last executing test programs: 9m42.006097616s ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xeffffffffffffffd}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x41, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 9m41.949012691s ago: executing program 0 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000a00)={0x0, 0xfa6, 0x1, [0xe, 0xa, 0x8, 0x2, 0x7], [0x7758, 0x100, 0x1, 0x72a, 0x0, 0x7ff, 0x5, 0x2, 0x6, 0x8000000000000001, 0x7, 0x401, 0x4, 0xc, 0x608, 0x200, 0x9, 0x4, 0x8, 0x0, 0x0, 0x9, 0x5, 0xfffffffffffffc00, 0x7, 0x1e, 0x2, 0xa5b, 0x40, 0xf83, 0x4, 0x8000000000000000, 0x3, 0x8, 0xec, 0x80000001, 0x4, 0x1, 0x93af, 0x0, 0x101, 0x1, 0x8, 0x2, 0x31ec7e52, 0x19, 0xd7c, 0x9, 0x8, 0x6, 0x9, 0x674, 0xd6, 0xe, 0x10000, 0x6, 0xb49, 0xc754, 0x230000000, 0x1, 0x5, 0x5, 0x100000001, 0x2, 0x6a5, 0x5f, 0x101, 0x5, 0x6d5, 0xb, 0x65a, 0x3, 0x0, 0x2, 0xab7, 0x8fa, 0x8000, 0xffffffff, 0x797, 0x8, 0x2, 0x0, 0x7, 0x16c, 0x6, 0x9, 0x4, 0x9, 0x0, 0x3, 0x2, 0x81, 0x8, 0xdc, 0x6bc, 0x2, 0x7, 0xfffffffffffffffa, 0x7, 0x8, 0x3, 0x5cc5, 0x0, 0x800, 0xffff, 0xa147, 0x3, 0x4, 0x8, 0x36, 0x4, 0x95, 0x8, 0x2, 0x7, 0x3, 0x0, 0x4, 0x8, 0x9, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000e40)={0x0, "9b06345207fa2dbfa3d1fc4c801de497"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001e40)={0x0, 0x7, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000002480)={0x2, 0x5, {0x3, @struct={0x24849b53, 0x7}, r10, 0xffffffff7fffffff, 0x9, 0x80000001, 0x8, 0x4cbc188a, 0x1, @usage=0x7, 0x2, 0x7fffffff, [0x3, 0x100000000, 0x3, 0x769, 0x1, 0x6]}, {0x5, @usage=0x2, r11, 0x3ff, 0x9, 0x8, 0x5, 0x1a633f5a, 0x60, @usage=0x9, 0x5, 0x8001, [0x4e, 0x80, 0xfffffffffffffff9, 0x9, 0x4]}, {0x80000000, @struct={0x69d, 0x66da}, r12, 0x6, 0x7, 0x3, 0x4, 0x2, 0x0, @usage=0x4c35, 0x3, 0xa2f, [0x0, 0x48, 0x9, 0x0, 0x4404c505, 0xe]}, {0x5, 0x8}}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r13, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r13, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x80000000000007, 0x401}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000240)={0xffffffffffffffff, r6, 0x5d32d793}) 9m40.746019118s ago: executing program 0 (id=322): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r3}, 0x38) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 9m40.38085855s ago: executing program 0 (id=326): kexec_load(0x4, 0xa, 0x0, 0x0) 9m40.26283582s ago: executing program 0 (id=327): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00ffffffffffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) unshare(0x68040200) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) poll(&(0x7f0000000400)=[{r1, 0x904f}, {r2, 0xe3ee}], 0x2, 0x11ff) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) open_tree(0xffffffffffffff9c, 0x0, 0x9001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9m39.518246237s ago: executing program 0 (id=341): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x29, 0x2000000000000001, r0, 0x2, 0x0) unshare(0x22020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007918c0000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r7) sendmsg$nl_route_sched(r6, 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002420207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) modify_ldt$write2(0x11, &(0x7f0000000140)={0x1000, 0x20000800, 0x4000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 9m24.507839859s ago: executing program 32 (id=341): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x29, 0x2000000000000001, r0, 0x2, 0x0) unshare(0x22020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007918c0000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r7) sendmsg$nl_route_sched(r6, 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002420207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) modify_ldt$write2(0x11, &(0x7f0000000140)={0x1000, 0x20000800, 0x4000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 7m17.24528878s ago: executing program 1 (id=2290): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030014cb9997fd8379e5b300"/27], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x8402) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r8, &(0x7f00000006c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}}, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r12, &(0x7f0000006140)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32=r17, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) 7m17.187423126s ago: executing program 1 (id=2291): ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40082104, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f00000016c0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0xca9a3b, &(0x7f0000001100)={0x77359400}, 0x1) 7m17.113404052s ago: executing program 1 (id=2292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000200)='./file1\x00', 0x0) 7m17.112962072s ago: executing program 1 (id=2293): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) unshare(0x22020400) openat$snapshot(0xffffffffffffff9c, 0x0, 0x22000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xf}}}}], 0x20}, 0x0) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r0}}, 0x20) 7m17.03103827s ago: executing program 1 (id=2294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 7m16.854993455s ago: executing program 1 (id=2297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x401, 0x5, 0x6, 0x7ffc0001}, {0x93, 0x0, 0xf0, 0x5}]}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @remote, 0x7}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) 7m16.816495089s ago: executing program 33 (id=2297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x401, 0x5, 0x6, 0x7ffc0001}, {0x93, 0x0, 0xf0, 0x5}]}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @remote, 0x7}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) 3.263665098s ago: executing program 3 (id=8730): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc7dc8ad", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2515000000180001801400020076657468315f746f5f68737200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) chroot(&(0x7f0000000100)='./file0\x00') 3.225457152s ago: executing program 3 (id=8731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2, 0x0, 0x4}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) 3.178827115s ago: executing program 3 (id=8734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) 3.152158718s ago: executing program 3 (id=8736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x21) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x202a03, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(0x0, 0x0) 1.631254964s ago: executing program 4 (id=8789): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00ffffffffffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.551010551s ago: executing program 6 (id=8790): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) 1.489559247s ago: executing program 6 (id=8792): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) inotify_init() 1.419030333s ago: executing program 6 (id=8793): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00ffffffffffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.363697278s ago: executing program 4 (id=8795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/handlers\x00', 0x0, 0x0) flock(r0, 0x6) 1.34453106s ago: executing program 4 (id=8796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) 1.304914444s ago: executing program 4 (id=8797): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) unshare(0x6020400) 1.264218577s ago: executing program 5 (id=8799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.263764017s ago: executing program 4 (id=8800): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x148100, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x932, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r2, 0x0, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000003000000) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 1.23145808s ago: executing program 5 (id=8801): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x526, &(0x7f0000000f40)="$eJzs3c9vI1cdAPDvzK6T7G7abEsPgKBd2sKCVutsvO2q6gHKCSFUCdEjSNuQeKPV2nEUO6UJK5GeuSJRiRMc+QM498SdC4Ibl3JA4kcEapA4DJrxJOskduL9ETuKPx9p5HnzJv6+t9l5z/5m7BfAxLoWEdsRMRUR70fEXHk8Kbd4p7vl532283Bpd+fhUhJZ9t4/k6I+PxY9P5O7Uj7nTET84DsRP06Oxm1vbj1YbDTq62V5vtNcm29vbt2831xcqa/UV2u1Owt3br11+83aY/Rm5tjaV5pT5d6XP/3D9jd+mjdrtjzS249nqdv1yn6c3MWI+N5pBBuDC2V/psbdEJ5IGhEvRsSrxfU/FxeK3yYAcJ5l2Vxkc71lAOC8S4scWJJWy1zAbKRptdrN4b0Ul9NGq925ca+1sbrczZVdjUp6736jfqvMFV6NSpKXF4r9R+XaofLtiHghIn4xfakoV5dajeVxvvABgAl25dD8/5/p7vwPAJxzx982AwCcR+Z/AJg85n8AmDwnzf8XRtQOAGB0uvP/pcf9sSzLfnYazQEARkD+HwAmj/kfACbK9999N9+y3fL7r5c/2Nx40Prg5nK9/aDa3FiqLrXW16orrdZK8Z09zZOer9FqrS28ERsfXv3mWrsz397cuttsbax27hbf6323XinO2h5BzwCAQV545ZM/J/mM/PalYouetRwqY20ZcNrScTcAGBu39sPkstoXTK5H7/Ef+yYA6QE4Jw4u0Xv0XcFMvw8IZVmWnW6zgFN0/Qvy/zCpevL/7gKGCXNS/r9YG9gfCeFckv+HyZVlybBr/sewJwIAZ9sxOf6ro3wdAoxP0v/wi+Xjb8s/Dvxo+fAZH59mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBs21v/t1ou8zsbaVqtRjxXLABUSe7db9RvRcTzEfGn6cp0Xl4Yc5sBgKeV/i0p1/+6Pvf67IGql6/s705FxE9+9d4vP1zsdNb/GDGV/Gt673jn4/J47cRgM6fRAwDgeHvzdPHY80b+s52HS3vbKNvz9293XxXkcXd3pmJ3P/7FuFg8zkQlIi7/OynLXUlP7uJpbH8UEZ/v1/8kZoscSPcly+H4eeznRho/PRA/LRdoTst/i889g7bApPkkH3/e6Xf9pXGteOx//c8UI9TTK8e//KmWdosx8FH8vfHvwoDx79qwMd74/Xe7e5eO1n0U8cWLEXuxd3vGn734yYD4rw8Z/y9fevnVQXXZryOuR//4vbHmO821+fbm1s37zcWV+kp9tVa7s3Dn1lu336zNFznq+cGzwT/evvH8oLq8/5cHxJ85of9fHbL/v/nf+z/8yjHxv/5av/hpvHRM/HxO/NqQ8Rcv/27g++48/vLR/ifD/P5vDBn/079uHVk2HAAYn/bm1oPFRqO+bsfO2d/J/8uegWb03fnWqGJNRf+qn7/WvaYPVWXZE8UaNGI8i6wbcBbsX/QR8d9+J8yOvk0AAAAAAAAAAAAAAMBBo/jE0rj7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPn1/wAAAP//MsjT6g==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x4, 0x18e}, &(0x7f00000000c0), &(0x7f0000000280)=0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000002980)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="e6f7d3d77ce704cfe8810786ae3ed124591df290b82c", @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r2, @ANYRESDEC=r4, @ANYRES64=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = gettid() setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f00000000c0)={0x9ee, 0x1, 'client0\x00', 0x0, "a44bf30000051057", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x15, 0x800}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r10 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, r10) tkill(r8, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "7b0ac2369d3933817dcd3b9fa00b4f2f"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100000000ffffffff00008e4a2d2dd6b6927a0000000600"], 0x50) 1.130828029s ago: executing program 6 (id=8802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x21) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x202a03, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r7, r7, 0x0) 1.019004649s ago: executing program 5 (id=8803): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x138}}, 0x4) 1.018569829s ago: executing program 5 (id=8804): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00ffffffffffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 457.135429ms ago: executing program 3 (id=8767): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 432.355742ms ago: executing program 2 (id=8809): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 426.159592ms ago: executing program 5 (id=8810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 405.059894ms ago: executing program 2 (id=8811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000880)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000100)={0x20000014}) 352.082259ms ago: executing program 5 (id=8812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) io_uring_enter(0xffffffffffffffff, 0x1e61, 0x1d64, 0x1, 0x0, 0x2c) 351.616129ms ago: executing program 2 (id=8813): r0 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 300.603403ms ago: executing program 2 (id=8814): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x138}}, 0x4) 266.153596ms ago: executing program 4 (id=8815): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2, 0xd, 0x0, 0x6, 0xc, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @remote, 0x19}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x81, @loopback, 0x2}}]}, 0x60}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) symlink(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x20442) r4 = socket(0xf, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x11) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xa00) sendmsg$nl_route(r3, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xbdd8000) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r6}}, 0x48) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="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", 0xfd}], 0x1, &(0x7f0000002480)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000110000000000000000000000010000006b0000000000000014000000000000000000000001000000fcffffff000000001400000000000000000000000700000000000000000000006400000000000000000000000700000094040000004424c863ffffffff00000003e000000100000000ac14142f00000005ffffffff000010000107087fe8bd4d0450440cd8330a0101010000800107078dac1414aa440c8793ac1414aa00000004000000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1414bbac1414bb04000000144200000097066600000066bc75decb2a51b60804000000000000"], 0x100}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="a02b631158232bc4da89dafc1665ed48d4ec8ac9f8b1e07ff10d3a145b2cdb81403d446b49f00aa0762d13850d8b9f2e4250c3a4fccad947c699f0f10023c28016ee1cdc4f0c9bc2b19845b1de3e0ec501a1c5635cda935903d4a04d5e0b3916f56bda30389142cce7dc9b40fba94d8550d5078cf9ff4962e30b283861bac95bf8b21aaa4818b03860fb7caf814438f2e963f2f27b9649d4cd5b4d2903596d0ff7f21e8e997634c6cb32089cae2cb151aba5bfc1cff4f0a921a24ded9750f838ba3014ec1e6b86aa9bf19034b279cced96a02358dbe5b82e886efc52a90219f484f070f3897e9df23c71f6647a1db15f8340731c20f4", 0xfffffffffffffe9b}, {&(0x7f0000000280)="027513b44c984b1824936985b2ae62b8c0a056a5c85a", 0x16}, {&(0x7f0000000500)="627031f7d264be1f5b9a496526473b1f8557a3d05831bc9c2092fbb728c751b8df6a257e14552256b4569788cdc9f4d7842885a1adbf3ec84cd23dbed3d97eceb0b53d0fc298e733ffb9ee0d54a8624ddf5b6f94b1a8453921fe6930496472946d42761aca821765a869f4b1c55a7a8a0f66df2f6e55609780b276f0961e3a8d29d2d37bc8e003b9a3c8910606349ffa206297a66647e3783c158ed7e2581ec509311d85fa09d33f7dbe2d72837eb6ae6761ec6ba7dff61c742ec14b2481bcf417aa71dab4d9c32eb86fd2bbdf0b8524404a7799d99fa11a23126891", 0xdc}, {&(0x7f0000001e80)="c9", 0x1}, {&(0x7f0000000640)="665c16dce7a34e539b776c20a5", 0xd}, {&(0x7f0000000680)="1348eac4c9f21a8b5b1caccb00e2e06ed63a0a59723b06ffaea00f0aa22365ea7dc32b37fbeb33ad602715f878d331ecf9c1adc816f54df291dda3efe0c9c280c2721d3332f1bb2ad09b6c3edb69cdbbf43cfd358244f0057eb57404e2e008d968d49d22c22f161edb552994ed16d70d4f14a3b5804d7c2b45b28aa2b6ffb73281bb40af2aeab5f594df07ab3d2f0b30b87735ef508981d63971ac0d566a78de6e3d7a78486b8206a0cb08d6645d7c3d2b00691c84c69b21c8eed7c3f8f542c36051e1e56e7f", 0xc6}, {&(0x7f0000000300)="f7d454be3a616135ce8beb1f55d6e98ba71c33d79e60c2221314d540de39b40baec86e7716bbe0c06da6fbef43266cd6a15ad92058dd62422c2849e583517a04ec2312df66e140b6bd698c12b6896a8494d6dddfec014cf480d6fbe9a6ed80cb9c36af2dfbfe4ba3ac4c99334e9435c654ac05696b5caf89ebfd1f", 0x7b}, {&(0x7f0000000800)="6ba4f060e462fde9b7ec71881fa946a508c31cb491d144ef7f6956f5bed6d9e9b95fb07f51665211ffabcd93bc7e5c797b442391491a45baa86681d040d5134934530d04438221243547d6de966481813ec35ed4df3065b4addd78b6fe3c23c640a912f07bbe0ba788a10725ad7802", 0x6f}], 0x8}}, {{&(0x7f0000000900)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002700)=[{&(0x7f0000000940)="8330cb6b2c606b313b6c5d8de269468ed7742b2dd6715f64241a90cf8b2e236cd2cbc77fa9e1aa5da971db8a0216ce78096f3fbb3f4dc38edaad614708", 0x3d}, {&(0x7f0000001bc0)="05d1fe4e2ebf1fe35176625c4bff67c7a3b1c3fe82a3d17941534de896b486014178d58f0550caf48a5edb00cd4404b45979a95fd6215aef", 0x38}, {&(0x7f00000009c0)="24434d66bd45b72598ae5676495579c20ca0c8e5c20dce0ae2101105f6aec4fdffd6365112c3d201246fe8b574b1b2c5ba73af67fadcd898596fbb2274cc3d8fc3d7048fa7b109daa2591c091c4b31b36a134ae7352305da11f7fce50d45a1e6a86409118820ab52d92f9caf49fe20a9e9dbad38422c2845f61d16d25cc7e40f5c3e2ae7dd8e2035e585dd1c6c8dcd1c259288c5f1baae757ef5cf176be96eed18ce92943143cd080a3582ae8e6f54d208057b7eaceda804392cb73714d687e019057b5e39fa0f100bc415b1200b17d962b125d5e6d32699ec26f2b8152615d6b43e306de6400b2cbbd2d7610cdaa2881b7481d3dbd72a037dab392769554c81ee14a284e2ed0e845728459970aa583305cb3f3ca9e3b18dc7f28776cf26b8bbef34eaae681388d2f70622f16cd8ef7bba696348089c2e5696fb4cc7a275fda646906f990ee85da434901ee81d7318e13b0f7037dd3ce7d02f4f5f867478fbbb9f68330962a58ea9cb72db5ee2f7fc8e583184b3572e286e6e8ec16df3387d8affdf9983122be588f6756f7d256ec690dcf0faa8445709655976cef7612635339df5d25ed83aee018382395239901eb5c4f765f715b2819066df15b214431d324abe03b8a2732e511729a87543bb5e28e73eb3f361938a6b593a19cb72ed1c06aca7546258169f91c64d9223f48283a2b91d85bf455a6c39022c313b86266b72144997eea5a79faaac5e5696d1da31d78404e21b8d522dcac4a4ebd4731e0c9f3c56ea77417be200bb86126ac845881506ef9bb1511ad787559ad79c33bf25d8116eef648a8071bd5ce6c641510051fe748a9523f38891bc7b56ea0e60900b3c2589762e7d94627f7e85c5a8dced3b075c684df51730af71badd77d20da6f4fc658f8396762a2f4cde5743351fa6fd38feaf469360ebc43ff7b197e34963fd8a67e07fa25a4e31acbe757fea4393daa047e7dc0882de1500f97f674697db76c71ace08ed17c0055bc0028e5eb035ec070df8f646e4cab9246f2dfc043c28cabb671226908181c86ff136568558400a4198356d451d078c1d879665fd0c62709c714bb2b6021363776f84dbc0abdbf9737890c844dc4dabd8d663966a6c58ba4adcff631c169d62398eda560ce08bf86e50612cd14a6815cf26ad3f2791dd1b3d53375d82f25d46935a2cfce377d548404d9341ca3cb483ee69960e2f969e823f12160f7711010ce9e5c0ef5bb9b8c4100864c620122e21297206fb94ce94a82b3b4616b609a002a778ddcee4aafd22af65c8d88b32a580c5482b1fe5ab1d4d44c86e49557bbd8ff8cf1699b5576144399ad8175cdf411f60fb1dfcf3633e4e79087af13fad1188e172d4de4a3d9469cff89e815f1b3f2f74ea817082962ec0ece6a77b0972ca53af9adeaa227203b8a7ab61ba6be88ae621e5bf2eb8ac8d74a7376b9446800b080fa0c0e89f8d2b183493d642c76984a4c9568437f003c80d44317c486ab80a9fc3027fd9d926cb81a2898ff3c4afa009bb73a7a5c9f9fc92a516a5c384e7e9fadb1db9d134a91480d45bd8f6a3dd5e9649bf8b688209e2485d8ae581e771dc5e304dbf2de00ac8750644f5329dc93ecbd08dd095637ac6580067f3db079bf42fddb08471c4da57aaaf1ad6f768d0e12758414f7902a3d0d6331d552d620ca462ddac0e6d71e6fc1bc1cf5d913cdd0d7a0a4fba25fa45629e69c3110694f141c19ee6c1c5d8e19f46aae25570086f5d8342beeaa7ecf13290ce5e7c34f88a4b8c0ecb2db790289466be9c2d3bdcf436094b6131c2f485708e20872b0414b91937a59764aa724b862dbc8f14741624960b018f0707807a04f332029bc359886ee064cce4e2e825efd01b3c28c22d34712e0ef0fe841502f186e8b4b0207446780ffaf2ca2dfd09033e2bdb84ebe08b7406817282b7de9619b1f1200d8ff9b640d505ce9b4c135d0356c0ed52295e341db43594e32a9a38c5125106a812483a2c775aabe4dc75ef7235a96193c4256fb0c3558bf0ab02a1f694fee67758e9c5167481853d32f0d8eb1023c75f206a169093cc73bb3d040f683c2ed8ded5a23eeaf65fcb3f16deb20972a7cd893118c3136b33a4e156946d8aca81f1f80b79a87204fb1f8dce51ea13e1f6ab3608679d0a11d439ea1362ae76d82f2ce582b799832ed961fae71956c9aa28f99f87e456d87a33c393580eb19a00353781532228ac777dd66e524514e4d4ecd084fbde99b7e2cae63d667817e6dcb6c2b83134f78820c8ed9b20f618bb98324a6f1b08ff2d99f5b92082d98b7eab76966fca6bec9483a6425a214509ae4e45c763d4f87d5b092b8a068b4fdc6b47873d36bce168d3e0b6b56dbd5065ba689ce1f96dc2e844e8ea0150add67281184b4e2518ab0f6a8ce00f5c24551722caf0d7dc1b35485c60340dedc03cd320489b084946914675c0e08ba09b48cc846f81240b7b9fe10abb843061a290a40b0ad99aa990cc0df2f01cb816a530eb1739e458e861db5bd0ca464a998f7121c047ff4bc499140b00e8bde3a75bf95eca38a78dbe2260c4148e7e9386f52d7cf5336d39ff347925177660f4896c3aadf745e28ba789c27fabef35677d5a4477a5b33368047c852a26c6aef79dcd8f0d7ea478e3fe94256a01d381faaf90a667a6db205d4f84d42236d2315a6492cd60b83a3b8a0a86ef01f89613ae49db9c4afce051e18bbd5c675dc0d60f6cefb13fac8683b0ff63f15297e2d1b53983c042eca21c4d016eb43af83edab52f4db7dab0acf3d03906a42015ebfe62c63abb6fc913ebfd66d5d2761d622fcf59011e3f29e136ed32a77baffaab55c4b63ad40ddfd6752a3753b6cb586466690dd69203dab46b6d5ece007cd0487c0c6318472680151f5cb1d226f2cf5150837d8a675d32e40f5e6b2eafa59ecd5b7921ab6a629bf911866261604aba735abda965a737ee9c01f66a18f78c914b1b424a1dd9c4787936db9621323584a70fc235cf4457599b4a6a706c1a903bfbff980aff7c05e5add15d66b52ea999da347ce2c9e66f11cfd4bfe533daad9c6995c4b272436861ee71bcde2cae9c78766d81018fef801ee8b1d5dd6a56144928a61376e506981b63493ce1335b797360d06dd62f9c7bdb1fec8c68096de1d4edf8fb3709d836852643629ba5f338a4bc2e59840b4469bd0edb4ed25e532d7f49ec355ba9dd8987b11e6daa130f4f90b160c28107a08e757bb76f97f93cfab34366b617e348141b250391850add6a09b057d931b93069f171edfc77e71a8252035f3e43ba5d88a6cdec58a5fd7425667f58fc156977efd11c1d1c0201426a053fa4bb603a09b341c836aa873725ea7dad0331e87b09f1fe5dd11e3d717c02ffcaf1a852a7f0059f58e70f0385771b79f9dea6f4045e463d8d3b907fc7794237176dbb710f45dba37f09d4f45f59f224fc5e1e31ed203bad447a1946a1ac5a8baeddebdc450795335251b65262947ddaf82043e105f2843c934748d0079e5c4df55b7ffd7c974356fb7d3b103d2ca4b305485d8d05699170c1b14ee98aa7ebcfb76b78342155414a0eef660c2fc5b1ed555858240de88a100a611dd19c66a7326267994641498c3192c8b9dd4b3334398ef99503cebdf9c00ff63d97292af35607131e13ec28f97ddd6e53d2495d38e582d3b93f62fa8769ddbb1f0021ad6fd0bb430f37e97656c647465470b8cd9bcf6ca8b192f23de367ad36957988b4f632f9ba674a2fa18a071eb983f163644c54504e6f33b90423e9aeb7533eb32a16e8d472ff525f66f93f4f149df1e01234b691d5172019463478a47674edecebea3d3f3fa93c0ab298b4e320103a78d631019b7013ba219d60317ebcc1226cf3cf78da912b435d0ad8320ef0adfdffb0383781713d49e4eca9122bbb626feaeac80e49cafad0d16dcb80e27d8f7b972720613c396d0724a1742afbe3ccd162440fd99369ce3e2ba503ed5a4643512c15da0702cf3dc9e2bd25ab1e1e31c34a2d07223189309edc054320047191e38a62ceb0846098295856e508582b41b22677dd81d1b72f621deb8138884a653310703d21317ec516d778ebd27eb6de4eacb381df3522bf94da0659096b3ebb9f57f3bda68ad2eb207b9993fbf41b316a0ce6b74fb48e92299141abf1d6075c50b3d8909541d18768c94e38155d6b169f334a18745a4d35512acc87fdae4ffeab13d668984171272446fcb0f586025d82b77bd6fcf343c3bbab263cb9188dc0469a876cc85781852fa2a348666d9e70757741e84fa53de34c8fc090281b00b0c2c8dc0fc56c68fbe8f00c1b0ffafcc33027f1b2ce3f2815b20eb9d5c77bb2352f65e01e08f9d74ad430afe29734a2174bf08962cf6282ccba60251320295a2e6eefeee10d6a8e1736086e7504d1525a1c8a7631861cfc95b97f99a0f3f8bf377077d76433da2adc3d4ba7fc8b9aa61b0199b7a29f88cac4076064a97d9b37932a81e1ec0fd8cb268e52d4c76900a8d6e4ca4b4ac4baa8e6d8487517706a47ed7bc844cb39236dcdf42318ab88acf5077dfe22a94bd8500971df20157f5cb2dccf6dcf1a841c0cdf288f0e34343344c8875f09096252a8bc57c6d003cfaf09f4c0e603d0264a62777cc0ce10eb706ccc7371b06f413b57d3e4969be3987a0b8f5087abf87a25bc5dfd92c338349f8fed9cadb21a4f0415a5069a89c1fe2f0b363c0659f34d3f53e236506feb53833dd4a2233559f999241ba7df08e2f188e2a016fc28c0e4419fcbb1a70a373fdc8cc91959b8fd2ad7655ee8a3d4ee588261cdf243abd76ebf8904ba5af4c49cd7c4909ab587b1f89ca96807e34e9457d2ddf7471774bea56fc694a6c48510c79cccfbde5789041e98096a029396f4ccdb918b614699fbce2552d23f2e2e7d6f9cabf913f3a5c69cf052cfeae0a55133d2112817ee3b44daca9e67e0e9cbf293363a008882eeae4fa6dba1ba2fe9189f73efe41f7a1cb094353ec937f059cbf8eae17300a79e5384b4dd8c08be6bbfe7f2cdbc7f4c0246b013c3c09d33ceb1410490abc39b9f2053c75a0d88c91ac1e7839d3b0173164a5cc02b3aeb024b6a47018c8deeb7dd55e691020e8d5d8d2803e144836e298ffeb17a1e54bd4b276e508ff8571758e478662125ec5b713732533f8c4e91f5697d6993d34d4ff5bfe3e9544691f5e4f6791696d53c127330bb3f4e0df4f67bd38fabd0e67d98b6c5e6c9fae929e7d17a4321273c81f5cbd8a63921ca3beacd38966eacaf3f7270099bc51f36ad16d7782018cbbb0b52d8cf22762fd41c71eb57d8a0c7cd8f1a92dd30ebdaed13c2ce91dbcca58ea5c74592488dcac964816a6ffe871bcd6af38ef752184749d3ae6ac4e16a3c1c1612ac07c93640d75d3b4573d776f182d2b02169f46cdcfa4bbaa2f64d1f011c359fbd484e0df3e05f1992b5243c5fa6839d96fe4ff52b4b249a0a7c799d047c8300bb061a2e50f54d74f187039f49097fcf5c6d78996fadb8f51f99d13a084e03ea592fbfe95c1f49dfc3505e9d227f227f1ea96cd2e32c29fb4310b8827f38d9e8d8b6bd12f48b82984fd844b969790b8c825e833f7c23af172bd4cd29d0ec8e5ca199b76eab9a002510925f85c1f3ed28ff031783c5eae394a2ca636dd40b98e3465f621d26ed28f1c1aee7dfa1cf7566469d6cf93bbf6ed1f99c5075492fd47269273403c9d1352b368d364a923934694d5559e45ac6a8bc0b6e8d969085d0fd8a82c32daad3aa1a48669306bd0f5b44402a7765e13aeb50e10b10c8c9c16db255729dc67e05", 0x1000}, {&(0x7f00000025c0)="b75a3205f8ff38beeecbf51b4fa627a28901b27b7d4a7e83293e7a58583ba91c6f5e6ee2fef3812a03235beeb91b85ad9f2eec7b0010f89af787192a27f65c1c3ff7b15d0ee02d2d1013db0bc5f9efe4656d4a94c8eb6c604d660c1eaebeba6bd9f42cc500d00abb3cbfa8bb2ccef35b4a6c61da4e4fa32dd6b7703f91cb0d7030fc9850b3572a9031e3b042ab09a929e770"}, {&(0x7f0000002680)="050e0ee8cd46ea3b78c3f6300819181d74d047cff9315d4b8a36e3078d24b95aa1072b96c793c38220a948745f6b25fe5627078954eee2d2f0b68775f9b0ae8c45247f7044fc37326cb00ad6d0b3de0b2b71d07388a3a85f44e4c0feff42ca02026be27b7369e48c34393f48463ca0f29d342f370eb9e73999"}], 0x3, &(0x7f0000001a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd117}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)="0060b286af9dc3e40f6b9fb7bb10aedcceb4735987ff0410", 0x18}, {&(0x7f0000001a80)="12440cb87dd6113d3a1c546b662c2c05f76549e4fdc8eb37b90b70c37907e3e57fe3a326f83007ec9ae091ef6f1e2e9c128e6c78aeb923dc3357febf9f82793976a4bfd5bc78066819ab6265840092d8a72985484724a9d98410e9466703b1580988f880aaad4e5e5f32565610137bd9fd2034f641225a8ea22a48b663b8e20de73bc57db4dde2e89602dcbb062fb6eaa58947205bc7c78b384ff02eedf2b907a57aae5e86142eff41f48e7baf95b075f4a1dd3946cff841072548e26358e98193687e5ec1c861341463a0a739feacd6a7baacd79559dcff8f865d77b491c8e0cbd2b275a6623042b1b33da74eac75d35106c82098", 0xf5}], 0x2, &(0x7f0000000780), 0x50}}, {{&(0x7f0000001c00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001c40)="7b23bd3fdc6dff3b68eabbfd3b4f8733a72f883165b1e7cefb45844a003268a97f071963a4d921759ba31f03cc7bcd9eeae9d5bc3b94b938188b2c71f531badfe34d864eb4ecf76bc1794408df3c4763d69144d2123cf6b17178638e964b0e0309", 0x61}, {&(0x7f0000001cc0)="66b0e374a968251b00cd2d6d08cc043a83390fbfe9b6a2b32e1a0a3344603c3d42e65131e52bf42ff6c06a64471a4259deb647e1be72b2170dea236924efbe9cc8ed17c999", 0x45}, {&(0x7f0000002100)="51743c2d0358785465922a533f570fb244dfb23fa069436fcf8c49aa307a481f2e362fa8d1805ddb67a8d0a573f82ff50669cb4626c48a2649eabcff6d011c45afdacb7d986df6698041de9c58a668807f716c0572b8b7d2063cf79ee35c2538218cf3899f79c8bde14678b284a239656fba5660acbd5a4c842d9bc39e259f649bf34f47dd9ba7916302bcaa97ff57b6b0674203a4", 0x95}], 0x3, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f0000001e40)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002400)=[{&(0x7f00000021c0)="6bcb6d10672321b1075c625de60e3c329b065d94c02b02cf27ddab4c6fbf310577505c9819a7a4b12356f70713eaeead7ac724822731d98b1291d4c8b627e1411aade0edef60ff15557d9202502100676fd351454abacdeb73549dd682eeef8a77ad85784b0ddb68649432c277a056de16277c6bdfd2b2b4a626628d79e47e5bda24eebd677567e0ec07191a53ff51e8e2d22675e03719f454b3bb6530cd8b667a8cb218960bdd66ea7bebda5871abb531d15cc2d9dd4af1e8291ef5134c69dfb7da8497db662bcce209026c6ecb125dcbe856b1a9e1ce56ee29069454fec4b8cdadf1de7060d80d1f2f70d1774d22eacbd768", 0xf3}, {&(0x7f0000001d40)="8d43328727714391b98ea7fdd32b34419715c1c59bf6c1f32cc2a6ef8a161244c966a70d93d948c4c20890deb95be593845e5b8934b9079875d273b05489c66df52d5edc229e3b83de18e78307ce273b99bcdea9a37faac0d7af74db8cd16772e02a12007cd1443d38bcc4d02ad3c813c946f3e7a2e66c", 0x77}, {&(0x7f0000000600)="1995f98e31135b7524d8eee49899eeac0d6794ce621d5ef4d482e51dad41ba235d8bccece6eb851260b2618aa9410a96a3dc0edd3987b2282a7a5236", 0x3c}, {&(0x7f00000022c0)="1eeb25aa52eb336c381573e3cc4780e41e0382a5fc2f2e4733118f51d18e43", 0x1f}, {&(0x7f0000002300)="b4d795b7a110d90746141fffe4facd7656a624a6ad77e44965420986b678e1187106cfb97ed3ff93675d8d3cd5704101affe0618c41c48929c51c9aaa80073e508a9908580c6c5b08463c095268f1f12edcd26bda4a8cc2251a59330ff752a4a94829c9be71b1b613697029913c7f4937a6b4da59c9a0a9b184dad1bd28cf98eec7f27da4873bedd0cadb665f4b4427ae1ecf3f58823e787755d62e08070d4c22265eaffcae2f1239f3311a69deabe8d752d1335d6c57ecb1be001ce8746697431e9bc003ba97086a84b9c458f83d5d03d79bb4de500da", 0xd7}], 0x5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="6400000000000000000000000700000044147b83ac1414bb00000004fffffffc00000008863f000000030504c80e0705574d8f0708bb7359b1d5210002070f20c7d6a401b1a7fd298310aa7f0211bafa3bb6c4a77a0e36259f7a4621520206605aaf880000000000140000000000000000000000070000000000000000000000140000000000000000000000010000000800000000000000140000000000000000000000010002000000000000000000"], 0xb0}}], 0x6, 0x840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/58) 259.769667ms ago: executing program 2 (id=8816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/handlers\x00', 0x0, 0x0) flock(r1, 0x6) 255.730737ms ago: executing program 6 (id=8817): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 206.342872ms ago: executing program 2 (id=8818): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 39.794307ms ago: executing program 6 (id=8819): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c) listen(r0, 0x2000) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 3 (id=8820): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00ffffffffffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 58f8 [ 571.242088][T25345] [ 571.585444][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7471'. [ 571.680283][T25381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7473'. [ 571.695665][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7474'. [ 571.708488][T25381] syz_tun: entered promiscuous mode [ 571.717050][T25381] syz_tun: left promiscuous mode [ 571.754607][T25388] random: crng reseeded on system resumption [ 571.795242][T25394] random: crng reseeded on system resumption [ 571.836037][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7472'. [ 571.974940][T25401] program syz.4.7478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.837426][T25426] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7487'. [ 572.954738][T25435] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7491'. [ 573.134770][T25443] Invalid ELF header magic: != ELF [ 573.324962][T25463] random: crng reseeded on system resumption [ 573.355242][T25465] program syz.2.7503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.449607][T25476] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 573.449607][T25476] program syz.3.7507 not setting count and/or reply_len properly [ 573.547362][T25484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7510'. [ 573.720448][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7516'. [ 573.733030][T25498] syz_tun: entered promiscuous mode [ 573.748853][T25498] syz_tun: left promiscuous mode [ 573.780719][T25501] random: crng reseeded on system resumption [ 573.807553][T25503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7518'. [ 574.066400][T25508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.081204][T25508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.161758][T25525] netlink: '+}[@': attribute type 39 has an invalid length. [ 574.267480][T25530] Invalid ELF header magic: != ELF [ 574.334665][T25533] ip6gre0: entered promiscuous mode [ 574.344306][T25533] team0: Device ip6gre0 is of different type [ 574.416483][T25541] program syz.6.7531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.124961][T25573] Invalid argument reading file caps for ./file0 [ 575.200007][T25579] FAULT_INJECTION: forcing a failure. [ 575.200007][T25579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.213226][T25579] CPU: 1 UID: 0 PID: 25579 Comm: syz.5.7547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 575.213256][T25579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.213285][T25579] Call Trace: [ 575.213294][T25579] [ 575.213303][T25579] __dump_stack+0x1d/0x30 [ 575.213331][T25579] dump_stack_lvl+0x95/0xd0 [ 575.213354][T25579] dump_stack+0x15/0x1b [ 575.213413][T25579] should_fail_ex+0x265/0x280 [ 575.213438][T25579] should_fail+0xb/0x20 [ 575.213460][T25579] should_fail_usercopy+0x1a/0x20 [ 575.213562][T25579] _copy_from_user+0x1c/0xb0 [ 575.213593][T25579] load_msg+0x173/0x2f0 [ 575.213619][T25579] ? bpf_prog_4f1a55a5b93b961c+0x2a/0x32 [ 575.213670][T25579] do_msgsnd+0xdc/0xb00 [ 575.213723][T25579] ? bpf_trace_run2+0x124/0x1d0 [ 575.213787][T25579] ? mutex_unlock+0x4f/0x90 [ 575.213813][T25579] __x64_sys_msgsnd+0xa8/0xc0 [ 575.213849][T25579] x64_sys_call+0x180f/0x3000 [ 575.213875][T25579] do_syscall_64+0xca/0x2b0 [ 575.213915][T25579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.213947][T25579] RIP: 0033:0x7f820beef749 [ 575.213962][T25579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.213980][T25579] RSP: 002b:00007f820a94f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 575.214002][T25579] RAX: ffffffffffffffda RBX: 00007f820c145fa0 RCX: 00007f820beef749 [ 575.214079][T25579] RDX: 0000000000000839 RSI: 00002000000017c0 RDI: 0000000000000000 [ 575.214093][T25579] RBP: 00007f820a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.214107][T25579] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.214121][T25579] R13: 00007f820c146038 R14: 00007f820c145fa0 R15: 00007ffcd1dcf788 [ 575.214141][T25579] [ 575.413578][T25584] FAULT_INJECTION: forcing a failure. [ 575.413578][T25584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.426702][T25584] CPU: 0 UID: 0 PID: 25584 Comm: syz.5.7548 Not tainted syzkaller #0 PREEMPT(voluntary) [ 575.426737][T25584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.426819][T25584] Call Trace: [ 575.426826][T25584] [ 575.426833][T25584] __dump_stack+0x1d/0x30 [ 575.426858][T25584] dump_stack_lvl+0x95/0xd0 [ 575.426921][T25584] dump_stack+0x15/0x1b [ 575.426938][T25584] should_fail_ex+0x265/0x280 [ 575.426960][T25584] should_fail+0xb/0x20 [ 575.427011][T25584] should_fail_usercopy+0x1a/0x20 [ 575.427033][T25584] _copy_from_user+0x1c/0xb0 [ 575.427057][T25584] memdup_user+0x5e/0xd0 [ 575.427081][T25584] __se_sys_kexec_load+0x109/0x160 [ 575.427127][T25584] __x64_sys_kexec_load+0x55/0x70 [ 575.427193][T25584] x64_sys_call+0x2e77/0x3000 [ 575.427216][T25584] do_syscall_64+0xca/0x2b0 [ 575.427246][T25584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.427284][T25584] RIP: 0033:0x7f820beef749 [ 575.427300][T25584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.427316][T25584] RSP: 002b:00007f820a94f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 575.427336][T25584] RAX: ffffffffffffffda RBX: 00007f820c145fa0 RCX: 00007f820beef749 [ 575.427349][T25584] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000040000000 [ 575.427360][T25584] RBP: 00007f820a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.427372][T25584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.427440][T25584] R13: 00007f820c146038 R14: 00007f820c145fa0 R15: 00007ffcd1dcf788 [ 575.427457][T25584] [ 575.776838][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 575.776856][ T29] audit: type=1326 audit(1767449365.713:61930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 575.859300][ T29] audit: type=1326 audit(1767449365.743:61931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 575.883022][ T29] audit: type=1326 audit(1767449365.743:61932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcff9ee65e7 code=0x7ffc0000 [ 575.906826][ T29] audit: type=1326 audit(1767449365.743:61933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcff9e8b829 code=0x7ffc0000 [ 575.930400][ T29] audit: type=1326 audit(1767449365.743:61934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 575.954670][ T29] audit: type=1326 audit(1767449365.743:61935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 575.978441][ T29] audit: type=1326 audit(1767449365.743:61936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 576.002681][ T29] audit: type=1326 audit(1767449365.743:61937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 576.026312][ T29] audit: type=1326 audit(1767449365.743:61938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 576.050327][ T29] audit: type=1326 audit(1767449365.743:61939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 576.104726][T25620] Invalid ELF header magic: != ELF [ 576.375347][T25637] FAULT_INJECTION: forcing a failure. [ 576.375347][T25637] name failslab, interval 1, probability 0, space 0, times 0 [ 576.388247][T25637] CPU: 0 UID: 0 PID: 25637 Comm: syz.2.7566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 576.388360][T25637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.388373][T25637] Call Trace: [ 576.388379][T25637] [ 576.388388][T25637] __dump_stack+0x1d/0x30 [ 576.388415][T25637] dump_stack_lvl+0x95/0xd0 [ 576.388478][T25637] dump_stack+0x15/0x1b [ 576.388499][T25637] should_fail_ex+0x265/0x280 [ 576.388527][T25637] should_failslab+0x8c/0xb0 [ 576.388553][T25637] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 576.388650][T25637] ? __alloc_skb+0x2ff/0x4b0 [ 576.388679][T25637] __alloc_skb+0x2ff/0x4b0 [ 576.388705][T25637] ? __alloc_skb+0x228/0x4b0 [ 576.388731][T25637] audit_log_start+0x3a0/0x720 [ 576.388784][T25637] ? kstrtouint+0x76/0xc0 [ 576.388806][T25637] audit_seccomp+0x48/0x100 [ 576.388839][T25637] ? __seccomp_filter+0x832/0x1260 [ 576.388876][T25637] __seccomp_filter+0x843/0x1260 [ 576.388906][T25637] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 576.388967][T25637] ? vfs_write+0x7e8/0x960 [ 576.388993][T25637] __secure_computing+0x82/0x150 [ 576.389019][T25637] syscall_trace_enter+0xcf/0x1e0 [ 576.389094][T25637] do_syscall_64+0xa4/0x2b0 [ 576.389135][T25637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.389156][T25637] RIP: 0033:0x7f0707a2f749 [ 576.389172][T25637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.389190][T25637] RSP: 002b:00007f070648f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 576.389266][T25637] RAX: ffffffffffffffda RBX: 00007f0707c85fa0 RCX: 00007f0707a2f749 [ 576.389278][T25637] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000801 [ 576.389289][T25637] RBP: 00007f070648f090 R08: 0000000000000000 R09: 0000000000000000 [ 576.389303][T25637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.389315][T25637] R13: 00007f0707c86038 R14: 00007f0707c85fa0 R15: 00007ffccf3758f8 [ 576.389414][T25637] [ 576.782045][T25673] __nla_validate_parse: 8 callbacks suppressed [ 576.782129][T25673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7576'. [ 576.871380][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7582'. [ 576.935973][T25694] random: crng reseeded on system resumption [ 577.376930][T25706] FAULT_INJECTION: forcing a failure. [ 577.376930][T25706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.390215][T25706] CPU: 1 UID: 0 PID: 25706 Comm: syz.3.7588 Not tainted syzkaller #0 PREEMPT(voluntary) [ 577.390305][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.390319][T25706] Call Trace: [ 577.390327][T25706] [ 577.390337][T25706] __dump_stack+0x1d/0x30 [ 577.390365][T25706] dump_stack_lvl+0x95/0xd0 [ 577.390389][T25706] dump_stack+0x15/0x1b [ 577.390453][T25706] should_fail_ex+0x265/0x280 [ 577.390480][T25706] should_fail+0xb/0x20 [ 577.390502][T25706] should_fail_usercopy+0x1a/0x20 [ 577.390530][T25706] _copy_from_user+0x1c/0xb0 [ 577.390568][T25706] snd_seq_ioctl+0x125/0x300 [ 577.390607][T25706] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 577.390676][T25706] __se_sys_ioctl+0xce/0x140 [ 577.390712][T25706] __x64_sys_ioctl+0x43/0x50 [ 577.390745][T25706] x64_sys_call+0x14b0/0x3000 [ 577.390773][T25706] do_syscall_64+0xca/0x2b0 [ 577.390931][T25706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.390980][T25706] RIP: 0033:0x7f250336f749 [ 577.390999][T25706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.391029][T25706] RSP: 002b:00007f2501dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.391093][T25706] RAX: ffffffffffffffda RBX: 00007f25035c5fa0 RCX: 00007f250336f749 [ 577.391105][T25706] RDX: 0000200000000180 RSI: 0000000040605346 RDI: 0000000000000005 [ 577.391118][T25706] RBP: 00007f2501dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 577.391130][T25706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.391143][T25706] R13: 00007f25035c6038 R14: 00007f25035c5fa0 R15: 00007ffc8757e1d8 [ 577.391164][T25706] [ 577.722631][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7595'. [ 577.735327][T25720] syz_tun: entered promiscuous mode [ 577.783885][T25722] random: crng reseeded on system resumption [ 577.805748][T25720] syz_tun: left promiscuous mode [ 577.859194][T25718] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 578.060954][T25731] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 578.060954][T25731] program syz.6.7599 not setting count and/or reply_len properly [ 578.091838][T25729] Invalid ELF header magic: != ELF [ 578.115151][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7598'. [ 578.176970][T25733] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 578.176970][T25733] program syz.3.7600 not setting count and/or reply_len properly [ 578.251667][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7601'. [ 578.288735][T25739] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7602'. [ 578.374101][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7603'. [ 578.478634][T25756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7607'. [ 578.498396][T25754] Invalid ELF header magic: != ELF [ 578.571067][T25761] netlink: 'syz.4.7610': attribute type 29 has an invalid length. [ 578.731368][T25770] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 578.738029][T25770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 578.746404][T25770] vhci_hcd vhci_hcd.0: Device attached [ 578.779494][T25777] vhci_hcd vhci_hcd.0: port 0 already used [ 578.881542][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7617'. [ 578.893512][T25771] vhci_hcd: connection closed [ 578.893733][T11581] vhci_hcd vhci_hcd.6: stop threads [ 578.903815][T11581] vhci_hcd vhci_hcd.6: release socket [ 578.909256][T11581] vhci_hcd vhci_hcd.6: disconnect device [ 580.284682][T25820] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7628'. [ 580.506183][T25838] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 580.506183][T25838] program syz.2.7635 not setting count and/or reply_len properly [ 580.689855][T25837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.706585][T25837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.781906][T25846] syz_tun: entered promiscuous mode [ 580.796570][T25846] syz_tun: left promiscuous mode [ 580.847331][T25849] random: crng reseeded on system resumption [ 580.967556][ T29] kauditd_printk_skb: 7802 callbacks suppressed [ 580.967576][ T29] audit: type=1400 audit(1767449370.903:69740): avc: denied { shutdown } for pid=25852 comm="syz.2.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.997708][ T29] audit: type=1400 audit(1767449370.933:69741): avc: denied { getopt } for pid=25852 comm="syz.2.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 581.003709][T25855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 581.017842][ T29] audit: type=1400 audit(1767449370.933:69742): avc: denied { connect } for pid=25852 comm="syz.2.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 581.017879][ T29] audit: type=1400 audit(1767449370.933:69743): avc: denied { name_connect } for pid=25852 comm="syz.2.7641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 581.077041][ T29] audit: type=1400 audit(1767449370.933:69744): avc: denied { relabelfrom } for pid=25852 comm="syz.2.7641" name="" dev="pipefs" ino=98268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 581.129102][ T29] audit: type=1326 audit(1767449371.063:69745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.2.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 581.197786][T25864] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 581.204347][T25864] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 581.206219][ T29] audit: type=1326 audit(1767449371.093:69746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.2.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 581.212065][T25864] vhci_hcd vhci_hcd.0: Device attached [ 581.235588][ T29] audit: type=1326 audit(1767449371.093:69747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.2.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 581.250420][T25865] vhci_hcd: connection closed [ 581.265150][ T29] audit: type=1326 audit(1767449371.093:69748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.2.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 581.286423][T25657] vhci_hcd vhci_hcd.4: stop threads [ 581.293637][ T29] audit: type=1326 audit(1767449371.093:69749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.2.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 581.298863][T25657] vhci_hcd vhci_hcd.4: release socket [ 581.328203][T25657] vhci_hcd vhci_hcd.4: disconnect device [ 581.386046][T25872] FAULT_INJECTION: forcing a failure. [ 581.386046][T25872] name failslab, interval 1, probability 0, space 0, times 0 [ 581.398990][T25872] CPU: 0 UID: 0 PID: 25872 Comm: syz.3.7647 Not tainted syzkaller #0 PREEMPT(voluntary) [ 581.399034][T25872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.399074][T25872] Call Trace: [ 581.399083][T25872] [ 581.399093][T25872] __dump_stack+0x1d/0x30 [ 581.399122][T25872] dump_stack_lvl+0x95/0xd0 [ 581.399146][T25872] dump_stack+0x15/0x1b [ 581.399208][T25872] should_fail_ex+0x265/0x280 [ 581.399234][T25872] should_failslab+0x8c/0xb0 [ 581.399259][T25872] __kmalloc_cache_noprof+0x65/0x4c0 [ 581.399285][T25872] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 581.399379][T25872] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 581.399408][T25872] sctp_association_new+0xde5/0x1190 [ 581.399467][T25872] sctp_connect_new_asoc+0x1a8/0x3a0 [ 581.399570][T25872] sctp_sendmsg+0xf10/0x18d0 [ 581.399602][T25872] ? selinux_socket_sendmsg+0xd1/0x1b0 [ 581.399631][T25872] ? __pfx_sctp_sendmsg+0x10/0x10 [ 581.399713][T25872] inet_sendmsg+0xc5/0xd0 [ 581.399737][T25872] __sock_sendmsg+0x102/0x180 [ 581.399760][T25872] ____sys_sendmsg+0x345/0x4a0 [ 581.399850][T25872] ___sys_sendmsg+0x17b/0x1d0 [ 581.399891][T25872] __sys_sendmmsg+0x178/0x300 [ 581.399932][T25872] __x64_sys_sendmmsg+0x57/0x70 [ 581.400003][T25872] x64_sys_call+0x1e28/0x3000 [ 581.400031][T25872] do_syscall_64+0xca/0x2b0 [ 581.400068][T25872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.400132][T25872] RIP: 0033:0x7f250336f749 [ 581.400151][T25872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.400170][T25872] RSP: 002b:00007f2501dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.400195][T25872] RAX: ffffffffffffffda RBX: 00007f25035c5fa0 RCX: 00007f250336f749 [ 581.400248][T25872] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 581.400263][T25872] RBP: 00007f2501dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 581.400277][T25872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.400292][T25872] R13: 00007f25035c6038 R14: 00007f25035c5fa0 R15: 00007ffc8757e1d8 [ 581.400365][T25872] [ 581.612560][T25867] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 581.658268][T25874] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 581.658268][T25874] program syz.2.7648 not setting count and/or reply_len properly [ 581.688911][T25877] syz_tun: entered promiscuous mode [ 581.695377][T25877] syz_tun: left promiscuous mode [ 581.742807][T25877] random: crng reseeded on system resumption [ 581.776087][T25882] random: crng reseeded on system resumption [ 581.877322][T25891] __nla_validate_parse: 6 callbacks suppressed [ 581.877344][T25891] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7651'. [ 581.924160][T25898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7657'. [ 582.028767][T25895] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 582.083588][T25905] netlink: 'syz.3.7656': attribute type 10 has an invalid length. [ 582.116681][T25905] team0: Device veth0_macvtap failed to register rx_handler [ 582.139934][T25912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7663'. [ 582.149612][T25911] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 582.149612][T25911] program syz.5.7662 not setting count and/or reply_len properly [ 582.182102][T25912] syz_tun: entered promiscuous mode [ 582.198667][T25914] random: crng reseeded on system resumption [ 582.223368][T25912] syz_tun: left promiscuous mode [ 582.331133][T25907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.339811][T25907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.358848][T25907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7661'. [ 582.455335][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7661'. [ 582.553714][T25946] netlink: 'syz.6.7674': attribute type 1 has an invalid length. [ 582.561519][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7673'. [ 582.571409][T25947] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.7671'. [ 582.580579][T25947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7671'. [ 582.586697][T25946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.602472][T25946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7674'. [ 582.619870][T25946] bond1 (unregistering): Released all slaves [ 582.624745][T25950] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 582.624745][T25950] program syz.2.7675 not setting count and/or reply_len properly [ 582.662995][T25952] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7674'. [ 582.789845][T25958] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 582.796405][T25958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 582.804561][T25958] vhci_hcd vhci_hcd.0: Device attached [ 582.810905][T25958] vhci_hcd vhci_hcd.0: port 0 already used [ 582.916566][T25959] vhci_hcd: connection closed [ 582.916827][T11661] vhci_hcd vhci_hcd.6: stop threads [ 582.926881][T11661] vhci_hcd vhci_hcd.6: release socket [ 582.932278][T11661] vhci_hcd vhci_hcd.6: disconnect device [ 583.206900][T25971] FAULT_INJECTION: forcing a failure. [ 583.206900][T25971] name failslab, interval 1, probability 0, space 0, times 0 [ 583.219572][T25971] CPU: 0 UID: 0 PID: 25971 Comm: syz.4.7679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 583.219601][T25971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.219626][T25971] Call Trace: [ 583.219634][T25971] [ 583.219645][T25971] __dump_stack+0x1d/0x30 [ 583.219720][T25971] dump_stack_lvl+0x95/0xd0 [ 583.219743][T25971] dump_stack+0x15/0x1b [ 583.219762][T25971] should_fail_ex+0x265/0x280 [ 583.219846][T25971] should_failslab+0x8c/0xb0 [ 583.219867][T25971] __kmalloc_cache_noprof+0x65/0x4c0 [ 583.219890][T25971] ? alloc_pipe_info+0xae/0x340 [ 583.219964][T25971] alloc_pipe_info+0xae/0x340 [ 583.219989][T25971] splice_direct_to_actor+0x592/0x680 [ 583.220021][T25971] ? kstrtouint_from_user+0x9f/0xf0 [ 583.220047][T25971] ? __pfx_direct_splice_actor+0x10/0x10 [ 583.220142][T25971] ? __rcu_read_unlock+0x4f/0x70 [ 583.220164][T25971] ? get_pid_task+0x96/0xd0 [ 583.220247][T25971] ? avc_policy_seqno+0x15/0x30 [ 583.220267][T25971] ? selinux_file_permission+0x1e2/0x320 [ 583.220295][T25971] do_splice_direct+0xda/0x150 [ 583.220360][T25971] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 583.220391][T25971] do_sendfile+0x380/0x650 [ 583.220450][T25971] __x64_sys_sendfile64+0x105/0x150 [ 583.220476][T25971] x64_sys_call+0x2db1/0x3000 [ 583.220506][T25971] do_syscall_64+0xca/0x2b0 [ 583.220546][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.220645][T25971] RIP: 0033:0x7fcff9eef749 [ 583.220661][T25971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.220683][T25971] RSP: 002b:00007fcff8936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 583.220720][T25971] RAX: ffffffffffffffda RBX: 00007fcffa146090 RCX: 00007fcff9eef749 [ 583.220732][T25971] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 583.220744][T25971] RBP: 00007fcff8936090 R08: 0000000000000000 R09: 0000000000000000 [ 583.220797][T25971] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 583.220812][T25971] R13: 00007fcffa146128 R14: 00007fcffa146090 R15: 00007ffd71f82158 [ 583.220835][T25971] [ 583.601189][T25987] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 583.601189][T25987] program syz.6.7686 not setting count and/or reply_len properly [ 583.843069][T26000] syz_tun: entered promiscuous mode [ 583.849761][T26000] syz_tun: left promiscuous mode [ 583.892604][T26001] random: crng reseeded on system resumption [ 584.032638][T26019] netlink: 'syz.6.7693': attribute type 7 has an invalid length. [ 584.085329][T26025] Invalid ELF header magic: != ELF [ 584.182462][T26030] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 584.292101][T26036] syz_tun: entered promiscuous mode [ 584.298677][T26036] syz_tun: left promiscuous mode [ 584.341488][T26039] random: crng reseeded on system resumption [ 584.493378][T26056] syz_tun: entered promiscuous mode [ 584.500312][T26056] syz_tun: left promiscuous mode [ 584.524835][T26060] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 584.524835][T26060] program syz.3.7714 not setting count and/or reply_len properly [ 584.544333][T26063] random: crng reseeded on system resumption [ 584.580645][T26065] ªªªªªª: renamed from wg2 (while UP) [ 584.718296][T26086] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 584.718296][T26086] program syz.5.7726 not setting count and/or reply_len properly [ 584.767486][T26096] syz_tun: entered promiscuous mode [ 584.774039][T26096] syz_tun: left promiscuous mode [ 584.967831][T26109] syz_tun: entered promiscuous mode [ 584.986978][T26109] syz_tun: left promiscuous mode [ 585.015897][T26110] random: crng reseeded on system resumption [ 585.448745][T26142] Invalid ELF header magic: != ELF [ 585.849275][T26154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.866374][T26154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.443172][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 586.443222][ T29] audit: type=1326 audit(1767449376.373:70406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26168 comm="syz.2.7756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0707a2f749 code=0x0 [ 586.518324][ T29] audit: type=1400 audit(1767449376.423:70407): avc: denied { name_bind } for pid=26168 comm="syz.2.7756" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 586.559686][ T29] audit: type=1400 audit(1767449376.493:70408): avc: denied { setopt } for pid=26175 comm="syz.4.7758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 586.726063][ T29] audit: type=1400 audit(1767449376.653:70409): avc: denied { write } for pid=26179 comm="syz.3.7759" path="socket:[100495]" dev="sockfs" ino=100495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 586.893387][ T29] audit: type=1400 audit(1767449376.813:70410): avc: denied { read } for pid=26162 comm="syz.5.7753" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 586.917179][ T29] audit: type=1400 audit(1767449376.813:70411): avc: denied { open } for pid=26162 comm="syz.5.7753" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 586.940868][ T29] audit: type=1400 audit(1767449376.813:70412): avc: denied { ioctl } for pid=26162 comm="syz.5.7753" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.015341][T26190] __nla_validate_parse: 29 callbacks suppressed [ 587.015359][T26190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7762'. [ 587.050900][T26190] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7762'. [ 587.093206][ T29] audit: type=1400 audit(1767449377.023:70413): avc: denied { create } for pid=26192 comm="syz.5.7763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 587.174039][ T29] audit: type=1400 audit(1767449377.053:70414): avc: denied { getopt } for pid=26192 comm="syz.5.7763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.194110][ T29] audit: type=1400 audit(1767449377.103:70415): avc: denied { connect } for pid=26196 comm="syz.5.7764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 587.294319][T26203] Cannot find add_set index 0 as target [ 587.334649][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7770'. [ 587.433406][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7768'. [ 587.445860][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7768'. [ 587.455516][T26216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7773'. [ 587.487006][T26228] FAULT_INJECTION: forcing a failure. [ 587.487006][T26228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.500291][T26228] CPU: 0 UID: 0 PID: 26228 Comm: syz.2.7778 Not tainted syzkaller #0 PREEMPT(voluntary) [ 587.500320][T26228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.500335][T26228] Call Trace: [ 587.500342][T26228] [ 587.500352][T26228] __dump_stack+0x1d/0x30 [ 587.500382][T26228] dump_stack_lvl+0x95/0xd0 [ 587.500438][T26228] dump_stack+0x15/0x1b [ 587.500462][T26228] should_fail_ex+0x265/0x280 [ 587.500486][T26228] should_fail+0xb/0x20 [ 587.500508][T26228] should_fail_usercopy+0x1a/0x20 [ 587.500536][T26228] _copy_to_user+0x20/0xa0 [ 587.500569][T26228] simple_read_from_buffer+0xb5/0x130 [ 587.500622][T26228] proc_fail_nth_read+0x10e/0x150 [ 587.500653][T26228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.500761][T26228] vfs_read+0x1a8/0x770 [ 587.500784][T26228] ? __rcu_read_unlock+0x4f/0x70 [ 587.500807][T26228] ? __fget_files+0x184/0x1c0 [ 587.500829][T26228] ? mutex_lock+0x58/0x90 [ 587.500854][T26228] ksys_read+0xda/0x1a0 [ 587.500945][T26228] __x64_sys_read+0x40/0x50 [ 587.500968][T26228] x64_sys_call+0x2889/0x3000 [ 587.500998][T26228] do_syscall_64+0xca/0x2b0 [ 587.501097][T26228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.501169][T26228] RIP: 0033:0x7f0707a2e15c [ 587.501187][T26228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 587.501209][T26228] RSP: 002b:00007f070648f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.501235][T26228] RAX: ffffffffffffffda RBX: 00007f0707c85fa0 RCX: 00007f0707a2e15c [ 587.501251][T26228] RDX: 000000000000000f RSI: 00007f070648f0a0 RDI: 0000000000000005 [ 587.501266][T26228] RBP: 00007f070648f090 R08: 0000000000000000 R09: 0000000000000000 [ 587.501281][T26228] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 587.501350][T26228] R13: 00007f0707c86038 R14: 00007f0707c85fa0 R15: 00007ffccf3758f8 [ 587.501399][T26228] [ 587.744216][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7780'. [ 587.818469][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7785'. [ 587.842811][T26243] syz_tun: entered promiscuous mode [ 587.856442][T26243] syz_tun: left promiscuous mode [ 587.886804][T26245] random: crng reseeded on system resumption [ 587.932272][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7783'. [ 587.996325][T26252] netlink: 'syz.6.7787': attribute type 1 has an invalid length. [ 588.069519][T26252] bond1: (slave gretap1): making interface the new active one [ 588.100097][T26252] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 588.120095][T26260] macvlan2: entered promiscuous mode [ 588.125459][T26260] macvlan2: entered allmulticast mode [ 588.138322][T26260] bond1: entered promiscuous mode [ 588.143418][T26260] gretap1: entered promiscuous mode [ 588.161159][T26260] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 588.176290][T26261] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.7790'. [ 588.178983][T26260] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 588.204212][T26260] bond1: left promiscuous mode [ 588.209137][T26260] gretap1: left promiscuous mode [ 588.337980][T26271] ªªªªªª: renamed from wg2 (while UP) [ 588.375094][T26277] FAULT_INJECTION: forcing a failure. [ 588.375094][T26277] name failslab, interval 1, probability 0, space 0, times 0 [ 588.387854][T26277] CPU: 0 UID: 0 PID: 26277 Comm: syz.6.7797 Not tainted syzkaller #0 PREEMPT(voluntary) [ 588.387888][T26277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 588.387903][T26277] Call Trace: [ 588.387909][T26277] [ 588.387917][T26277] __dump_stack+0x1d/0x30 [ 588.388026][T26277] dump_stack_lvl+0x95/0xd0 [ 588.388058][T26277] dump_stack+0x15/0x1b [ 588.388083][T26277] should_fail_ex+0x265/0x280 [ 588.388111][T26277] should_failslab+0x8c/0xb0 [ 588.388153][T26277] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 588.388216][T26277] ? __alloc_skb+0x2ff/0x4b0 [ 588.388247][T26277] __alloc_skb+0x2ff/0x4b0 [ 588.388338][T26277] ? tcp_write_queue_purge+0x73e/0x760 [ 588.388386][T26277] ? kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 588.388415][T26277] tcp_stream_alloc_skb+0x2d/0x1d0 [ 588.388494][T26277] tcp_connect+0xcd7/0x23a0 [ 588.388585][T26277] ? __siphash_unaligned+0x184/0x2d0 [ 588.388731][T26277] ? tcp_fastopen_defer_connect+0x69/0x1e0 [ 588.388846][T26277] tcp_v6_connect+0xb75/0xc40 [ 588.388879][T26277] __inet_stream_connect+0x169/0x7d0 [ 588.388906][T26277] ? should_failslab+0x8c/0xb0 [ 588.388974][T26277] ? __kmalloc_cache_noprof+0x252/0x4c0 [ 588.389003][T26277] ? tcp_sendmsg_fastopen+0x172/0x520 [ 588.389038][T26277] tcp_sendmsg_fastopen+0x43a/0x520 [ 588.389107][T26277] tcp_sendmsg_locked+0x26e1/0x2c00 [ 588.389178][T26277] ? lockref_put_return+0xf7/0x130 [ 588.389224][T26277] ? __rcu_read_unlock+0x4f/0x70 [ 588.389245][T26277] ? __rcu_read_unlock+0x4f/0x70 [ 588.389269][T26277] ? avc_has_perm_noaudit+0xab/0x130 [ 588.389312][T26277] ? avc_has_perm+0xf7/0x180 [ 588.389332][T26277] ? _raw_spin_lock_bh+0x56/0xb0 [ 588.389352][T26277] ? _raw_spin_unlock_bh+0x36/0x40 [ 588.389377][T26277] ? __pfx_tcp_sendmsg+0x10/0x10 [ 588.389484][T26277] tcp_sendmsg+0x2f/0x50 [ 588.389511][T26277] inet6_sendmsg+0x76/0xd0 [ 588.389537][T26277] __sock_sendmsg+0x8b/0x180 [ 588.389561][T26277] __sys_sendto+0x268/0x330 [ 588.389596][T26277] __x64_sys_sendto+0x76/0x90 [ 588.389684][T26277] x64_sys_call+0x29a7/0x3000 [ 588.389707][T26277] do_syscall_64+0xca/0x2b0 [ 588.389748][T26277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.389769][T26277] RIP: 0033:0x7f9be645f749 [ 588.389786][T26277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.389807][T26277] RSP: 002b:00007f9be4ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 588.389831][T26277] RAX: ffffffffffffffda RBX: 00007f9be66b5fa0 RCX: 00007f9be645f749 [ 588.389844][T26277] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 588.389913][T26277] RBP: 00007f9be4ec7090 R08: 0000200000b63fe4 R09: 000000000000001c [ 588.389929][T26277] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 588.389944][T26277] R13: 00007f9be66b6038 R14: 00007f9be66b5fa0 R15: 00007fffeab404c8 [ 588.389963][T26277] [ 588.710528][T26275] Invalid ELF header magic: != ELF [ 589.075173][T26300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.114560][T26300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.442469][T26334] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 589.558707][T26349] random: crng reseeded on system resumption [ 589.558847][T26351] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 589.571315][T26351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 589.579614][T26351] vhci_hcd vhci_hcd.0: Device attached [ 589.598719][T26351] vhci_hcd vhci_hcd.0: port 0 already used [ 589.697907][T26353] vhci_hcd: connection closed [ 589.699735][T25646] vhci_hcd vhci_hcd.6: stop threads [ 589.709945][T25646] vhci_hcd vhci_hcd.6: release socket [ 589.715421][T25646] vhci_hcd vhci_hcd.6: disconnect device [ 589.849127][T12812] IPVS: starting estimator thread 0... [ 589.888128][T26375] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 589.888128][T26375] program syz.5.7830 not setting count and/or reply_len properly [ 589.936685][T26371] IPVS: using max 2160 ests per chain, 108000 per kthread [ 590.803819][T26413] netem: change failed [ 590.867404][T26417] random: crng reseeded on system resumption [ 591.172620][T26430] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 591.172620][T26430] program syz.4.7849 not setting count and/or reply_len properly [ 591.337238][T26444] random: crng reseeded on system resumption [ 591.528832][T26462] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 591.528832][T26462] program syz.5.7861 not setting count and/or reply_len properly [ 591.875440][T26473] Invalid ELF header magic: != ELF [ 592.003333][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 592.003352][ T29] audit: type=1326 audit(1767449381.933:70761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.091365][T26488] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 592.091365][T26488] program syz.6.7872 not setting count and/or reply_len properly [ 592.101638][ T29] audit: type=1326 audit(1767449381.973:70762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.131956][ T29] audit: type=1326 audit(1767449381.973:70763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.155936][ T29] audit: type=1326 audit(1767449381.973:70764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.180999][ T29] audit: type=1326 audit(1767449381.973:70765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.204698][ T29] audit: type=1326 audit(1767449381.973:70766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.228303][ T29] audit: type=1326 audit(1767449381.973:70767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.252217][ T29] audit: type=1326 audit(1767449381.973:70768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.275957][ T29] audit: type=1326 audit(1767449381.973:70769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 592.299997][ T29] audit: type=1326 audit(1767449381.973:70770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26483 comm="syz.3.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f250336df90 code=0x7ffc0000 [ 592.326257][T26494] __nla_validate_parse: 26 callbacks suppressed [ 592.326332][T26494] netlink: 204 bytes leftover after parsing attributes in process `GPL'. [ 592.434918][T26502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 592.441574][T26502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 592.449742][T26502] vhci_hcd vhci_hcd.0: Device attached [ 592.477889][T26505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=26505 comm=syz.6.7875 [ 592.496548][T26506] vhci_hcd vhci_hcd.0: port 0 already used [ 592.627076][T26503] vhci_hcd: connection closed [ 592.627503][T25650] vhci_hcd vhci_hcd.2: stop threads [ 592.637533][T25650] vhci_hcd vhci_hcd.2: release socket [ 592.643336][T25650] vhci_hcd vhci_hcd.2: disconnect device [ 592.669798][T26515] netlink: 'syz.4.7879': attribute type 4 has an invalid length. [ 592.702168][T26515] netlink: 'syz.4.7879': attribute type 4 has an invalid length. [ 592.987001][T26521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.005055][T26521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.022202][T26521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7882'. [ 593.054039][T26521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7882'. [ 593.264768][T26543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7888'. [ 593.327171][T26550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7891'. [ 593.788234][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7895'. [ 593.840579][T26563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7896'. [ 593.868015][ T3414] IPVS: starting estimator thread 0... [ 593.956209][T26566] IPVS: using max 2544 ests per chain, 127200 per kthread [ 593.989387][T26570] netlink: 204 bytes leftover after parsing attributes in process `GPL'. [ 594.017417][T26571] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 594.017417][T26571] program syz.5.7899 not setting count and/or reply_len properly [ 594.120912][T26574] Invalid ELF header magic: != ELF [ 594.166763][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7901'. [ 594.285046][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7906'. [ 594.567825][T26606] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 594.567825][T26606] program syz.6.7912 not setting count and/or reply_len properly [ 594.597383][T26608] ªªªªªª: renamed from wg2 (while UP) [ 594.695860][T26611] vcan0 speed is unknown, defaulting to 1000 [ 594.715840][T26611] vcan0 speed is unknown, defaulting to 1000 [ 594.736852][T26611] vcan0 speed is unknown, defaulting to 1000 [ 594.858868][T26611] infiniband syz1: set down [ 594.863458][T26611] infiniband syz1: added vcan0 [ 594.868444][T15252] vcan0 speed is unknown, defaulting to 1000 [ 594.889701][T26611] RDS/IB: syz1: added [ 594.903897][T26611] smc: adding ib device syz1 with port count 1 [ 594.911476][T26611] smc: ib device syz1 port 1 has no pnetid [ 594.917991][T15252] vcan0 speed is unknown, defaulting to 1000 [ 594.931256][T26611] vcan0 speed is unknown, defaulting to 1000 [ 595.006942][T26611] vcan0 speed is unknown, defaulting to 1000 [ 595.057868][T26611] vcan0 speed is unknown, defaulting to 1000 [ 595.122611][T26611] vcan0 speed is unknown, defaulting to 1000 [ 595.140931][T26644] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 595.140931][T26644] program syz.3.7926 not setting count and/or reply_len properly [ 595.211029][T26611] vcan0 speed is unknown, defaulting to 1000 [ 595.274844][T26611] vcan0 speed is unknown, defaulting to 1000 [ 595.363314][T26649] netlink: 'syz.3.7928': attribute type 3 has an invalid length. [ 595.416929][T26657] random: crng reseeded on system resumption [ 595.435835][T26657] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.502605][T26667] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 595.502605][T26667] program syz.5.7937 not setting count and/or reply_len properly [ 595.544656][T26672] IPVS: stopping backup sync thread 26676 ... [ 595.544608][T26676] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 595.691179][T26665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.712357][T26665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.539668][T26835] openvswitch: netlink: EtherType 0 is less than min 600 [ 596.726640][T26859] UHID_CREATE from different security context by process 1384 (syz.6.7959), this is not allowed. [ 596.774826][T26865] netlink: 'syz.5.7962': attribute type 1 has an invalid length. [ 596.789008][T26865] bond1: entered promiscuous mode [ 596.794224][T26863] FAULT_INJECTION: forcing a failure. [ 596.794224][T26863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.794256][T26863] CPU: 1 UID: 0 PID: 26863 Comm: syz.6.7961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 596.794284][T26863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.794296][T26863] Call Trace: [ 596.794303][T26863] [ 596.794311][T26863] __dump_stack+0x1d/0x30 [ 596.794337][T26863] dump_stack_lvl+0x95/0xd0 [ 596.794398][T26863] dump_stack+0x15/0x1b [ 596.794487][T26863] should_fail_ex+0x265/0x280 [ 596.794511][T26863] should_fail+0xb/0x20 [ 596.794531][T26863] should_fail_usercopy+0x1a/0x20 [ 596.794574][T26863] _copy_from_user+0x1c/0xb0 [ 596.794602][T26863] vmemdup_user+0x5e/0xd0 [ 596.794622][T26863] path_setxattrat+0x1b6/0x310 [ 596.794729][T26863] __x64_sys_lsetxattr+0x71/0x90 [ 596.794796][T26863] x64_sys_call+0x2ef0/0x3000 [ 596.794821][T26863] do_syscall_64+0xca/0x2b0 [ 596.794854][T26863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.794876][T26863] RIP: 0033:0x7f9be645f749 [ 596.794893][T26863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.794958][T26863] RSP: 002b:00007f9be4ec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 596.794979][T26863] RAX: ffffffffffffffda RBX: 00007f9be66b5fa0 RCX: 00007f9be645f749 [ 596.794993][T26863] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900 [ 596.795006][T26863] RBP: 00007f9be4ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 596.795088][T26863] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 596.795100][T26863] R13: 00007f9be66b6038 R14: 00007f9be66b5fa0 R15: 00007fffeab404c8 [ 596.795119][T26863] [ 596.971364][T26865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.988857][T26868] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 597.035416][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 597.035436][ T29] audit: type=1326 audit(1767449386.963:71253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.095556][ T29] audit: type=1400 audit(1767449386.993:71254): avc: denied { create } for pid=26880 comm="syz.5.7967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 597.115332][ T29] audit: type=1326 audit(1767449387.003:71255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.138970][ T29] audit: type=1326 audit(1767449387.003:71256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.162640][ T29] audit: type=1326 audit(1767449387.003:71257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.186317][ T29] audit: type=1326 audit(1767449387.003:71258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.197844][T26881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=26881 comm=syz.5.7967 [ 597.209959][ T29] audit: type=1326 audit(1767449387.003:71259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.210012][ T29] audit: type=1326 audit(1767449387.003:71260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.210041][ T29] audit: type=1326 audit(1767449387.003:71261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.210069][ T29] audit: type=1326 audit(1767449387.003:71262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26878 comm="syz.2.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 597.378774][T26899] FAULT_INJECTION: forcing a failure. [ 597.378774][T26899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.392155][T26899] CPU: 1 UID: 0 PID: 26899 Comm: syz.5.7975 Not tainted syzkaller #0 PREEMPT(voluntary) [ 597.392178][T26899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.392221][T26899] Call Trace: [ 597.392227][T26899] [ 597.392250][T26899] __dump_stack+0x1d/0x30 [ 597.392341][T26899] dump_stack_lvl+0x95/0xd0 [ 597.392356][T26899] dump_stack+0x15/0x1b [ 597.392369][T26899] should_fail_ex+0x265/0x280 [ 597.392430][T26899] should_fail+0xb/0x20 [ 597.392443][T26899] should_fail_usercopy+0x1a/0x20 [ 597.392518][T26899] _copy_to_user+0x20/0xa0 [ 597.392537][T26899] simple_read_from_buffer+0xb5/0x130 [ 597.392553][T26899] proc_fail_nth_read+0x10e/0x150 [ 597.392572][T26899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.392599][T26899] vfs_read+0x1a8/0x770 [ 597.392611][T26899] ? __rcu_read_unlock+0x4f/0x70 [ 597.392680][T26899] ? __fget_files+0x184/0x1c0 [ 597.392696][T26899] ? mutex_lock+0x58/0x90 [ 597.392714][T26899] ksys_read+0xda/0x1a0 [ 597.392749][T26899] __x64_sys_read+0x40/0x50 [ 597.392762][T26899] x64_sys_call+0x2889/0x3000 [ 597.392779][T26899] do_syscall_64+0xca/0x2b0 [ 597.392852][T26899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.392867][T26899] RIP: 0033:0x7f820beee15c [ 597.392880][T26899] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 597.392897][T26899] RSP: 002b:00007f820a94f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 597.392913][T26899] RAX: ffffffffffffffda RBX: 00007f820c145fa0 RCX: 00007f820beee15c [ 597.392938][T26899] RDX: 000000000000000f RSI: 00007f820a94f0a0 RDI: 0000000000000006 [ 597.393022][T26899] RBP: 00007f820a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 597.393030][T26899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.393039][T26899] R13: 00007f820c146038 R14: 00007f820c145fa0 R15: 00007ffcd1dcf788 [ 597.393052][T26899] [ 597.592229][T26901] __nla_validate_parse: 14 callbacks suppressed [ 597.592251][T26901] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.7974'. [ 597.607692][T26901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7974'. [ 597.617621][T26902] tipc: New replicast peer: 255.255.255.255 [ 597.618014][T26895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.623773][T26902] tipc: Enabled bearer , priority 10 [ 597.632267][T26895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.696987][T26895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7973'. [ 597.754016][T26911] Invalid ELF header magic: != ELF [ 597.757012][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7973'. [ 598.153361][T26935] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7987'. [ 598.461935][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7996'. [ 598.766840][T26968] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 598.766840][T26968] program syz.4.8001 not setting count and/or reply_len properly [ 599.205409][ T6772] kernel write not supported for file [eventfd] (pid: 6772 comm: kworker/1:13) [ 599.473345][T27005] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 599.473345][T27005] program syz.3.8014 not setting count and/or reply_len properly [ 599.640990][T26991] Process accounting resumed [ 599.948470][T27038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8028'. [ 599.949678][T27040] program syz.2.8029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.131621][T27038] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8028'. [ 600.141482][T27038] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 600.203637][T27047] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8030'. [ 600.313599][T27048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27048 comm=syz.3.8028 [ 600.862591][T27080] vcan0 speed is unknown, defaulting to 1000 [ 600.922305][T27094] Invalid ELF header magic: != ELF [ 600.930955][T27097] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.8045'. [ 600.998728][T27098] syzkaller0: entered promiscuous mode [ 601.004285][T27098] syzkaller0: entered allmulticast mode [ 601.100165][T27106] random: crng reseeded on system resumption [ 601.169384][T27114] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 601.176027][T27114] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 601.184320][T27114] vhci_hcd vhci_hcd.0: Device attached [ 601.192932][T27114] vhci_hcd vhci_hcd.0: port 0 already used [ 601.365440][T27115] vhci_hcd: connection closed [ 601.365963][T25656] vhci_hcd vhci_hcd.4: stop threads [ 601.376172][T25656] vhci_hcd vhci_hcd.4: release socket [ 601.381693][T25656] vhci_hcd vhci_hcd.4: disconnect device [ 601.477049][T27132] vcan0 speed is unknown, defaulting to 1000 [ 601.698248][T27145] FAULT_INJECTION: forcing a failure. [ 601.698248][T27145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.711374][T27145] CPU: 1 UID: 0 PID: 27145 Comm: syz.5.8064 Not tainted syzkaller #0 PREEMPT(voluntary) [ 601.711409][T27145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.711424][T27145] Call Trace: [ 601.711432][T27145] [ 601.711443][T27145] __dump_stack+0x1d/0x30 [ 601.711473][T27145] dump_stack_lvl+0x95/0xd0 [ 601.711544][T27145] dump_stack+0x15/0x1b [ 601.711568][T27145] should_fail_ex+0x265/0x280 [ 601.711594][T27145] should_fail+0xb/0x20 [ 601.711657][T27145] should_fail_usercopy+0x1a/0x20 [ 601.711687][T27145] _copy_from_user+0x1c/0xb0 [ 601.711719][T27145] kstrtouint_from_user+0x69/0xf0 [ 601.711745][T27145] ? 0xffffffff81000000 [ 601.711761][T27145] ? selinux_file_permission+0x1e2/0x320 [ 601.711819][T27145] proc_fail_nth_write+0x50/0x160 [ 601.711852][T27145] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 601.711906][T27145] vfs_write+0x269/0x960 [ 601.711928][T27145] ? vfs_read+0x4e6/0x770 [ 601.711947][T27145] ? __rcu_read_unlock+0x4f/0x70 [ 601.712003][T27145] ? __fget_files+0x184/0x1c0 [ 601.712029][T27145] ? mutex_lock+0x58/0x90 [ 601.712078][T27145] ksys_write+0xda/0x1a0 [ 601.712100][T27145] __x64_sys_write+0x40/0x50 [ 601.712122][T27145] x64_sys_call+0x2847/0x3000 [ 601.712213][T27145] do_syscall_64+0xca/0x2b0 [ 601.712261][T27145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.712286][T27145] RIP: 0033:0x7f820beee1ff [ 601.712304][T27145] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 601.712337][T27145] RSP: 002b:00007f820a94f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 601.712430][T27145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f820beee1ff [ 601.712446][T27145] RDX: 0000000000000001 RSI: 00007f820a94f0a0 RDI: 0000000000000005 [ 601.712462][T27145] RBP: 00007f820a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 601.712474][T27145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 601.712489][T27145] R13: 00007f820c146038 R14: 00007f820c145fa0 R15: 00007ffcd1dcf788 [ 601.712510][T27145] [ 602.049728][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 602.049749][ T29] audit: type=1400 audit(1767449391.983:71614): avc: denied { allowed } for pid=27151 comm="syz.3.8067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 602.124446][ T29] audit: type=1326 audit(1767449392.033:71615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27154 comm="syz.5.8068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f820beef749 code=0x0 [ 602.147790][ T29] audit: type=1326 audit(1767449392.053:71616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27161 comm="syz.4.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 602.171520][ T29] audit: type=1326 audit(1767449392.053:71617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27161 comm="syz.4.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 602.195513][ T29] audit: type=1326 audit(1767449392.053:71618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27161 comm="syz.4.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 602.219281][ T29] audit: type=1400 audit(1767449392.053:71619): avc: denied { create } for pid=27159 comm="syz.2.8070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 602.239039][ T29] audit: type=1326 audit(1767449392.053:71620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27161 comm="syz.4.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 602.262853][ T29] audit: type=1400 audit(1767449392.053:71622): avc: denied { lock } for pid=27159 comm="syz.2.8070" path="socket:[103544]" dev="sockfs" ino=103544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 602.286471][ T29] audit: type=1326 audit(1767449392.053:71621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27161 comm="syz.4.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 602.310105][ T29] audit: type=1326 audit(1767449392.053:71623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27161 comm="syz.4.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 602.356067][T27168] Invalid ELF header magic: != ELF [ 602.610948][T27177] vcan0 speed is unknown, defaulting to 1000 [ 602.853977][T27196] __nla_validate_parse: 2 callbacks suppressed [ 602.853996][T27196] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8084'. [ 602.964048][T27204] Invalid ELF header magic: != ELF [ 603.098034][T27215] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 603.098034][T27215] program syz.3.8092 not setting count and/or reply_len properly [ 603.377566][T27229] Invalid ELF header magic: != ELF [ 603.677419][T27220] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8094'. [ 603.934143][T27250] netlink: 204 bytes leftover after parsing attributes in process `GPL'. [ 603.934773][T27248] netlink: 200 bytes leftover after parsing attributes in process `syz.5.8102'. [ 603.948730][T27247] netlink: 204 bytes leftover after parsing attributes in process `GPL'. [ 604.289585][T27262] netlink: 204 bytes leftover after parsing attributes in process `GPL'. [ 604.443956][T27265] Invalid ELF header magic: != ELF [ 604.478466][T27273] random: crng reseeded on system resumption [ 604.873436][T27289] syz!: rxe_newlink: already configured on team_slave_0 [ 604.927080][T27289] vcan0 speed is unknown, defaulting to 1000 [ 604.951609][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8121'. [ 605.015183][T27296] netlink: 204 bytes leftover after parsing attributes in process `GPL'. [ 605.060470][ T3414] IPVS: starting estimator thread 0... [ 605.146266][T27301] IPVS: using max 2544 ests per chain, 127200 per kthread [ 605.592888][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8136'. [ 605.695754][T27346] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.8140'. [ 605.708861][T27342] Invalid ELF header magic: != ELF [ 606.026683][T27366] syz!: rxe_newlink: already configured on team_slave_0 [ 606.070338][T27366] vcan0 speed is unknown, defaulting to 1000 [ 606.245975][T27369] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 606.245975][T27369] program syz.4.8151 not setting count and/or reply_len properly [ 606.600623][T27381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.609219][T27381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.127254][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 607.127274][ T29] audit: type=1400 audit(1767449397.063:72048): avc: denied { connect } for pid=27402 comm="syz.2.8163" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 607.245649][ T29] audit: type=1400 audit(1767449397.173:72049): avc: denied { setopt } for pid=27404 comm="syz.2.8164" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 607.325739][ T29] audit: type=1400 audit(1767449397.253:72050): avc: denied { execmem } for pid=27409 comm="syz.2.8165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 607.360703][T27412] sctp: [Deprecated]: syz.3.8167 (pid 27412) Use of int in max_burst socket option. [ 607.360703][T27412] Use struct sctp_assoc_value instead [ 607.412084][ T29] audit: type=1400 audit(1767449397.283:72051): avc: denied { create } for pid=27411 comm="syz.3.8167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 607.433224][ T29] audit: type=1400 audit(1767449397.293:72052): avc: denied { write } for pid=27411 comm="syz.3.8167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 607.439090][T27414] random: crng reseeded on system resumption [ 607.454507][ T29] audit: type=1400 audit(1767449397.293:72053): avc: denied { getopt } for pid=27411 comm="syz.3.8167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 607.566890][ T29] audit: type=1326 audit(1767449397.343:72054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27411 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 607.590625][ T29] audit: type=1326 audit(1767449397.343:72055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27411 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 607.614460][ T29] audit: type=1326 audit(1767449397.343:72056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27411 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 607.638274][ T29] audit: type=1326 audit(1767449397.373:72057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27411 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 607.878637][T27432] random: crng reseeded on system resumption [ 607.976341][T27449] __nla_validate_parse: 8 callbacks suppressed [ 607.976411][T27449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8177'. [ 608.006732][T27425] vcan0 speed is unknown, defaulting to 1000 [ 608.031262][T27447] Invalid ELF header magic: != ELF [ 608.211784][T27474] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8180'. [ 608.233531][T27476] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.8188'. [ 608.242736][T27476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8188'. [ 608.292075][T27482] program syz.3.8194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.348681][T27471] vcan0 speed is unknown, defaulting to 1000 [ 608.397457][T25656] Bluetooth: hci1: Frame reassembly failed (-84) [ 608.561598][T27487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8195'. [ 608.725254][T27497] vcan0 speed is unknown, defaulting to 1000 [ 608.981365][T27511] random: crng reseeded on system resumption [ 609.085667][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8206'. [ 609.101180][T27508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8202'. [ 609.111332][T27508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 609.120479][T27508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 609.218082][T27524] vcan0 speed is unknown, defaulting to 1000 [ 609.382118][T27534] vcan0 speed is unknown, defaulting to 1000 [ 609.564066][T27539] vcan0 speed is unknown, defaulting to 1000 [ 609.808971][T27547] random: crng reseeded on system resumption [ 609.885483][T27550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8217'. [ 609.967616][T27563] Invalid ELF header magic: != ELF [ 609.997679][T27558] netlink: 'syz.4.8221': attribute type 29 has an invalid length. [ 610.153647][T27565] vcan0 speed is unknown, defaulting to 1000 [ 610.456207][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 610.456230][T17499] Bluetooth: hci1: command 0x1003 tx timeout [ 610.980101][T27619] random: crng reseeded on system resumption [ 611.411157][T25652] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.451649][T27626] vcan0 speed is unknown, defaulting to 1000 [ 611.478063][T25652] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.549925][T25652] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.613224][T25652] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.699103][T27626] chnl_net:caif_netlink_parms(): no params data found [ 611.788967][T25652] bond1 (unregistering): (slave gretap1): Releasing active interface [ 611.918620][T25652] bond0 (unregistering): Released all slaves [ 611.946026][T25652] bond1 (unregistering): Released all slaves [ 612.075938][T25652] tipc: Disabling bearer [ 612.081489][T25652] tipc: Left network mode [ 612.156664][T27626] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.163934][T27626] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.187938][T27626] bridge_slave_0: entered allmulticast mode [ 612.198299][T27626] bridge_slave_0: entered promiscuous mode [ 612.213651][T27672] vcan0 speed is unknown, defaulting to 1000 [ 612.222161][T27626] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.229286][T27626] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.272679][T27626] bridge_slave_1: entered allmulticast mode [ 612.285803][T27626] bridge_slave_1: entered promiscuous mode [ 612.350076][T25652] hsr_slave_0: left promiscuous mode [ 612.362869][T25652] hsr_slave_1: left promiscuous mode [ 612.383910][T25652] veth1_vlan: left promiscuous mode [ 612.395972][T25652] veth0_vlan: left promiscuous mode [ 612.604887][T27626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.630962][T27626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.719945][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 612.719965][ T29] audit: type=1326 audit(1767449402.603:72175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.749840][ T29] audit: type=1326 audit(1767449402.603:72176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.773424][ T29] audit: type=1326 audit(1767449402.603:72177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.797450][ T29] audit: type=1326 audit(1767449402.603:72178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.829838][ T29] audit: type=1326 audit(1767449402.743:72179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.853612][ T29] audit: type=1326 audit(1767449402.743:72180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.877725][ T29] audit: type=1326 audit(1767449402.803:72181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.901307][ T29] audit: type=1326 audit(1767449402.803:72182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.925310][ T29] audit: type=1326 audit(1767449402.803:72183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.952123][ T29] audit: type=1326 audit(1767449402.883:72184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27699 comm="syz.4.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcff9eef749 code=0x7ffc0000 [ 612.993619][T25652] IPVS: stop unused estimator thread 0... [ 613.004830][T27626] team0: Port device team_slave_0 added [ 613.096644][T27626] team0: Port device team_slave_1 added [ 613.131616][T27717] __nla_validate_parse: 8 callbacks suppressed [ 613.131634][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8265'. [ 613.154258][T27626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.161278][T27626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.165297][T27716] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.8264'. [ 613.187285][T27626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.207519][T27716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8264'. [ 613.285037][T27626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.292163][T27626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.318378][T27626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.355848][T27626] hsr_slave_0: entered promiscuous mode [ 613.362075][T27626] hsr_slave_1: entered promiscuous mode [ 613.528284][T27734] netlink: 830 bytes leftover after parsing attributes in process `syz.5.8272'. [ 613.537663][T27734] bond_slave_0: entered promiscuous mode [ 613.543334][T27734] bond_slave_1: entered promiscuous mode [ 613.590982][T27732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8271'. [ 613.654442][T27626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.664740][T27626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.674276][T27626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.686958][T27626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.744465][T27742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8276'. [ 613.752342][T27626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.772809][T27626] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.782403][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.789511][T11641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.803087][T25657] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.810486][T25657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.099631][T27626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.139479][T27773] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 614.241122][T27773] vcan0 speed is unknown, defaulting to 1000 [ 614.374661][T27626] veth0_vlan: entered promiscuous mode [ 614.384634][T27626] veth1_vlan: entered promiscuous mode [ 614.426699][T27626] veth0_macvtap: entered promiscuous mode [ 614.437295][T27626] veth1_macvtap: entered promiscuous mode [ 614.442457][T27793] random: crng reseeded on system resumption [ 614.448692][T27626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.462902][T27626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.484948][T25656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.497763][T25656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.513710][T25656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.551169][T25656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.645134][T27820] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 614.645134][T27820] program syz.3.8296 not setting count and/or reply_len properly [ 614.667743][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8293'. [ 615.350565][T27840] netlink: 248 bytes leftover after parsing attributes in process `GPL'. [ 615.360430][T27840] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 615.542361][T27863] Invalid ELF header magic: != ELF [ 615.602776][T27861] sd 0:0:1:0: device reset [ 615.614035][T27861] openvswitch: netlink: EtherType 0 is less than min 600 [ 615.636919][T27862] FAULT_INJECTION: forcing a failure. [ 615.636919][T27862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 615.650391][T27862] CPU: 0 UID: 0 PID: 27862 Comm: syz.5.8304 Not tainted syzkaller #0 PREEMPT(voluntary) [ 615.650447][T27862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.650532][T27862] Call Trace: [ 615.650540][T27862] [ 615.650548][T27862] __dump_stack+0x1d/0x30 [ 615.650577][T27862] dump_stack_lvl+0x95/0xd0 [ 615.650645][T27862] dump_stack+0x15/0x1b [ 615.650668][T27862] should_fail_ex+0x265/0x280 [ 615.650695][T27862] should_fail_alloc_page+0xf2/0x100 [ 615.650723][T27862] __alloc_frozen_pages_noprof+0x109/0x360 [ 615.650792][T27862] alloc_pages_mpol+0xb3/0x260 [ 615.650890][T27862] vma_alloc_folio_noprof+0x1aa/0x300 [ 615.650926][T27862] do_wp_page+0xf60/0x2510 [ 615.650991][T27862] ? avc_has_perm_noaudit+0xab/0x130 [ 615.651013][T27862] ? __rcu_read_lock+0x37/0x50 [ 615.651037][T27862] handle_mm_fault+0x7b0/0x2c60 [ 615.651116][T27862] ? __rcu_read_unlock+0x4f/0x70 [ 615.651140][T27862] ? mt_find+0x21b/0x330 [ 615.651168][T27862] do_user_addr_fault+0x3fe/0x1080 [ 615.651258][T27862] exc_page_fault+0x62/0xa0 [ 615.651284][T27862] asm_exc_page_fault+0x26/0x30 [ 615.651303][T27862] RIP: 0010:filldir+0x1f0/0x420 [ 615.651323][T27862] Code: c1 ff 48 89 ef 4c 89 fe e8 2d cf c1 ff 4c 39 fd 0f 82 af 01 00 00 4c 39 e5 0f 87 a6 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 <49> 89 47 08 48 8b 44 24 10 48 8b 4c 24 38 48 89 08 48 8b 6c 24 18 [ 615.651340][T27862] RSP: 0018:ffffc9000214fd40 EFLAGS: 00050287 [ 615.651397][T27862] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888103b3d280 [ 615.651410][T27862] RDX: 0000000000000000 RSI: 0000200000001fc0 RDI: 0000200000001fd8 [ 615.651423][T27862] RBP: 0000200000001fd8 R08: 0001c9000214fe97 R09: 0000000000000000 [ 615.651512][T27862] R10: 0000000000000001 R11: ffffffff819631b0 R12: 00007ffffffff000 [ 615.651525][T27862] R13: 0000000000000004 R14: ffffffff864accb9 R15: 0000200000001fc0 [ 615.651539][T27862] ? __pfx_filldir+0x10/0x10 [ 615.651585][T27862] ? __pfx_filldir+0x10/0x10 [ 615.651608][T27862] dcache_readdir+0xc7/0x3f0 [ 615.651711][T27862] iterate_dir+0x114/0x330 [ 615.651755][T27862] __se_sys_getdents+0x88/0x1b0 [ 615.651831][T27862] ? __pfx_filldir+0x10/0x10 [ 615.651854][T27862] __x64_sys_getdents+0x43/0x50 [ 615.651892][T27862] x64_sys_call+0xe03/0x3000 [ 615.651961][T27862] do_syscall_64+0xca/0x2b0 [ 615.651991][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.652109][T27862] RIP: 0033:0x7f820beef749 [ 615.652124][T27862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.652163][T27862] RSP: 002b:00007f820a90d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 615.652186][T27862] RAX: ffffffffffffffda RBX: 00007f820c146180 RCX: 00007f820beef749 [ 615.652198][T27862] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 615.652210][T27862] RBP: 00007f820a90d090 R08: 0000000000000000 R09: 0000000000000000 [ 615.652222][T27862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.652237][T27862] R13: 00007f820c146218 R14: 00007f820c146180 R15: 00007ffcd1dcf788 [ 615.652324][T27862] [ 616.015693][T27869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8313'. [ 616.324871][T27883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.333656][T27883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.333916][T27888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.350214][T27888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.445354][T27922] random: crng reseeded on system resumption [ 616.517048][T27933] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 616.523730][T27933] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 616.531956][T27933] vhci_hcd vhci_hcd.0: Device attached [ 616.796249][ T3773] usb 14-1: SetAddress Request (8) to port 0 [ 616.802468][ T3773] usb 14-1: new SuperSpeed USB device number 8 using vhci_hcd [ 616.935780][T27954] Invalid ELF header magic: != ELF [ 617.054025][T27959] random: crng reseeded on system resumption [ 617.279126][T27962] vcan0 speed is unknown, defaulting to 1000 [ 617.834981][T27984] random: crng reseeded on system resumption [ 617.886675][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.895539][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.071765][T28005] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 618.078400][T28005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 618.086663][T28005] vhci_hcd vhci_hcd.0: Device attached [ 618.100261][T28005] vhci_hcd vhci_hcd.0: port 0 already used [ 618.153117][T28015] __nla_validate_parse: 23 callbacks suppressed [ 618.153197][T28015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8368'. [ 618.169386][T28015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8368'. [ 618.178608][T28015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8368'. [ 618.184679][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8364'. [ 618.206985][T28006] vhci_hcd: connection closed [ 618.207565][T25657] vhci_hcd vhci_hcd.5: stop threads [ 618.217804][T25657] vhci_hcd vhci_hcd.5: release socket [ 618.223437][T25657] vhci_hcd vhci_hcd.5: disconnect device [ 618.232721][T28017] Invalid ELF header magic: != ELF [ 618.290433][T28021] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.8370'. [ 618.299762][T28021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8370'. [ 618.536659][T27934] vhci_hcd: connection reset by peer [ 618.542702][T25646] vhci_hcd vhci_hcd.6: stop threads [ 618.547986][T25646] vhci_hcd vhci_hcd.6: release socket [ 618.553451][T25646] vhci_hcd vhci_hcd.6: disconnect device [ 618.716517][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 618.716538][ T29] audit: type=1400 audit(1767449408.653:72448): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=127.0.0.1 src=20001 daddr=127.0.0.1 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 618.742392][T28030] Invalid ELF header magic: != ELF [ 618.748853][ T29] audit: type=1400 audit(1767449408.663:72449): avc: denied { open } for pid=28029 comm="syz.5.8373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 618.772898][ T29] audit: type=1400 audit(1767449408.663:72450): avc: denied { perfmon } for pid=28029 comm="syz.5.8373" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.794252][ T29] audit: type=1400 audit(1767449408.663:72451): avc: denied { kernel } for pid=28029 comm="syz.5.8373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 618.813919][ T29] audit: type=1400 audit(1767449408.673:72452): avc: denied { map_create } for pid=28029 comm="syz.5.8373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 618.833492][ T29] audit: type=1400 audit(1767449408.673:72453): avc: denied { prog_load } for pid=28029 comm="syz.5.8373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 618.853067][ T29] audit: type=1400 audit(1767449408.673:72454): avc: denied { bpf } for pid=28029 comm="syz.5.8373" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.874014][ T29] audit: type=1400 audit(1767449408.673:72455): avc: denied { sys_module } for pid=28029 comm="syz.5.8373" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 618.895916][ T29] audit: type=1400 audit(1767449408.673:72456): avc: denied { module_load } for pid=28029 comm="syz.5.8373" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 619.016578][ T29] audit: type=1400 audit(1767449408.953:72457): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 619.066986][T28033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8374'. [ 619.104011][T28033] team0: Port device team_slave_1 removed [ 619.252242][T28038] vcan0 speed is unknown, defaulting to 1000 [ 619.497062][T28057] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 619.497062][T28057] program syz.3.8383 not setting count and/or reply_len properly [ 619.631204][T28065] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.8381'. [ 619.640447][T28065] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8381'. [ 619.724899][T28069] random: crng reseeded on system resumption [ 620.951334][T28099] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8397'. [ 621.396232][T28114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28114 comm=syz.6.8401 [ 621.554767][T28110] vcan0 speed is unknown, defaulting to 1000 [ 621.723155][T28126] ªªªªªª: renamed from wg2 (while UP) [ 621.862594][T28138] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 621.862594][T28138] program syz.6.8410 not setting count and/or reply_len properly [ 621.899297][ T3773] usb 14-1: device descriptor read/8, error -110 [ 622.006981][ T3773] usb 14-1: new SuperSpeed USB device number 8 using vhci_hcd [ 622.044567][ T3773] usb 14-1: enqueue for inactive port 0 [ 622.075802][ T3773] usb 14-1: enqueue for inactive port 0 [ 622.096182][ T3773] usb 14-1: enqueue for inactive port 0 [ 622.282346][T28152] syz!: rxe_newlink: already configured on team_slave_0 [ 622.330023][T28152] vcan0 speed is unknown, defaulting to 1000 [ 622.457687][T28165] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 622.457687][T28165] program syz.6.8421 not setting count and/or reply_len properly [ 622.783620][T28174] vcan0 speed is unknown, defaulting to 1000 [ 622.815006][T28175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 622.876165][T28175] vcan0 speed is unknown, defaulting to 1000 [ 623.156424][ T3773] usb usb14-port1: attempt power cycle [ 623.252755][T28192] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 623.252755][T28192] program syz.5.8430 not setting count and/or reply_len properly [ 623.370011][T28199] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 623.370011][T28199] program syz.5.8433 not setting count and/or reply_len properly [ 623.556914][T28204] Invalid ELF header magic: != ELF [ 623.668034][T28214] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 623.668034][T28214] program syz.2.8439 not setting count and/or reply_len properly [ 623.740776][ T29] kauditd_printk_skb: 22099 callbacks suppressed [ 623.740793][ T29] audit: type=1326 audit(1767449413.673:94521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28217 comm="syz.6.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 623.807859][T28220] __nla_validate_parse: 6 callbacks suppressed [ 623.807927][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8441'. [ 623.832149][ T29] audit: type=1326 audit(1767449413.713:94522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28217 comm="syz.6.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 623.855956][ T29] audit: type=1326 audit(1767449413.713:94523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28217 comm="syz.6.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 623.879713][ T29] audit: type=1326 audit(1767449413.713:94524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28217 comm="syz.6.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 623.903624][ T29] audit: type=1326 audit(1767449413.733:94525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28219 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 623.927512][ T29] audit: type=1326 audit(1767449413.733:94526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28219 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 623.951374][ T29] audit: type=1326 audit(1767449413.733:94527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28219 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 623.975048][ T29] audit: type=1326 audit(1767449413.733:94528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28219 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 623.998831][ T29] audit: type=1326 audit(1767449413.733:94529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28219 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 624.022602][ T29] audit: type=1326 audit(1767449413.733:94530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28219 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0707a2f749 code=0x7ffc0000 [ 624.189726][T28227] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 624.471687][T28247] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.8448'. [ 624.481063][T28247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8448'. [ 624.527182][T28253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8453'. [ 624.667739][T28264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8456'. [ 624.846584][T28255] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8454'. [ 624.941801][T28274] Invalid ELF header magic: != ELF [ 625.026549][ T3773] usb usb14-port1: unable to enumerate USB device [ 625.225862][T28288] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 625.225862][T28288] program syz.6.8464 not setting count and/or reply_len properly [ 625.236811][T28286] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8463'. [ 625.567884][T28298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.576496][T28298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.585437][T28298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8467'. [ 625.902614][T28324] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.8475'. [ 626.519702][T28357] Invalid ELF header magic: != ELF [ 626.794245][T28363] block device autoloading is deprecated and will be removed. [ 626.808161][T28369] loop5: detected capacity change from 0 to 512 [ 626.822084][T28369] /dev/loop5: Can't open blockdev [ 626.852251][T28371] random: crng reseeded on system resumption [ 626.946386][T28377] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 626.946386][T28377] program syz.4.8493 not setting count and/or reply_len properly [ 627.062454][T28397] random: crng reseeded on system resumption [ 627.093608][T28403] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 627.093608][T28403] program syz.3.8505 not setting count and/or reply_len properly [ 627.161663][T28410] team0: Port device team_slave_1 removed [ 627.195000][T28416] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 627.195000][T28416] program syz.3.8511 not setting count and/or reply_len properly [ 627.237406][T28420] netlink: 'syz.3.8512': attribute type 3 has an invalid length. [ 627.483321][T28426] random: crng reseeded on system resumption [ 627.537992][T28430] loop5: detected capacity change from 0 to 512 [ 627.545542][T28430] EXT4-fs: Ignoring removed i_version option [ 627.551642][T28430] EXT4-fs: Ignoring removed bh option [ 627.577078][T28430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.590216][T28430] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 627.603424][T28430] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.8517: iget: bad i_size value: 2533274857506816 [ 627.617393][T28430] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 627.617393][T28430] program syz.5.8517 not setting count and/or reply_len properly [ 627.660258][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.707516][T28452] Invalid ELF header magic: != ELF [ 627.992351][T28456] FAULT_INJECTION: forcing a failure. [ 627.992351][T28456] name failslab, interval 1, probability 0, space 0, times 0 [ 628.005118][T28456] CPU: 0 UID: 0 PID: 28456 Comm: syz.4.8526 Not tainted syzkaller #0 PREEMPT(voluntary) [ 628.005146][T28456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.005190][T28456] Call Trace: [ 628.005195][T28456] [ 628.005202][T28456] __dump_stack+0x1d/0x30 [ 628.005220][T28456] dump_stack_lvl+0x95/0xd0 [ 628.005243][T28456] dump_stack+0x15/0x1b [ 628.005256][T28456] should_fail_ex+0x265/0x280 [ 628.005272][T28456] should_failslab+0x8c/0xb0 [ 628.005312][T28456] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 628.005328][T28456] ? __alloc_skb+0x2ff/0x4b0 [ 628.005344][T28456] __alloc_skb+0x2ff/0x4b0 [ 628.005359][T28456] ? __alloc_skb+0x228/0x4b0 [ 628.005438][T28456] pfkey_sendmsg+0xd7/0x900 [ 628.005458][T28456] ? avc_has_perm+0xf7/0x180 [ 628.005473][T28456] ? selinux_socket_sendmsg+0x175/0x1b0 [ 628.005494][T28456] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 628.005578][T28456] __sock_sendmsg+0x145/0x180 [ 628.005601][T28456] ____sys_sendmsg+0x31e/0x4a0 [ 628.005621][T28456] ___sys_sendmsg+0x17b/0x1d0 [ 628.005648][T28456] __x64_sys_sendmsg+0xd4/0x160 [ 628.005729][T28456] x64_sys_call+0x17ba/0x3000 [ 628.005798][T28456] do_syscall_64+0xca/0x2b0 [ 628.005836][T28456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.005870][T28456] RIP: 0033:0x7fcff9eef749 [ 628.005889][T28456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.005902][T28456] RSP: 002b:00007fcff8957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.005917][T28456] RAX: ffffffffffffffda RBX: 00007fcffa145fa0 RCX: 00007fcff9eef749 [ 628.005939][T28456] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000003 [ 628.005948][T28456] RBP: 00007fcff8957090 R08: 0000000000000000 R09: 0000000000000000 [ 628.005957][T28456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.005965][T28456] R13: 00007fcffa146038 R14: 00007fcffa145fa0 R15: 00007ffd71f82158 [ 628.005979][T28456] [ 628.343006][T28462] random: crng reseeded on system resumption [ 628.659905][T28479] team0: Port device team_slave_1 removed [ 628.746563][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 628.746582][ T29] audit: type=1326 audit(1767449418.673:95428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28485 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 628.807088][T28490] random: crng reseeded on system resumption [ 628.873799][T28493] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 628.873799][T28493] program syz.6.8540 not setting count and/or reply_len properly [ 628.919678][ T29] audit: type=1326 audit(1767449418.853:95429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28485 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 628.943968][ T29] audit: type=1326 audit(1767449418.853:95430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28485 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 629.153149][ T29] audit: type=1400 audit(1767449419.083:95431): avc: denied { write } for pid=28506 comm="syz.3.8546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 629.206150][ T29] audit: type=1400 audit(1767449419.103:95432): avc: denied { write } for pid=28506 comm="syz.3.8546" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 629.262176][T28512] __nla_validate_parse: 10 callbacks suppressed [ 629.262244][T28512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8546'. [ 629.287565][T28510] Invalid ELF header magic: != ELF [ 629.378506][ T29] audit: type=1400 audit(1767449419.313:95433): avc: denied { getopt } for pid=28516 comm="syz.3.8549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 629.378654][T28517] sctp: [Deprecated]: syz.3.8549 (pid 28517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.378654][T28517] Use struct sctp_sack_info instead [ 629.415143][ T29] audit: type=1400 audit(1767449419.313:95434): avc: denied { setopt } for pid=28516 comm="syz.3.8549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 629.452760][T28520] random: crng reseeded on system resumption [ 629.488030][T28522] loop5: detected capacity change from 0 to 512 [ 629.494905][T28522] EXT4-fs: Ignoring removed i_version option [ 629.501008][T28522] EXT4-fs: Ignoring removed bh option [ 629.507205][ T29] audit: type=1400 audit(1767449419.443:95435): avc: denied { mount } for pid=28523 comm="syz.3.8552" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 629.531997][ T29] audit: type=1400 audit(1767449419.463:95436): avc: denied { unmount } for pid=28523 comm="syz.3.8552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 629.561751][T28522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.584844][T28522] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.608468][T28522] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.8551: iget: bad i_size value: 2533274857506816 [ 629.637221][T28522] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 629.637221][T28522] program syz.5.8551 not setting count and/or reply_len properly [ 629.676577][ T29] audit: type=1326 audit(1767449419.613:95437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250336f749 code=0x7ffc0000 [ 629.762323][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.813926][T28547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8561'. [ 629.896806][T28555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8559'. [ 630.130697][T28575] FAULT_INJECTION: forcing a failure. [ 630.130697][T28575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.144139][T28575] CPU: 1 UID: 0 PID: 28575 Comm: ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 630.144174][T28575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.144189][T28575] Call Trace: [ 630.144198][T28575] [ 630.144216][T28575] __dump_stack+0x1d/0x30 [ 630.144301][T28575] dump_stack_lvl+0x95/0xd0 [ 630.144384][T28575] dump_stack+0x15/0x1b [ 630.144405][T28575] should_fail_ex+0x265/0x280 [ 630.144427][T28575] should_fail+0xb/0x20 [ 630.144445][T28575] should_fail_usercopy+0x1a/0x20 [ 630.144489][T28575] _copy_from_iter+0xcf/0xe70 [ 630.144521][T28575] ? __alloc_skb+0x396/0x4b0 [ 630.144547][T28575] ? __alloc_skb+0x228/0x4b0 [ 630.144570][T28575] netlink_sendmsg+0x471/0x6b0 [ 630.144617][T28575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.144649][T28575] __sock_sendmsg+0x145/0x180 [ 630.144683][T28575] ____sys_sendmsg+0x31e/0x4a0 [ 630.144713][T28575] ___sys_sendmsg+0x17b/0x1d0 [ 630.144800][T28575] __x64_sys_sendmsg+0xd4/0x160 [ 630.144830][T28575] x64_sys_call+0x17ba/0x3000 [ 630.144857][T28575] do_syscall_64+0xca/0x2b0 [ 630.144960][T28575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.144982][T28575] RIP: 0033:0x7f250336f749 [ 630.144999][T28575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.145057][T28575] RSP: 002b:00007f2501dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.145079][T28575] RAX: ffffffffffffffda RBX: 00007f25035c5fa0 RCX: 00007f250336f749 [ 630.145095][T28575] RDX: 0000000006048800 RSI: 0000200000000080 RDI: 0000000000000008 [ 630.145110][T28575] RBP: 00007f2501dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 630.145162][T28575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.145174][T28575] R13: 00007f25035c6038 R14: 00007f25035c5fa0 R15: 00007ffc8757e1d8 [ 630.145192][T28575] [ 630.344499][T28574] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8574'. [ 630.376629][T28562] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8567'. [ 630.540698][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8577'. [ 630.718952][T28595] loop5: detected capacity change from 0 to 512 [ 630.777907][T28595] EXT4-fs (loop5): too many log groups per flexible block group [ 630.813247][T28595] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 630.854562][T28595] EXT4-fs (loop5): mount failed [ 631.015196][T28598] vcan0 speed is unknown, defaulting to 1000 [ 631.061961][T28603] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8582'. [ 631.088760][T28603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8582'. [ 631.097924][T28603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8582'. [ 631.109650][T28608] loop5: detected capacity change from 0 to 1024 [ 631.139884][T28608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.191635][T28608] Invalid ELF header magic: != ELF [ 631.439091][T28626] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8589'. [ 631.592364][T28630] xt_limit: Overflow, try lower: 0/0 [ 631.688461][T28638] team0: Port device team_slave_1 removed [ 632.031077][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.327504][T28676] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 632.360883][T28653] vcan0 speed is unknown, defaulting to 1000 [ 632.563588][T28689] Invalid ELF header magic: != ELF [ 632.781538][T28697] vcan0 speed is unknown, defaulting to 1000 [ 633.756394][ T29] kauditd_printk_skb: 3094 callbacks suppressed [ 633.756414][ T29] audit: type=1400 audit(1767449423.683:98532): avc: denied { connect } for pid=28735 comm="syz.6.8630" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 634.224002][T28752] loop5: detected capacity change from 0 to 1024 [ 634.274409][T28752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.328210][T28752] Invalid ELF header magic: != ELF [ 634.490309][ T29] audit: type=1400 audit(1767449424.423:98533): avc: denied { add_name } for pid=28768 comm="syz.3.8641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_var_run_t:s0" [ 634.515605][T28770] __nla_validate_parse: 15 callbacks suppressed [ 634.515623][T28770] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.8639'. [ 634.531291][T28770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8639'. [ 634.557629][ T29] audit: type=1400 audit(1767449424.423:98534): avc: denied { create } for pid=28768 comm="syz.3.8641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 634.578140][ T29] audit: type=1400 audit(1767449424.423:98535): avc: denied { associate } for pid=28768 comm="syz.3.8641" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 634.602873][ T29] audit: type=1326 audit(1767449424.533:98536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28772 comm="syz.6.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 634.627292][ T29] audit: type=1326 audit(1767449424.533:98537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28772 comm="syz.6.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 634.650836][ T29] audit: type=1326 audit(1767449424.533:98538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28772 comm="syz.6.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 634.674581][ T29] audit: type=1326 audit(1767449424.533:98539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28772 comm="syz.6.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 634.701309][ T29] audit: type=1326 audit(1767449424.633:98540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28775 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 634.725904][ T29] audit: type=1326 audit(1767449424.633:98541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28775 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c745f749 code=0x7ffc0000 [ 634.755811][T28778] random: crng reseeded on system resumption [ 635.144553][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.359675][T28796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8652'. [ 635.545839][T28805] random: crng reseeded on system resumption [ 635.600186][T28802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8654'. [ 635.651065][T28802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8654'. [ 635.660225][T28802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8654'. [ 636.262086][T28834] vcan0 speed is unknown, defaulting to 1000 [ 636.500882][T28841] netlink: 212 bytes leftover after parsing attributes in process `syz.5.8665'. [ 636.586379][T28843] random: crng reseeded on system resumption [ 636.852726][T28849] loop5: detected capacity change from 0 to 1024 [ 636.879351][T28849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.054491][T28864] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8675'. [ 638.205988][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.767094][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 638.767115][ T29] audit: type=1326 audit(1767449428.703:98858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 638.915650][T28899] vcan0 speed is unknown, defaulting to 1000 [ 638.926192][ T29] audit: type=1326 audit(1767449428.703:98859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 638.950022][ T29] audit: type=1326 audit(1767449428.703:98860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 638.973843][ T29] audit: type=1326 audit(1767449428.703:98861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 638.997444][ T29] audit: type=1326 audit(1767449428.703:98862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 639.021419][ T29] audit: type=1326 audit(1767449428.703:98863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 639.045096][ T29] audit: type=1326 audit(1767449428.703:98864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 639.068800][ T29] audit: type=1326 audit(1767449428.703:98865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 639.092780][ T29] audit: type=1326 audit(1767449428.713:98866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 639.116503][ T29] audit: type=1326 audit(1767449428.713:98867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f820bf22005 code=0x7ffc0000 [ 639.406501][T28913] Invalid ELF header magic: != ELF [ 639.479342][T28922] FAULT_INJECTION: forcing a failure. [ 639.479342][T28922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.492531][T28922] CPU: 0 UID: 0 PID: 28922 Comm: syz.5.8694 Not tainted syzkaller #0 PREEMPT(voluntary) [ 639.492563][T28922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.492579][T28922] Call Trace: [ 639.492588][T28922] [ 639.492598][T28922] __dump_stack+0x1d/0x30 [ 639.492626][T28922] dump_stack_lvl+0x95/0xd0 [ 639.492713][T28922] dump_stack+0x15/0x1b [ 639.492735][T28922] should_fail_ex+0x265/0x280 [ 639.492806][T28922] should_fail+0xb/0x20 [ 639.492829][T28922] should_fail_usercopy+0x1a/0x20 [ 639.492856][T28922] _copy_from_user+0x1c/0xb0 [ 639.492883][T28922] ___sys_sendmsg+0xc1/0x1d0 [ 639.492982][T28922] __x64_sys_sendmsg+0xd4/0x160 [ 639.493016][T28922] x64_sys_call+0x17ba/0x3000 [ 639.493058][T28922] do_syscall_64+0xca/0x2b0 [ 639.493115][T28922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.493137][T28922] RIP: 0033:0x7f820beef749 [ 639.493153][T28922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.493172][T28922] RSP: 002b:00007f820a94f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.493268][T28922] RAX: ffffffffffffffda RBX: 00007f820c145fa0 RCX: 00007f820beef749 [ 639.493283][T28922] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 639.493297][T28922] RBP: 00007f820a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 639.493311][T28922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.493326][T28922] R13: 00007f820c146038 R14: 00007f820c145fa0 R15: 00007ffcd1dcf788 [ 639.493346][T28922] [ 639.766600][T28934] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.8697'. [ 639.775770][T28934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8697'. [ 640.058750][T28952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8707'. [ 640.295665][T28957] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8709'. [ 640.378282][T28967] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 640.378282][T28967] program syz.3.8714 not setting count and/or reply_len properly [ 640.404993][T28969] loop5: detected capacity change from 0 to 1024 [ 640.416899][T28971] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 640.416899][T28971] program syz.6.8716 not setting count and/or reply_len properly [ 640.436962][T28969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.485836][T28969] Invalid ELF header magic: != ELF [ 640.503178][T28978] random: crng reseeded on system resumption [ 640.572921][T28989] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8723'. [ 640.656143][T29000] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 640.656143][T29000] program syz.2.8727 not setting count and/or reply_len properly [ 640.727323][T29008] random: crng reseeded on system resumption [ 640.794425][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8733'. [ 640.824883][T29026] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8738'. [ 640.844933][T29027] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.8736'. [ 640.854185][T29027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8736'. [ 640.920944][T29039] random: crng reseeded on system resumption [ 641.088823][T29051] netlink: 212 bytes leftover after parsing attributes in process `syz.6.8749'. [ 641.174820][T29065] FAULT_INJECTION: forcing a failure. [ 641.174820][T29065] name failslab, interval 1, probability 0, space 0, times 0 [ 641.187716][T29065] CPU: 0 UID: 0 PID: 29065 Comm: syz.6.8755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 641.187744][T29065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.187756][T29065] Call Trace: [ 641.187763][T29065] [ 641.187772][T29065] __dump_stack+0x1d/0x30 [ 641.187800][T29065] dump_stack_lvl+0x95/0xd0 [ 641.187837][T29065] dump_stack+0x15/0x1b [ 641.187856][T29065] should_fail_ex+0x265/0x280 [ 641.187878][T29065] should_failslab+0x8c/0xb0 [ 641.187904][T29065] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 641.187932][T29065] ? __alloc_skb+0x2ff/0x4b0 [ 641.188035][T29065] __alloc_skb+0x2ff/0x4b0 [ 641.188101][T29065] ? __alloc_skb+0x228/0x4b0 [ 641.188129][T29065] netlink_alloc_large_skb+0xbf/0xf0 [ 641.188157][T29065] netlink_sendmsg+0x3cf/0x6b0 [ 641.188197][T29065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.188332][T29065] __sock_sendmsg+0x145/0x180 [ 641.188365][T29065] ____sys_sendmsg+0x31e/0x4a0 [ 641.188398][T29065] ___sys_sendmsg+0x17b/0x1d0 [ 641.188520][T29065] __x64_sys_sendmsg+0xd4/0x160 [ 641.188555][T29065] x64_sys_call+0x17ba/0x3000 [ 641.188586][T29065] do_syscall_64+0xca/0x2b0 [ 641.188704][T29065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.188726][T29065] RIP: 0033:0x7fd2c745f749 [ 641.188743][T29065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.188792][T29065] RSP: 002b:00007fd2c5ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.188859][T29065] RAX: ffffffffffffffda RBX: 00007fd2c76b5fa0 RCX: 00007fd2c745f749 [ 641.188874][T29065] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 641.188886][T29065] RBP: 00007fd2c5ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 641.188898][T29065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.188912][T29065] R13: 00007fd2c76b6038 R14: 00007fd2c76b5fa0 R15: 00007ffc2855fd68 [ 641.188944][T29065] [ 641.428100][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.463336][T29080] IPv6: Can't replace route, no match found [ 641.521990][T29090] loop5: detected capacity change from 0 to 1024 [ 641.538651][T29090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.558441][T29090] Invalid ELF header magic: != ELF [ 641.807130][T29102] vcan0 speed is unknown, defaulting to 1000 [ 641.925483][T29102] chnl_net:caif_netlink_parms(): no params data found [ 641.993285][T29102] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.000635][T29102] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.008177][T29102] bridge_slave_0: entered allmulticast mode [ 642.014856][T29102] bridge_slave_0: entered promiscuous mode [ 642.031633][T29102] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.038756][T29102] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.046408][T29102] bridge_slave_1: entered allmulticast mode [ 642.053691][T29102] bridge_slave_1: entered promiscuous mode [ 642.075570][T29102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.095818][T29102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.139212][T29102] team0: Port device team_slave_0 added [ 642.151302][T29102] team0: Port device team_slave_1 added [ 642.187908][T29154] random: crng reseeded on system resumption [ 642.195408][T29102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.202561][T29102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.228926][T29102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.245097][T29102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.252149][T29102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.278244][T29102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.351072][T29102] hsr_slave_0: entered promiscuous mode [ 642.357757][T29102] hsr_slave_1: entered promiscuous mode [ 642.364123][T29102] debugfs: 'hsr0' already exists in 'hsr' [ 642.369918][T29102] Cannot create hsr debugfs directory [ 642.427309][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.503570][T29102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.593412][T29102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.613032][T29181] random: crng reseeded on system resumption [ 642.675937][T29102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.717840][T29192] loop5: detected capacity change from 0 to 512 [ 642.726596][T29102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.737426][T29192] EXT4-fs: Ignoring removed i_version option [ 642.743447][T29192] EXT4-fs: Ignoring removed bh option [ 642.754582][T29190] Invalid ELF header magic: != ELF [ 642.778538][T29192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.792056][T29192] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.810129][T29192] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.8801: iget: bad i_size value: 2533274857506816 [ 642.811609][T29102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 642.831116][T29192] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 642.831116][T29192] program syz.5.8801 not setting count and/or reply_len properly [ 642.831789][T29102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 642.857407][T29102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 642.866571][T29102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 642.886252][T22960] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.939468][T29102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.968245][T29102] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.985412][T25656] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.992552][T25656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.030572][T25645] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.037713][T25645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.150437][T29102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.277405][T29102] veth0_vlan: entered promiscuous mode [ 643.300392][T29102] veth1_vlan: entered promiscuous mode [ 643.333913][T29102] veth0_macvtap: entered promiscuous mode [ 643.349051][T29102] veth1_macvtap: entered promiscuous mode [ 643.371299][T29102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.390532][T29102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.402534][T11581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.423344][T11581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.433478][T29211] Set syz1 is full, maxelem 65536 reached [ 643.447908][T11581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.457522][T11581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.910073][ T29] kauditd_printk_skb: 1144 callbacks suppressed [ 643.910092][ T29] audit: type=1400 audit(1767449433.843:100012): avc: denied { create } for pid=29260 comm="syz.6.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 643.946401][T29246] ================================================================== [ 643.954542][T29246] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 643.962989][T29246] [ 643.965335][T29246] write to 0xffff88811fb15e04 of 4 bytes by task 29243 on cpu 1: [ 643.973064][T29246] inode_update_timestamps+0x147/0x270 [ 643.978555][T29246] file_update_time_flags+0x26c/0x310 [ 643.983956][T29246] file_update_time+0x17/0x20 [ 643.988659][T29246] shmem_file_write_iter+0x9c/0xf0 [ 643.993799][T29246] iter_file_splice_write+0x66b/0xa20 [ 643.999188][T29246] direct_splice_actor+0x156/0x2a0 [ 644.004319][T29246] splice_direct_to_actor+0x312/0x680 [ 644.009710][T29246] do_splice_direct+0xda/0x150 [ 644.014503][T29246] do_sendfile+0x380/0x650 [ 644.018977][T29246] __x64_sys_sendfile64+0x105/0x150 [ 644.024183][T29246] x64_sys_call+0x2db1/0x3000 [ 644.028877][T29246] do_syscall_64+0xca/0x2b0 [ 644.033393][T29246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.039291][T29246] [ 644.041618][T29246] read to 0xffff88811fb15e04 of 4 bytes by task 29246 on cpu 0: [ 644.049245][T29246] atime_needs_update+0x2a8/0x3e0 [ 644.054285][T29246] touch_atime+0x4a/0x340 [ 644.058621][T29246] shmem_file_read_iter+0x477/0x540 [ 644.063832][T29246] copy_splice_read+0x442/0x660 [ 644.068681][T29246] splice_direct_to_actor+0x290/0x680 [ 644.074064][T29246] do_splice_direct+0xda/0x150 [ 644.078829][T29246] do_sendfile+0x380/0x650 [ 644.083256][T29246] __x64_sys_sendfile64+0x105/0x150 [ 644.088639][T29246] x64_sys_call+0x2db1/0x3000 [ 644.093323][T29246] do_syscall_64+0xca/0x2b0 [ 644.097838][T29246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.103738][T29246] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 644.106059][T29246] value changed: 0x340ca5b4 -> 0x34a53c34 [ 644.111775][T29246] [ 644.114096][T29246] Reported by Kernel Concurrency Sanitizer on: [ 644.120329][T29246] CPU: 0 UID: 0 PID: 29246 Comm: syz.5.8812 Not tainted syzkaller #0 PREEMPT(voluntary) [ 644.130138][T29246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.140199][T29246] ================================================================== [ 644.186144][ T29] audit: type=1400 audit(1767449433.873:100013): avc: denied { setopt } for pid=29260 comm="syz.6.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.206067][ T29] audit: type=1400 audit(1767449433.873:100014): avc: denied { listen } for pid=29260 comm="syz.6.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.226287][ T29] audit: type=1400 audit(1767449433.873:100015): avc: denied { write } for pid=29260 comm="syz.6.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.246211][ T29] audit: type=1400 audit(1767449433.873:100016): avc: denied { accept } for pid=29260 comm="syz.6.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.266175][ T29] audit: type=1400 audit(1767449433.943:100017): avc: denied { write } for pid=3309 comm="syz-executor" path="pipe:[555]" dev="pipefs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 644.289440][ T29] audit: type=1400 audit(1767449434.103:100018): avc: denied { recv } for pid=29260 comm="syz.6.8819" saddr=10.128.0.163 src=39454 daddr=10.128.1.81 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 644.315402][ T29] audit: type=1400 audit(1767449434.103:100019): avc: denied { open } for pid=29262 comm="syz.3.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 644.335203][ T29] audit: type=1400 audit(1767449434.103:100020): avc: denied { kernel } for pid=29262 comm="syz.3.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 644.446322][ T29] audit: type=1400 audit(1767449434.333:100021): avc: denied { read write } for pid=29250 comm="syz.4.8815" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 644.679652][T25646] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.739292][T25646] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.898761][T25646] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.958386][T25646] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.048547][T25646] bridge_slave_1: left allmulticast mode [ 645.054213][T25646] bridge_slave_1: left promiscuous mode [ 645.059857][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.067701][T25646] bridge_slave_0: left allmulticast mode [ 645.073483][T25646] bridge_slave_0: left promiscuous mode [ 645.079228][T25646] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.148363][T25646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.158658][T25646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.168056][T25646] bond0 (unregistering): Released all slaves [ 645.219017][T25646] hsr_slave_0: left promiscuous mode [ 645.224618][T25646] hsr_slave_1: left promiscuous mode [ 645.230281][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.237677][T25646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.245166][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.252621][T25646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.263010][T25646] veth1_macvtap: left promiscuous mode [ 645.268563][T25646] veth0_macvtap: left promiscuous mode [ 645.274115][T25646] veth1_vlan: left promiscuous mode [ 645.279437][T25646] veth0_vlan: left promiscuous mode [ 645.340132][T25646] team0 (unregistering): Port device team_slave_0 removed [ 645.739328][T25646] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.797706][T25646] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.837815][T25646] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.907856][T25646] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.980277][T25646] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.057670][T25646] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.137495][T25646] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.197843][T25646] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.429166][T25646] bridge_slave_1: left allmulticast mode [ 646.434818][T25646] bridge_slave_1: left promiscuous mode [ 646.440570][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.448383][T25646] bridge_slave_0: left allmulticast mode [ 646.454123][T25646] bridge_slave_0: left promiscuous mode [ 646.459860][T25646] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.468123][T25646] bridge_slave_1: left allmulticast mode [ 646.473777][T25646] bridge_slave_1: left promiscuous mode [ 646.479498][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.487313][T25646] bridge_slave_0: left allmulticast mode [ 646.492943][T25646] bridge_slave_0: left promiscuous mode [ 646.498641][T25646] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.507111][T25646] bridge_slave_1: left allmulticast mode [ 646.512821][T25646] bridge_slave_1: left promiscuous mode [ 646.518614][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.526823][T25646] bridge_slave_0: left allmulticast mode [ 646.532462][T25646] bridge_slave_0: left promiscuous mode [ 646.538732][T25646] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.548313][T25646] bond_slave_0: left promiscuous mode [ 646.553884][T25646] bond_slave_1: left promiscuous mode [ 646.603931][T25646] bridge0 (unregistering): left allmulticast mode [ 646.638181][T25646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.647841][T25646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.657350][T25646] bond0 (unregistering): Released all slaves [ 646.728255][T25646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.737832][T25646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.747124][T25646] bond0 (unregistering): Released all slaves [ 646.755506][T25646] bond1 (unregistering): Released all slaves [ 646.808508][T25646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.818007][T25646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.827147][T25646] bond0 (unregistering): Released all slaves [ 646.850328][T25646] tipc: Left network mode [ 646.854972][T25646] tipc: Left network mode [ 646.948527][T25646] hsr_slave_0: left promiscuous mode [ 646.954099][T25646] hsr_slave_1: left promiscuous mode [ 646.959766][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.967224][T25646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.975373][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.982793][T25646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.992257][T25646] hsr_slave_0: left promiscuous mode [ 646.997865][T25646] hsr_slave_1: left promiscuous mode [ 647.003565][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.011250][T25646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.019471][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.026875][T25646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.036292][T25646] hsr_slave_0: left promiscuous mode [ 647.041944][T25646] hsr_slave_1: left promiscuous mode [ 647.051771][T25646] veth1_macvtap: left promiscuous mode [ 647.057320][T25646] veth0_macvtap: left promiscuous mode [ 647.062843][T25646] veth1_vlan: left promiscuous mode [ 647.068346][T25646] veth0_vlan: left promiscuous mode [ 647.074051][T25646] veth1_macvtap: left promiscuous mode [ 647.079627][T25646] veth0_macvtap: left promiscuous mode [ 647.085111][T25646] veth1_vlan: left promiscuous mode [ 647.090364][T25646] veth0_vlan: left promiscuous mode [ 647.175544][T25646] team0 (unregistering): Port device team_slave_0 removed [ 647.227292][T25646] team0 (unregistering): Port device team_slave_0 removed [ 647.234893][T25650] smc: removing ib device syz! [ 647.253210][T25646] team0 (unregistering): Port device dummy0 removed [ 647.289018][T25646] team0 (unregistering): Port device team_slave_0 removed [ 647.316637][T25645] smc: removing ib device syz1 [ 647.762726][T25646] IPVS: stop unused estimator thread 0... [ 647.768954][T25646] IPVS: stop unused estimator thread 0... [ 647.774958][T25646] IPVS: stop unused estimator thread 0... [ 647.810212][T25646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.878776][T25646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.918792][T25646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.969112][T25646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.038721][T25646] bridge_slave_1: left allmulticast mode [ 648.044450][T25646] bridge_slave_1: left promiscuous mode [ 648.050176][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.057996][T25646] bridge_slave_0: left allmulticast mode [ 648.063638][T25646] bridge_slave_0: left promiscuous mode [ 648.069291][T25646] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.149550][T25646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.159232][T25646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.168431][T25646] bond0 (unregistering): Released all slaves [ 648.230572][T25646] hsr_slave_0: left promiscuous mode [ 648.236385][T25646] hsr_slave_1: left promiscuous mode [ 648.241867][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.249274][T25646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.256866][T25646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.264242][T25646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.273880][T25646] veth1_macvtap: left promiscuous mode [ 648.279456][T25646] veth0_macvtap: left promiscuous mode [ 648.284938][T25646] veth1_vlan: left promiscuous mode [ 648.290179][T25646] veth0_vlan: left promiscuous mode [ 648.348281][T25646] team0 (unregistering): Port device team_slave_1 removed [ 648.359785][T25646] team0 (unregistering): Port device team_slave_0 removed