/0x2fb0 [ 109.599467][ T6047] do_syscall_64+0xd0/0x1a0 [ 109.599489][ T6047] ? clear_bhb_loop+0x25/0x80 [ 109.599514][ T6047] ? clear_bhb_loop+0x25/0x80 [ 109.599592][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.599616][ T6047] RIP: 0033:0x7fbb9a4ad37c [ 109.599634][ T6047] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 109.599655][ T6047] RSP: 002b:00007fbb98b17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.599683][ T6047] RAX: ffffffffffffffda RBX: 00007fbb9a6d5fa0 RCX: 00007fbb9a4ad37c [ 109.599698][ T6047] RDX: 000000000000000f RSI: 00007fbb98b170a0 RDI: 0000000000000007 [ 109.599713][ T6047] RBP: 00007fbb98b17090 R08: 0000000000000000 R09: 0000000000000000 [ 109.599726][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.599737][ T6047] R13: 0000000000000000 R14: 00007fbb9a6d5fa0 R15: 00007ffc795e9808 [ 109.599754][ T6047] [ 110.517129][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 110.517146][ T30] audit: type=1400 audit(1746242393.031:2225): avc: denied { ioctl } for pid=6073 comm="syz.2.950" path="socket:[16588]" dev="sockfs" ino=16588 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.573373][ T30] audit: type=1400 audit(1746242393.091:2226): avc: denied { sys_module } for pid=6073 comm="syz.2.950" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 110.746662][ T30] audit: type=1400 audit(1746242393.261:2227): avc: denied { execute } for pid=6087 comm="syz.2.955" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 110.966392][ T30] audit: type=1400 audit(1746242393.481:2228): avc: denied { name_bind } for pid=6097 comm="syz.2.959" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 111.939799][ T30] audit: type=1400 audit(1746242394.361:2229): avc: denied { bind } for pid=6114 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.961218][ T30] audit: type=1400 audit(1746242394.361:2230): avc: denied { listen } for pid=6114 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.982696][ T30] audit: type=1400 audit(1746242394.361:2231): avc: denied { accept } for pid=6114 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.580972][ T30] audit: type=1326 audit(1746242395.101:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 112.605961][ T30] audit: type=1326 audit(1746242395.101:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 112.643089][ T30] audit: type=1326 audit(1746242395.151:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 112.732833][ T6141] program syz.5.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.739795][ T6176] program syz.2.988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.801196][ T6178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6178 comm=syz.2.989 [ 113.890234][ T6178] lo speed is unknown, defaulting to 1000 [ 113.907537][ T6178] lo speed is unknown, defaulting to 1000 [ 114.637997][ T6206] program syz.2.999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.023279][ T6231] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 115.078909][ T6234] program syz.2.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.477117][ T6248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1016'. [ 115.531923][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 115.531940][ T30] audit: type=1400 audit(1746242398.051:2352): avc: denied { ioctl } for pid=6250 comm="syz.0.1017" path="socket:[16946]" dev="sockfs" ino=16946 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.704186][ T30] audit: type=1400 audit(1746242398.221:2353): avc: denied { read } for pid=6271 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.769886][ T30] audit: type=1400 audit(1746242398.251:2354): avc: denied { read } for pid=6271 comm="gtp" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.798226][ T30] audit: type=1400 audit(1746242398.251:2355): avc: denied { open } for pid=6271 comm="gtp" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.826804][ T30] audit: type=1400 audit(1746242398.251:2356): avc: denied { ioctl } for pid=6271 comm="gtp" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.888833][ T30] audit: type=1326 audit(1746242398.401:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 115.918250][ T30] audit: type=1326 audit(1746242398.401:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 116.865348][ T6312] ALSA: seq fatal error: cannot create timer (-19) [ 116.897234][ T30] audit: type=1326 audit(1746242399.411:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 116.928209][ T30] audit: type=1326 audit(1746242399.411:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 116.930496][ T6272] gtp (6272) used greatest stack depth: 6776 bytes left [ 116.952085][ T30] audit: type=1326 audit(1746242399.411:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 117.195551][ T6335] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 117.288619][ T6341] lo speed is unknown, defaulting to 1000 [ 117.309903][ T6341] lo speed is unknown, defaulting to 1000 [ 118.209732][ T6378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.228311][ T6378] syz_tun: entered allmulticast mode [ 118.235951][ T6377] syz_tun: left allmulticast mode [ 118.262144][ T6380] FAULT_INJECTION: forcing a failure. [ 118.262144][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 118.282675][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.3.1072 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 118.282759][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 118.282775][ T6380] Call Trace: [ 118.282788][ T6380] [ 118.282798][ T6380] __dump_stack+0x1d/0x30 [ 118.282821][ T6380] dump_stack_lvl+0xe8/0x140 [ 118.282854][ T6380] dump_stack+0x15/0x1b [ 118.282875][ T6380] should_fail_ex+0x265/0x280 [ 118.282916][ T6380] should_failslab+0x8c/0xb0 [ 118.283033][ T6380] __kmalloc_node_noprof+0xa9/0x410 [ 118.283057][ T6380] ? __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 118.283141][ T6380] __vmalloc_node_range_noprof+0x3c5/0xdf0 [ 118.283174][ T6380] ? mod_objcg_state+0x40e/0x530 [ 118.283201][ T6380] ? copy_process+0x399/0x1f90 [ 118.283237][ T6380] __vmalloc_node_noprof+0x63/0x80 [ 118.283261][ T6380] ? copy_process+0x399/0x1f90 [ 118.283352][ T6380] dup_task_struct+0x449/0x6a0 [ 118.283388][ T6380] ? _parse_integer+0x27/0x40 [ 118.283417][ T6380] copy_process+0x399/0x1f90 [ 118.283501][ T6380] ? kstrtouint+0x76/0xc0 [ 118.283528][ T6380] ? kstrtouint_from_user+0x9f/0xf0 [ 118.283567][ T6380] ? __rcu_read_unlock+0x4f/0x70 [ 118.283593][ T6380] kernel_clone+0x16c/0x5b0 [ 118.283674][ T6380] ? vfs_write+0x75e/0x8d0 [ 118.283707][ T6380] __x64_sys_clone+0xe6/0x120 [ 118.283741][ T6380] x64_sys_call+0x2c59/0x2fb0 [ 118.283796][ T6380] do_syscall_64+0xd0/0x1a0 [ 118.283824][ T6380] ? clear_bhb_loop+0x25/0x80 [ 118.283851][ T6380] ? clear_bhb_loop+0x25/0x80 [ 118.283876][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.283898][ T6380] RIP: 0033:0x7fd0e8fbe969 [ 118.283933][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.283955][ T6380] RSP: 002b:00007fd0e7626fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 118.283974][ T6380] RAX: ffffffffffffffda RBX: 00007fd0e91e5fa0 RCX: 00007fd0e8fbe969 [ 118.283987][ T6380] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 118.283999][ T6380] RBP: 00007fd0e7627090 R08: 0000000000000000 R09: 0000000000000000 [ 118.284011][ T6380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 118.284023][ T6380] R13: 0000000000000000 R14: 00007fd0e91e5fa0 R15: 00007ffe3d8ea458 [ 118.284115][ T6380] [ 118.284133][ T6380] warn_alloc: 1 callbacks suppressed [ 118.284188][ T6380] syz.3.1072: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 118.620669][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.3.1072 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 118.620781][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 118.620796][ T6380] Call Trace: [ 118.620804][ T6380] [ 118.620813][ T6380] __dump_stack+0x1d/0x30 [ 118.620846][ T6380] dump_stack_lvl+0xe8/0x140 [ 118.620873][ T6380] dump_stack+0x15/0x1b [ 118.620896][ T6380] warn_alloc+0x12b/0x1a0 [ 118.620999][ T6380] __vmalloc_node_range_noprof+0x455/0xdf0 [ 118.621044][ T6380] ? copy_process+0x399/0x1f90 [ 118.621080][ T6380] __vmalloc_node_noprof+0x63/0x80 [ 118.621111][ T6380] ? copy_process+0x399/0x1f90 [ 118.621144][ T6380] dup_task_struct+0x449/0x6a0 [ 118.621185][ T6380] ? _parse_integer+0x27/0x40 [ 118.621224][ T6380] copy_process+0x399/0x1f90 [ 118.621256][ T6380] ? kstrtouint+0x76/0xc0 [ 118.621299][ T6380] ? kstrtouint_from_user+0x9f/0xf0 [ 118.621390][ T6380] ? __rcu_read_unlock+0x4f/0x70 [ 118.621420][ T6380] kernel_clone+0x16c/0x5b0 [ 118.621641][ T6380] ? vfs_write+0x75e/0x8d0 [ 118.621678][ T6380] __x64_sys_clone+0xe6/0x120 [ 118.621715][ T6380] x64_sys_call+0x2c59/0x2fb0 [ 118.621795][ T6380] do_syscall_64+0xd0/0x1a0 [ 118.621817][ T6380] ? clear_bhb_loop+0x25/0x80 [ 118.621840][ T6380] ? clear_bhb_loop+0x25/0x80 [ 118.621864][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.621970][ T6380] RIP: 0033:0x7fd0e8fbe969 [ 118.621989][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.622017][ T6380] RSP: 002b:00007fd0e7626fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 118.622038][ T6380] RAX: ffffffffffffffda RBX: 00007fd0e91e5fa0 RCX: 00007fd0e8fbe969 [ 118.622126][ T6380] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 118.622139][ T6380] RBP: 00007fd0e7627090 R08: 0000000000000000 R09: 0000000000000000 [ 118.622152][ T6380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 118.622167][ T6380] R13: 0000000000000000 R14: 00007fd0e91e5fa0 R15: 00007ffe3d8ea458 [ 118.622271][ T6380] [ 118.622333][ T6380] Mem-Info: [ 118.890844][ T6380] active_anon:3532 inactive_anon:0 isolated_anon:0 [ 118.890844][ T6380] active_file:4851 inactive_file:2136 isolated_file:0 [ 118.890844][ T6380] unevictable:0 dirty:93 writeback:0 [ 118.890844][ T6380] slab_reclaimable:2929 slab_unreclaimable:13694 [ 118.890844][ T6380] mapped:28452 shmem:295 pagetables:899 [ 118.890844][ T6380] sec_pagetables:0 bounce:0 [ 118.890844][ T6380] kernel_misc_reclaimable:0 [ 118.890844][ T6380] free:1912251 free_pcp:4723 free_cma:0 [ 118.949765][ T6380] Node 0 active_anon:14128kB inactive_anon:0kB active_file:19404kB inactive_file:8544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113808kB dirty:372kB writeback:0kB shmem:1180kB writeback_tmp:0kB kernel_stack:3232kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.982443][ T6380] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.014744][ T6380] lowmem_reserve[]: 0 2884 7863 7863 [ 119.022535][ T6380] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 119.057123][ T6380] lowmem_reserve[]: 0 0 4978 4978 [ 119.063874][ T6380] Node 0 Normal free:4683708kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14128kB inactive_anon:0kB active_file:19404kB inactive_file:8544kB unevictable:0kB writepending:372kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:15260kB local_pcp:11332kB free_cma:0kB [ 119.098803][ T6380] lowmem_reserve[]: 0 0 0 0 [ 119.103928][ T6380] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 119.117883][ T6380] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 119.136914][ T6380] Node 0 Normal: 887*4kB (UME) 608*8kB (UME) 458*16kB (UME) 362*32kB (UME) 273*64kB (UME) 151*128kB (UME) 105*256kB (UME) 74*512kB (UME) 58*1024kB (UME) 25*2048kB (UME) 1085*4096kB (UM) = 4683644kB [ 119.159687][ T6380] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 119.170170][ T6380] 7289 total pagecache pages [ 119.175037][ T6380] 9 pages in swap cache [ 119.180415][ T6380] Free swap = 124896kB [ 119.185090][ T6380] Total swap = 124996kB [ 119.189383][ T6380] 2097051 pages RAM [ 119.194618][ T6380] 0 pages HighMem/MovableOnly [ 119.199481][ T6380] 80258 pages reserved [ 119.250814][ T6393] program syz.3.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.317962][ T6403] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1078'. [ 119.508703][ T6419] FAULT_INJECTION: forcing a failure. [ 119.508703][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 119.522860][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.3.1088 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 119.522912][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 119.522954][ T6419] Call Trace: [ 119.522964][ T6419] [ 119.522975][ T6419] __dump_stack+0x1d/0x30 [ 119.523002][ T6419] dump_stack_lvl+0xe8/0x140 [ 119.523026][ T6419] dump_stack+0x15/0x1b [ 119.523047][ T6419] should_fail_ex+0x265/0x280 [ 119.523092][ T6419] should_failslab+0x8c/0xb0 [ 119.523150][ T6419] kmem_cache_alloc_noprof+0x50/0x310 [ 119.523217][ T6419] ? prepare_creds+0x37/0x4c0 [ 119.523238][ T6419] prepare_creds+0x37/0x4c0 [ 119.523257][ T6419] lookup_user_key+0x12a/0xd10 [ 119.523277][ T6419] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 119.523360][ T6419] __se_sys_add_key+0x263/0x350 [ 119.523390][ T6419] __x64_sys_add_key+0x67/0x80 [ 119.523417][ T6419] x64_sys_call+0x1d0d/0x2fb0 [ 119.523488][ T6419] do_syscall_64+0xd0/0x1a0 [ 119.523507][ T6419] ? clear_bhb_loop+0x25/0x80 [ 119.523598][ T6419] ? clear_bhb_loop+0x25/0x80 [ 119.523617][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.523636][ T6419] RIP: 0033:0x7fd0e8fbe969 [ 119.523650][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.523666][ T6419] RSP: 002b:00007fd0e7627038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 119.523683][ T6419] RAX: ffffffffffffffda RBX: 00007fd0e91e5fa0 RCX: 00007fd0e8fbe969 [ 119.523707][ T6419] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 119.523718][ T6419] RBP: 00007fd0e7627090 R08: ffffffffffffffff R09: 0000000000000000 [ 119.523728][ T6419] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 119.523738][ T6419] R13: 0000000000000000 R14: 00007fd0e91e5fa0 R15: 00007ffe3d8ea458 [ 119.523754][ T6419] [ 119.771513][ T6429] program syz.2.1092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.044053][ T6441] lo speed is unknown, defaulting to 1000 [ 120.051368][ T6441] lo speed is unknown, defaulting to 1000 [ 120.552682][ T6451] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1101'. [ 120.577750][ T6457] program syz.0.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.588853][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 120.588942][ T30] audit: type=1326 audit(1746242403.101:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.621217][ T30] audit: type=1326 audit(1746242403.101:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.645548][ T30] audit: type=1326 audit(1746242403.101:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.669961][ T30] audit: type=1326 audit(1746242403.101:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.694650][ T30] audit: type=1326 audit(1746242403.101:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.718274][ T30] audit: type=1326 audit(1746242403.101:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.744520][ T30] audit: type=1326 audit(1746242403.101:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.769268][ T30] audit: type=1326 audit(1746242403.101:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.795071][ T30] audit: type=1326 audit(1746242403.101:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.820085][ T30] audit: type=1326 audit(1746242403.101:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 120.980438][ T6487] lo speed is unknown, defaulting to 1000 [ 120.988576][ T6487] lo speed is unknown, defaulting to 1000 [ 121.029005][ T6493] program syz.3.1118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.131398][ T6501] FAULT_INJECTION: forcing a failure. [ 121.131398][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.145221][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.2.1119 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 121.145264][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 121.145281][ T6501] Call Trace: [ 121.145291][ T6501] [ 121.145307][ T6501] __dump_stack+0x1d/0x30 [ 121.145333][ T6501] dump_stack_lvl+0xe8/0x140 [ 121.145425][ T6501] dump_stack+0x15/0x1b [ 121.145443][ T6501] should_fail_ex+0x265/0x280 [ 121.145524][ T6501] should_fail+0xb/0x20 [ 121.145561][ T6501] should_fail_usercopy+0x1a/0x20 [ 121.145582][ T6501] _copy_from_user+0x1c/0xb0 [ 121.145608][ T6501] ___sys_sendmsg+0xc1/0x1d0 [ 121.145719][ T6501] __sys_sendmmsg+0x178/0x300 [ 121.145758][ T6501] __x64_sys_sendmmsg+0x57/0x70 [ 121.145777][ T6501] x64_sys_call+0x2f2f/0x2fb0 [ 121.145798][ T6501] do_syscall_64+0xd0/0x1a0 [ 121.145820][ T6501] ? clear_bhb_loop+0x25/0x80 [ 121.145899][ T6501] ? clear_bhb_loop+0x25/0x80 [ 121.145927][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.145953][ T6501] RIP: 0033:0x7fbb9a4ae969 [ 121.145969][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.146071][ T6501] RSP: 002b:00007fbb98aed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.146094][ T6501] RAX: ffffffffffffffda RBX: 00007fbb9a6d6080 RCX: 00007fbb9a4ae969 [ 121.146111][ T6501] RDX: 0400000000000239 RSI: 0000200000002980 RDI: 000000000000000a [ 121.146171][ T6501] RBP: 00007fbb98aed090 R08: 0000000000000000 R09: 0000000000000000 [ 121.146184][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.146243][ T6501] R13: 0000000000000001 R14: 00007fbb9a6d6080 R15: 00007ffc795e9808 [ 121.146263][ T6501] [ 121.363315][ T6500] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1120'. [ 121.455982][ T6508] lo speed is unknown, defaulting to 1000 [ 121.463195][ T6508] lo speed is unknown, defaulting to 1000 [ 121.919943][ T6524] program syz.0.1131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.092229][ T6535] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1136'. [ 122.133383][ T6537] SET target dimension over the limit! [ 122.301678][ T6557] program syz.3.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.406466][ T6560] lo speed is unknown, defaulting to 1000 [ 122.413872][ T6560] lo speed is unknown, defaulting to 1000 [ 123.147688][ T6581] program syz.3.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.317968][ T6599] siw: device registration error -23 [ 123.377925][ T6601] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 123.546260][ T6607] lo speed is unknown, defaulting to 1000 [ 123.553951][ T6607] lo speed is unknown, defaulting to 1000 [ 124.031643][ T6617] program syz.5.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.277294][ T6639] program syz.1.1180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.362295][ T6653] siw: device registration error -23 [ 124.368501][ T6653] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 124.599428][ T6669] lo speed is unknown, defaulting to 1000 [ 124.606751][ T6669] lo speed is unknown, defaulting to 1000 [ 124.967072][ T6676] program syz.3.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.451702][ T6723] siw: device registration error -23 [ 125.469802][ T6723] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 125.589982][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 125.590000][ T30] audit: type=1326 audit(1746242408.111:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 125.675092][ T30] audit: type=1326 audit(1746242408.151:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 125.714654][ T6740] lo speed is unknown, defaulting to 1000 [ 125.722910][ T6740] lo speed is unknown, defaulting to 1000 [ 125.871647][ T30] audit: type=1326 audit(1746242408.371:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 125.897328][ T30] audit: type=1326 audit(1746242408.371:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 125.931217][ T30] audit: type=1326 audit(1746242408.371:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 125.959490][ T30] audit: type=1326 audit(1746242408.371:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 125.985177][ T30] audit: type=1326 audit(1746242408.371:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 126.012007][ T30] audit: type=1326 audit(1746242408.371:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 126.039969][ T30] audit: type=1326 audit(1746242408.371:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 126.065691][ T30] audit: type=1326 audit(1746242408.371:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.0.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 126.721813][ T6759] siw: device registration error -23 [ 126.866985][ T6759] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.626978][ T6789] lo speed is unknown, defaulting to 1000 [ 127.633796][ T6789] lo speed is unknown, defaulting to 1000 [ 127.942789][ T6791] lo speed is unknown, defaulting to 1000 [ 127.950914][ T6791] lo speed is unknown, defaulting to 1000 [ 129.356045][ T6798] siw: device registration error -23 [ 129.369988][ T6798] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 129.478150][ T6801] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 129.876554][ T6834] program syz.0.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.369528][ T6848] vlan1: entered allmulticast mode [ 130.374771][ T6848] bond0: entered allmulticast mode [ 130.380312][ T6848] bond_slave_0: entered allmulticast mode [ 130.386374][ T6848] bond_slave_1: entered allmulticast mode [ 130.581117][ T6857] FAULT_INJECTION: forcing a failure. [ 130.581117][ T6857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.595479][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.3.1269 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 130.595515][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.595532][ T6857] Call Trace: [ 130.595540][ T6857] [ 130.595551][ T6857] __dump_stack+0x1d/0x30 [ 130.595576][ T6857] dump_stack_lvl+0xe8/0x140 [ 130.595595][ T6857] dump_stack+0x15/0x1b [ 130.595655][ T6857] should_fail_ex+0x265/0x280 [ 130.595692][ T6857] should_fail+0xb/0x20 [ 130.595723][ T6857] should_fail_usercopy+0x1a/0x20 [ 130.595793][ T6857] strncpy_from_user+0x25/0x230 [ 130.595875][ T6857] strncpy_from_bpfptr+0x43/0x50 [ 130.595955][ T6857] bpf_prog_load+0x884/0x1070 [ 130.596101][ T6857] ? security_bpf+0x2b/0x90 [ 130.596196][ T6857] __sys_bpf+0x51d/0x790 [ 130.596240][ T6857] __x64_sys_bpf+0x41/0x50 [ 130.596285][ T6857] x64_sys_call+0x2478/0x2fb0 [ 130.596467][ T6857] do_syscall_64+0xd0/0x1a0 [ 130.596502][ T6857] ? clear_bhb_loop+0x25/0x80 [ 130.596529][ T6857] ? clear_bhb_loop+0x25/0x80 [ 130.596630][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.596685][ T6857] RIP: 0033:0x7fd0e8fbe969 [ 130.596702][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.596721][ T6857] RSP: 002b:00007fd0e7627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.596795][ T6857] RAX: ffffffffffffffda RBX: 00007fd0e91e5fa0 RCX: 00007fd0e8fbe969 [ 130.596811][ T6857] RDX: 0000000000000094 RSI: 00002000000023c0 RDI: 0000000000000005 [ 130.596826][ T6857] RBP: 00007fd0e7627090 R08: 0000000000000000 R09: 0000000000000000 [ 130.596844][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.596921][ T6857] R13: 0000000000000001 R14: 00007fd0e91e5fa0 R15: 00007ffe3d8ea458 [ 130.596941][ T6857] [ 131.492965][ T6863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.515342][ T6863] syz_tun: entered allmulticast mode [ 131.521778][ T6862] syz_tun: left allmulticast mode [ 131.567308][ T6868] program syz.3.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.808256][ T6880] SET target dimension over the limit! [ 132.065605][ T6892] siw: device registration error -23 [ 132.073288][ T6892] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 132.169852][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.178796][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.189161][ T6898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.210824][ T6898] syz_tun: entered allmulticast mode [ 132.217097][ T6897] syz_tun: left allmulticast mode [ 132.244562][ T6900] program syz.2.1287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.277182][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 132.277200][ T30] audit: type=1400 audit(1746242414.791:2877): avc: denied { watch } for pid=6903 comm="syz.2.1289" path="/236/file0" dev="tmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.756233][ T6922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.781261][ T3380] lo speed is unknown, defaulting to 1000 [ 132.794468][ T6923] syz_tun: entered allmulticast mode [ 132.855268][ T6919] syz_tun: left allmulticast mode [ 133.058253][ T6933] siw: device registration error -23 [ 133.093723][ T6933] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 133.716513][ T30] audit: type=1326 audit(1746242416.231:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 133.747200][ T30] audit: type=1326 audit(1746242416.231:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 133.893667][ T6949] tipc: Started in network mode [ 133.898934][ T6949] tipc: Node identity 7, cluster identity 4711 [ 133.905827][ T6949] tipc: Node number set to 7 [ 133.979186][ T30] audit: type=1326 audit(1746242416.301:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.006065][ T30] audit: type=1326 audit(1746242416.301:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.033729][ T30] audit: type=1326 audit(1746242416.301:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.059575][ T30] audit: type=1326 audit(1746242416.301:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.085723][ T30] audit: type=1326 audit(1746242416.301:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.112736][ T30] audit: type=1326 audit(1746242416.301:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.141423][ T30] audit: type=1326 audit(1746242416.301:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 134.309602][ T6957] siw: device registration error -23 [ 134.362993][ T6957] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 135.362771][ T7001] siw: device registration error -23 [ 135.420289][ T7001] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 136.508391][ T7027] program syz.0.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.617883][ T7033] lo speed is unknown, defaulting to 1000 [ 136.625904][ T7033] lo speed is unknown, defaulting to 1000 [ 137.262701][ T7040] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 137.286839][ T30] kauditd_printk_skb: 137 callbacks suppressed [ 137.286857][ T30] audit: type=1326 audit(1746242419.801:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 137.329504][ T30] audit: type=1326 audit(1746242419.801:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 139.861168][ T30] audit: type=1326 audit(1746242422.381:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 139.938459][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 139.986253][ T7089] syz_tun: entered allmulticast mode [ 139.996322][ T30] audit: type=1326 audit(1746242422.411:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.5.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 140.025660][ T7087] vhci_hcd: default hub control req: 8010 v0002 i0000 l86 [ 140.060261][ T7088] syz_tun: left allmulticast mode [ 140.542694][ T7104] tipc: Started in network mode [ 140.547646][ T7104] tipc: Node identity 7a9f9e954c81, cluster identity 4711 [ 140.555505][ T7104] tipc: Enabled bearer , priority 0 [ 140.594431][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1370'. [ 140.635065][ T30] audit: type=1400 audit(1746242423.151:3028): avc: denied { bind } for pid=7103 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.656822][ T5040] tipc: Resetting bearer [ 140.667502][ T7103] tipc: Resetting bearer [ 140.694653][ T7103] tipc: Disabling bearer [ 141.624711][ T30] audit: type=1326 audit(1746242424.141:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 141.776314][ T30] audit: type=1326 audit(1746242424.221:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 141.801387][ T30] audit: type=1326 audit(1746242424.221:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 141.828052][ T30] audit: type=1326 audit(1746242424.221:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 141.854548][ T30] audit: type=1326 audit(1746242424.221:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 141.996344][ T7125] syz_tun: entered allmulticast mode [ 142.014469][ T7124] syz_tun: left allmulticast mode [ 142.560478][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 142.603385][ T7140] program syz.0.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.640512][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 142.640528][ T30] audit: type=1400 audit(1746242425.161:3046): avc: denied { create } for pid=7142 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.680454][ T30] audit: type=1326 audit(1746242425.191:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.706546][ T30] audit: type=1326 audit(1746242425.191:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.731378][ T30] audit: type=1326 audit(1746242425.201:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.756950][ T30] audit: type=1326 audit(1746242425.201:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.782564][ T30] audit: type=1326 audit(1746242425.201:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.808417][ T7148] syz_tun: entered allmulticast mode [ 142.808590][ T30] audit: type=1326 audit(1746242425.281:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.815067][ T7147] syz_tun: left allmulticast mode [ 142.838790][ T30] audit: type=1326 audit(1746242425.281:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.868121][ T30] audit: type=1326 audit(1746242425.281:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.906934][ T30] audit: type=1326 audit(1746242425.421:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 142.949031][ T7144] !€ÿ: renamed from bond_slave_0 (while UP) [ 143.010767][ T7144] xt_hashlimit: max too large, truncated to 1048576 [ 143.053971][ T7159] program syz.5.1393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.068264][ T7144] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 143.172535][ T7159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 143.411359][ T7182] syz_tun: entered allmulticast mode [ 143.453834][ T7181] syz_tun: left allmulticast mode [ 143.656210][ T7186] lo speed is unknown, defaulting to 1000 [ 143.685618][ T7186] lo speed is unknown, defaulting to 1000 [ 144.260624][ T7199] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 145.021017][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 145.074411][ T7234] FAULT_INJECTION: forcing a failure. [ 145.074411][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 145.087532][ T7234] CPU: 1 UID: 0 PID: 7234 Comm: syz.1.1421 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 145.087562][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 145.087578][ T7234] Call Trace: [ 145.087587][ T7234] [ 145.087597][ T7234] __dump_stack+0x1d/0x30 [ 145.087625][ T7234] dump_stack_lvl+0xe8/0x140 [ 145.087650][ T7234] dump_stack+0x15/0x1b [ 145.087673][ T7234] should_fail_ex+0x265/0x280 [ 145.087715][ T7234] should_failslab+0x8c/0xb0 [ 145.087830][ T7234] kmem_cache_alloc_noprof+0x50/0x310 [ 145.087875][ T7234] ? vm_area_dup+0x32/0x260 [ 145.087904][ T7234] vm_area_dup+0x32/0x260 [ 145.087932][ T7234] __split_vma+0xe9/0x610 [ 145.087972][ T7234] ? mas_state_walk+0x2ad/0x650 [ 145.087999][ T7234] ? __sanitizer_cov_trace_cmp8+0x11/0x90 [ 145.088046][ T7234] vms_gather_munmap_vmas+0x172/0x7a0 [ 145.088089][ T7234] ? mas_find+0x515/0x610 [ 145.088117][ T7234] mmap_region+0x44f/0x1470 [ 145.088159][ T7234] ? mntput+0x4b/0x80 [ 145.088179][ T7234] ? terminate_walk+0x27f/0x2a0 [ 145.088236][ T7234] do_mmap+0x9de/0xc20 [ 145.088266][ T7234] vm_mmap_pgoff+0x17a/0x2e0 [ 145.088296][ T7234] ksys_mmap_pgoff+0x268/0x310 [ 145.088330][ T7234] x64_sys_call+0x1602/0x2fb0 [ 145.088357][ T7234] do_syscall_64+0xd0/0x1a0 [ 145.088384][ T7234] ? clear_bhb_loop+0x25/0x80 [ 145.088412][ T7234] ? clear_bhb_loop+0x25/0x80 [ 145.088438][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.088462][ T7234] RIP: 0033:0x7ff339dee969 [ 145.088478][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.088496][ T7234] RSP: 002b:00007ff338457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 145.088516][ T7234] RAX: ffffffffffffffda RBX: 00007ff33a015fa0 RCX: 00007ff339dee969 [ 145.088532][ T7234] RDX: 0000000002800004 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 145.088547][ T7234] RBP: 00007ff338457090 R08: 0000000000000005 R09: 0000000000000000 [ 145.088564][ T7234] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 145.088579][ T7234] R13: 0000000000000000 R14: 00007ff33a015fa0 R15: 00007ffc4ecc37c8 [ 145.088602][ T7234] [ 145.397235][ T7237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.422967][ T7244] program syz.1.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.542174][ T7237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.601733][ T7237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.783252][ T7237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.820348][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 145.891371][ T7237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.002758][ T7237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.019440][ T7264] siw: device registration error -23 [ 146.072825][ T7237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.096105][ T7265] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 146.168994][ T7237] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.602792][ T7285] IPv6: Can't replace route, no match found [ 148.172671][ T7309] lo speed is unknown, defaulting to 1000 [ 148.191210][ T7309] lo speed is unknown, defaulting to 1000 [ 148.204783][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 148.204802][ T30] audit: type=1400 audit(1746242430.721:3303): avc: denied { create } for pid=7291 comm="syz.3.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.324765][ T30] audit: type=1400 audit(1746242430.751:3304): avc: denied { read } for pid=7291 comm="syz.3.1443" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 148.348519][ T30] audit: type=1400 audit(1746242430.751:3305): avc: denied { open } for pid=7291 comm="syz.3.1443" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 148.375567][ T30] audit: type=1400 audit(1746242430.751:3306): avc: denied { ioctl } for pid=7291 comm="syz.3.1443" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 148.584560][ T30] audit: type=1400 audit(1746242431.091:3307): avc: denied { read } for pid=7319 comm="syz.2.1452" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.610132][ T30] audit: type=1400 audit(1746242431.091:3308): avc: denied { open } for pid=7319 comm="syz.2.1452" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.634882][ T30] audit: type=1400 audit(1746242431.101:3309): avc: denied { ioctl } for pid=7319 comm="syz.2.1452" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.762961][ T7326] netlink: 'syz.1.1454': attribute type 27 has an invalid length. [ 148.789694][ T30] audit: type=1400 audit(1746242431.271:3310): avc: denied { create } for pid=7325 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.809909][ T30] audit: type=1400 audit(1746242431.271:3311): avc: denied { connect } for pid=7325 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.830610][ T30] audit: type=1400 audit(1746242431.271:3312): avc: denied { write } for pid=7325 comm="syz.1.1454" path="socket:[20330]" dev="sockfs" ino=20330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.866611][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1453'. [ 148.943918][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.951456][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.011349][ T7326] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.020153][ T7326] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.029352][ T7326] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.038759][ T7326] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.078409][ T9] lo speed is unknown, defaulting to 1000 [ 149.084732][ T9] syz2: Port: 1 Link DOWN [ 149.244923][ T7343] program syz.2.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.352815][ T7352] batman_adv: batadv0: Adding interface: dummy0 [ 149.359234][ T7352] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.400943][ T7352] batman_adv: batadv0: Interface activated: dummy0 [ 149.411104][ T7358] batadv0: mtu less than device minimum [ 149.417439][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.429662][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.440840][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.453266][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.467437][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.480132][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.491672][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.503238][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.515220][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.577801][ T7363] FAULT_INJECTION: forcing a failure. [ 149.577801][ T7363] name failslab, interval 1, probability 0, space 0, times 0 [ 149.590929][ T7363] CPU: 0 UID: 0 PID: 7363 Comm: syz.5.1468 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 149.590959][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.590971][ T7363] Call Trace: [ 149.590978][ T7363] [ 149.590986][ T7363] __dump_stack+0x1d/0x30 [ 149.591019][ T7363] dump_stack_lvl+0xe8/0x140 [ 149.591045][ T7363] dump_stack+0x15/0x1b [ 149.591067][ T7363] should_fail_ex+0x265/0x280 [ 149.591127][ T7363] should_failslab+0x8c/0xb0 [ 149.591163][ T7363] kmem_cache_alloc_node_noprof+0x57/0x320 [ 149.591208][ T7363] ? perf_event_alloc+0x152/0x15c0 [ 149.591260][ T7363] perf_event_alloc+0x152/0x15c0 [ 149.591296][ T7363] inherit_event+0x7e/0x680 [ 149.591330][ T7363] inherit_task_group+0x268/0x680 [ 149.591457][ T7363] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 149.591498][ T7363] perf_event_init_task+0x16c/0x3b0 [ 149.591535][ T7363] copy_process+0xb33/0x1f90 [ 149.591560][ T7363] ? kstrtouint+0x76/0xc0 [ 149.591690][ T7363] ? __rcu_read_unlock+0x4f/0x70 [ 149.591722][ T7363] kernel_clone+0x16c/0x5b0 [ 149.591756][ T7363] ? vfs_write+0x75e/0x8d0 [ 149.591783][ T7363] __x64_sys_clone+0xe6/0x120 [ 149.591870][ T7363] x64_sys_call+0x2c59/0x2fb0 [ 149.591899][ T7363] do_syscall_64+0xd0/0x1a0 [ 149.591926][ T7363] ? clear_bhb_loop+0x25/0x80 [ 149.591952][ T7363] ? clear_bhb_loop+0x25/0x80 [ 149.592053][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.592079][ T7363] RIP: 0033:0x7f7aaaece969 [ 149.592167][ T7363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.592185][ T7363] RSP: 002b:00007f7aa9536fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 149.592202][ T7363] RAX: ffffffffffffffda RBX: 00007f7aab0f5fa0 RCX: 00007f7aaaece969 [ 149.592217][ T7363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000600e7080 [ 149.592232][ T7363] RBP: 00007f7aa9537090 R08: 0000000000000000 R09: 0000000000000000 [ 149.592244][ T7363] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 149.592260][ T7363] R13: 0000000000000000 R14: 00007f7aab0f5fa0 R15: 00007fff367ca878 [ 149.592279][ T7363] [ 150.121172][ T7370] FAULT_INJECTION: forcing a failure. [ 150.121172][ T7370] name failslab, interval 1, probability 0, space 0, times 0 [ 150.134188][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.5.1471 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 150.134264][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.134279][ T7370] Call Trace: [ 150.134288][ T7370] [ 150.134298][ T7370] __dump_stack+0x1d/0x30 [ 150.134325][ T7370] dump_stack_lvl+0xe8/0x140 [ 150.134410][ T7370] dump_stack+0x15/0x1b [ 150.134437][ T7370] should_fail_ex+0x265/0x280 [ 150.134477][ T7370] should_failslab+0x8c/0xb0 [ 150.134505][ T7370] kmem_cache_alloc_noprof+0x50/0x310 [ 150.134604][ T7370] ? audit_log_start+0x365/0x6c0 [ 150.134706][ T7370] audit_log_start+0x365/0x6c0 [ 150.134747][ T7370] audit_seccomp+0x48/0x100 [ 150.134852][ T7370] ? __seccomp_filter+0x68c/0x10d0 [ 150.134877][ T7370] __seccomp_filter+0x69d/0x10d0 [ 150.134905][ T7370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 150.134931][ T7370] ? vfs_write+0x75e/0x8d0 [ 150.134954][ T7370] ? __rcu_read_unlock+0x4f/0x70 [ 150.135047][ T7370] ? __fget_files+0x184/0x1c0 [ 150.135084][ T7370] __secure_computing+0x82/0x150 [ 150.135126][ T7370] syscall_trace_enter+0xcf/0x1e0 [ 150.135150][ T7370] do_syscall_64+0xaa/0x1a0 [ 150.135173][ T7370] ? clear_bhb_loop+0x25/0x80 [ 150.135226][ T7370] ? clear_bhb_loop+0x25/0x80 [ 150.135247][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.135270][ T7370] RIP: 0033:0x7f7aaaece969 [ 150.135289][ T7370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.135370][ T7370] RSP: 002b:00007f7aa9537038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 150.135388][ T7370] RAX: ffffffffffffffda RBX: 00007f7aab0f5fa0 RCX: 00007f7aaaece969 [ 150.135401][ T7370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.135412][ T7370] RBP: 00007f7aa9537090 R08: 0000000000000000 R09: 0000000000000000 [ 150.135434][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.135450][ T7370] R13: 0000000000000000 R14: 00007f7aab0f5fa0 R15: 00007fff367ca878 [ 150.135486][ T7370] [ 150.380957][ T7372] program syz.2.1473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.555199][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.575834][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.637928][ T7401] FAULT_INJECTION: forcing a failure. [ 150.637928][ T7401] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.651808][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.1.1483 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 150.651838][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.651853][ T7401] Call Trace: [ 150.651935][ T7401] [ 150.651943][ T7401] __dump_stack+0x1d/0x30 [ 150.651967][ T7401] dump_stack_lvl+0xe8/0x140 [ 150.652020][ T7401] dump_stack+0x15/0x1b [ 150.652039][ T7401] should_fail_ex+0x265/0x280 [ 150.652077][ T7401] should_fail_alloc_page+0xf2/0x100 [ 150.652170][ T7401] __alloc_frozen_pages_noprof+0xff/0x360 [ 150.652203][ T7401] alloc_pages_mpol+0xb3/0x250 [ 150.652229][ T7401] vma_alloc_folio_noprof+0x1aa/0x300 [ 150.652320][ T7401] do_wp_page+0x673/0x23e0 [ 150.652352][ T7401] ? __count_memcg_events+0xcd/0x210 [ 150.652479][ T7401] ? __rcu_read_unlock+0x4f/0x70 [ 150.652504][ T7401] ? __rcu_read_lock+0x37/0x50 [ 150.652532][ T7401] handle_mm_fault+0x6dc/0x2ae0 [ 150.652564][ T7401] ? __rcu_read_unlock+0x4f/0x70 [ 150.652723][ T7401] do_user_addr_fault+0x3fe/0x1090 [ 150.652767][ T7401] exc_page_fault+0x54/0xc0 [ 150.652827][ T7401] asm_exc_page_fault+0x26/0x30 [ 150.652851][ T7401] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 150.652887][ T7401] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 150.652905][ T7401] RSP: 0018:ffffc900112c7a18 EFLAGS: 00050206 [ 150.652925][ T7401] RAX: ffff88810ac35d18 RBX: ffff888108850000 RCX: 0000000000006ec0 [ 150.653017][ T7401] RDX: 0000000000000000 RSI: ffff888108851140 RDI: 0000200000006000 [ 150.653029][ T7401] RBP: 0000200000004ec0 R08: 0000000000000550 R09: 0000000000000000 [ 150.653081][ T7401] R10: 0001888108850000 R11: 0001888108857fff R12: 000020000000cec0 [ 150.653097][ T7401] R13: ffffc900112c7dd0 R14: 0000000000008000 R15: 00007ffffffff000 [ 150.653117][ T7401] _copy_to_iter+0x13e/0xdd0 [ 150.653135][ T7401] ? avc_has_perm_noaudit+0x1b1/0x200 [ 150.653175][ T7401] ? avc_has_perm+0xd3/0x150 [ 150.653233][ T7401] __skb_datagram_iter+0x2e4/0x680 [ 150.653259][ T7401] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.653284][ T7401] skb_copy_datagram_iter+0x3d/0x110 [ 150.653312][ T7401] unix_stream_read_actor+0x43/0x70 [ 150.653344][ T7401] unix_stream_read_generic+0x681/0x13c0 [ 150.653400][ T7401] ? avc_has_perm_noaudit+0x1b1/0x200 [ 150.653454][ T7401] unix_stream_recvmsg+0xc3/0xf0 [ 150.653479][ T7401] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 150.653501][ T7401] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 150.653592][ T7401] sock_recvmsg+0x136/0x170 [ 150.653651][ T7401] __sys_recvfrom+0x122/0x1f0 [ 150.653702][ T7401] __x64_sys_recvfrom+0x76/0x90 [ 150.653733][ T7401] x64_sys_call+0x1a52/0x2fb0 [ 150.653822][ T7401] do_syscall_64+0xd0/0x1a0 [ 150.653928][ T7401] ? clear_bhb_loop+0x25/0x80 [ 150.653958][ T7401] ? clear_bhb_loop+0x25/0x80 [ 150.654021][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.654049][ T7401] RIP: 0033:0x7ff339dee969 [ 150.654079][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.654101][ T7401] RSP: 002b:00007ff338457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 150.654126][ T7401] RAX: ffffffffffffffda RBX: 00007ff33a015fa0 RCX: 00007ff339dee969 [ 150.654138][ T7401] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000003 [ 150.654169][ T7401] RBP: 00007ff338457090 R08: 0000000000000000 R09: 0000000000000000 [ 150.654185][ T7401] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 150.654254][ T7401] R13: 0000000000000000 R14: 00007ff33a015fa0 R15: 00007ffc4ecc37c8 [ 150.654273][ T7401] [ 151.154373][ T7406] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.205800][ T7405] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.272905][ T7419] netlink: 'syz.5.1487': attribute type 1 has an invalid length. [ 151.314681][ T7419] netlink: 'syz.5.1487': attribute type 10 has an invalid length. [ 151.322880][ T7419] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1487'. [ 151.333169][ T7419] team0: entered promiscuous mode [ 151.338415][ T7419] team_slave_0: entered promiscuous mode [ 151.345194][ T7419] team_slave_1: entered promiscuous mode [ 151.351803][ T7419] bridge0: port 3(team0) entered blocking state [ 151.359498][ T7419] bridge0: port 3(team0) entered disabled state [ 151.366481][ T7419] team0: entered allmulticast mode [ 151.371811][ T7419] team_slave_0: entered allmulticast mode [ 151.377809][ T7419] team_slave_1: entered allmulticast mode [ 151.386396][ T7419] bridge0: port 3(team0) entered blocking state [ 151.392906][ T7419] bridge0: port 3(team0) entered forwarding state [ 151.797142][ T7449] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.274806][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1513'. [ 152.472050][ T7504] program syz.0.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.894243][ T7532] futex_wake_op: syz.2.1531 tries to shift op by -1; fix this program [ 153.068488][ T7534] program syz.2.1532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.206489][ T7540] FAULT_INJECTION: forcing a failure. [ 153.206489][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.220408][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: syz.2.1534 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 153.220436][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.220452][ T7540] Call Trace: [ 153.220460][ T7540] [ 153.220470][ T7540] __dump_stack+0x1d/0x30 [ 153.220496][ T7540] dump_stack_lvl+0xe8/0x140 [ 153.220529][ T7540] dump_stack+0x15/0x1b [ 153.220548][ T7540] should_fail_ex+0x265/0x280 [ 153.220584][ T7540] should_fail+0xb/0x20 [ 153.220612][ T7540] should_fail_usercopy+0x1a/0x20 [ 153.220712][ T7540] _copy_from_user+0x1c/0xb0 [ 153.220739][ T7540] __sys_bind+0x106/0x2a0 [ 153.220842][ T7540] __x64_sys_bind+0x3f/0x50 [ 153.220869][ T7540] x64_sys_call+0x2086/0x2fb0 [ 153.220896][ T7540] do_syscall_64+0xd0/0x1a0 [ 153.220976][ T7540] ? clear_bhb_loop+0x25/0x80 [ 153.221005][ T7540] ? clear_bhb_loop+0x25/0x80 [ 153.221107][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.221132][ T7540] RIP: 0033:0x7fbb9a4ae969 [ 153.221149][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.221170][ T7540] RSP: 002b:00007fbb98b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 153.221265][ T7540] RAX: ffffffffffffffda RBX: 00007fbb9a6d5fa0 RCX: 00007fbb9a4ae969 [ 153.221280][ T7540] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000006 [ 153.221294][ T7540] RBP: 00007fbb98b17090 R08: 0000000000000000 R09: 0000000000000000 [ 153.221309][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.221324][ T7540] R13: 0000000000000000 R14: 00007fbb9a6d5fa0 R15: 00007ffc795e9808 [ 153.221348][ T7540] [ 153.239179][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 153.239223][ T30] audit: type=1326 audit(1746242435.741:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 153.437544][ T30] audit: type=1326 audit(1746242435.741:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 153.625690][ T30] audit: type=1400 audit(1746242436.141:3490): avc: denied { execute_no_trans } for pid=7554 comm="syz.5.1542" path="/284/file0" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.653693][ T7567] program syz.0.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.328997][ T30] audit: type=1326 audit(1746242436.831:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7575 comm="syz.0.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 154.533607][ T30] audit: type=1400 audit(1746242437.051:3492): avc: denied { write } for pid=7588 comm="syz.2.1551" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.595801][ T30] audit: type=1400 audit(1746242437.111:3493): avc: denied { append } for pid=7593 comm="syz.3.1553" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.623561][ T30] audit: type=1400 audit(1746242437.141:3494): avc: denied { create } for pid=7595 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.645331][ T30] audit: type=1400 audit(1746242437.141:3495): avc: denied { write } for pid=7595 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.689589][ T7602] program syz.0.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.727595][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 154.737828][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 154.807826][ T30] audit: type=1400 audit(1746242437.321:3496): avc: denied { read } for pid=7621 comm="syz.3.1563" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.823787][ T7622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1563'. [ 154.856171][ T7626] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1560'. [ 154.866393][ T7626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1560'. [ 154.876434][ T30] audit: type=1400 audit(1746242437.321:3497): avc: denied { open } for pid=7621 comm="syz.3.1563" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.049075][ T7643] program syz.0.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.090786][ T7645] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1569'. [ 155.325375][ T7661] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1576'. [ 155.932965][ T7670] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1581'. [ 155.955041][ T7674] program syz.2.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.305189][ T7690] SELinux: failed to load policy [ 156.400679][ T7693] lo speed is unknown, defaulting to 1000 [ 156.469933][ T7693] lo speed is unknown, defaulting to 1000 [ 156.560915][ T7700] __nla_validate_parse: 2 callbacks suppressed [ 156.560935][ T7700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1591'. [ 156.919837][ T7706] program syz.1.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.234890][ T7719] siw: device registration error -23 [ 157.252645][ T7719] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 157.743259][ T7731] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 157.752135][ T7731] tipc: Enabled bearer , priority 10 [ 157.850692][ T7734] program syz.0.1606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.878307][ T7731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7731 comm=syz.3.1605 [ 159.579033][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 159.579049][ T30] audit: type=1326 audit(1746242442.071:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 159.611791][ T30] audit: type=1326 audit(1746242442.071:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e8fbe969 code=0x7ffc0000 [ 159.738758][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 159.773784][ T7778] team0 (unregistering): Port device team_slave_0 removed [ 159.791780][ T7778] team0 (unregistering): Port device team_slave_1 removed [ 159.909645][ T30] audit: type=1400 audit(1746242442.421:3554): avc: denied { connect } for pid=7777 comm="syz.3.1622" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.555434][ T30] audit: type=1400 audit(1746242443.071:3555): avc: denied { append } for pid=7786 comm="syz.1.1624" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.586090][ T7787] random: crng reseeded on system resumption [ 160.725815][ T30] audit: type=1400 audit(1746242443.101:3556): avc: denied { open } for pid=7786 comm="syz.1.1624" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.787871][ T30] audit: type=1326 audit(1746242443.301:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.1.1624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x0 [ 160.970804][ T7801] x_tables: duplicate underflow at hook 1 [ 161.213722][ T30] audit: type=1326 audit(1746242443.731:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.5.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 161.320797][ T30] audit: type=1326 audit(1746242443.761:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.5.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaece969 code=0x7ffc0000 [ 161.596851][ T7815] program syz.1.1635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.791511][ T30] audit: type=1400 audit(1746242444.311:3560): avc: denied { read } for pid=2989 comm="acpid" name="mouse9" dev="devtmpfs" ino=601 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 161.813776][ T30] audit: type=1400 audit(1746242444.311:3561): avc: denied { open } for pid=2989 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=601 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 161.871873][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1643'. [ 161.901409][ T4582] IPVS: starting estimator thread 0... [ 161.976401][ T7845] siw: device registration error -23 [ 161.999195][ T7834] IPVS: using max 2208 ests per chain, 110400 per kthread [ 162.009935][ T7845] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 162.149456][ T7849] lo speed is unknown, defaulting to 1000 [ 162.155852][ T7849] lo speed is unknown, defaulting to 1000 [ 162.681423][ T7881] lo speed is unknown, defaulting to 1000 [ 162.689008][ T7881] lo speed is unknown, defaulting to 1000 [ 163.137360][ T7918] siw: device registration error -23 [ 163.143318][ T7912] lo speed is unknown, defaulting to 1000 [ 163.143947][ T7918] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 163.150195][ T7912] lo speed is unknown, defaulting to 1000 [ 163.529089][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 163.538118][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 163.734175][ T7951] siw: device registration error -23 [ 163.754188][ T7951] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 163.994149][ T7959] lo speed is unknown, defaulting to 1000 [ 164.000672][ T7959] lo speed is unknown, defaulting to 1000 [ 164.247990][ T7965] ALSA: seq fatal error: cannot create timer (-19) [ 164.509350][ T7975] SELinux: failed to load policy [ 164.599332][ T7979] xt_NFQUEUE: number of total queues is 0 [ 164.888587][ T7988] net_ratelimit: 10 callbacks suppressed [ 164.888605][ T7988] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 165.008190][ T7990] lo speed is unknown, defaulting to 1000 [ 165.029837][ T7990] lo speed is unknown, defaulting to 1000 [ 165.052297][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 165.052313][ T30] audit: type=1400 audit(1746242447.571:3588): avc: denied { listen } for pid=7987 comm="syz.5.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.080023][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'. [ 165.273876][ T8004] siw: device registration error -23 [ 165.280357][ T8004] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 165.419450][ T8010] syz.3.1711: attempt to access beyond end of device [ 165.419450][ T8010] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 165.551220][ T8015] lo speed is unknown, defaulting to 1000 [ 165.557745][ T8015] lo speed is unknown, defaulting to 1000 [ 165.944304][ T8021] ALSA: seq fatal error: cannot create timer (-19) [ 166.953054][ T8060] lo speed is unknown, defaulting to 1000 [ 166.959577][ T8060] lo speed is unknown, defaulting to 1000 [ 167.392166][ T30] audit: type=1326 audit(1746242449.911:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.1.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 167.417377][ T30] audit: type=1326 audit(1746242449.911:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.1.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 167.655644][ T8089] ALSA: seq fatal error: cannot create timer (-19) [ 167.794940][ T8104] xt_NFQUEUE: number of total queues is 0 [ 168.133899][ T8123] lo speed is unknown, defaulting to 1000 [ 168.140381][ T8123] lo speed is unknown, defaulting to 1000 [ 168.487462][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 168.496594][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 168.518410][ T8129] ALSA: seq fatal error: cannot create timer (-19) [ 168.642977][ T8142] FAULT_INJECTION: forcing a failure. [ 168.642977][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 168.656549][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.5.1762 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 168.656587][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.656604][ T8142] Call Trace: [ 168.656612][ T8142] [ 168.656621][ T8142] __dump_stack+0x1d/0x30 [ 168.656643][ T8142] dump_stack_lvl+0xe8/0x140 [ 168.656662][ T8142] dump_stack+0x15/0x1b [ 168.656707][ T8142] should_fail_ex+0x265/0x280 [ 168.656824][ T8142] should_failslab+0x8c/0xb0 [ 168.656858][ T8142] __kmalloc_noprof+0xa5/0x3e0 [ 168.656876][ T8142] ? copy_splice_read+0xc2/0x5f0 [ 168.656917][ T8142] copy_splice_read+0xc2/0x5f0 [ 168.657018][ T8142] ? __pfx_copy_splice_read+0x10/0x10 [ 168.657043][ T8142] splice_direct_to_actor+0x26c/0x680 [ 168.657070][ T8142] ? __pfx_direct_splice_actor+0x10/0x10 [ 168.657143][ T8142] do_splice_direct+0xda/0x150 [ 168.657168][ T8142] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 168.657201][ T8142] do_sendfile+0x380/0x640 [ 168.657247][ T8142] __x64_sys_sendfile64+0x105/0x150 [ 168.657448][ T8142] x64_sys_call+0xb39/0x2fb0 [ 168.657470][ T8142] do_syscall_64+0xd0/0x1a0 [ 168.657500][ T8142] ? clear_bhb_loop+0x25/0x80 [ 168.657521][ T8142] ? clear_bhb_loop+0x25/0x80 [ 168.657542][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.657579][ T8142] RIP: 0033:0x7f7aaaece969 [ 168.657601][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.657620][ T8142] RSP: 002b:00007f7aa9537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 168.657714][ T8142] RAX: ffffffffffffffda RBX: 00007f7aab0f5fa0 RCX: 00007f7aaaece969 [ 168.657729][ T8142] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 168.657808][ T8142] RBP: 00007f7aa9537090 R08: 0000000000000000 R09: 0000000000000000 [ 168.657824][ T8142] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 168.657839][ T8142] R13: 0000000000000000 R14: 00007f7aab0f5fa0 R15: 00007fff367ca878 [ 168.657863][ T8142] [ 168.993156][ T8150] ALSA: seq fatal error: cannot create timer (-19) [ 169.052202][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 169.061315][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 169.182346][ T8162] ALSA: seq fatal error: cannot create timer (-19) [ 169.535635][ T30] audit: type=1326 audit(1746242452.051:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.559204][ T30] audit: type=1326 audit(1746242452.051:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.598298][ T30] audit: type=1326 audit(1746242452.101:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.623621][ T30] audit: type=1326 audit(1746242452.101:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.648963][ T30] audit: type=1326 audit(1746242452.101:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.674926][ T30] audit: type=1326 audit(1746242452.101:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.700237][ T30] audit: type=1326 audit(1746242452.101:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 169.800997][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1781'. [ 169.811807][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1781'. [ 169.886261][ T8187] SELinux: ebitmap: truncated map [ 169.892907][ T8187] SELinux: failed to load policy [ 169.997553][ T8189] ALSA: seq fatal error: cannot create timer (-19) [ 170.157060][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1793'. [ 170.264246][ T8220] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 170.572880][ T8224] SELinux: ebitmap: truncated map [ 170.579300][ T8224] SELinux: failed to load policy [ 170.716882][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 170.716901][ T30] audit: type=1326 audit(1746242453.231:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.747434][ T30] audit: type=1326 audit(1746242453.231:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.771879][ T30] audit: type=1326 audit(1746242453.231:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.799566][ T30] audit: type=1326 audit(1746242453.231:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.825675][ T30] audit: type=1326 audit(1746242453.231:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.852565][ T30] audit: type=1326 audit(1746242453.231:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.878464][ T30] audit: type=1326 audit(1746242453.231:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.902856][ T30] audit: type=1326 audit(1746242453.231:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.928641][ T30] audit: type=1326 audit(1746242453.231:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 170.954975][ T30] audit: type=1326 audit(1746242453.231:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8231 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40bebe969 code=0x7ffc0000 [ 171.177065][ T8250] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 171.187913][ T8250] SELinux: failed to load policy [ 171.227747][ T8256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=785 sclass=netlink_route_socket pid=8256 comm=syz.0.1811 [ 171.257627][ T8256] SELinux: Context Ü is not valid (left unmapped). [ 171.266306][ T8256] SELinux: Context  is not valid (left unmapped). [ 171.518180][ T8274] siw: device registration error -23 [ 171.525122][ T8274] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 171.646071][ T8279] batman_adv: batadv0: Adding interface: dummy0 [ 171.652525][ T8279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.683985][ T8279] batman_adv: batadv0: Interface activated: dummy0 [ 171.696350][ T8279] batadv0: mtu less than device minimum [ 171.703074][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.715478][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.727268][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.740317][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.753411][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.765443][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.777311][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.788196][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.799368][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.082530][ T8286] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 172.093519][ T8286] SELinux: failed to load policy [ 172.177509][ T8294] FAULT_INJECTION: forcing a failure. [ 172.177509][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 172.190475][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.2.1827 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 172.190512][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.190525][ T8294] Call Trace: [ 172.190531][ T8294] [ 172.190539][ T8294] __dump_stack+0x1d/0x30 [ 172.190560][ T8294] dump_stack_lvl+0xe8/0x140 [ 172.190591][ T8294] dump_stack+0x15/0x1b [ 172.190613][ T8294] should_fail_ex+0x265/0x280 [ 172.190655][ T8294] should_failslab+0x8c/0xb0 [ 172.190692][ T8294] kmem_cache_alloc_noprof+0x50/0x310 [ 172.190784][ T8294] ? alloc_empty_file+0x76/0x200 [ 172.190988][ T8294] alloc_empty_file+0x76/0x200 [ 172.191032][ T8294] path_openat+0x68/0x2170 [ 172.191066][ T8294] ? merge_sched_in+0x4f6/0xa60 [ 172.191214][ T8294] ? merge_sched_in+0x605/0xa60 [ 172.191243][ T8294] ? rb_next+0x5c/0x80 [ 172.191260][ T8294] ? visit_groups_merge+0xf7e/0xfd0 [ 172.191337][ T8294] do_filp_open+0x109/0x230 [ 172.191399][ T8294] do_open_execat+0xd8/0x260 [ 172.191422][ T8294] alloc_bprm+0x28/0x660 [ 172.191444][ T8294] ? should_fail+0xb/0x20 [ 172.191496][ T8294] do_execveat_common+0x12e/0x750 [ 172.191546][ T8294] ? getname_flags+0x154/0x3b0 [ 172.191585][ T8294] __x64_sys_execveat+0x73/0x90 [ 172.191639][ T8294] x64_sys_call+0x2dae/0x2fb0 [ 172.191667][ T8294] do_syscall_64+0xd0/0x1a0 [ 172.191694][ T8294] ? clear_bhb_loop+0x25/0x80 [ 172.191722][ T8294] ? clear_bhb_loop+0x25/0x80 [ 172.191800][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.191862][ T8294] RIP: 0033:0x7fbb9a4ae969 [ 172.191881][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.191904][ T8294] RSP: 002b:00007fbb98b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 172.191975][ T8294] RAX: ffffffffffffffda RBX: 00007fbb9a6d5fa0 RCX: 00007fbb9a4ae969 [ 172.191989][ T8294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 172.192001][ T8294] RBP: 00007fbb98b17090 R08: 0000000000001000 R09: 0000000000000000 [ 172.192012][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.192024][ T8294] R13: 0000000000000000 R14: 00007fbb9a6d5fa0 R15: 00007ffc795e9808 [ 172.192049][ T8294] [ 172.550351][ T8300] siw: device registration error -23 [ 172.557985][ T8300] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 173.032402][ T8308] lo speed is unknown, defaulting to 1000 [ 173.039121][ T8308] lo speed is unknown, defaulting to 1000 [ 173.247143][ T8312] lo speed is unknown, defaulting to 1000 [ 173.254677][ T8312] lo speed is unknown, defaulting to 1000 [ 173.867342][ T8321] ALSA: seq fatal error: cannot create timer (-19) [ 174.627977][ T8358] ALSA: seq fatal error: cannot create timer (-19) [ 174.647209][ T8363] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 174.658206][ T8363] SELinux: failed to load policy [ 174.768143][ T8373] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 174.803596][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1857'. [ 174.915062][ T8387] ALSA: seq fatal error: cannot create timer (-19) [ 175.229263][ T8408] ref_ctr increment failed for inode: 0x83e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888108719b80 [ 175.243440][ T8407] uprobe: syz.0.1870:8407 failed to unregister, leaking uprobe [ 175.373827][ T8410] lo speed is unknown, defaulting to 1000 [ 175.381248][ T8410] lo speed is unknown, defaulting to 1000 [ 175.757435][ T8419] ALSA: seq fatal error: cannot create timer (-19) [ 175.831302][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 175.831318][ T30] audit: type=1326 audit(1746242458.351:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9a4ae969 code=0x7ffc0000 [ 176.135622][ T8441] lo speed is unknown, defaulting to 1000 [ 176.142185][ T8441] lo speed is unknown, defaulting to 1000 [ 176.279308][ T8449] lo speed is unknown, defaulting to 1000 [ 176.287900][ T8449] lo speed is unknown, defaulting to 1000 [ 176.962018][ T30] audit: type=1326 audit(1746242459.471:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 176.986178][ T30] audit: type=1326 audit(1746242459.471:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff339dee969 code=0x7ffc0000 [ 177.259386][ T8468] ================================================================== [ 177.269624][ T8468] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 177.278014][ T8468] [ 177.280487][ T8468] write to 0xffff8881186220e8 of 4 bytes by task 8472 on cpu 1: [ 177.290537][ T8468] touch_atime+0x1e8/0x330 [ 177.296149][ T8468] shmem_file_splice_read+0x582/0x5d0 [ 177.303964][ T8468] splice_direct_to_actor+0x26c/0x680 [ 177.311743][ T8468] do_splice_direct+0xda/0x150 [ 177.317023][ T8468] do_sendfile+0x380/0x640 [ 177.323094][ T8468] __x64_sys_sendfile64+0x105/0x150 [ 177.329552][ T8468] x64_sys_call+0xb39/0x2fb0 [ 177.334492][ T8468] do_syscall_64+0xd0/0x1a0 [ 177.339234][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.346222][ T8468] [ 177.348858][ T8468] read to 0xffff8881186220e8 of 4 bytes by task 8468 on cpu 0: [ 177.358876][ T8468] atime_needs_update+0x25f/0x3e0 [ 177.364560][ T8468] touch_atime+0x4a/0x330 [ 177.370232][ T8468] shmem_file_splice_read+0x582/0x5d0 [ 177.377177][ T8468] splice_direct_to_actor+0x26c/0x680 [ 177.382773][ T8468] do_splice_direct+0xda/0x150 [ 177.387574][ T8468] do_sendfile+0x380/0x640 [ 177.392034][ T8468] __x64_sys_sendfile64+0x105/0x150 [ 177.397270][ T8468] x64_sys_call+0xb39/0x2fb0 [ 177.402265][ T8468] do_syscall_64+0xd0/0x1a0 [ 177.407161][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.413291][ T8468] [ 177.415724][ T8468] value changed: 0x2d5c8fbe -> 0x2e8dbcbf [ 177.422649][ T8468] [ 177.425022][ T8468] Reported by Kernel Concurrency Sanitizer on: [ 177.431374][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.1.1891 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 177.444518][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 177.455055][ T8468] ==================================================================