last executing test programs: 52.990292099s ago: executing program 2 (id=3348): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}]) 52.890102778s ago: executing program 2 (id=3350): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) 52.873632618s ago: executing program 2 (id=3351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 52.85518817s ago: executing program 2 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1ff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (fail_nth: 8) 52.442192663s ago: executing program 2 (id=3354): syz_emit_ethernet(0xfa, &(0x7f0000000440)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, '\x00V', "c1b406", 0x9300, "5d3e896c188a67eed0963de854456d9caf0a29e8df1c18cd067adc5253fb63fe053da77ff74f1056f241a02864ac46154f8d453c3c0333980c8dbc202a9586f190b232bd76384f0d2bdc0c04820222a7bdecf260f83faf44f35023993aebaa35c038cffcc6517b9420de96c61b035d2ca22971dda050f22d08ac12ef5b9819aed7699161159b49e0aaae80d13a9e220d4cef7806d5556a629a0303d6923a383d21becb3cd425e3da19b1e6ae9638fa313793104bfeaec9513e57c55e5df0c494ceff5419f434bfaa1f49f301ec56d77fc826387cd9c38f2292bb4ebf242272ad4e7d46"}}}}}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10) time(0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752046947ae9386dbd4122a7"], 0x5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f40)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf13a, 0x8, 0x6, 0xeaba, 0x6, {0x10, 0x2, 0x767, 0xf, 0x6}, {0xe, 0x1, 0x101, 0x3, 0x8, 0xfffffff9}, 0xcf, 0x1, 0x3}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc001}, 0x2008c014) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) 52.296203715s ago: executing program 2 (id=3360): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\t0||\t') 37.210577932s ago: executing program 32 (id=3360): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\t0||\t') 2.302232115s ago: executing program 5 (id=4662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x20000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$sock(r1, &(0x7f0000003000)={&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000580)="46e92bd71321fc2fe0d5d1c2dcf05b107fecc23f2f95941a6a04b7c56b4b33703024e6da777c4b323a77bbdabcaf4ebc8b9078dfda390c0069ca94cd02390c680be635b6973d20f5836afdbdb5245ec802c8a4bca5", 0x55}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="281beaea9e8ebe0e2955d5ee1faf44dbb6280c65371297730cb122bc4097c80d5ae8eb3bd40803c0fa808f2d06675159b0982e822da8c9cf21734c5547e17c37cf26ff2aca353db2666f5f50621a4fa65e78679e2eda64d49ff706d54073bba19aebe80bc3c6c15b317d6de6", 0x6c}, {&(0x7f0000001b80)="9b291aa6bdf5076933ca6d0a8d98e807d8b5e87d37a90738a6fc74d375e09a39b9e2c3d97d3eb7f7f07f885c890c5f01023416b4afeff4a3916d876a13f980f890f82460932acbd7a5c9b8303141164246f9e8b12c14398bce1d", 0x5a}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="f62d59dd230fddb48e02c24fc8a29299f77e15e4b5f9a0beb15034e4117e61b4668f162ef3332bc1115d6578282643e7fc1c9e4394c323dd9c49604dc9d2e6f5c0670e57fff8884cb6b1409a", 0x4c}, {&(0x7f0000002c80)="07e5602b2ba54e231ede8b52fb1520d5053b2c177b115b24b220e0fb1a8a6a0e2160c405f90487183d54bc7a81a81353ef9a6f5455c91207b1a51da41bdf6ea1d518c8ac49139c8ba0378b0da3d7815434158c8ee9d556e50c971f89c2faaffda6209ea651bbbfc9f734c67582dcce99b9de53060981507783bb94ca17040dd5d0bc155f8bedcd6a86ca4611253be17eedbcf1481926185f142f69c1e723abf7bfd187dc0dccf27250d31036373959cbfb95d3a516597e3db3fc6da82592cc07257c98be0d2baa2fa6884bcc2e9a9f9bf0493b9ae046", 0xd6}, {&(0x7f0000002d80)="d8f699baaeb104a405abdd1d32a2b0705a9fe943c9b79abd74b9a5beb11bdf38218e52f7eea50dccf34384e81a70b15e9407f7e283e89eb69b6c658ea357b1ad9354593b76381077c8817bba5d0b9b57229ca2a0b201aa80ada9e9f482e0c77708a8acc1c8c83bf46b646959bbcf6bd61c1c01d45620243595c16f387b40fbd839b3ffb43746b2157ac87fe9dfe7cd2573f10b0255506df6485d1465b08f1c516183c610c93132348332e8544fae94c7c0c2571912062b9139d1d4dab368bc0943485a2d2e", 0xc5}, {&(0x7f0000000480)}], 0x9, &(0x7f0000002f40)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x102}}, @txtime={{0x18, 0x1, 0x3d, 0x2000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 2.035045027s ago: executing program 5 (id=4665): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 1.754786579s ago: executing program 5 (id=4672): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x4}, 0x8) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x20, 0x2, 0x6, 0x8, 0x2000, r5, 0x7, '\x00', 0x0, r7, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) rmdir(0x0) r8 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) fsmount(r8, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000fffdac1414bbfe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000003000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x1}}}}}}}, 0x0) 1.154823298s ago: executing program 1 (id=4705): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x26000400) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.074694644s ago: executing program 3 (id=4709): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') 1.026313368s ago: executing program 3 (id=4711): syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.025879168s ago: executing program 3 (id=4712): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 1.010865368s ago: executing program 1 (id=4713): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 997.65904ms ago: executing program 3 (id=4714): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014870, &(0x7f0000000500)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nombcache}, {@quota}, {@norecovery}, {@nodiscard}, {@jqfmt_vfsv1}], [{@uid_lt}, {@obj_user={'obj_user', 0x3d, 'c*\\+,,-%'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_eq}]}, 0x0, 0x4e3, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) syz_usbip_server_init(0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 910.934857ms ago: executing program 5 (id=4715): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014870, &(0x7f0000000500)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nombcache}, {@quota}, {@norecovery}, {@nodiscard}, {@jqfmt_vfsv1}], [{@uid_lt}, {@obj_user={'obj_user', 0x3d, 'c*\\+,,-%'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_eq}]}, 0x0, 0x4e3, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_usbip_server_init(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 744.54506ms ago: executing program 4 (id=4721): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 714.603183ms ago: executing program 4 (id=4723): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x26000400) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 661.023987ms ago: executing program 4 (id=4726): syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (fail_nth: 1) 594.304032ms ago: executing program 4 (id=4727): mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x4, 0x80000, 0xf8c) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0d80c200000086dd60156909001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) 356.713701ms ago: executing program 4 (id=4730): open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 336.923513ms ago: executing program 1 (id=4731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x4]}, 0x8, 0x1800) 333.799703ms ago: executing program 3 (id=4732): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 304.221656ms ago: executing program 3 (id=4733): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) socket$inet(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xffffffffffffffff, 0x0, 0x40002}, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in=@empty}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbc5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xf, 0x0, 0x9, 0x1, 0x6}, @call={0x85, 0x0, 0x0, 0x4f}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x1000, 0x872d}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r6, r9], &(0x7f0000000840)=[{0x4, 0x1, 0xd, 0xb}, {0x5, 0x3, 0xc, 0x8}, {0x1, 0x4, 0x9, 0x7}, {0x0, 0x5, 0xf, 0x2}, {0x2, 0x5, 0x4}, {0x2, 0x1, 0xc, 0x6}, {0x5, 0x1, 0x5, 0xa}, {0x1, 0x4, 0xe}], 0x10, 0x2}, 0x94) 303.551296ms ago: executing program 0 (id=4734): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4a20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) socket$nl_route(0x10, 0x3, 0x0) 234.372451ms ago: executing program 1 (id=4735): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') 226.387892ms ago: executing program 5 (id=4736): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x26000400) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 207.640423ms ago: executing program 1 (id=4737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) 183.710915ms ago: executing program 0 (id=4738): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 130.23304ms ago: executing program 1 (id=4739): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 130.028679ms ago: executing program 0 (id=4740): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd24, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 111.282731ms ago: executing program 5 (id=4741): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000170000000000000000791018000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x243b, &(0x7f0000001480)={0x0, 0x712, 0x80, 0x4, 0x224, 0x0, r1}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000f80)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000f80), 0x2, 0x0, 0xffffffffffffff55}, 0x0, 0x4009000, 0x1}) io_uring_enter(r5, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 99.623162ms ago: executing program 4 (id=4742): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 91.636922ms ago: executing program 0 (id=4743): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 6.310289ms ago: executing program 0 (id=4744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 0s ago: executing program 0 (id=4745): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") kernel console output (not intermixed with test programs): than device minimum [ 177.768192][T11248] vhci_hcd: release socket [ 177.782082][T11248] vhci_hcd: disconnect device [ 177.799412][T13341] macvtap0: refused to change device tx_queue_len [ 177.819756][T13343] netlink: 'syz.5.3758': attribute type 1 has an invalid length. [ 177.827603][T13343] netlink: 'syz.5.3758': attribute type 2 has an invalid length. [ 177.891542][T13350] syz_tun: entered promiscuous mode [ 177.896784][T13350] syz_tun: entered allmulticast mode [ 177.915011][T13352] loop5: detected capacity change from 0 to 512 [ 177.924663][T13352] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 177.934011][T13352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 177.942045][T13352] System zones: 1-12 [ 177.949000][T13352] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3762: corrupted in-inode xattr: e_value size too large [ 177.969597][T13352] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3762: couldn't read orphan inode 15 (err -117) [ 177.982524][T13352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.015887][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.299916][T13381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13381 comm=syz.3.3774 [ 178.527279][T13396] macvtap0: refused to change device tx_queue_len [ 178.613631][T13403] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 178.620167][T13403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.627780][T13403] vhci_hcd vhci_hcd.0: Device attached [ 178.635992][T13405] vhci_hcd: connection closed [ 178.636092][T11279] vhci_hcd: stop threads [ 178.645226][T11279] vhci_hcd: release socket [ 178.649743][T11279] vhci_hcd: disconnect device [ 178.836359][T13417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13417 comm=syz.3.3788 [ 178.985254][T13432] macvtap0: refused to change device tx_queue_len [ 179.086300][T13438] FAULT_INJECTION: forcing a failure. [ 179.086300][T13438] name failslab, interval 1, probability 0, space 0, times 0 [ 179.098952][T13438] CPU: 1 UID: 0 PID: 13438 Comm: syz.5.3799 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 179.098985][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.098998][T13438] Call Trace: [ 179.099004][T13438] [ 179.099011][T13438] __dump_stack+0x1d/0x30 [ 179.099059][T13438] dump_stack_lvl+0xe8/0x140 [ 179.099075][T13438] dump_stack+0x15/0x1b [ 179.099144][T13438] should_fail_ex+0x265/0x280 [ 179.099205][T13438] ? __pfx_ip6_dst_gc+0x10/0x10 [ 179.099229][T13438] should_failslab+0x8c/0xb0 [ 179.099255][T13438] kmem_cache_alloc_noprof+0x50/0x310 [ 179.099286][T13438] ? dst_alloc+0xbd/0x100 [ 179.099321][T13438] ? __pfx_ip6_dst_gc+0x10/0x10 [ 179.099342][T13438] dst_alloc+0xbd/0x100 [ 179.099359][T13438] ip6_pol_route+0x6bf/0xb40 [ 179.099388][T13438] ? ip6_pol_route+0x389/0xb40 [ 179.099418][T13438] ip6_pol_route_output+0x40/0x50 [ 179.099449][T13438] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 179.099538][T13438] fib6_rule_lookup+0x112/0x470 [ 179.099557][T13438] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 179.099637][T13438] ip6_route_output_flags+0x1e0/0x2c0 [ 179.099665][T13438] ip6_dst_lookup_tail+0xb6/0xab0 [ 179.099684][T13438] ? security_capable+0x83/0x90 [ 179.099784][T13438] ? ip6_datagram_send_ctl+0xbaa/0xd70 [ 179.099815][T13438] ? __rcu_read_unlock+0x4f/0x70 [ 179.099839][T13438] ip6_sk_dst_lookup_flow+0x47d/0x580 [ 179.099943][T13438] udpv6_sendmsg+0x1109/0x1590 [ 179.099972][T13438] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 179.100006][T13438] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 179.100101][T13438] inet6_sendmsg+0xac/0xd0 [ 179.100132][T13438] __sock_sendmsg+0x8b/0x180 [ 179.100161][T13438] ____sys_sendmsg+0x31e/0x4e0 [ 179.100187][T13438] ___sys_sendmsg+0x17b/0x1d0 [ 179.100245][T13438] __x64_sys_sendmsg+0xd4/0x160 [ 179.100267][T13438] x64_sys_call+0x191e/0x2ff0 [ 179.100350][T13438] do_syscall_64+0xd2/0x200 [ 179.100378][T13438] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.100424][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.100446][T13438] RIP: 0033:0x7f1a7f9debe9 [ 179.100461][T13438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.100479][T13438] RSP: 002b:00007f1a7e447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.100542][T13438] RAX: ffffffffffffffda RBX: 00007f1a7fc05fa0 RCX: 00007f1a7f9debe9 [ 179.100553][T13438] RDX: 0000000024000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 179.100563][T13438] RBP: 00007f1a7e447090 R08: 0000000000000000 R09: 0000000000000000 [ 179.100575][T13438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.100610][T13438] R13: 00007f1a7fc06038 R14: 00007f1a7fc05fa0 R15: 00007ffcad090658 [ 179.100631][T13438] [ 179.430439][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 179.430454][ T29] audit: type=1326 audit(1755489312.986:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.480084][ T29] audit: type=1326 audit(1755489313.016:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.503707][ T29] audit: type=1326 audit(1755489313.016:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.527416][ T29] audit: type=1326 audit(1755489313.016:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.551066][ T29] audit: type=1326 audit(1755489313.016:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.574731][ T29] audit: type=1326 audit(1755489313.016:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.576384][T13452] loop5: detected capacity change from 0 to 512 [ 179.598258][ T29] audit: type=1326 audit(1755489313.016:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.608110][T13452] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 179.628113][ T29] audit: type=1326 audit(1755489313.016:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.659785][ T29] audit: type=1326 audit(1755489313.016:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.682582][T13452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 179.683339][ T29] audit: type=1326 audit(1755489313.016:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f99bb0febe9 code=0x7ffc0000 [ 179.692638][T13452] System zones: 1-12 [ 179.720942][T13452] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3805: corrupted in-inode xattr: e_value size too large [ 179.736742][T13457] macvtap0: refused to change device tx_queue_len [ 179.736773][T13452] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3805: couldn't read orphan inode 15 (err -117) [ 179.757439][T13452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.802604][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.814226][T13464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13464 comm=syz.4.3809 [ 179.834110][T13469] macvtap0: refused to change device tx_queue_len [ 179.842110][T13466] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 179.848670][T13466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.856218][T13466] vhci_hcd vhci_hcd.0: Device attached [ 179.868222][T13467] vhci_hcd: connection closed [ 179.868392][T11249] vhci_hcd: stop threads [ 179.877375][T11249] vhci_hcd: release socket [ 179.881778][T11249] vhci_hcd: disconnect device [ 180.070310][T13490] __nla_validate_parse: 9 callbacks suppressed [ 180.070327][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 180.166202][T13498] rdma_rxe: rxe_newlink: failed to add syz_tun [ 180.197111][T13502] FAULT_INJECTION: forcing a failure. [ 180.197111][T13502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.210288][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.4.3824 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 180.210315][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.210326][T13502] Call Trace: [ 180.210408][T13502] [ 180.210415][T13502] __dump_stack+0x1d/0x30 [ 180.210438][T13502] dump_stack_lvl+0xe8/0x140 [ 180.210510][T13502] dump_stack+0x15/0x1b [ 180.210524][T13502] should_fail_ex+0x265/0x280 [ 180.210543][T13502] should_fail+0xb/0x20 [ 180.210560][T13502] should_fail_usercopy+0x1a/0x20 [ 180.210605][T13502] _copy_from_iter+0xcf/0xe40 [ 180.210632][T13502] ? __build_skb_around+0x1a0/0x200 [ 180.210733][T13502] ? __alloc_skb+0x223/0x320 [ 180.210764][T13502] netlink_sendmsg+0x471/0x6b0 [ 180.210786][T13502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.210805][T13502] __sock_sendmsg+0x142/0x180 [ 180.210850][T13502] ____sys_sendmsg+0x31e/0x4e0 [ 180.210871][T13502] ___sys_sendmsg+0x17b/0x1d0 [ 180.210903][T13502] __x64_sys_sendmsg+0xd4/0x160 [ 180.210925][T13502] x64_sys_call+0x191e/0x2ff0 [ 180.211011][T13502] do_syscall_64+0xd2/0x200 [ 180.211033][T13502] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.211057][T13502] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.211191][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.211214][T13502] RIP: 0033:0x7feb6d62ebe9 [ 180.211230][T13502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.211248][T13502] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.211309][T13502] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 180.211322][T13502] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 000000000000000b [ 180.211336][T13502] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.211349][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.211361][T13502] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 180.211492][T13502] [ 180.489114][T13513] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3829'. [ 180.498374][T13513] FAULT_INJECTION: forcing a failure. [ 180.498374][T13513] name failslab, interval 1, probability 0, space 0, times 0 [ 180.511186][T13513] CPU: 0 UID: 0 PID: 13513 Comm: syz.4.3829 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 180.511214][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.511226][T13513] Call Trace: [ 180.511231][T13513] [ 180.511238][T13513] __dump_stack+0x1d/0x30 [ 180.511258][T13513] dump_stack_lvl+0xe8/0x140 [ 180.511274][T13513] dump_stack+0x15/0x1b [ 180.511314][T13513] should_fail_ex+0x265/0x280 [ 180.511332][T13513] should_failslab+0x8c/0xb0 [ 180.511352][T13513] kmem_cache_alloc_noprof+0x50/0x310 [ 180.511470][T13513] ? skb_clone+0x151/0x1f0 [ 180.511489][T13513] skb_clone+0x151/0x1f0 [ 180.511507][T13513] __netlink_deliver_tap+0x2c9/0x500 [ 180.511562][T13513] ? netlink_attachskb+0x2d0/0x610 [ 180.511588][T13513] netlink_sendskb+0x126/0x150 [ 180.511614][T13513] netlink_unicast+0x2a2/0x690 [ 180.511693][T13513] xfrm_get_policy+0x56c/0x660 [ 180.511724][T13513] xfrm_user_rcv_msg+0x566/0x660 [ 180.511743][T13513] ? __kfree_skb+0x109/0x150 [ 180.511757][T13513] ? nlmon_xmit+0x4f/0x60 [ 180.511840][T13513] ? consume_skb+0x49/0x150 [ 180.511878][T13513] netlink_rcv_skb+0x123/0x220 [ 180.511893][T13513] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 180.511915][T13513] xfrm_netlink_rcv+0x48/0x60 [ 180.511932][T13513] netlink_unicast+0x5bd/0x690 [ 180.511970][T13513] netlink_sendmsg+0x58b/0x6b0 [ 180.511989][T13513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.512031][T13513] __sock_sendmsg+0x142/0x180 [ 180.512054][T13513] ____sys_sendmsg+0x31e/0x4e0 [ 180.512074][T13513] ___sys_sendmsg+0x17b/0x1d0 [ 180.512104][T13513] __x64_sys_sendmsg+0xd4/0x160 [ 180.512125][T13513] x64_sys_call+0x191e/0x2ff0 [ 180.512197][T13513] do_syscall_64+0xd2/0x200 [ 180.512218][T13513] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.512239][T13513] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.512264][T13513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.512282][T13513] RIP: 0033:0x7feb6d62ebe9 [ 180.512295][T13513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.512309][T13513] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.512324][T13513] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 180.512337][T13513] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 180.512347][T13513] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.512356][T13513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.512366][T13513] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 180.512383][T13513] [ 180.515035][T13515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13515 comm=syz.1.3830 [ 180.544190][T13516] loop5: detected capacity change from 0 to 512 [ 180.798661][T13516] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.828534][T13516] EXT4-fs (loop5): 1 truncate cleaned up [ 180.834832][T13516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.855791][T13516] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 180.855791][T13516] program syz.5.3825 not setting count and/or reply_len properly [ 180.877822][T13530] rdma_rxe: rxe_newlink: failed to add syz_tun [ 181.068470][T13558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13558 comm=syz.4.3847 [ 181.129667][T13559] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3846'. [ 181.138839][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3846'. [ 181.152580][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 181.262219][T13570] macvtap0: refused to change device tx_queue_len [ 181.290846][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.368829][T13576] rdma_rxe: rxe_newlink: failed to add syz_tun [ 181.399724][T13584] wg2: entered promiscuous mode [ 181.404633][T13584] wg2: entered allmulticast mode [ 181.451284][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 181.527466][T13598] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 181.584475][T13603] 9pnet_fd: Insufficient options for proto=fd [ 181.591804][T13603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13603 comm=syz.4.3864 [ 181.880701][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 181.927014][T13620] syz1: rxe_newlink: already configured on syz_tun [ 181.983124][T13627] FAULT_INJECTION: forcing a failure. [ 181.983124][T13627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.996305][T13627] CPU: 1 UID: 0 PID: 13627 Comm: syz.3.3874 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 181.996334][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.996345][T13627] Call Trace: [ 181.996372][T13627] [ 181.996379][T13627] __dump_stack+0x1d/0x30 [ 181.996407][T13627] dump_stack_lvl+0xe8/0x140 [ 181.996424][T13627] dump_stack+0x15/0x1b [ 181.996505][T13627] should_fail_ex+0x265/0x280 [ 181.996524][T13627] should_fail+0xb/0x20 [ 181.996539][T13627] should_fail_usercopy+0x1a/0x20 [ 181.996594][T13627] _copy_from_user+0x1c/0xb0 [ 181.996619][T13627] ___bpf_copy_key+0xa5/0x110 [ 181.996729][T13627] map_update_elem+0x165/0x520 [ 181.996755][T13627] __sys_bpf+0x571/0x7b0 [ 181.996849][T13627] __x64_sys_bpf+0x41/0x50 [ 181.996875][T13627] x64_sys_call+0x2aea/0x2ff0 [ 181.996898][T13627] do_syscall_64+0xd2/0x200 [ 181.996924][T13627] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.997081][T13627] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.997108][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.997184][T13627] RIP: 0033:0x7f7e7d03ebe9 [ 181.997242][T13627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.997262][T13627] RSP: 002b:00007f7e7ba9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.997284][T13627] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03ebe9 [ 181.997364][T13627] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 181.997421][T13627] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.997431][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.997443][T13627] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 181.997463][T13627] [ 182.221617][T13630] 9pnet_fd: Insufficient options for proto=fd [ 182.247464][T13630] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13630 comm=syz.1.3875 [ 182.336044][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'. [ 182.344951][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'. [ 182.553422][T13652] rdma_rxe: rxe_newlink: failed to add syz_tun [ 182.904609][T13681] 9pnet_fd: Insufficient options for proto=fd [ 182.918262][T13681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13681 comm=syz.4.3894 [ 183.377822][T13735] 9pnet_fd: Insufficient options for proto=fd [ 183.385168][T13735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13735 comm=syz.0.3919 [ 183.431307][T13740] geneve2: entered promiscuous mode [ 183.688861][T13766] macvtap0: refused to change device tx_queue_len [ 183.724097][T13774] 9pnet_fd: Insufficient options for proto=fd [ 183.731592][T13774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=13774 comm=syz.0.3936 [ 183.896547][T13783] FAULT_INJECTION: forcing a failure. [ 183.896547][T13783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.909671][T13783] CPU: 0 UID: 0 PID: 13783 Comm: syz.3.3940 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 183.909759][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.909770][T13783] Call Trace: [ 183.909776][T13783] [ 183.909782][T13783] __dump_stack+0x1d/0x30 [ 183.909801][T13783] dump_stack_lvl+0xe8/0x140 [ 183.909817][T13783] dump_stack+0x15/0x1b [ 183.909834][T13783] should_fail_ex+0x265/0x280 [ 183.909853][T13783] should_fail+0xb/0x20 [ 183.909940][T13783] should_fail_usercopy+0x1a/0x20 [ 183.909970][T13783] _copy_to_user+0x20/0xa0 [ 183.910063][T13783] simple_read_from_buffer+0xb5/0x130 [ 183.910082][T13783] proc_fail_nth_read+0x10e/0x150 [ 183.910106][T13783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.910128][T13783] vfs_read+0x1a8/0x770 [ 183.910205][T13783] ? __rcu_read_unlock+0x4f/0x70 [ 183.910224][T13783] ? __fget_files+0x184/0x1c0 [ 183.910247][T13783] ksys_read+0xda/0x1a0 [ 183.910266][T13783] __x64_sys_read+0x40/0x50 [ 183.910286][T13783] x64_sys_call+0x27bc/0x2ff0 [ 183.910305][T13783] do_syscall_64+0xd2/0x200 [ 183.910351][T13783] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.910376][T13783] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.910397][T13783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.910416][T13783] RIP: 0033:0x7f7e7d03d5fc [ 183.910429][T13783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.910474][T13783] RSP: 002b:00007f7e7ba9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.910490][T13783] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03d5fc [ 183.910568][T13783] RDX: 000000000000000f RSI: 00007f7e7ba9f0a0 RDI: 0000000000000006 [ 183.910579][T13783] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.910589][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.910600][T13783] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 183.910616][T13783] [ 183.911132][T13786] netlink: 'syz.3.3940': attribute type 21 has an invalid length. [ 184.244817][T13805] loop5: detected capacity change from 0 to 1024 [ 184.269149][T13805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.322657][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.329360][T13813] FAULT_INJECTION: forcing a failure. [ 184.329360][T13813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.344700][T13813] CPU: 1 UID: 0 PID: 13813 Comm: syz.3.3950 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 184.344729][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.344741][T13813] Call Trace: [ 184.344746][T13813] [ 184.344753][T13813] __dump_stack+0x1d/0x30 [ 184.344826][T13813] dump_stack_lvl+0xe8/0x140 [ 184.344842][T13813] dump_stack+0x15/0x1b [ 184.344905][T13813] should_fail_ex+0x265/0x280 [ 184.344972][T13813] should_fail+0xb/0x20 [ 184.344989][T13813] should_fail_usercopy+0x1a/0x20 [ 184.345011][T13813] strncpy_from_user+0x25/0x230 [ 184.345039][T13813] ? __kmalloc_cache_noprof+0x189/0x320 [ 184.345100][T13813] __se_sys_memfd_create+0x1ff/0x590 [ 184.345124][T13813] __x64_sys_memfd_create+0x31/0x40 [ 184.345144][T13813] x64_sys_call+0x2abe/0x2ff0 [ 184.345162][T13813] do_syscall_64+0xd2/0x200 [ 184.345260][T13813] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.345325][T13813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 184.345351][T13813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.345411][T13813] RIP: 0033:0x7f7e7d03ebe9 [ 184.345429][T13813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.345499][T13813] RSP: 002b:00007f7e7ba9ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 184.345517][T13813] RAX: ffffffffffffffda RBX: 00000000000004ee RCX: 00007f7e7d03ebe9 [ 184.345528][T13813] RDX: 00007f7e7ba9eef0 RSI: 0000000000000000 RDI: 00007f7e7d0c27e8 [ 184.345540][T13813] RBP: 0000200000000a40 R08: 00007f7e7ba9ebb7 R09: 00007f7e7ba9ee40 [ 184.345551][T13813] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 184.345562][T13813] R13: 00007f7e7ba9eef0 R14: 00007f7e7ba9eeb0 R15: 00002000000008c0 [ 184.345579][T13813] [ 184.590582][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 184.590596][ T29] audit: type=1326 audit(1755489318.146:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.646682][ T29] audit: type=1326 audit(1755489318.146:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.670668][ T29] audit: type=1326 audit(1755489318.146:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.694515][ T29] audit: type=1326 audit(1755489318.146:10894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.718168][ T29] audit: type=1326 audit(1755489318.146:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.741934][ T29] audit: type=1326 audit(1755489318.146:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.765622][ T29] audit: type=1326 audit(1755489318.146:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.789237][ T29] audit: type=1326 audit(1755489318.146:10898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.812848][ T29] audit: type=1326 audit(1755489318.146:10899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.836417][ T29] audit: type=1326 audit(1755489318.146:10900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 184.861532][T13837] macvtap0: refused to change device tx_queue_len [ 185.050060][T13861] 9pnet_fd: Insufficient options for proto=fd [ 185.065650][T13863] FAULT_INJECTION: forcing a failure. [ 185.065650][T13863] name failslab, interval 1, probability 0, space 0, times 0 [ 185.078352][T13863] CPU: 0 UID: 0 PID: 13863 Comm: syz.4.3973 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 185.078383][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.078396][T13863] Call Trace: [ 185.078401][T13863] [ 185.078421][T13863] __dump_stack+0x1d/0x30 [ 185.078447][T13863] dump_stack_lvl+0xe8/0x140 [ 185.078468][T13863] dump_stack+0x15/0x1b [ 185.078485][T13863] should_fail_ex+0x265/0x280 [ 185.078505][T13863] should_failslab+0x8c/0xb0 [ 185.078587][T13863] kmem_cache_alloc_noprof+0x50/0x310 [ 185.078630][T13863] ? audit_log_start+0x365/0x6c0 [ 185.078657][T13863] audit_log_start+0x365/0x6c0 [ 185.078686][T13863] audit_seccomp+0x48/0x100 [ 185.078717][T13863] ? __seccomp_filter+0x68c/0x10d0 [ 185.078767][T13863] __seccomp_filter+0x69d/0x10d0 [ 185.078791][T13863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 185.078839][T13863] ? vfs_write+0x7e8/0x960 [ 185.078862][T13863] ? __rcu_read_unlock+0x4f/0x70 [ 185.078885][T13863] ? __fget_files+0x184/0x1c0 [ 185.078971][T13863] __secure_computing+0x82/0x150 [ 185.079038][T13863] syscall_trace_enter+0xcf/0x1e0 [ 185.079102][T13863] do_syscall_64+0xac/0x200 [ 185.079125][T13863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.079223][T13863] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.079247][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.079334][T13863] RIP: 0033:0x7feb6d62ebe9 [ 185.079356][T13863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.079372][T13863] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 185.079429][T13863] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 185.079440][T13863] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 185.079450][T13863] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.079498][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.079510][T13863] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 185.079530][T13863] [ 185.109794][T13864] __nla_validate_parse: 13 callbacks suppressed [ 185.109808][T13864] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3970'. [ 185.309585][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3970'. [ 185.487852][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3983'. [ 185.571810][T13898] loop5: detected capacity change from 0 to 1024 [ 185.580531][T13900] macvtap0: refused to change device tx_queue_len [ 185.581384][T13902] 9pnet_fd: Insufficient options for proto=fd [ 185.607867][T13898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.666147][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.953008][T13943] macvtap0: refused to change device tx_queue_len [ 186.049482][T13954] rdma_rxe: rxe_newlink: failed to add syz_tun [ 186.052880][T13957] loop5: detected capacity change from 0 to 2048 [ 186.064752][T13958] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4010'. [ 186.073934][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 186.103221][T13957] EXT4-fs (loop5): failed to initialize system zone (-117) [ 186.110612][T13957] EXT4-fs (loop5): mount failed [ 186.225217][T13970] 9pnet_fd: Insufficient options for proto=fd [ 186.287401][T13975] loop5: detected capacity change from 0 to 512 [ 186.304751][T13976] macvtap0: refused to change device tx_queue_len [ 186.308968][T13975] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 186.325009][T13975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 186.333918][T13975] System zones: 1-12 [ 186.340660][T13975] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4017: corrupted in-inode xattr: e_value size too large [ 186.356085][T13975] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4017: couldn't read orphan inode 15 (err -117) [ 186.390915][T13975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.435146][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.489372][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'. [ 186.574996][T14012] macvtap0: refused to change device tx_queue_len [ 186.604133][T14014] loop5: detected capacity change from 0 to 512 [ 186.611802][T14014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.618500][T14014] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.624971][T14014] ext4: Bad value for 'debug_want_extra_isize' [ 186.688837][T14019] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4035'. [ 186.698158][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4035'. [ 186.955157][T14044] syz_tun: entered promiscuous mode [ 186.960399][T14044] syz_tun: entered allmulticast mode [ 186.994571][T14046] loop5: detected capacity change from 0 to 512 [ 187.017659][T14046] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 187.026875][T14046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 187.034783][T14046] System zones: 1-12 [ 187.055821][T14046] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4048: corrupted in-inode xattr: e_value size too large [ 187.073701][T14046] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4048: couldn't read orphan inode 15 (err -117) [ 187.087281][T14046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.112471][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.229597][T14055] loop5: detected capacity change from 0 to 512 [ 187.236172][T14055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.242773][T14055] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.249349][T14055] ext4: Bad value for 'debug_want_extra_isize' [ 187.308365][T14059] 9pnet_fd: Insufficient options for proto=fd [ 187.315937][T14060] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4052'. [ 187.328702][T14059] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14059 comm=syz.0.4054 [ 187.374286][T14066] loop5: detected capacity change from 0 to 2048 [ 187.388947][T14066] EXT4-fs (loop5): failed to initialize system zone (-117) [ 187.478591][T14066] EXT4-fs (loop5): mount failed [ 187.721599][T14085] loop5: detected capacity change from 0 to 256 [ 187.728270][T14083] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 187.734797][T14083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.742361][T14083] vhci_hcd vhci_hcd.0: Device attached [ 187.753557][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'. [ 187.755079][T14085] FAT-fs (loop5): Directory bread(block 64) failed [ 187.769701][T14085] FAT-fs (loop5): Directory bread(block 65) failed [ 187.778705][T14086] vhci_hcd: connection closed [ 187.778876][T14085] FAT-fs (loop5): Directory bread(block 66) failed [ 187.784819][T11248] vhci_hcd: stop threads [ 187.794298][T14085] FAT-fs (loop5): Directory bread(block 67) failed [ 187.794429][T11248] vhci_hcd: release socket [ 187.794447][T11248] vhci_hcd: disconnect device [ 187.810583][T14085] FAT-fs (loop5): Directory bread(block 68) failed [ 187.817197][T14085] FAT-fs (loop5): Directory bread(block 69) failed [ 187.823841][T14085] FAT-fs (loop5): Directory bread(block 70) failed [ 187.831403][T14085] FAT-fs (loop5): Directory bread(block 71) failed [ 187.838262][T14085] FAT-fs (loop5): Directory bread(block 72) failed [ 187.844780][T14085] FAT-fs (loop5): Directory bread(block 73) failed [ 187.920789][T14101] syz.5.4063: attempt to access beyond end of device [ 187.920789][T14101] loop5: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 187.980742][T14105] wg2: left promiscuous mode [ 187.985377][T14105] wg2: left allmulticast mode [ 188.026269][T14109] 9pnet_fd: Insufficient options for proto=fd [ 188.033460][T14109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14109 comm=syz.4.4071 [ 188.364244][T14132] 9pnet_fd: Insufficient options for proto=fd [ 188.371608][T14132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14132 comm=syz.0.4082 [ 188.424818][T14139] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.647305][ T9343] kernel write not supported for file /stat (pid: 9343 comm: kworker/0:9) [ 188.778931][T14185] FAULT_INJECTION: forcing a failure. [ 188.778931][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 188.794229][T14185] CPU: 1 UID: 0 PID: 14185 Comm: syz.3.4104 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 188.794260][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.794272][T14185] Call Trace: [ 188.794278][T14185] [ 188.794284][T14185] __dump_stack+0x1d/0x30 [ 188.794316][T14185] dump_stack_lvl+0xe8/0x140 [ 188.794337][T14185] dump_stack+0x15/0x1b [ 188.794358][T14185] should_fail_ex+0x265/0x280 [ 188.794380][T14185] should_failslab+0x8c/0xb0 [ 188.794404][T14185] kmem_cache_alloc_node_noprof+0x57/0x320 [ 188.794446][T14185] ? __alloc_skb+0x101/0x320 [ 188.794480][T14185] __alloc_skb+0x101/0x320 [ 188.794512][T14185] netlink_alloc_large_skb+0xba/0xf0 [ 188.794563][T14185] netlink_sendmsg+0x3cf/0x6b0 [ 188.794586][T14185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.794750][T14185] __sock_sendmsg+0x142/0x180 [ 188.794811][T14185] ____sys_sendmsg+0x31e/0x4e0 [ 188.794836][T14185] ___sys_sendmsg+0x17b/0x1d0 [ 188.794868][T14185] __x64_sys_sendmsg+0xd4/0x160 [ 188.794936][T14185] x64_sys_call+0x191e/0x2ff0 [ 188.794971][T14185] do_syscall_64+0xd2/0x200 [ 188.794993][T14185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.795018][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.795074][T14185] RIP: 0033:0x7f7e7d03ebe9 [ 188.795088][T14185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.795103][T14185] RSP: 002b:00007f7e7ba9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.795120][T14185] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03ebe9 [ 188.795130][T14185] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 188.795142][T14185] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.795153][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.795164][T14185] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 188.795192][T14185] [ 189.021674][T14192] 9pnet_fd: Insufficient options for proto=fd [ 189.036789][T14192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14192 comm=syz.0.4107 [ 189.053490][T14196] loop5: detected capacity change from 0 to 512 [ 189.093379][T14196] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 189.099956][T14196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.107570][T14196] vhci_hcd vhci_hcd.0: Device attached [ 189.168040][T14197] vhci_hcd: connection closed [ 189.169826][T11248] vhci_hcd: stop threads [ 189.178807][T11248] vhci_hcd: release socket [ 189.183286][T11248] vhci_hcd: disconnect device [ 189.285218][T14223] FAULT_INJECTION: forcing a failure. [ 189.285218][T14223] name failslab, interval 1, probability 0, space 0, times 0 [ 189.297931][T14223] CPU: 1 UID: 0 PID: 14223 Comm: syz.4.4121 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 189.298054][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.298067][T14223] Call Trace: [ 189.298072][T14223] [ 189.298081][T14223] __dump_stack+0x1d/0x30 [ 189.298100][T14223] dump_stack_lvl+0xe8/0x140 [ 189.298116][T14223] dump_stack+0x15/0x1b [ 189.298130][T14223] should_fail_ex+0x265/0x280 [ 189.298155][T14223] should_failslab+0x8c/0xb0 [ 189.298180][T14223] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 189.298212][T14223] ? key_alloc+0x2b8/0x9a0 [ 189.298254][T14223] kmemdup_noprof+0x2b/0x70 [ 189.298398][T14223] key_alloc+0x2b8/0x9a0 [ 189.298432][T14223] keyring_alloc+0x45/0xb0 [ 189.298477][T14223] lookup_user_key+0x2ea/0xd10 [ 189.298581][T14223] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 189.298686][T14223] __se_sys_add_key+0x263/0x350 [ 189.298710][T14223] __x64_sys_add_key+0x67/0x80 [ 189.298786][T14223] x64_sys_call+0x28c4/0x2ff0 [ 189.298804][T14223] do_syscall_64+0xd2/0x200 [ 189.298832][T14223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.298857][T14223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.298883][T14223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.298976][T14223] RIP: 0033:0x7feb6d62ebe9 [ 189.298991][T14223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.299009][T14223] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 189.299108][T14223] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 189.299119][T14223] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 189.299131][T14223] RBP: 00007feb6c08f090 R08: ffffffffffffffff R09: 0000000000000000 [ 189.299143][T14223] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 189.299155][T14223] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 189.299175][T14223] [ 189.573426][T14235] FAULT_INJECTION: forcing a failure. [ 189.573426][T14235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.586582][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.3.4127 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 189.586691][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.586704][T14235] Call Trace: [ 189.586710][T14235] [ 189.586717][T14235] __dump_stack+0x1d/0x30 [ 189.586758][T14235] dump_stack_lvl+0xe8/0x140 [ 189.586774][T14235] dump_stack+0x15/0x1b [ 189.586845][T14235] should_fail_ex+0x265/0x280 [ 189.586876][T14235] should_fail+0xb/0x20 [ 189.586894][T14235] should_fail_usercopy+0x1a/0x20 [ 189.586915][T14235] _copy_to_user+0x20/0xa0 [ 189.586939][T14235] simple_read_from_buffer+0xb5/0x130 [ 189.587026][T14235] proc_fail_nth_read+0x10e/0x150 [ 189.587072][T14235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.587095][T14235] vfs_read+0x1a8/0x770 [ 189.587189][T14235] ? __rcu_read_unlock+0x4f/0x70 [ 189.587207][T14235] ? __fget_files+0x184/0x1c0 [ 189.587231][T14235] ksys_read+0xda/0x1a0 [ 189.587255][T14235] __x64_sys_read+0x40/0x50 [ 189.587278][T14235] x64_sys_call+0x27bc/0x2ff0 [ 189.587346][T14235] do_syscall_64+0xd2/0x200 [ 189.587361][T14235] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.587374][T14235] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.587388][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.587455][T14235] RIP: 0033:0x7f7e7d03d5fc [ 189.587464][T14235] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.587474][T14235] RSP: 002b:00007f7e7ba9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.587485][T14235] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03d5fc [ 189.587493][T14235] RDX: 000000000000000f RSI: 00007f7e7ba9f0a0 RDI: 0000000000000004 [ 189.587576][T14235] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.587583][T14235] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 189.587657][T14235] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 189.587667][T14235] [ 189.597190][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 189.597204][ T29] audit: type=1326 audit(1755489323.156:11329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 189.671949][T14240] rdma_rxe: rxe_newlink: failed to add syz_tun [ 189.696806][ T29] audit: type=1326 audit(1755489323.196:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 189.857603][ T29] audit: type=1326 audit(1755489323.196:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 189.881203][ T29] audit: type=1326 audit(1755489323.196:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 189.959209][T14256] 9pnet_fd: Insufficient options for proto=fd [ 189.966591][T14256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14256 comm=syz.1.4134 [ 190.035118][T14262] 9pnet_fd: Insufficient options for proto=fd [ 190.123245][ T29] audit: type=1326 audit(1755489323.656:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 190.146946][ T29] audit: type=1326 audit(1755489323.656:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 190.170694][ T29] audit: type=1326 audit(1755489323.656:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 190.194434][ T29] audit: type=1326 audit(1755489323.656:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 190.218178][ T29] audit: type=1326 audit(1755489323.666:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 190.241735][ T29] audit: type=1326 audit(1755489323.666:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 190.443010][T14293] __nla_validate_parse: 14 callbacks suppressed [ 190.443026][T14293] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4148'. [ 190.473184][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'. [ 190.532299][T14308] 9pnet_fd: Insufficient options for proto=fd [ 190.541473][T14308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14308 comm=syz.0.4156 [ 190.608453][T14306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14306 comm=syz.4.4155 [ 190.853717][T14322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 190.860253][T14322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.867886][T14322] vhci_hcd vhci_hcd.0: Device attached [ 190.877388][T14325] vhci_hcd: connection closed [ 190.877629][ T9556] vhci_hcd: stop threads [ 190.886580][ T9556] vhci_hcd: release socket [ 190.890992][ T9556] vhci_hcd: disconnect device [ 190.905922][T14317] loop5: detected capacity change from 0 to 8192 [ 190.966863][T14333] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4165'. [ 190.981174][T14335] loop5: detected capacity change from 0 to 512 [ 190.990324][T14335] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 191.000148][T14335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 191.008183][T14335] System zones: 1-12 [ 191.012440][T14335] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4166: corrupted in-inode xattr: e_value size too large [ 191.027389][T14335] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4166: couldn't read orphan inode 15 (err -117) [ 191.040046][T14335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.049317][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'. [ 191.072697][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.073585][T14343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4168'. [ 191.264266][T14370] 9pnet_fd: Insufficient options for proto=fd [ 191.302782][T14375] macvtap0: refused to change device tx_queue_len [ 191.407798][T14386] loop5: detected capacity change from 0 to 1024 [ 191.910485][T14404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 191.917020][T14404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.924748][T14404] vhci_hcd vhci_hcd.0: Device attached [ 191.935889][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'. [ 191.945281][T14405] vhci_hcd: connection closed [ 191.945336][T11279] vhci_hcd: stop threads [ 191.954601][T11279] vhci_hcd: release socket [ 191.959216][T11279] vhci_hcd: disconnect device [ 192.054885][T14412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.098198][T14418] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 192.104848][T14418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.112597][T14418] vhci_hcd vhci_hcd.0: Device attached [ 192.123050][T14412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.136608][T14419] vhci_hcd: connection closed [ 192.136843][T11279] vhci_hcd: stop threads [ 192.145903][T11279] vhci_hcd: release socket [ 192.150450][T11279] vhci_hcd: disconnect device [ 192.178012][T14412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.237812][T14412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.300997][T11268] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.311948][T11268] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.323373][T11268] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.333611][T11268] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.363456][T14427] loop5: detected capacity change from 0 to 512 [ 192.370066][T14427] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.376994][T14427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.387808][T14427] EXT4-fs (loop5): 1 truncate cleaned up [ 192.393841][T14427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.503733][T14433] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 192.697064][T14442] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4210'. [ 192.839705][T14456] FAULT_INJECTION: forcing a failure. [ 192.839705][T14456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.852742][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.3.4215 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 192.852760][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.852767][T14456] Call Trace: [ 192.852772][T14456] [ 192.852794][T14456] __dump_stack+0x1d/0x30 [ 192.852808][T14456] dump_stack_lvl+0xe8/0x140 [ 192.852818][T14456] dump_stack+0x15/0x1b [ 192.852827][T14456] should_fail_ex+0x265/0x280 [ 192.852862][T14456] should_fail+0xb/0x20 [ 192.852917][T14456] should_fail_usercopy+0x1a/0x20 [ 192.852930][T14456] copy_to_user_nofault+0x7f/0x120 [ 192.852943][T14456] bpf_probe_write_user+0x83/0xc0 [ 192.852960][T14456] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 192.852970][T14456] bpf_trace_run4+0x117/0x1d0 [ 192.853004][T14456] __traceiter_sched_switch+0x3f/0x60 [ 192.853044][T14456] __schedule+0xa17/0xb30 [ 192.853063][T14456] schedule+0x5f/0xd0 [ 192.853079][T14456] synchronize_rcu_expedited+0x611/0x790 [ 192.853097][T14456] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 192.853127][T14456] ? __pfx_autoremove_wake_function+0x10/0x10 [ 192.853215][T14456] synchronize_rcu+0x45/0x320 [ 192.853231][T14456] pfkey_release+0x186/0x220 [ 192.853245][T14456] sock_release+0x48/0xe0 [ 192.853260][T14456] __sys_socketpair+0x3fb/0x430 [ 192.853342][T14456] __x64_sys_socketpair+0x52/0x60 [ 192.853358][T14456] x64_sys_call+0x2bf2/0x2ff0 [ 192.853370][T14456] do_syscall_64+0xd2/0x200 [ 192.853384][T14456] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.853398][T14456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.853467][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.853479][T14456] RIP: 0033:0x7f7e7d03ebe9 [ 192.853488][T14456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.853498][T14456] RSP: 002b:00007f7e7ba9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 192.853509][T14456] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03ebe9 [ 192.853516][T14456] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 192.853523][T14456] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.853575][T14456] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 192.853581][T14456] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 192.853611][T14456] [ 193.126610][T14461] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 193.163843][T14465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 193.170405][T14465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.177946][T14465] vhci_hcd vhci_hcd.0: Device attached [ 193.196346][T14467] vhci_hcd: connection closed [ 193.197931][T11268] vhci_hcd: stop threads [ 193.207068][T11268] vhci_hcd: release socket [ 193.211564][T11268] vhci_hcd: disconnect device [ 193.315278][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.335873][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4221'. [ 193.362028][T14472] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 193.368763][T14472] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.376360][T14472] vhci_hcd vhci_hcd.0: Device attached [ 193.383168][T14475] vhci_hcd: connection closed [ 193.383359][T11248] vhci_hcd: stop threads [ 193.392494][T11248] vhci_hcd: release socket [ 193.396945][T11248] vhci_hcd: disconnect device [ 193.726913][T14481] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14481 comm=syz.3.4224 [ 194.108491][T14530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14530 comm=syz.1.4243 [ 194.316270][T14549] program syz.0.4251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.387459][T14555] FAULT_INJECTION: forcing a failure. [ 194.387459][T14555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.400803][T14555] CPU: 0 UID: 0 PID: 14555 Comm: syz.1.4252 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 194.400831][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.400842][T14555] Call Trace: [ 194.400849][T14555] [ 194.400856][T14555] __dump_stack+0x1d/0x30 [ 194.400943][T14555] dump_stack_lvl+0xe8/0x140 [ 194.400964][T14555] dump_stack+0x15/0x1b [ 194.400980][T14555] should_fail_ex+0x265/0x280 [ 194.401002][T14555] should_fail_alloc_page+0xf2/0x100 [ 194.401030][T14555] __alloc_frozen_pages_noprof+0xff/0x360 [ 194.401078][T14555] alloc_pages_mpol+0xb3/0x250 [ 194.401174][T14555] vma_alloc_folio_noprof+0x1aa/0x300 [ 194.401205][T14555] handle_mm_fault+0xec2/0x2c20 [ 194.401228][T14555] ? __rcu_read_unlock+0x4f/0x70 [ 194.401257][T14555] do_user_addr_fault+0x3fe/0x1090 [ 194.401360][T14555] exc_page_fault+0x62/0xa0 [ 194.401383][T14555] asm_exc_page_fault+0x26/0x30 [ 194.401401][T14555] RIP: 0010:filldir+0x20c/0x420 [ 194.401419][T14555] Code: 4c 39 e5 0f 87 a6 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 49 89 47 08 48 8b 44 24 10 48 8b 4c 24 38 48 89 08 48 8b 6c 24 18 <66> 89 68 10 41 80 e5 0f 41 89 ef 46 88 6c 38 ff 4c 63 eb 42 c6 44 [ 194.401503][T14555] RSP: 0018:ffffc90003b8bd60 EFLAGS: 00050283 [ 194.401528][T14555] RAX: 0000200000001ff0 RBX: 0000000000000008 RCX: 00000000000007e6 [ 194.401542][T14555] RDX: 0000000000000000 RSI: 0000200000001fd8 RDI: 0000200000002010 [ 194.401554][T14555] RBP: 0000000000000020 R08: 0001c90003b8bea7 R09: 0000000000000000 [ 194.401564][T14555] R10: ffffc90003b8bda4 R11: ffffffff81965570 R12: 00007ffffffff000 [ 194.401576][T14555] R13: 000000000000000a R14: ffff8881072e3878 R15: 0000200000001fd8 [ 194.401655][T14555] ? __pfx_filldir+0x10/0x10 [ 194.401743][T14555] ? __pfx_filldir+0x10/0x10 [ 194.401759][T14555] offset_readdir+0x22d/0x2c0 [ 194.401865][T14555] iterate_dir+0x114/0x330 [ 194.401880][T14555] ? mutex_lock+0xd/0x30 [ 194.401900][T14555] __se_sys_getdents+0x88/0x1b0 [ 194.401919][T14555] ? __pfx_filldir+0x10/0x10 [ 194.401940][T14555] __x64_sys_getdents+0x43/0x50 [ 194.401971][T14555] x64_sys_call+0xee7/0x2ff0 [ 194.401993][T14555] do_syscall_64+0xd2/0x200 [ 194.402019][T14555] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.402101][T14555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 194.402125][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.402145][T14555] RIP: 0033:0x7f67f73aebe9 [ 194.402159][T14555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.402230][T14555] RSP: 002b:00007f67f5e0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 194.402248][T14555] RAX: ffffffffffffffda RBX: 00007f67f75d5fa0 RCX: 00007f67f73aebe9 [ 194.402258][T14555] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000006 [ 194.402337][T14555] RBP: 00007f67f5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.402350][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.402363][T14555] R13: 00007f67f75d6038 R14: 00007f67f75d5fa0 R15: 00007ffef6a23198 [ 194.402382][T14555] [ 194.783959][T14572] macvtap0: refused to change device tx_queue_len [ 194.851571][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 194.851586][ T29] audit: type=1326 audit(1755489328.406:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 194.887231][ T29] audit: type=1326 audit(1755489328.416:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 194.911013][ T29] audit: type=1326 audit(1755489328.416:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 194.934648][ T29] audit: type=1326 audit(1755489328.416:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 194.958292][ T29] audit: type=1326 audit(1755489328.416:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 194.981977][ T29] audit: type=1326 audit(1755489328.416:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 195.005548][ T29] audit: type=1326 audit(1755489328.416:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 195.029311][ T29] audit: type=1326 audit(1755489328.416:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 195.052899][ T29] audit: type=1326 audit(1755489328.416:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 195.076710][ T29] audit: type=1326 audit(1755489328.416:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.4.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 195.121552][T14594] loop5: detected capacity change from 0 to 512 [ 195.129114][T14594] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 195.146874][T14596] macvtap0: refused to change device tx_queue_len [ 195.155219][T14594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 195.165283][T14594] System zones: 1-12 [ 195.169598][T14594] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4272: corrupted in-inode xattr: e_value size too large [ 195.184766][T14594] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4272: couldn't read orphan inode 15 (err -117) [ 195.206055][T14594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.232494][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.256820][T14613] 9pnet_fd: Insufficient options for proto=fd [ 195.421875][T14622] loop5: detected capacity change from 0 to 512 [ 195.428589][T14622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.435220][T14622] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.441866][T14622] ext4: Bad value for 'debug_want_extra_isize' [ 195.503731][T14623] __nla_validate_parse: 16 callbacks suppressed [ 195.503748][T14623] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4284'. [ 195.715997][T14638] macvtap0: refused to change device tx_queue_len [ 195.769891][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4292'. [ 195.944489][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 196.002962][T14664] macvtap0: refused to change device tx_queue_len [ 196.158924][T14675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=14675 comm=syz.5.4306 [ 196.287545][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 196.312434][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 196.321403][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 196.391513][T14682] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4308'. [ 196.419466][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4308'. [ 196.449828][T14696] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 196.456531][T14696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.464193][T14696] vhci_hcd vhci_hcd.0: Device attached [ 196.489099][T14697] vhci_hcd: connection closed [ 196.494242][T11248] vhci_hcd: stop threads [ 196.503339][T11248] vhci_hcd: release socket [ 196.507770][T11248] vhci_hcd: disconnect device [ 196.581003][T14702] loop5: detected capacity change from 0 to 512 [ 196.588060][T14702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.594736][T14702] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.603687][T14702] ext4: Bad value for 'debug_want_extra_isize' [ 196.679042][T14709] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4316'. [ 196.791126][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4322'. [ 196.861884][T14723] loop5: detected capacity change from 0 to 512 [ 196.883326][T14723] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 196.894192][T14723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 196.911648][T14723] System zones: 1-12 [ 196.926531][T14723] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4325: corrupted in-inode xattr: e_value size too large [ 196.963210][T14723] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4325: couldn't read orphan inode 15 (err -117) [ 196.979270][T14727] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 196.985843][T14727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.993456][T14727] vhci_hcd vhci_hcd.0: Device attached [ 196.994841][T14723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.045006][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.063118][T14728] vhci_hcd: connection closed [ 197.063277][T11279] vhci_hcd: stop threads [ 197.072338][T11279] vhci_hcd: release socket [ 197.076772][T11279] vhci_hcd: disconnect device [ 197.081059][T14743] loop5: detected capacity change from 0 to 512 [ 197.096257][T14743] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 197.102784][T14743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.110329][T14743] vhci_hcd vhci_hcd.0: Device attached [ 197.120448][T14745] vhci_hcd: connection closed [ 197.120667][T11248] vhci_hcd: stop threads [ 197.129626][T11248] vhci_hcd: release socket [ 197.134055][T11248] vhci_hcd: disconnect device [ 197.324413][T14782] $H: renamed from bond0 (while UP) [ 197.332205][T14782] $H: entered promiscuous mode [ 197.337438][T14782] bond_slave_0: entered promiscuous mode [ 197.343240][T14782] bond_slave_1: entered promiscuous mode [ 197.425104][T14793] netlink: 'syz.1.4349': attribute type 29 has an invalid length. [ 197.723298][T14821] FAULT_INJECTION: forcing a failure. [ 197.723298][T14821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.736412][T14821] CPU: 0 UID: 0 PID: 14821 Comm: syz.3.4359 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 197.736441][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.736455][T14821] Call Trace: [ 197.736462][T14821] [ 197.736529][T14821] __dump_stack+0x1d/0x30 [ 197.736695][T14821] dump_stack_lvl+0xe8/0x140 [ 197.736712][T14821] dump_stack+0x15/0x1b [ 197.736726][T14821] should_fail_ex+0x265/0x280 [ 197.736747][T14821] should_fail+0xb/0x20 [ 197.736817][T14821] should_fail_usercopy+0x1a/0x20 [ 197.736841][T14821] _copy_from_user+0x1c/0xb0 [ 197.736919][T14821] ___sys_sendmsg+0xc1/0x1d0 [ 197.736951][T14821] __x64_sys_sendmsg+0xd4/0x160 [ 197.737023][T14821] x64_sys_call+0x191e/0x2ff0 [ 197.737043][T14821] do_syscall_64+0xd2/0x200 [ 197.737129][T14821] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.737162][T14821] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 197.737247][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.737271][T14821] RIP: 0033:0x7f7e7d03ebe9 [ 197.737285][T14821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.737300][T14821] RSP: 002b:00007f7e7ba9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.737359][T14821] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03ebe9 [ 197.737372][T14821] RDX: 00000000000008d0 RSI: 0000200000000500 RDI: 0000000000000008 [ 197.737382][T14821] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.737393][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.737404][T14821] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 197.737420][T14821] [ 197.925085][T14827] pim6reg: entered allmulticast mode [ 198.331580][T14843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 198.338160][T14843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.345999][T14843] vhci_hcd vhci_hcd.0: Device attached [ 198.404883][T14844] vhci_hcd: connection closed [ 198.405220][T11248] vhci_hcd: stop threads [ 198.414238][T11248] vhci_hcd: release socket [ 198.418681][T11248] vhci_hcd: disconnect device [ 198.444465][T14819] Set syz1 is full, maxelem 65536 reached [ 198.715169][T14825] Set syz1 is full, maxelem 65536 reached [ 198.747297][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.756639][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.934687][T14883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14883 comm=syz.1.4385 [ 199.127716][T14896] macvtap0: refused to change device tx_queue_len [ 199.144694][T14898] FAULT_INJECTION: forcing a failure. [ 199.144694][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 199.157427][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.4.4391 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 199.157456][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.157467][T14898] Call Trace: [ 199.157474][T14898] [ 199.157482][T14898] __dump_stack+0x1d/0x30 [ 199.157573][T14898] dump_stack_lvl+0xe8/0x140 [ 199.157591][T14898] dump_stack+0x15/0x1b [ 199.157605][T14898] should_fail_ex+0x265/0x280 [ 199.157681][T14898] should_failslab+0x8c/0xb0 [ 199.157702][T14898] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 199.157801][T14898] ? sidtab_sid2str_get+0xa0/0x130 [ 199.157821][T14898] ? skb_put+0x67/0xf0 [ 199.157836][T14898] kmemdup_noprof+0x2b/0x70 [ 199.157899][T14898] sidtab_sid2str_get+0xa0/0x130 [ 199.157922][T14898] security_sid_to_context_core+0x1eb/0x2e0 [ 199.157945][T14898] security_sid_to_context+0x27/0x40 [ 199.157966][T14898] selinux_lsmprop_to_secctx+0x67/0xf0 [ 199.157999][T14898] security_lsmprop_to_secctx+0x43/0x80 [ 199.158027][T14898] audit_log_task_context+0x77/0x190 [ 199.158166][T14898] audit_log_task+0xf4/0x250 [ 199.158191][T14898] audit_seccomp+0x61/0x100 [ 199.158215][T14898] ? __seccomp_filter+0x68c/0x10d0 [ 199.158349][T14898] __seccomp_filter+0x69d/0x10d0 [ 199.158372][T14898] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.158401][T14898] ? vfs_write+0x7e8/0x960 [ 199.158445][T14898] ? __rcu_read_unlock+0x4f/0x70 [ 199.158463][T14898] ? __fget_files+0x184/0x1c0 [ 199.158489][T14898] __secure_computing+0x82/0x150 [ 199.158512][T14898] syscall_trace_enter+0xcf/0x1e0 [ 199.158614][T14898] do_syscall_64+0xac/0x200 [ 199.158639][T14898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.158664][T14898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.158690][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.158749][T14898] RIP: 0033:0x7feb6d62d5fc [ 199.158765][T14898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.158862][T14898] RSP: 002b:00007feb6c08f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.158946][T14898] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62d5fc [ 199.158960][T14898] RDX: 000000000000000f RSI: 00007feb6c08f0a0 RDI: 0000000000000004 [ 199.158974][T14898] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.158987][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.158998][T14898] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 199.159022][T14898] [ 199.500183][T14905] loop5: detected capacity change from 0 to 512 [ 199.516085][T14905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.522727][T14905] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.544199][T14905] ext4: Bad value for 'debug_want_extra_isize' [ 199.618122][T14914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14914 comm=syz.4.4398 [ 199.873278][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 199.873293][ T29] audit: type=1326 audit(1755489333.426:12005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 199.892477][T14942] loop5: detected capacity change from 0 to 512 [ 199.910753][T14942] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.917375][ T29] audit: type=1326 audit(1755489333.456:12006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 199.918383][T14942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.941052][ T29] audit: type=1326 audit(1755489333.456:12007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 199.954855][T14942] EXT4-fs (loop5): 1 truncate cleaned up [ 199.974640][ T29] audit: type=1326 audit(1755489333.456:12008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 199.980589][T14942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.004032][ T29] audit: type=1326 audit(1755489333.456:12009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feb6d62ebe9 code=0x7ffc0000 [ 200.039640][ T29] audit: type=1326 audit(1755489333.456:12010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb6d62ec23 code=0x7ffc0000 [ 200.063157][ T29] audit: type=1326 audit(1755489333.466:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb6d62d69f code=0x7ffc0000 [ 200.086560][ T29] audit: type=1326 audit(1755489333.466:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feb6d62ec77 code=0x7ffc0000 [ 200.110128][ T29] audit: type=1326 audit(1755489333.466:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb6d62d550 code=0x7ffc0000 [ 200.133771][ T29] audit: type=1326 audit(1755489333.466:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.4.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feb6d62d84a code=0x7ffc0000 [ 200.176667][T14948] 9pnet_fd: Insufficient options for proto=fd [ 200.321928][T14953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14953 comm=syz.3.4412 [ 200.592315][T14968] FAULT_INJECTION: forcing a failure. [ 200.592315][T14968] name failslab, interval 1, probability 0, space 0, times 0 [ 200.604985][T14968] CPU: 0 UID: 0 PID: 14968 Comm: syz.4.4419 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 200.605072][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.605084][T14968] Call Trace: [ 200.605089][T14968] [ 200.605096][T14968] __dump_stack+0x1d/0x30 [ 200.605115][T14968] dump_stack_lvl+0xe8/0x140 [ 200.605133][T14968] dump_stack+0x15/0x1b [ 200.605147][T14968] should_fail_ex+0x265/0x280 [ 200.605241][T14968] ? fsnotify_alloc_group+0x5a/0x170 [ 200.605262][T14968] should_failslab+0x8c/0xb0 [ 200.605325][T14968] __kmalloc_cache_noprof+0x4c/0x320 [ 200.605378][T14968] fsnotify_alloc_group+0x5a/0x170 [ 200.605399][T14968] do_inotify_init+0x59/0x270 [ 200.605422][T14968] __ia32_sys_inotify_init+0x10/0x20 [ 200.605446][T14968] x64_sys_call+0x2e70/0x2ff0 [ 200.605535][T14968] do_syscall_64+0xd2/0x200 [ 200.605639][T14968] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.605668][T14968] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.605716][T14968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.605767][T14968] RIP: 0033:0x7feb6d62ebe9 [ 200.605783][T14968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.605799][T14968] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 200.605816][T14968] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 200.605827][T14968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.605839][T14968] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 200.605862][T14968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.605875][T14968] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 200.605891][T14968] [ 200.857953][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.962086][T14989] __nla_validate_parse: 41 callbacks suppressed [ 200.962100][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4427'. [ 200.977366][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4427'. [ 201.000631][T14989] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4427'. [ 201.094068][T14996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14996 comm=syz.1.4431 [ 201.211456][T15011] loop5: detected capacity change from 0 to 512 [ 201.235763][T15011] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 201.256128][T15011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 201.265545][T15020] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.266229][T15011] System zones: 1-12 [ 201.293946][T15011] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4436: corrupted in-inode xattr: e_value size too large [ 201.317320][T15011] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4436: couldn't read orphan inode 15 (err -117) [ 201.397348][T15011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.455671][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.722213][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.729684][T15037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.739390][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.741994][T15040] 9pnet_fd: Insufficient options for proto=fd [ 201.746806][T15037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.769603][T15040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15040 comm=syz.5.4447 [ 202.106326][T15057] macvtap0: refused to change device tx_queue_len [ 202.226558][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 202.235471][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 202.245757][T15065] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4458'. [ 202.266391][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4459'. [ 202.284796][T15073] loop5: detected capacity change from 0 to 512 [ 202.291842][T15073] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 202.301383][T15073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 202.323879][T15073] System zones: 1-12 [ 202.329147][T15073] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4461: corrupted in-inode xattr: e_value size too large [ 202.352200][T15073] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4461: couldn't read orphan inode 15 (err -117) [ 202.387961][T15081] macvtap0: refused to change device tx_queue_len [ 202.408143][T15073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.454963][T15087] 9pnet_fd: Insufficient options for proto=fd [ 202.485083][T15087] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15087 comm=syz.3.4466 [ 202.498608][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.529482][T15089] 9pnet_fd: Insufficient options for proto=fd [ 202.537519][T15090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15090 comm=syz.0.4467 [ 202.778594][T15112] loop5: detected capacity change from 0 to 512 [ 202.786808][T15112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.793518][T15112] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.800679][T15112] ext4: Bad value for 'debug_want_extra_isize' [ 202.867415][T15116] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4476'. [ 202.958991][T15133] 9pnet_fd: Insufficient options for proto=fd [ 202.992577][T15133] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15133 comm=syz.5.4484 [ 203.413404][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4497'. [ 203.425332][T15161] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 203.465276][T15165] FAULT_INJECTION: forcing a failure. [ 203.465276][T15165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.478431][T15165] CPU: 1 UID: 0 PID: 15165 Comm: syz.1.4498 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 203.478462][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.478474][T15165] Call Trace: [ 203.478486][T15165] [ 203.478493][T15165] __dump_stack+0x1d/0x30 [ 203.478621][T15165] dump_stack_lvl+0xe8/0x140 [ 203.478642][T15165] dump_stack+0x15/0x1b [ 203.478656][T15165] should_fail_ex+0x265/0x280 [ 203.478675][T15165] should_fail+0xb/0x20 [ 203.478693][T15165] should_fail_usercopy+0x1a/0x20 [ 203.478759][T15165] _copy_from_user+0x1c/0xb0 [ 203.478827][T15165] ucma_write+0xd9/0x250 [ 203.478848][T15165] vfs_writev+0x403/0x8b0 [ 203.478880][T15165] ? __pfx_ucma_write+0x10/0x10 [ 203.478906][T15165] do_writev+0xe7/0x210 [ 203.478952][T15165] __x64_sys_writev+0x45/0x50 [ 203.478976][T15165] x64_sys_call+0x1e9a/0x2ff0 [ 203.478999][T15165] do_syscall_64+0xd2/0x200 [ 203.479076][T15165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.479102][T15165] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 203.479126][T15165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.479211][T15165] RIP: 0033:0x7f67f73aebe9 [ 203.479227][T15165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.479244][T15165] RSP: 002b:00007f67f5e0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 203.479264][T15165] RAX: ffffffffffffffda RBX: 00007f67f75d5fa0 RCX: 00007f67f73aebe9 [ 203.479306][T15165] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 203.479317][T15165] RBP: 00007f67f5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.479387][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.479398][T15165] R13: 00007f67f75d6038 R14: 00007f67f75d5fa0 R15: 00007ffef6a23198 [ 203.479414][T15165] [ 203.727678][T15179] 9pnet_fd: Insufficient options for proto=fd [ 203.769059][T15179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15179 comm=syz.4.4504 [ 203.875500][T15197] loop5: detected capacity change from 0 to 512 [ 203.892458][T15197] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 203.927808][T15197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 203.937078][T15197] System zones: 1-12 [ 203.945498][T15197] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4512: corrupted in-inode xattr: e_value size too large [ 203.962537][T15207] geneve3: entered promiscuous mode [ 203.973019][T15197] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4512: couldn't read orphan inode 15 (err -117) [ 203.992713][T15197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.022338][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.040351][T15214] loop5: detected capacity change from 0 to 512 [ 204.047101][T15214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.053720][T15214] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.060402][T15214] ext4: Bad value for 'debug_want_extra_isize' [ 204.293014][T15224] loop5: detected capacity change from 0 to 512 [ 204.299639][T15224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.306317][T15224] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.312782][T15224] ext4: Bad value for 'debug_want_extra_isize' [ 204.409899][T15230] loop5: detected capacity change from 0 to 512 [ 204.417227][T15230] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 204.426804][T15230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 204.434796][T15230] System zones: 1-12 [ 204.439373][T15230] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4524: corrupted in-inode xattr: e_value size too large [ 204.453737][T15230] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4524: couldn't read orphan inode 15 (err -117) [ 204.466162][T15230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.486503][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.502584][T15233] loop5: detected capacity change from 0 to 128 [ 204.519916][T15233] syz.5.4525: attempt to access beyond end of device [ 204.519916][T15233] loop5: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 204.533395][T15233] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 204.542110][T15233] syz.5.4525: attempt to access beyond end of device [ 204.542110][T15233] loop5: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 204.555615][T15233] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 204.564562][T15233] syz.5.4525: attempt to access beyond end of device [ 204.564562][T15233] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 204.577971][T15233] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 204.587556][T15233] syz.5.4525: attempt to access beyond end of device [ 204.587556][T15233] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 204.601057][T15233] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 204.609730][T15233] syz.5.4525: attempt to access beyond end of device [ 204.609730][T15233] loop5: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 204.623151][T15233] Buffer I/O error on dev loop5, logical block 134, lost async page write [ 204.631722][T15233] syz.5.4525: attempt to access beyond end of device [ 204.631722][T15233] loop5: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 204.645139][T15233] Buffer I/O error on dev loop5, logical block 135, lost async page write [ 204.653790][T15233] syz.5.4525: attempt to access beyond end of device [ 204.653790][T15233] loop5: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 204.667311][T15233] Buffer I/O error on dev loop5, logical block 138, lost async page write [ 204.675918][T15233] syz.5.4525: attempt to access beyond end of device [ 204.675918][T15233] loop5: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 204.689500][T15233] Buffer I/O error on dev loop5, logical block 139, lost async page write [ 204.698188][T15233] syz.5.4525: attempt to access beyond end of device [ 204.698188][T15233] loop5: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 204.711634][T15233] Buffer I/O error on dev loop5, logical block 148, lost async page write [ 204.720240][T15233] syz.5.4525: attempt to access beyond end of device [ 204.720240][T15233] loop5: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 204.733621][T15233] Buffer I/O error on dev loop5, logical block 149, lost async page write [ 204.758526][T15238] FAULT_INJECTION: forcing a failure. [ 204.758526][T15238] name failslab, interval 1, probability 0, space 0, times 0 [ 204.771419][T15238] CPU: 0 UID: 0 PID: 15238 Comm: syz.1.4526 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 204.771450][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.771477][T15238] Call Trace: [ 204.771483][T15238] [ 204.771491][T15238] __dump_stack+0x1d/0x30 [ 204.771563][T15238] dump_stack_lvl+0xe8/0x140 [ 204.771583][T15238] dump_stack+0x15/0x1b [ 204.771601][T15238] should_fail_ex+0x265/0x280 [ 204.771698][T15238] should_failslab+0x8c/0xb0 [ 204.771724][T15238] kmem_cache_alloc_noprof+0x50/0x310 [ 204.771754][T15238] ? skb_clone+0x151/0x1f0 [ 204.771848][T15238] skb_clone+0x151/0x1f0 [ 204.771866][T15238] __netlink_deliver_tap+0x2c9/0x500 [ 204.771910][T15238] netlink_unicast+0x66b/0x690 [ 204.771940][T15238] netlink_sendmsg+0x58b/0x6b0 [ 204.771960][T15238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.772015][T15238] __sock_sendmsg+0x142/0x180 [ 204.772040][T15238] ____sys_sendmsg+0x31e/0x4e0 [ 204.772061][T15238] ___sys_sendmsg+0x17b/0x1d0 [ 204.772126][T15238] __x64_sys_sendmsg+0xd4/0x160 [ 204.772148][T15238] x64_sys_call+0x191e/0x2ff0 [ 204.772220][T15238] do_syscall_64+0xd2/0x200 [ 204.772243][T15238] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.772265][T15238] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 204.772349][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.772411][T15238] RIP: 0033:0x7f67f73aebe9 [ 204.772424][T15238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.772440][T15238] RSP: 002b:00007f67f5e0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.772467][T15238] RAX: ffffffffffffffda RBX: 00007f67f75d5fa0 RCX: 00007f67f73aebe9 [ 204.772478][T15238] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 204.772489][T15238] RBP: 00007f67f5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.772499][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.772510][T15238] R13: 00007f67f75d6038 R14: 00007f67f75d5fa0 R15: 00007ffef6a23198 [ 204.772527][T15238] [ 205.001816][T15245] netlink: 'syz.4.4531': attribute type 10 has an invalid length. [ 205.010863][T15245] syz_tun: left allmulticast mode [ 205.023196][T15247] loop5: detected capacity change from 0 to 512 [ 205.025655][T15245] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 205.031558][T15247] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 205.049644][T15245] netlink: 'syz.4.4531': attribute type 10 has an invalid length. [ 205.060808][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.068824][T15245] team0: Port device bond0 added [ 205.072695][T15247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 205.076030][T15245] FAULT_INJECTION: forcing a failure. [ 205.076030][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 205.081757][T15247] System zones: 1-12 [ 205.094364][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.4.4531 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 205.094393][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.094408][T15245] Call Trace: [ 205.094415][T15245] [ 205.094424][T15245] __dump_stack+0x1d/0x30 [ 205.094446][T15245] dump_stack_lvl+0xe8/0x140 [ 205.094495][T15245] dump_stack+0x15/0x1b [ 205.094511][T15245] should_fail_ex+0x265/0x280 [ 205.094533][T15245] should_failslab+0x8c/0xb0 [ 205.094557][T15245] __kmalloc_noprof+0xa5/0x3e0 [ 205.094584][T15245] ? kobject_get_path+0x92/0x1c0 [ 205.094677][T15245] kobject_get_path+0x92/0x1c0 [ 205.094707][T15245] input_devices_seq_show+0x36/0x470 [ 205.094732][T15245] seq_read_iter+0x316/0x940 [ 205.094845][T15245] seq_read+0x270/0x2b0 [ 205.094878][T15245] ? __pfx_seq_read+0x10/0x10 [ 205.094940][T15245] proc_reg_read+0x125/0x1c0 [ 205.094971][T15245] ? __pfx_proc_reg_read+0x10/0x10 [ 205.095000][T15245] vfs_readv+0x3fb/0x690 [ 205.095036][T15245] __x64_sys_preadv+0xfd/0x1c0 [ 205.095089][T15245] x64_sys_call+0x282a/0x2ff0 [ 205.095110][T15245] do_syscall_64+0xd2/0x200 [ 205.095136][T15245] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 205.095160][T15245] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.095234][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.095255][T15245] RIP: 0033:0x7feb6d62ebe9 [ 205.095270][T15245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.095288][T15245] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 205.095307][T15245] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 205.095317][T15245] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 000000000000000d [ 205.095352][T15245] RBP: 00007feb6c08f090 R08: 000000000000d215 R09: 0000000000000000 [ 205.095362][T15245] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 205.095373][T15245] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 205.095390][T15245] [ 205.304866][T15247] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4529: corrupted in-inode xattr: e_value size too large [ 205.319090][T15247] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4529: couldn't read orphan inode 15 (err -117) [ 205.335219][T15247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.379765][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.438851][T15283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15283 comm=syz.5.4544 [ 205.545061][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 205.545076][ T29] audit: type=1400 audit(1755489339.096:12364): avc: denied { relabelfrom } for pid=15284 comm="syz.3.4546" name="UDPv6" dev="sockfs" ino=52653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 205.592624][T15286] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 205.592795][T15296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15296 comm=syz.0.4541 [ 205.605624][ T29] audit: type=1400 audit(1755489339.146:12365): avc: denied { mount } for pid=15274 comm="syz.0.4541" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 205.636769][ T29] audit: type=1326 audit(1755489339.146:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.660430][ T29] audit: type=1326 audit(1755489339.146:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.683993][ T29] audit: type=1400 audit(1755489339.156:12368): avc: denied { relabelto } for pid=15284 comm="syz.3.4546" name="UDPv6" dev="sockfs" ino=52653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:auditd_etc_t:s0" [ 205.712061][ T29] audit: type=1326 audit(1755489339.166:12369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.735802][ T29] audit: type=1326 audit(1755489339.166:12370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.759479][ T29] audit: type=1326 audit(1755489339.166:12371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.783124][ T29] audit: type=1326 audit(1755489339.246:12372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.806694][ T29] audit: type=1326 audit(1755489339.246:12373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15297 comm="syz.1.4550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f73aebe9 code=0x7ffc0000 [ 205.901738][T15309] loop9: detected capacity change from 0 to 7 [ 205.918340][T15311] macvtap0: refused to change device tx_queue_len [ 205.938126][T15309] loop9: unable to read partition table [ 205.958696][T15309] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 205.958696][T15309] ) failed (rc=-5) [ 205.992147][T15315] geneve3: entered promiscuous mode [ 206.112598][T15328] __nla_validate_parse: 4 callbacks suppressed [ 206.112612][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'. [ 206.127896][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4562'. [ 206.142748][T15328] FAULT_INJECTION: forcing a failure. [ 206.142748][T15328] name failslab, interval 1, probability 0, space 0, times 0 [ 206.155565][T15328] CPU: 1 UID: 0 PID: 15328 Comm: syz.4.4562 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 206.155639][T15328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.155696][T15328] Call Trace: [ 206.155762][T15328] [ 206.155770][T15328] __dump_stack+0x1d/0x30 [ 206.155792][T15328] dump_stack_lvl+0xe8/0x140 [ 206.155812][T15328] dump_stack+0x15/0x1b [ 206.155829][T15328] should_fail_ex+0x265/0x280 [ 206.155890][T15328] should_failslab+0x8c/0xb0 [ 206.156059][T15328] kmem_cache_alloc_noprof+0x50/0x310 [ 206.156083][T15328] ? skb_clone+0x151/0x1f0 [ 206.156103][T15328] skb_clone+0x151/0x1f0 [ 206.156193][T15328] __netlink_deliver_tap+0x2c9/0x500 [ 206.156222][T15328] ? netlink_attachskb+0x2d0/0x610 [ 206.156250][T15328] netlink_sendskb+0x126/0x150 [ 206.156283][T15328] netlink_unicast+0x2a2/0x690 [ 206.156511][T15328] netlink_ack+0x4c8/0x500 [ 206.156531][T15328] netlink_rcv_skb+0x192/0x220 [ 206.156547][T15328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.156650][T15328] rtnetlink_rcv+0x1c/0x30 [ 206.156676][T15328] netlink_unicast+0x5bd/0x690 [ 206.156707][T15328] netlink_sendmsg+0x58b/0x6b0 [ 206.156732][T15328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.156756][T15328] __sock_sendmsg+0x142/0x180 [ 206.156833][T15328] ____sys_sendmsg+0x31e/0x4e0 [ 206.156859][T15328] ___sys_sendmsg+0x17b/0x1d0 [ 206.156942][T15328] __x64_sys_sendmsg+0xd4/0x160 [ 206.156970][T15328] x64_sys_call+0x191e/0x2ff0 [ 206.156993][T15328] do_syscall_64+0xd2/0x200 [ 206.157021][T15328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.157092][T15328] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.157115][T15328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.157134][T15328] RIP: 0033:0x7feb6d62ebe9 [ 206.157148][T15328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.157167][T15328] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.157230][T15328] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 206.157243][T15328] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 206.157256][T15328] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.157343][T15328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.157356][T15328] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 206.157376][T15328] [ 206.481812][T15346] tipc: Started in network mode [ 206.486724][T15346] tipc: Node identity ac14140f, cluster identity 4711 [ 206.493885][T15346] tipc: New replicast peer: 255.255.255.255 [ 206.500083][T15346] tipc: Enabled bearer , priority 10 [ 206.526438][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'. [ 206.619094][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.628414][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.636121][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4579'. [ 206.651105][T15355] netlink: 'wg1': attribute type 13 has an invalid length. [ 206.658426][T15355] netlink: 'wg1': attribute type 17 has an invalid length. [ 206.679023][T15355] 0{X: left allmulticast mode [ 206.696562][T15375] FAULT_INJECTION: forcing a failure. [ 206.696562][T15375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.709746][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.5.4581 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 206.709779][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.709848][T15375] Call Trace: [ 206.709855][T15375] [ 206.709862][T15375] __dump_stack+0x1d/0x30 [ 206.709882][T15375] dump_stack_lvl+0xe8/0x140 [ 206.709900][T15375] dump_stack+0x15/0x1b [ 206.709914][T15375] should_fail_ex+0x265/0x280 [ 206.709932][T15375] should_fail+0xb/0x20 [ 206.710005][T15375] should_fail_usercopy+0x1a/0x20 [ 206.710027][T15375] _copy_from_user+0x1c/0xb0 [ 206.710052][T15375] tipc_setsockopt+0x388/0x620 [ 206.710159][T15375] ? __pfx_tipc_setsockopt+0x10/0x10 [ 206.710188][T15375] __sys_setsockopt+0x181/0x200 [ 206.710207][T15375] __x64_sys_setsockopt+0x64/0x80 [ 206.710308][T15375] x64_sys_call+0x20ec/0x2ff0 [ 206.710327][T15375] do_syscall_64+0xd2/0x200 [ 206.710350][T15375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.710496][T15375] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.710520][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.710615][T15375] RIP: 0033:0x7f1a7f9debe9 [ 206.710632][T15375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.710648][T15375] RSP: 002b:00007f1a7e447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.710665][T15375] RAX: ffffffffffffffda RBX: 00007f1a7fc05fa0 RCX: 00007f1a7f9debe9 [ 206.710677][T15375] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 206.710689][T15375] RBP: 00007f1a7e447090 R08: 0000000000000010 R09: 0000000000000000 [ 206.710743][T15375] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 206.710754][T15375] R13: 00007f1a7fc06038 R14: 00007f1a7fc05fa0 R15: 00007ffcad090658 [ 206.710772][T15375] [ 206.718051][T15355] syz_tun: left promiscuous mode [ 206.791258][T15384] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 206.791413][T15355] syz_tun: left allmulticast mode [ 206.796415][T15384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.796536][T15384] vhci_hcd vhci_hcd.0: Device attached [ 206.940291][T15355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.962590][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 206.986630][T15381] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.993891][T15381] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.056384][T15381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.059403][T15399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15399 comm=syz.0.4589 [ 207.078318][T15381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.126332][ T9556] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.134906][T15385] vhci_hcd: connection closed [ 207.142046][T11202] vhci_hcd: stop threads [ 207.151066][T11202] vhci_hcd: release socket [ 207.155505][T11202] vhci_hcd: disconnect device [ 207.165853][ T9556] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.182415][ T9556] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.203536][ T9556] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.219285][T15412] loop5: detected capacity change from 0 to 512 [ 207.234454][T15412] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 207.244858][T15414] macvtap0: refused to change device tx_queue_len [ 207.252316][T15412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 207.270456][T15412] System zones: 1-12 [ 207.274912][T15412] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4595: corrupted in-inode xattr: e_value size too large [ 207.297888][T15412] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4595: couldn't read orphan inode 15 (err -117) [ 207.314841][T15412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.350612][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.387677][T15424] tipc: Enabling of bearer rejected, failed to enable media [ 207.388735][T15426] FAULT_INJECTION: forcing a failure. [ 207.388735][T15426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.409547][T15426] CPU: 0 UID: 0 PID: 15426 Comm: syz.3.4601 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 207.409573][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.409584][T15426] Call Trace: [ 207.409592][T15426] [ 207.409604][T15426] __dump_stack+0x1d/0x30 [ 207.409625][T15426] dump_stack_lvl+0xe8/0x140 [ 207.409641][T15426] dump_stack+0x15/0x1b [ 207.409725][T15426] should_fail_ex+0x265/0x280 [ 207.409792][T15426] should_fail+0xb/0x20 [ 207.409807][T15426] should_fail_usercopy+0x1a/0x20 [ 207.409831][T15426] _copy_from_iter+0xcf/0xe40 [ 207.409857][T15426] ? __build_skb_around+0x1a0/0x200 [ 207.409905][T15426] ? __alloc_skb+0x223/0x320 [ 207.409982][T15426] netlink_sendmsg+0x471/0x6b0 [ 207.410004][T15426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.410066][T15426] __sock_sendmsg+0x142/0x180 [ 207.410100][T15426] ____sys_sendmsg+0x31e/0x4e0 [ 207.410164][T15426] ___sys_sendmsg+0x17b/0x1d0 [ 207.410204][T15426] __x64_sys_sendmsg+0xd4/0x160 [ 207.410232][T15426] x64_sys_call+0x191e/0x2ff0 [ 207.410251][T15426] do_syscall_64+0xd2/0x200 [ 207.410333][T15426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.410360][T15426] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.410452][T15426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.410475][T15426] RIP: 0033:0x7f7e7d03ebe9 [ 207.410553][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.410569][T15426] RSP: 002b:00007f7e7ba9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.410589][T15426] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03ebe9 [ 207.410603][T15426] RDX: 0000000020040810 RSI: 0000200000000080 RDI: 0000000000000005 [ 207.410617][T15426] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.410628][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.410638][T15426] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 207.410654][T15426] [ 207.618548][ T9343] tipc: Node number set to 2886997007 [ 207.693541][T15446] macvtap0: refused to change device tx_queue_len [ 207.901288][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4622'. [ 207.910240][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4622'. [ 207.920612][T15472] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4622'. [ 207.954725][T15480] bond0: entered promiscuous mode [ 207.960063][T15480] bond_slave_0: entered promiscuous mode [ 207.965989][T15480] bond_slave_1: entered promiscuous mode [ 207.973548][T15480] bond0: left promiscuous mode [ 207.978423][T15480] bond_slave_0: left promiscuous mode [ 207.984216][T15480] bond_slave_1: left promiscuous mode [ 207.996851][T15486] FAULT_INJECTION: forcing a failure. [ 207.996851][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 208.009577][T15486] CPU: 1 UID: 0 PID: 15486 Comm: syz.1.4628 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 208.009635][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.009648][T15486] Call Trace: [ 208.009654][T15486] [ 208.009662][T15486] __dump_stack+0x1d/0x30 [ 208.009684][T15486] dump_stack_lvl+0xe8/0x140 [ 208.009705][T15486] dump_stack+0x15/0x1b [ 208.009721][T15486] should_fail_ex+0x265/0x280 [ 208.009823][T15486] should_failslab+0x8c/0xb0 [ 208.009849][T15486] kmem_cache_alloc_noprof+0x50/0x310 [ 208.009878][T15486] ? security_inode_alloc+0x37/0x100 [ 208.009936][T15486] security_inode_alloc+0x37/0x100 [ 208.009959][T15486] inode_init_always_gfp+0x4b7/0x500 [ 208.009990][T15486] ? __pfx_proc_alloc_inode+0x10/0x10 [ 208.010020][T15486] alloc_inode+0x58/0x170 [ 208.010043][T15486] new_inode+0x1d/0xe0 [ 208.010108][T15486] proc_pid_make_inode+0x1f/0xd0 [ 208.010186][T15486] proc_pident_instantiate+0x44/0x180 [ 208.010207][T15486] proc_pident_lookup+0x115/0x1a0 [ 208.010230][T15486] proc_tgid_base_lookup+0x2b/0x40 [ 208.010253][T15486] __lookup_slow+0x190/0x250 [ 208.010365][T15486] lookup_slow+0x3c/0x60 [ 208.010393][T15486] link_path_walk+0x753/0x900 [ 208.010434][T15486] path_openat+0x1de/0x2170 [ 208.010450][T15486] ? _parse_integer_limit+0x170/0x190 [ 208.010478][T15486] do_filp_open+0x109/0x230 [ 208.010512][T15486] ? __pfx_kfree_link+0x10/0x10 [ 208.010539][T15486] do_sys_openat2+0xa6/0x110 [ 208.010571][T15486] __x64_sys_openat+0xf2/0x120 [ 208.010645][T15486] x64_sys_call+0x2e9c/0x2ff0 [ 208.010665][T15486] do_syscall_64+0xd2/0x200 [ 208.010690][T15486] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.010715][T15486] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.010798][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.010820][T15486] RIP: 0033:0x7f67f73ad550 [ 208.010833][T15486] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 208.010888][T15486] RSP: 002b:00007f67f5e0ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 208.010945][T15486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67f73ad550 [ 208.010958][T15486] RDX: 0000000000000000 RSI: 00007f67f7431f06 RDI: 00000000ffffff9c [ 208.010970][T15486] RBP: 00007f67f7431f06 R08: 0000000000000000 R09: 0000000000000000 [ 208.010980][T15486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 208.010991][T15486] R13: 00007f67f75d6038 R14: 00007f67f75d5fa0 R15: 00007ffef6a23198 [ 208.011026][T15486] [ 208.013342][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4625'. [ 208.158260][T15500] vlan0: entered allmulticast mode [ 208.304105][T15502] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 208.310651][T15502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.318319][T15502] vhci_hcd vhci_hcd.0: Device attached [ 208.343706][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4633'. [ 208.353993][T15503] vhci_hcd: connection closed [ 208.354106][ T9556] vhci_hcd: stop threads [ 208.363101][ T9556] vhci_hcd: release socket [ 208.367593][ T9556] vhci_hcd: disconnect device [ 208.387081][T15508] macvtap0: refused to change device tx_queue_len [ 208.438528][T15514] macvtap0: refused to change device tx_queue_len [ 208.626392][T15536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15536 comm=syz.0.4647 [ 208.699778][T15547] 9pnet_fd: Insufficient options for proto=fd [ 208.721569][T15550] FAULT_INJECTION: forcing a failure. [ 208.721569][T15550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.734705][T15550] CPU: 1 UID: 0 PID: 15550 Comm: syz.4.4653 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 208.734742][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.734768][T15550] Call Trace: [ 208.734775][T15550] [ 208.734782][T15550] __dump_stack+0x1d/0x30 [ 208.734802][T15550] dump_stack_lvl+0xe8/0x140 [ 208.734818][T15550] dump_stack+0x15/0x1b [ 208.734833][T15550] should_fail_ex+0x265/0x280 [ 208.734919][T15550] should_fail+0xb/0x20 [ 208.734961][T15550] should_fail_usercopy+0x1a/0x20 [ 208.734980][T15550] _copy_from_user+0x1c/0xb0 [ 208.735051][T15550] copy_from_sockptr+0x5e/0xa0 [ 208.735071][T15550] do_tcp_getsockopt+0x15ad/0x1af0 [ 208.735111][T15550] ? avc_has_perm_noaudit+0x1b1/0x200 [ 208.735138][T15550] ? avc_has_perm+0xf7/0x180 [ 208.735161][T15550] tcp_getsockopt+0x6e/0xe0 [ 208.735179][T15550] sock_common_getsockopt+0x60/0x70 [ 208.735241][T15550] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.735296][T15550] do_sock_getsockopt+0x200/0x240 [ 208.735320][T15550] __x64_sys_getsockopt+0x11e/0x1a0 [ 208.735340][T15550] x64_sys_call+0x2bc6/0x2ff0 [ 208.735358][T15550] do_syscall_64+0xd2/0x200 [ 208.735381][T15550] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.735454][T15550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.735477][T15550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.735498][T15550] RIP: 0033:0x7feb6d62ebe9 [ 208.735512][T15550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.735529][T15550] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 208.735600][T15550] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 208.735613][T15550] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 208.735624][T15550] RBP: 00007feb6c08f090 R08: 0000200000000100 R09: 0000000000000000 [ 208.735635][T15550] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 208.735645][T15550] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 208.735662][T15550] [ 209.038104][T15570] loop5: detected capacity change from 0 to 512 [ 209.068819][T15570] EXT4-fs (loop5): too many log groups per flexible block group [ 209.076630][T15570] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 209.087418][T15570] EXT4-fs (loop5): mount failed [ 209.108780][T15574] FAULT_INJECTION: forcing a failure. [ 209.108780][T15574] name failslab, interval 1, probability 0, space 0, times 0 [ 209.121581][T15574] CPU: 0 UID: 0 PID: 15574 Comm: syz.3.4663 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 209.121692][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.121705][T15574] Call Trace: [ 209.121711][T15574] [ 209.121719][T15574] __dump_stack+0x1d/0x30 [ 209.121777][T15574] dump_stack_lvl+0xe8/0x140 [ 209.121798][T15574] dump_stack+0x15/0x1b [ 209.121815][T15574] should_fail_ex+0x265/0x280 [ 209.121837][T15574] ? bpf_prog_alloc_no_stats+0xc4/0x3a0 [ 209.121923][T15574] should_failslab+0x8c/0xb0 [ 209.121955][T15574] __kmalloc_cache_noprof+0x4c/0x320 [ 209.122050][T15574] bpf_prog_alloc_no_stats+0xc4/0x3a0 [ 209.122080][T15574] bpf_prog_alloc+0x3c/0x150 [ 209.122144][T15574] bpf_prog_load+0x514/0x1070 [ 209.122181][T15574] ? security_bpf+0x2b/0x90 [ 209.122241][T15574] __sys_bpf+0x462/0x7b0 [ 209.122275][T15574] __x64_sys_bpf+0x41/0x50 [ 209.122299][T15574] x64_sys_call+0x2aea/0x2ff0 [ 209.122339][T15574] do_syscall_64+0xd2/0x200 [ 209.122371][T15574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.122497][T15574] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 209.122524][T15574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.122582][T15574] RIP: 0033:0x7f7e7d03ebe9 [ 209.122671][T15574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.122737][T15574] RSP: 002b:00007f7e7ba9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.122757][T15574] RAX: ffffffffffffffda RBX: 00007f7e7d265fa0 RCX: 00007f7e7d03ebe9 [ 209.122771][T15574] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 209.122784][T15574] RBP: 00007f7e7ba9f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.122803][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.122816][T15574] R13: 00007f7e7d266038 R14: 00007f7e7d265fa0 R15: 00007ffea9228168 [ 209.122889][T15574] [ 209.401209][T15591] FAULT_INJECTION: forcing a failure. [ 209.401209][T15591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.414366][T15591] CPU: 0 UID: 0 PID: 15591 Comm: syz.1.4670 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 209.414396][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.414422][T15591] Call Trace: [ 209.414429][T15591] [ 209.414437][T15591] __dump_stack+0x1d/0x30 [ 209.414459][T15591] dump_stack_lvl+0xe8/0x140 [ 209.414475][T15591] dump_stack+0x15/0x1b [ 209.414489][T15591] should_fail_ex+0x265/0x280 [ 209.414507][T15591] should_fail+0xb/0x20 [ 209.414534][T15591] should_fail_usercopy+0x1a/0x20 [ 209.414582][T15591] _copy_to_user+0x20/0xa0 [ 209.414678][T15591] simple_read_from_buffer+0xb5/0x130 [ 209.414700][T15591] proc_fail_nth_read+0x10e/0x150 [ 209.414730][T15591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.414775][T15591] vfs_read+0x1a8/0x770 [ 209.414793][T15591] ? __rcu_read_unlock+0x4f/0x70 [ 209.414814][T15591] ? __fget_files+0x184/0x1c0 [ 209.414889][T15591] ksys_read+0xda/0x1a0 [ 209.414909][T15591] __x64_sys_read+0x40/0x50 [ 209.414938][T15591] x64_sys_call+0x27bc/0x2ff0 [ 209.414961][T15591] do_syscall_64+0xd2/0x200 [ 209.415053][T15591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.415094][T15591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 209.415194][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.415272][T15591] RIP: 0033:0x7f67f73ad5fc [ 209.415285][T15591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.415301][T15591] RSP: 002b:00007f67f5e0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.415321][T15591] RAX: ffffffffffffffda RBX: 00007f67f75d5fa0 RCX: 00007f67f73ad5fc [ 209.415335][T15591] RDX: 000000000000000f RSI: 00007f67f5e0f0a0 RDI: 0000000000000006 [ 209.415349][T15591] RBP: 00007f67f5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.415362][T15591] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000001 [ 209.415432][T15591] R13: 00007f67f75d6038 R14: 00007f67f75d5fa0 R15: 00007ffef6a23198 [ 209.415454][T15591] [ 209.631822][T15595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.641416][T15595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.663480][T15599] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 209.670017][T15599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.677531][T15599] vhci_hcd vhci_hcd.0: Device attached [ 209.692596][T15601] vhci_hcd: connection closed [ 209.692778][T11268] vhci_hcd: stop threads [ 209.701709][T11268] vhci_hcd: release socket [ 209.706185][T11268] vhci_hcd: disconnect device [ 209.734431][T15614] macvtap0: refused to change device tx_queue_len [ 210.027962][T15653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15653 comm=syz.4.4698 [ 210.316495][T15679] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.321455][T15676] rdma_rxe: rxe_newlink: failed to add syz_tun [ 210.361836][T15679] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.384975][T15687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 210.391501][T15687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.399059][T15687] vhci_hcd vhci_hcd.0: Device attached [ 210.423608][T15688] vhci_hcd: connection closed [ 210.423767][T11268] vhci_hcd: stop threads [ 210.428656][T15692] loop5: detected capacity change from 0 to 512 [ 210.432723][T11268] vhci_hcd: release socket [ 210.432734][T11268] vhci_hcd: disconnect device [ 210.449769][T15679] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.462902][T15692] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 210.469471][T15692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.477107][T15692] vhci_hcd vhci_hcd.0: Device attached [ 210.486615][T15694] vhci_hcd: connection closed [ 210.486745][T11268] vhci_hcd: stop threads [ 210.495811][T11268] vhci_hcd: release socket [ 210.500308][T11268] vhci_hcd: disconnect device [ 210.517071][T15679] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.572243][T11202] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.593552][T11202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.602660][T11202] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.610971][T11202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.639600][T15706] macvtap0: refused to change device tx_queue_len [ 210.712539][T15716] FAULT_INJECTION: forcing a failure. [ 210.712539][T15716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.725648][T15716] CPU: 0 UID: 0 PID: 15716 Comm: syz.4.4726 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 210.725676][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.725762][T15716] Call Trace: [ 210.725766][T15716] [ 210.725771][T15716] __dump_stack+0x1d/0x30 [ 210.725784][T15716] dump_stack_lvl+0xe8/0x140 [ 210.725795][T15716] dump_stack+0x15/0x1b [ 210.725804][T15716] should_fail_ex+0x265/0x280 [ 210.725837][T15716] should_fail+0xb/0x20 [ 210.725846][T15716] should_fail_usercopy+0x1a/0x20 [ 210.725859][T15716] _copy_from_user+0x1c/0xb0 [ 210.725930][T15716] ucma_write+0xd9/0x250 [ 210.725943][T15716] vfs_writev+0x403/0x8b0 [ 210.725959][T15716] ? __pfx_ucma_write+0x10/0x10 [ 210.725975][T15716] do_writev+0xe7/0x210 [ 210.725991][T15716] __x64_sys_writev+0x45/0x50 [ 210.726017][T15716] x64_sys_call+0x1e9a/0x2ff0 [ 210.726072][T15716] do_syscall_64+0xd2/0x200 [ 210.726087][T15716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.726102][T15716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.726116][T15716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.726128][T15716] RIP: 0033:0x7feb6d62ebe9 [ 210.726178][T15716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.726189][T15716] RSP: 002b:00007feb6c08f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 210.726200][T15716] RAX: ffffffffffffffda RBX: 00007feb6d855fa0 RCX: 00007feb6d62ebe9 [ 210.726207][T15716] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 210.726246][T15716] RBP: 00007feb6c08f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.726253][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.726260][T15716] R13: 00007feb6d856038 R14: 00007feb6d855fa0 R15: 00007fffd335e908 [ 210.726270][T15716] [ 210.933942][T15718] rdma_rxe: rxe_newlink: failed to add syz_tun [ 211.074453][T15735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=15735 comm=syz.3.4733 [ 211.279630][T15754] loop5: detected capacity change from 0 to 512 [ 211.286975][T15754] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.294750][T15754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.331259][T15754] EXT4-fs (loop5): 1 truncate cleaned up [ 211.337417][T15754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.416592][T15754] ================================================================== [ 211.424709][T15754] BUG: KCSAN: data-race in touch_atime / touch_atime [ 211.431410][T15754] [ 211.433727][T15754] write to 0xffff888119c1ecf0 of 4 bytes by task 15767 on cpu 1: [ 211.441431][T15754] touch_atime+0x1e8/0x340 [ 211.445845][T15754] filemap_splice_read+0x6ba/0x740 [ 211.450942][T15754] ext4_file_splice_read+0x8f/0xb0 [ 211.456077][T15754] splice_direct_to_actor+0x26f/0x680 [ 211.461435][T15754] do_splice_direct+0xda/0x150 [ 211.466201][T15754] do_sendfile+0x380/0x650 [ 211.470613][T15754] __x64_sys_sendfile64+0x105/0x150 [ 211.475820][T15754] x64_sys_call+0x2bb0/0x2ff0 [ 211.480486][T15754] do_syscall_64+0xd2/0x200 [ 211.484983][T15754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.490871][T15754] [ 211.493183][T15754] read to 0xffff888119c1ecf0 of 4 bytes by task 15754 on cpu 0: [ 211.500795][T15754] touch_atime+0x194/0x340 [ 211.505204][T15754] filemap_splice_read+0x6ba/0x740 [ 211.510300][T15754] ext4_file_splice_read+0x8f/0xb0 [ 211.515406][T15754] splice_direct_to_actor+0x26f/0x680 [ 211.520765][T15754] do_splice_direct+0xda/0x150 [ 211.525514][T15754] do_sendfile+0x380/0x650 [ 211.529922][T15754] __x64_sys_sendfile64+0x105/0x150 [ 211.535122][T15754] x64_sys_call+0x2bb0/0x2ff0 [ 211.539788][T15754] do_syscall_64+0xd2/0x200 [ 211.544284][T15754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.550167][T15754] [ 211.552481][T15754] value changed: 0x39a02598 -> 0x3a38bc18 [ 211.558178][T15754] [ 211.560494][T15754] Reported by Kernel Concurrency Sanitizer on: [ 211.566630][T15754] CPU: 0 UID: 0 PID: 15754 Comm: syz.5.4741 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 211.579115][T15754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.589158][T15754] ================================================================== [ 212.232427][T13073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.