last executing test programs: 2.997452766s ago: executing program 4 (id=2249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2.869450067s ago: executing program 4 (id=2253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgget(0x0, 0x80) (fail_nth: 5) 2.555049002s ago: executing program 4 (id=2256): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00611400000000000000000a0000", @ANYBLOB="0fb6b99a1b"], 0x1c}}, 0x0) 2.421558794s ago: executing program 4 (id=2257): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300acdd00"], 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 2.278643687s ago: executing program 4 (id=2260): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000ac0), 0xa0241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, &(0x7f0000000380)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x4, 0xffffffe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='rxrpc_call_reset\x00', r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x825, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000300), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x18) open(0x0, 0x66842, 0x21) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x3e1d, 0x0, 0x0, 0x7ff}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x6}, 0x18) write$UHID_CREATE2(r0, 0x0, 0x8) 2.243871817s ago: executing program 4 (id=2262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc000000120a09000000000000000000020000000900020073797a310000000008c6b4ba7545ac7bb70ecae96bef91000440080000000900010073797a300000000008ff070000000001140000001100f415662c3c0b8649cb253ed292e88a5bf874e84f278385d82f4bc756d7f44d76c25f3e89983789863d27effaff534949c77e38625f043823eb4fd53e76af5c18ade6e3879a3fa95ad573acca9112724a829a10637fe14d62ad7b26a83e47e096b28e24ab1133efc309b3bc481bcf746307438a0b4c4a1296ad518b9e6545c0c8edce12b7ba69cc9c21821e5674aa7cd099ef5452b9bff7c9f8bad0a7f07e4f4efab4901c042d45d7973b9e18c26b"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) ioperm(0x0, 0xf1, 0x7) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006301bd000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x73, 0x4}, @const={0x3, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x2, 0x4}, {0x10, 0x5}, {0x6, 0x3}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x9}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000bc0)=""/194, 0x90, 0xc2, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) syz_usb_connect$uac1(0x4, 0xd6, &(0x7f0000000cc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x3, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x5}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0x10, "5c805c3d"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x5, "a1"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x3ff, 0x6, "99e441ad0095"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x6, "", "220bc2"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x1002}, @as_header={0x7, 0x24, 0x1, 0xe, 0x0, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xcf, 0x8, 0x4, {0x7, 0x25, 0x1, 0x80, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb, 0x3, 0x8, 0x81, "bea0", "11883b"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0xd, '('}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x0, 0x90}, @as_header={0x7, 0x24, 0x1, 0x88, 0x7, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x23, 0x6, "001e64"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd, 0x3, 0x5, {0x7, 0x25, 0x1, 0x2, 0x2, 0x4}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0xa, 0x6, 0x3a, 0xff, 0x2}, 0x106, &(0x7f0000000dc0)={0x5, 0xf, 0x106, 0x1, [@generic={0x101, 0x10, 0x0, "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"}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xed33}, {0xd, 0x24, 0xf, 0x1, 0x1a7, 0x7fff, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf, 0x0, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xff, 0xaf}}}}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 1.782071334s ago: executing program 2 (id=2281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r2, 0x0, 0x417}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = syz_io_uring_setup(0x22b5, 0x0, &(0x7f0000002000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x7, 0x0, 0x0) ftruncate(r4, 0x2000009) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000160000042bbd05ec39682500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (fail_nth: 2) 1.474072198s ago: executing program 2 (id=2284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_destroy(r3) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 1.306352021s ago: executing program 0 (id=2287): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 1.286333631s ago: executing program 0 (id=2289): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) (async) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) faccessat2(r3, &(0x7f0000000000)='\x00', 0x2, 0x1100) socket$inet(0x2, 0x80001, 0x84) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x4}}, 0xc5e1, 0x6, 0xf, 0x5, 0x0, 0x3, 0x5}, 0x9c) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x248}}, 0x0) 1.194060142s ago: executing program 0 (id=2291): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), 0x0, 0xc1, 0x3) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x3, 0x9, 0x10000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x0) shutdown(r2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRESDEC=r3, @ANYRESDEC], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='rpm_return_int\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000280), &(0x7f0000000300)=r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES16=r3, @ANYRES32, @ANYBLOB="19"], 0x48) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xc0, 0x30, 0x1, 0x7000000, 0x0, {}, [{0xac, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xd, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb89}, {0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000340)) 1.128495394s ago: executing program 3 (id=2296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) close(r2) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x48000) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x200001, 0x14, 0x7, 0x19, 0x2, 0x0, 0x6, 0xc1, 0x1}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.079964034s ago: executing program 3 (id=2297): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000ac0), 0xa0241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, &(0x7f0000000380)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x4, 0xffffffe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='rxrpc_call_reset\x00', r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x825, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000300), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x18) open(0x0, 0x66842, 0x21) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x3e1d, 0x0, 0x0, 0x7ff}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x6}, 0x18) write$UHID_CREATE2(r0, 0x0, 0x8) 1.078228844s ago: executing program 3 (id=2298): unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x1000000000000000) 1.007240345s ago: executing program 3 (id=2299): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 12) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) timer_create(0x4, 0x0, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x5, 0x47f9833d}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x2000000005}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) 737.68709ms ago: executing program 1 (id=2302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 693.0931ms ago: executing program 0 (id=2303): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="06001100312d"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 692.5389ms ago: executing program 2 (id=2304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYBLOB="a5fdad88"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (fail_nth: 6) 689.78808ms ago: executing program 0 (id=2305): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="210000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000800400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001e000000200000000000000000000000000000000023b4b454963aaaefbf3bef0e31e9e50a106f6307e3d542a25fe0fd9927beb5c766e240615018bc71af38a294d4d55ece310e624f662c5a6c10bad7fd1edcc19ea166d3b80158ef8d79445b7503f727e6357bd8975caf3ab1cb9afc0d05e6f03a71d3648ca08e9f777e7d4e1f44e6749e90d57fa438eaf3c26d809929"], 0x50) inotify_init1(0x80000) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) chown(0x0, 0xee00, 0x0) syz_clone(0x48002880, &(0x7f0000000200), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000980)="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") bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 346.173625ms ago: executing program 0 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be", @ANYRESDEC], 0xfdef) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x0, 0x0) 345.884165ms ago: executing program 2 (id=2307): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1009082, &(0x7f00000001c0)={[{@data_err_ignore}, {@nolazytime}, {@oldalloc}, {@errors_continue}, {@dioread_nolock}, {@inlinecrypt}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e1, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac) socket$igmp6(0xa, 0x3, 0x2) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 342.230375ms ago: executing program 2 (id=2308): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000ac0), 0xa0241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, &(0x7f0000000380)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x4, 0xffffffe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='rxrpc_call_reset\x00', r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x825, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000300), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x18) open(0x0, 0x66842, 0x21) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x3e1d, 0x0, 0x0, 0x7ff}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x6}, 0x18) write$UHID_CREATE2(r0, 0x0, 0x8) 321.005426ms ago: executing program 2 (id=2309): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c106478645a818d1b1bc371c7928008b829af0ecbeeae67a99d581c6c55161400000000"]) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) mq_open(0x0, 0x40, 0x180, 0x0) timer_create(0x4, 0x0, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x5, 0x47f9833d}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000ff0f0000030000003a30126ccddf26575c1ccdfaba653153dc79916ef628adfcb0af26c093eb151324be0753a401adf3d35bc33fb0a0ff8df3b58825557a0abecf09d36897fe979336a9"]) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x2000000005}, 0x18) 190.065538ms ago: executing program 1 (id=2310): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) (async) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) pwritev2(r4, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x2, 0xced4, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x62f72a3a9d6770bc, 0x0, 0x4}, 0x8}, [{}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0xb}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x20000000, 0x0, 0xfffffffe, 0x1007}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x303}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0xc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4000}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0xa13}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0xffff8001}, {}, {}, {0x8, 0x0, 0x0, 0x1, 0x800}, {}, {0x2, 0x0, 0xffffffff}, {0x0, 0x5, 0x0, 0x0, 0x2}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x7, 0xffff67ce}, {}, {}, {0x0, 0x0, 0x0, 0x7, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x1, 0x4}, {}, {0x0, 0x0, 0x231}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x72f1}, {0x0, 0x0, 0xd7ed}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffd, 0x4000}, {}, {0x0, 0x0, 0xfffffffd}, {}, {0x814, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xfffffffe}, {}, {}, {0x3}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffffffa, 0x0, 0x0, 0x2}, {0xd6, 0x0, 0x0, 0x0, 0x2}, {0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x5f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {0x5, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {0xc, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x7afca22067ae7b97}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 110.364908ms ago: executing program 3 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (fail_nth: 3) 109.449599ms ago: executing program 1 (id=2312): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb76e}, 0x100002, 0x448, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lchown(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) chroot(&(0x7f0000000000)='./file0\x00') 108.706679ms ago: executing program 3 (id=2313): r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) pidfd_getfd(r7, r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x800) symlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)='./file0\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010025000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=r0, @ANYRES64=r10, @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) 95.243769ms ago: executing program 1 (id=2314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000080000827396318c04111aa8a87c"], 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) (async, rerun: 64) r2 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) shutdown(r3, 0x1) (async, rerun: 32) getsockopt(r2, 0x200000000114, 0x271d, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0x18ff9) (rerun: 32) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x20000080000000}, 0x18) (async) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) (async) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000180)=0x2) (async) sendmsg$tipc(r2, &(0x7f0000000480)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x4}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000012c0)="a2efe6b32694b509d3be105ca1272bee18377703f047bbfdadee8ae450dad6189500653c2f01c038e292fbdcf5bfaaad2e59dfae83ecfd204f68900213755fabe286cff927d3754dbe09ed37d85b58ee76175bd84357607e2bc3c19d17d8f3b30f68260e11403627df1eb7225d51ac1a0675edc7a0900d75c29bc3289b504a938d8ed90f1640b9d55650fd52565e59a24d51a8e5f56436aafbe20de1377847dd000000000000000000000000006bb0602f1dd17c528d9b742536d5824f3c433b84b48656e013852fc2a80d5fb9252e2abdde7ec11d36d0c5f1d37071cc6d39d8c644fafbc48f0b9c55753006e021fdae7a9a6a877beba2aed8ecf93ef9853bdb3360503cb2f339cb735b44d695796946a2c8cc97797ddcaba4ef7d051def9cfa2f827f272d5acc3696b5e19c6ff485987e9f3cd818d8c7e3bdfa3efd3ecf35675e8382c94d7bdb07447482e0a4ded63e2bbd50a0c59de000fb300ced3865e859c80d32fbe55252c42c011e4fe5c3afe92063a6b32cb5ec26bd6fb0e3b853cc32321e60650575e482b31b7e133b2fbfecfa3777ea0585ee98bf92f8b7", 0xad}, {&(0x7f0000000240)="45f677618b8f07349d6faf", 0xb}, {&(0x7f00000008c0)="18881c5d722a52c6514093eef52696155bba86bbaaf3a67443dd1fe59bae68fd979cc981388af24ab364130ce7d38b0aec44a0eeb880015ae139e119d3a8f0fc39ff586ad3ba14723893a4375789202b25e43b96c0cde5f9ae1189bcd36a7307e4f00014e50346746efd574335b978cc08bab4631e0602de2bb32c6002fa39971d", 0x81}, {&(0x7f0000000740)="dd00ae00ea196a0c6a0a062347ba7e40321f5355971ca39d50e544de1e602a213d87c839a35cd3053bca293dccef6d577a5e221b12ee1489486561e3fa78a8fb362e5947347dc3fcaab6c9496266a6f1e0d11033146569c3a056e7a69dc6c970fad1c1aedfe1f7721d66129c32a797f83eba5bb4ea4ded5b6e041ca15362ee1aeef772b616663cf9272beb2057b806b317f067e432151a9e847858c191ceecaff72c673d4380bad0f3058974bb623b1d5d4c12e972cdce1d97123a4bcf08a4a185f15237992a6136eeab9be60c6fe365abbf19a0aa82", 0x63}, {&(0x7f00000004c0)="873072c970d08029bdff02d34ff9196eda93b6f23090a3dd18d51dccae5c5082c9586866714b91feb7ef47f5d9b93470d403e8a6ca5e3044f9e13b6db7122652e6674d4d585b02e22206067c2cd2ad700ef6a17f458c", 0x56}, {&(0x7f0000000b80)="fe1e40eb18d0b32a540e8e1a8cfd22165775883abadf4e153f38fb8fe60e3865301980170f717f97b4e999caf6a9045530bb169b3547eb74cb3464a7b30149562aaf24f73dd0b575c790c7f669341017ae0ec15274fb6dae3b4480711a11773fa48dbc8b540499b7b8f813c5a9e047c46185343d", 0x74}, {&(0x7f00000003c0)="e503e7c8c56b5b5e67849e30c7ff933554b538b29921", 0x16}, {&(0x7f00000015c0)="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", 0x93}, {&(0x7f0000001140)="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", 0xaf}, {&(0x7f0000001480)="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", 0xf7}], 0xa, &(0x7f0000000580), 0x0, 0x4000000}, 0x40) (async, rerun: 64) r10 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000e40)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYRESHEX=r9], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x2405c884) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async, rerun: 64) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000140)={0x3, 0x100, 0x100, 0x1, 0x5, 0x7ff}) (rerun: 64) 75.510259ms ago: executing program 1 (id=2315): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 0s ago: executing program 1 (id=2316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000500)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) (fail_nth: 2) 0s ago: executing program 1 (id=2317): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = gettid() (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}, 0x57}], 0x1, 0x2101, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000001c0)=@sg0, 0xee01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000001240)=0x1e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) (async) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r8}) kernel console output (not intermixed with test programs): xd2/0x200 [ 129.499975][ T8252] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 129.500009][ T8252] ? clear_bhb_loop+0x40/0x90 [ 129.500036][ T8252] ? clear_bhb_loop+0x40/0x90 [ 129.500065][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.500165][ T8252] RIP: 0033:0x7fabe01cd33c [ 129.500179][ T8252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.500249][ T8252] RSP: 002b:00007fabde837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.500267][ T8252] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01cd33c [ 129.500279][ T8252] RDX: 000000000000000f RSI: 00007fabde8370a0 RDI: 0000000000000005 [ 129.500291][ T8252] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 129.500305][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.500320][ T8252] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 129.500433][ T8252] [ 129.885539][ T8263] netlink: 16 bytes leftover after parsing attributes in process `kfree'. [ 129.963806][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 130.155218][ T29] kauditd_printk_skb: 18775 callbacks suppressed [ 130.155300][ T29] audit: type=1400 audit(1750439890.841:178565): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.168982][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.189697][ T3035] audit: audit_lost=29765 audit_rate_limit=0 audit_backlog_limit=64 [ 130.197453][ T3313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.197844][ T3035] audit: backlog limit exceeded [ 130.204348][ T3313] audit: audit_lost=29766 audit_rate_limit=0 audit_backlog_limit=64 [ 130.217360][ T3313] audit: backlog limit exceeded [ 130.241580][ T29] audit: type=1400 audit(1750439890.841:178566): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.262887][ T29] audit: type=1400 audit(1750439890.841:178567): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.284315][ T29] audit: type=1400 audit(1750439890.841:178568): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.505548][ T8292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.631722][ T8305] FAULT_INJECTION: forcing a failure. [ 130.631722][ T8305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.644884][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.3.1833 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 130.645010][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.645023][ T8305] Call Trace: [ 130.645030][ T8305] [ 130.645038][ T8305] __dump_stack+0x1d/0x30 [ 130.645077][ T8305] dump_stack_lvl+0xe8/0x140 [ 130.645100][ T8305] dump_stack+0x15/0x1b [ 130.645124][ T8305] should_fail_ex+0x265/0x280 [ 130.645166][ T8305] should_fail+0xb/0x20 [ 130.645193][ T8305] should_fail_usercopy+0x1a/0x20 [ 130.645255][ T8305] _copy_to_user+0x20/0xa0 [ 130.645275][ T8305] simple_read_from_buffer+0xb5/0x130 [ 130.645391][ T8305] proc_fail_nth_read+0x100/0x140 [ 130.645409][ T8305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.645445][ T8305] vfs_read+0x1a0/0x6f0 [ 130.645483][ T8305] ? __rcu_read_unlock+0x4f/0x70 [ 130.645557][ T8305] ? __fget_files+0x184/0x1c0 [ 130.645577][ T8305] ksys_read+0xda/0x1a0 [ 130.645653][ T8305] __x64_sys_read+0x40/0x50 [ 130.645683][ T8305] x64_sys_call+0x2d77/0x2fb0 [ 130.645723][ T8305] do_syscall_64+0xd2/0x200 [ 130.645744][ T8305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.645774][ T8305] ? clear_bhb_loop+0x40/0x90 [ 130.645854][ T8305] ? clear_bhb_loop+0x40/0x90 [ 130.645875][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.645895][ T8305] RIP: 0033:0x7f050ab4d33c [ 130.645913][ T8305] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.645934][ T8305] RSP: 002b:00007f05091b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.646001][ T8305] RAX: ffffffffffffffda RBX: 00007f050ad75fa0 RCX: 00007f050ab4d33c [ 130.646018][ T8305] RDX: 000000000000000f RSI: 00007f05091b70a0 RDI: 0000000000000003 [ 130.646033][ T8305] RBP: 00007f05091b7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.646084][ T8305] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 130.646099][ T8305] R13: 0000000000000000 R14: 00007f050ad75fa0 R15: 00007ffe195c6908 [ 130.646122][ T8305] [ 131.272074][ T8326] FAULT_INJECTION: forcing a failure. [ 131.272074][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.285366][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: syz.2.1842 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 131.285401][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.285416][ T8326] Call Trace: [ 131.285424][ T8326] [ 131.285431][ T8326] __dump_stack+0x1d/0x30 [ 131.285451][ T8326] dump_stack_lvl+0xe8/0x140 [ 131.285472][ T8326] dump_stack+0x15/0x1b [ 131.285493][ T8326] should_fail_ex+0x265/0x280 [ 131.285614][ T8326] should_fail+0xb/0x20 [ 131.285728][ T8326] should_fail_usercopy+0x1a/0x20 [ 131.285821][ T8326] _copy_from_iter+0xcf/0xe40 [ 131.285851][ T8326] ? alloc_pages_mpol+0x201/0x250 [ 131.285888][ T8326] copy_page_from_iter+0x178/0x2a0 [ 131.285913][ T8326] tun_get_user+0x5f0/0x2500 [ 131.285952][ T8326] ? ref_tracker_alloc+0x1f2/0x2f0 [ 131.286016][ T8326] tun_chr_write_iter+0x15e/0x210 [ 131.286051][ T8326] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.286084][ T8326] vfs_write+0x4a0/0x8e0 [ 131.286123][ T8326] ksys_write+0xda/0x1a0 [ 131.286145][ T8326] __x64_sys_write+0x40/0x50 [ 131.286185][ T8326] x64_sys_call+0x2cdd/0x2fb0 [ 131.286212][ T8326] do_syscall_64+0xd2/0x200 [ 131.286235][ T8326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.286262][ T8326] ? clear_bhb_loop+0x40/0x90 [ 131.286282][ T8326] ? clear_bhb_loop+0x40/0x90 [ 131.286417][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.286445][ T8326] RIP: 0033:0x7f2baf6dd3df [ 131.286462][ T8326] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.286481][ T8326] RSP: 002b:00007f2badd47000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.286513][ T8326] RAX: ffffffffffffffda RBX: 00007f2baf905fa0 RCX: 00007f2baf6dd3df [ 131.286529][ T8326] RDX: 0000000000000083 RSI: 0000200000000040 RDI: 00000000000000c8 [ 131.286544][ T8326] RBP: 00007f2badd47090 R08: 0000000000000000 R09: 0000000000000000 [ 131.286560][ T8326] R10: 0000000000000083 R11: 0000000000000293 R12: 0000000000000001 [ 131.286572][ T8326] R13: 0000000000000000 R14: 00007f2baf905fa0 R15: 00007ffe0d8f65a8 [ 131.286629][ T8326] [ 131.705180][ T8347] FAULT_INJECTION: forcing a failure. [ 131.705180][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 131.718099][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.0.1849 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 131.718213][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.718239][ T8347] Call Trace: [ 131.718247][ T8347] [ 131.718256][ T8347] __dump_stack+0x1d/0x30 [ 131.718282][ T8347] dump_stack_lvl+0xe8/0x140 [ 131.718307][ T8347] dump_stack+0x15/0x1b [ 131.718329][ T8347] should_fail_ex+0x265/0x280 [ 131.718369][ T8347] should_failslab+0x8c/0xb0 [ 131.718438][ T8347] __kmalloc_noprof+0xa5/0x3e0 [ 131.718471][ T8347] ? security_prepare_creds+0x52/0x120 [ 131.718539][ T8347] security_prepare_creds+0x52/0x120 [ 131.718638][ T8347] prepare_creds+0x34a/0x4c0 [ 131.718666][ T8347] __sys_setresuid+0x464/0x6d0 [ 131.718713][ T8347] __x64_sys_setresuid+0x3f/0x50 [ 131.718879][ T8347] x64_sys_call+0x2cbc/0x2fb0 [ 131.718906][ T8347] do_syscall_64+0xd2/0x200 [ 131.718929][ T8347] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.719022][ T8347] ? clear_bhb_loop+0x40/0x90 [ 131.719075][ T8347] ? clear_bhb_loop+0x40/0x90 [ 131.719102][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.719128][ T8347] RIP: 0033:0x7f113593e929 [ 131.719147][ T8347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.719169][ T8347] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 131.719232][ T8347] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 131.719248][ T8347] RDX: 000000000000ee01 RSI: 000000000000ee01 RDI: 000000000000ee00 [ 131.719263][ T8347] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.719301][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.719315][ T8347] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 131.719337][ T8347] [ 132.058429][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'. [ 132.105637][ T8365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.179929][ T8379] FAULT_INJECTION: forcing a failure. [ 132.179929][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.179963][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.4.1863 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 132.179989][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.180002][ T8379] Call Trace: [ 132.180009][ T8379] [ 132.180018][ T8379] __dump_stack+0x1d/0x30 [ 132.180100][ T8379] dump_stack_lvl+0xe8/0x140 [ 132.180121][ T8379] dump_stack+0x15/0x1b [ 132.180168][ T8379] should_fail_ex+0x265/0x280 [ 132.180204][ T8379] should_fail+0xb/0x20 [ 132.180240][ T8379] should_fail_usercopy+0x1a/0x20 [ 132.180281][ T8379] _copy_to_user+0x20/0xa0 [ 132.180339][ T8379] simple_read_from_buffer+0xb5/0x130 [ 132.180373][ T8379] proc_fail_nth_read+0x100/0x140 [ 132.180395][ T8379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.180439][ T8379] vfs_read+0x1a0/0x6f0 [ 132.180533][ T8379] ? __rcu_read_unlock+0x4f/0x70 [ 132.180555][ T8379] ? __fget_files+0x184/0x1c0 [ 132.180580][ T8379] ksys_read+0xda/0x1a0 [ 132.180628][ T8379] __x64_sys_read+0x40/0x50 [ 132.180663][ T8379] x64_sys_call+0x2d77/0x2fb0 [ 132.180690][ T8379] do_syscall_64+0xd2/0x200 [ 132.180713][ T8379] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.180807][ T8379] ? clear_bhb_loop+0x40/0x90 [ 132.180830][ T8379] ? clear_bhb_loop+0x40/0x90 [ 132.180850][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.180940][ T8379] RIP: 0033:0x7fbada2bd33c [ 132.180959][ T8379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.180982][ T8379] RSP: 002b:00007fbad8927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.181002][ T8379] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2bd33c [ 132.181014][ T8379] RDX: 000000000000000f RSI: 00007fbad89270a0 RDI: 0000000000000004 [ 132.181028][ T8379] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 132.181100][ T8379] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 132.181116][ T8379] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 132.181138][ T8379] [ 132.291698][ T8386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1865'. [ 132.365437][ T8388] FAULT_INJECTION: forcing a failure. [ 132.365437][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 132.527048][ T8388] CPU: 1 UID: 0 PID: 8388 Comm: syz.1.1866 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 132.527084][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.527101][ T8388] Call Trace: [ 132.527109][ T8388] [ 132.527118][ T8388] __dump_stack+0x1d/0x30 [ 132.527140][ T8388] dump_stack_lvl+0xe8/0x140 [ 132.527158][ T8388] dump_stack+0x15/0x1b [ 132.527212][ T8388] should_fail_ex+0x265/0x280 [ 132.527256][ T8388] should_failslab+0x8c/0xb0 [ 132.527314][ T8388] kmem_cache_alloc_noprof+0x50/0x310 [ 132.527412][ T8388] ? audit_log_start+0x365/0x6c0 [ 132.527556][ T8388] audit_log_start+0x365/0x6c0 [ 132.527604][ T8388] audit_seccomp+0x48/0x100 [ 132.527641][ T8388] ? __seccomp_filter+0x68c/0x10d0 [ 132.527749][ T8388] __seccomp_filter+0x69d/0x10d0 [ 132.527780][ T8388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.527807][ T8388] ? vfs_write+0x75e/0x8e0 [ 132.527850][ T8388] ? kmem_cache_free+0xdf/0x300 [ 132.527926][ T8388] __secure_computing+0x82/0x150 [ 132.527956][ T8388] syscall_trace_enter+0xcf/0x1e0 [ 132.527990][ T8388] do_syscall_64+0xac/0x200 [ 132.528016][ T8388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.528095][ T8388] ? clear_bhb_loop+0x40/0x90 [ 132.528169][ T8388] ? clear_bhb_loop+0x40/0x90 [ 132.528199][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.528227][ T8388] RIP: 0033:0x7fabe01ce929 [ 132.528284][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.528309][ T8388] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.528340][ T8388] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 132.528357][ T8388] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 132.528374][ T8388] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 132.528391][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.528407][ T8388] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 132.528473][ T8388] [ 132.753012][ T8400] syz.1.1871 (8400): /proc/8400/oom_adj is deprecated, please use /proc/8400/oom_score_adj instead. [ 132.823074][ T8409] FAULT_INJECTION: forcing a failure. [ 132.823074][ T8409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.823182][ T8409] CPU: 0 UID: 0 PID: 8409 Comm: syz.1.1876 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 132.823214][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.823228][ T8409] Call Trace: [ 132.823236][ T8409] [ 132.823250][ T8409] __dump_stack+0x1d/0x30 [ 132.823297][ T8409] dump_stack_lvl+0xe8/0x140 [ 132.823321][ T8409] dump_stack+0x15/0x1b [ 132.823342][ T8409] should_fail_ex+0x265/0x280 [ 132.823376][ T8409] should_fail+0xb/0x20 [ 132.823408][ T8409] should_fail_usercopy+0x1a/0x20 [ 132.823586][ T8409] _copy_to_user+0x20/0xa0 [ 132.823617][ T8409] simple_read_from_buffer+0xb5/0x130 [ 132.823662][ T8409] proc_fail_nth_read+0x100/0x140 [ 132.823750][ T8409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.823796][ T8409] vfs_read+0x1a0/0x6f0 [ 132.823838][ T8409] ? __rcu_read_unlock+0x4f/0x70 [ 132.823926][ T8409] ? __fget_files+0x184/0x1c0 [ 132.823957][ T8409] ksys_read+0xda/0x1a0 [ 132.824040][ T8409] __x64_sys_read+0x40/0x50 [ 132.824083][ T8409] x64_sys_call+0x2d77/0x2fb0 [ 132.824112][ T8409] do_syscall_64+0xd2/0x200 [ 132.824176][ T8409] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.824236][ T8409] ? clear_bhb_loop+0x40/0x90 [ 132.824265][ T8409] ? clear_bhb_loop+0x40/0x90 [ 132.824294][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.824322][ T8409] RIP: 0033:0x7fabe01cd33c [ 132.824343][ T8409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.824367][ T8409] RSP: 002b:00007fabde837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.824460][ T8409] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01cd33c [ 132.824478][ T8409] RDX: 000000000000000f RSI: 00007fabde8370a0 RDI: 0000000000000004 [ 132.824495][ T8409] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 132.824512][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.824593][ T8409] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 132.824617][ T8409] [ 132.920510][ T8413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1878'. [ 133.007368][ T8431] FAULT_INJECTION: forcing a failure. [ 133.007368][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 133.066579][ T8434] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 133.070326][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz.3.1886 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 133.070419][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.070438][ T8431] Call Trace: [ 133.070447][ T8431] [ 133.070459][ T8431] __dump_stack+0x1d/0x30 [ 133.070488][ T8431] dump_stack_lvl+0xe8/0x140 [ 133.070515][ T8431] dump_stack+0x15/0x1b [ 133.070549][ T8431] should_fail_ex+0x265/0x280 [ 133.070592][ T8431] should_failslab+0x8c/0xb0 [ 133.070625][ T8431] __kmalloc_node_noprof+0xa9/0x410 [ 133.070662][ T8431] ? qdisc_alloc+0x65/0x440 [ 133.070754][ T8431] qdisc_alloc+0x65/0x440 [ 133.070794][ T8431] ? nla_strcmp+0xc3/0xe0 [ 133.070820][ T8431] qdisc_create+0xf5/0x9e0 [ 133.070855][ T8431] tc_modify_qdisc+0xe2c/0x1380 [ 133.070906][ T8431] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 133.070941][ T8431] rtnetlink_rcv_msg+0x657/0x6d0 [ 133.070976][ T8431] netlink_rcv_skb+0x123/0x220 [ 133.071081][ T8431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.071119][ T8431] rtnetlink_rcv+0x1c/0x30 [ 133.071211][ T8431] netlink_unicast+0x59e/0x670 [ 133.071262][ T8431] netlink_sendmsg+0x58b/0x6b0 [ 133.071290][ T8431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.071317][ T8431] __sock_sendmsg+0x145/0x180 [ 133.071392][ T8431] ____sys_sendmsg+0x31e/0x4e0 [ 133.071439][ T8431] ___sys_sendmsg+0x17b/0x1d0 [ 133.071548][ T8431] __x64_sys_sendmsg+0xd4/0x160 [ 133.071596][ T8431] x64_sys_call+0x2999/0x2fb0 [ 133.071626][ T8431] do_syscall_64+0xd2/0x200 [ 133.071714][ T8431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.071744][ T8431] ? clear_bhb_loop+0x40/0x90 [ 133.071772][ T8431] ? clear_bhb_loop+0x40/0x90 [ 133.071801][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.071845][ T8431] RIP: 0033:0x7f050ab4e929 [ 133.071885][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.071911][ T8431] RSP: 002b:00007f05091b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.071939][ T8431] RAX: ffffffffffffffda RBX: 00007f050ad75fa0 RCX: 00007f050ab4e929 [ 133.072027][ T8431] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 133.072043][ T8431] RBP: 00007f05091b7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.072123][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.072139][ T8431] R13: 0000000000000000 R14: 00007f050ad75fa0 R15: 00007ffe195c6908 [ 133.072162][ T8431] [ 133.478731][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.519913][ T8434] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.547732][ T8448] FAULT_INJECTION: forcing a failure. [ 133.547732][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.561438][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.1891 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 133.561544][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.561561][ T8448] Call Trace: [ 133.561570][ T8448] [ 133.561578][ T8448] __dump_stack+0x1d/0x30 [ 133.561653][ T8448] dump_stack_lvl+0xe8/0x140 [ 133.561759][ T8448] dump_stack+0x15/0x1b [ 133.561782][ T8448] should_fail_ex+0x265/0x280 [ 133.561823][ T8448] should_fail+0xb/0x20 [ 133.561913][ T8448] should_fail_usercopy+0x1a/0x20 [ 133.561958][ T8448] _copy_from_user+0x1c/0xb0 [ 133.561979][ T8448] sock_do_ioctl+0xe6/0x220 [ 133.562079][ T8448] sock_ioctl+0x41b/0x610 [ 133.562109][ T8448] ? __pfx_sock_ioctl+0x10/0x10 [ 133.562138][ T8448] __se_sys_ioctl+0xce/0x140 [ 133.562170][ T8448] __x64_sys_ioctl+0x43/0x50 [ 133.562222][ T8448] x64_sys_call+0x19a8/0x2fb0 [ 133.562250][ T8448] do_syscall_64+0xd2/0x200 [ 133.562274][ T8448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.562320][ T8448] ? clear_bhb_loop+0x40/0x90 [ 133.562415][ T8448] ? clear_bhb_loop+0x40/0x90 [ 133.562436][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.562460][ T8448] RIP: 0033:0x7f113593e929 [ 133.562538][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.562595][ T8448] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.562620][ T8448] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 133.562637][ T8448] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 133.562653][ T8448] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.562669][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.562716][ T8448] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 133.562739][ T8448] [ 133.576863][ T8449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.619494][ T8434] syz.1.1880 (8434) used greatest stack depth: 10136 bytes left [ 133.819776][ T8456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8456 comm=syz.1.1894 [ 133.942786][ T8471] FAULT_INJECTION: forcing a failure. [ 133.942786][ T8471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.955964][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: syz.0.1896 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 133.956052][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.956069][ T8471] Call Trace: [ 133.956077][ T8471] [ 133.956135][ T8471] __dump_stack+0x1d/0x30 [ 133.956160][ T8471] dump_stack_lvl+0xe8/0x140 [ 133.956181][ T8471] dump_stack+0x15/0x1b [ 133.956202][ T8471] should_fail_ex+0x265/0x280 [ 133.956242][ T8471] should_fail+0xb/0x20 [ 133.956337][ T8471] should_fail_usercopy+0x1a/0x20 [ 133.956379][ T8471] _copy_to_user+0x20/0xa0 [ 133.956406][ T8471] simple_read_from_buffer+0xb5/0x130 [ 133.956537][ T8471] proc_fail_nth_read+0x100/0x140 [ 133.956563][ T8471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.956606][ T8471] vfs_read+0x1a0/0x6f0 [ 133.956647][ T8471] ? __rcu_read_unlock+0x4f/0x70 [ 133.956680][ T8471] ? __fget_files+0x184/0x1c0 [ 133.956708][ T8471] ksys_read+0xda/0x1a0 [ 133.956784][ T8471] __x64_sys_read+0x40/0x50 [ 133.956819][ T8471] x64_sys_call+0x2d77/0x2fb0 [ 133.956840][ T8471] do_syscall_64+0xd2/0x200 [ 133.956926][ T8471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.956987][ T8471] ? clear_bhb_loop+0x40/0x90 [ 133.957056][ T8471] ? clear_bhb_loop+0x40/0x90 [ 133.957167][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.957195][ T8471] RIP: 0033:0x7f113593d33c [ 133.957214][ T8471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.957231][ T8471] RSP: 002b:00007f1133f86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.957306][ T8471] RAX: ffffffffffffffda RBX: 00007f1135b66080 RCX: 00007f113593d33c [ 133.957318][ T8471] RDX: 000000000000000f RSI: 00007f1133f860a0 RDI: 0000000000000005 [ 133.957334][ T8471] RBP: 00007f1133f86090 R08: 0000000000000000 R09: 0000000000000000 [ 133.957388][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.957431][ T8471] R13: 0000000000000000 R14: 00007f1135b66080 R15: 00007ffd7a5c4218 [ 133.957453][ T8471] [ 134.379959][ T8487] FAULT_INJECTION: forcing a failure. [ 134.379959][ T8487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.393320][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.1.1900 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 134.393380][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.393394][ T8487] Call Trace: [ 134.393400][ T8487] [ 134.393407][ T8487] __dump_stack+0x1d/0x30 [ 134.393428][ T8487] dump_stack_lvl+0xe8/0x140 [ 134.393495][ T8487] dump_stack+0x15/0x1b [ 134.393536][ T8487] should_fail_ex+0x265/0x280 [ 134.393575][ T8487] should_fail+0xb/0x20 [ 134.393611][ T8487] should_fail_usercopy+0x1a/0x20 [ 134.393684][ T8487] _copy_from_user+0x1c/0xb0 [ 134.393710][ T8487] ___sys_sendmsg+0xc1/0x1d0 [ 134.393762][ T8487] __x64_sys_sendmsg+0xd4/0x160 [ 134.393862][ T8487] x64_sys_call+0x2999/0x2fb0 [ 134.393882][ T8487] do_syscall_64+0xd2/0x200 [ 134.393899][ T8487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.393929][ T8487] ? clear_bhb_loop+0x40/0x90 [ 134.394031][ T8487] ? clear_bhb_loop+0x40/0x90 [ 134.394059][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.394113][ T8487] RIP: 0033:0x7fabe01ce929 [ 134.394132][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.394152][ T8487] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.394173][ T8487] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 134.394227][ T8487] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 134.394364][ T8487] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 134.394378][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.394390][ T8487] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 134.394408][ T8487] [ 134.612837][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1904'. [ 134.627050][ T8493] FAULT_INJECTION: forcing a failure. [ 134.627050][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 134.639766][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: syz.0.1903 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 134.639830][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.639887][ T8493] Call Trace: [ 134.639894][ T8493] [ 134.639902][ T8493] __dump_stack+0x1d/0x30 [ 134.639926][ T8493] dump_stack_lvl+0xe8/0x140 [ 134.640003][ T8493] dump_stack+0x15/0x1b [ 134.640020][ T8493] should_fail_ex+0x265/0x280 [ 134.640072][ T8493] should_failslab+0x8c/0xb0 [ 134.640101][ T8493] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 134.640146][ T8493] ? sock_alloc_inode+0x34/0xa0 [ 134.640180][ T8493] ? __pfx_sock_alloc_inode+0x10/0x10 [ 134.640203][ T8493] sock_alloc_inode+0x34/0xa0 [ 134.640241][ T8493] alloc_inode+0x40/0x170 [ 134.640335][ T8493] do_accept+0xa0/0x3a0 [ 134.640422][ T8493] ? vfs_write+0x75e/0x8e0 [ 134.640461][ T8493] __sys_accept4+0xbf/0x140 [ 134.640562][ T8493] __x64_sys_accept+0x42/0x50 [ 134.640598][ T8493] x64_sys_call+0x2f50/0x2fb0 [ 134.640625][ T8493] do_syscall_64+0xd2/0x200 [ 134.640645][ T8493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.640684][ T8493] ? clear_bhb_loop+0x40/0x90 [ 134.640711][ T8493] ? clear_bhb_loop+0x40/0x90 [ 134.640738][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.640790][ T8493] RIP: 0033:0x7f113593e929 [ 134.640805][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.640822][ T8493] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 134.640862][ T8493] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 134.640874][ T8493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 134.640927][ T8493] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.640944][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.640959][ T8493] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 134.640982][ T8493] [ 134.844789][ T8491] netem: change failed [ 135.186792][ T29] kauditd_printk_skb: 30543 callbacks suppressed [ 135.186807][ T29] audit: type=1400 audit(1750439895.831:192635): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.188163][ T8521] FAULT_INJECTION: forcing a failure. [ 135.188163][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 135.193286][ T29] audit: type=1400 audit(1750439895.831:192636): avc: denied { open } for pid=8518 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 135.193319][ T29] audit: type=1400 audit(1750439895.831:192637): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.214677][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.0.1915 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 135.214749][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.214769][ T8521] Call Trace: [ 135.214778][ T8521] [ 135.214790][ T8521] __dump_stack+0x1d/0x30 [ 135.214825][ T8521] dump_stack_lvl+0xe8/0x140 [ 135.214852][ T8521] dump_stack+0x15/0x1b [ 135.214875][ T8521] should_fail_ex+0x265/0x280 [ 135.214946][ T8521] should_failslab+0x8c/0xb0 [ 135.214987][ T8521] kmem_cache_alloc_noprof+0x50/0x310 [ 135.215024][ T8521] ? getname_flags+0x80/0x3b0 [ 135.215053][ T8521] ? get_pid_task+0x96/0xd0 [ 135.215081][ T8521] getname_flags+0x80/0x3b0 [ 135.215111][ T8521] do_mq_open+0xd9/0x4f0 [ 135.215198][ T8521] ? __rcu_read_unlock+0x4f/0x70 [ 135.215228][ T8521] ? __fget_files+0x184/0x1c0 [ 135.215259][ T8521] __x64_sys_mq_open+0xcb/0x100 [ 135.215294][ T8521] x64_sys_call+0x27d6/0x2fb0 [ 135.215372][ T8521] do_syscall_64+0xd2/0x200 [ 135.215398][ T8521] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.215495][ T8521] ? clear_bhb_loop+0x40/0x90 [ 135.215524][ T8521] ? clear_bhb_loop+0x40/0x90 [ 135.215689][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.215718][ T8521] RIP: 0033:0x7f113593e929 [ 135.215740][ T8521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.215766][ T8521] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 135.215791][ T8521] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 135.215810][ T8521] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000b40 [ 135.215876][ T8521] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.215893][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.215933][ T8521] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 135.215993][ T8521] [ 135.296515][ T8528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.297559][ T29] audit: type=1400 audit(1750439895.831:192638): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.301859][ T8528] audit: audit_lost=35260 audit_rate_limit=0 audit_backlog_limit=64 [ 135.306504][ T29] audit: type=1400 audit(1750439895.831:192639): avc: denied { prog_load } for pid=8518 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.310674][ T8528] audit: backlog limit exceeded [ 135.315402][ T29] audit: type=1400 audit(1750439895.831:192640): avc: denied { prog_load } for pid=8518 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.315427][ T29] audit: type=1400 audit(1750439895.831:192641): avc: denied { create } for pid=8518 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 135.564569][ T8527] FAULT_INJECTION: forcing a failure. [ 135.564569][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 135.577441][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.2.1917 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 135.577476][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.577536][ T8527] Call Trace: [ 135.577546][ T8527] [ 135.577555][ T8527] __dump_stack+0x1d/0x30 [ 135.577580][ T8527] dump_stack_lvl+0xe8/0x140 [ 135.577606][ T8527] dump_stack+0x15/0x1b [ 135.577626][ T8527] should_fail_ex+0x265/0x280 [ 135.577662][ T8527] should_failslab+0x8c/0xb0 [ 135.577777][ T8527] kmem_cache_alloc_noprof+0x50/0x310 [ 135.577809][ T8527] ? audit_log_start+0x365/0x6c0 [ 135.577848][ T8527] audit_log_start+0x365/0x6c0 [ 135.577888][ T8527] audit_seccomp+0x48/0x100 [ 135.577973][ T8527] ? __seccomp_filter+0x68c/0x10d0 [ 135.578000][ T8527] __seccomp_filter+0x69d/0x10d0 [ 135.578028][ T8527] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.578052][ T8527] ? vfs_write+0x75e/0x8e0 [ 135.578163][ T8527] ? __rcu_read_unlock+0x4f/0x70 [ 135.578189][ T8527] ? __fget_files+0x184/0x1c0 [ 135.578216][ T8527] __secure_computing+0x82/0x150 [ 135.578242][ T8527] syscall_trace_enter+0xcf/0x1e0 [ 135.578271][ T8527] do_syscall_64+0xac/0x200 [ 135.578299][ T8527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.578329][ T8527] ? clear_bhb_loop+0x40/0x90 [ 135.578354][ T8527] ? clear_bhb_loop+0x40/0x90 [ 135.578418][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.578443][ T8527] RIP: 0033:0x7f2baf6de929 [ 135.578491][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.578512][ T8527] RSP: 002b:00007f2badd47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bb [ 135.578536][ T8527] RAX: ffffffffffffffda RBX: 00007f2baf905fa0 RCX: 00007f2baf6de929 [ 135.578551][ T8527] RDX: 000000000000000f RSI: 0000000000000007 RDI: ffffffffffffffff [ 135.578600][ T8527] RBP: 00007f2badd47090 R08: 0000000000000000 R09: 0000000000000000 [ 135.578720][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.578735][ T8527] R13: 0000000000000000 R14: 00007f2baf905fa0 R15: 00007ffe0d8f65a8 [ 135.578793][ T8527] [ 135.797366][ T8534] xt_TCPMSS: Only works on TCP SYN packets [ 135.841298][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 135.871145][ T8538] FAULT_INJECTION: forcing a failure. [ 135.871145][ T8538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.884304][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.1.1923 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 135.884360][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.884375][ T8538] Call Trace: [ 135.884383][ T8538] [ 135.884392][ T8538] __dump_stack+0x1d/0x30 [ 135.884454][ T8538] dump_stack_lvl+0xe8/0x140 [ 135.884476][ T8538] dump_stack+0x15/0x1b [ 135.884564][ T8538] should_fail_ex+0x265/0x280 [ 135.884629][ T8538] should_fail+0xb/0x20 [ 135.884658][ T8538] should_fail_usercopy+0x1a/0x20 [ 135.884694][ T8538] _copy_from_user+0x1c/0xb0 [ 135.884734][ T8538] ___sys_sendmsg+0xc1/0x1d0 [ 135.884783][ T8538] __x64_sys_sendmsg+0xd4/0x160 [ 135.884894][ T8538] x64_sys_call+0x2999/0x2fb0 [ 135.884916][ T8538] do_syscall_64+0xd2/0x200 [ 135.884937][ T8538] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.885015][ T8538] ? clear_bhb_loop+0x40/0x90 [ 135.885096][ T8538] ? clear_bhb_loop+0x40/0x90 [ 135.885117][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.885141][ T8538] RIP: 0033:0x7fabe01ce929 [ 135.885159][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.885235][ T8538] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.885253][ T8538] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 135.885266][ T8538] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 135.885282][ T8538] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 135.885294][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.885306][ T8538] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 135.885346][ T8538] [ 136.265229][ T8554] SELinux: syz.2.1929 (8554) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.292349][ T8556] bridge: RTM_NEWNEIGH with invalid ether address [ 136.408503][ T8554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8554 comm=syz.2.1929 [ 136.421509][ T8568] SELinux: syz.4.1935 (8568) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.475981][ T8571] FAULT_INJECTION: forcing a failure. [ 136.475981][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.489178][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.1.1936 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 136.489222][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.489239][ T8571] Call Trace: [ 136.489248][ T8571] [ 136.489258][ T8571] __dump_stack+0x1d/0x30 [ 136.489284][ T8571] dump_stack_lvl+0xe8/0x140 [ 136.489317][ T8571] dump_stack+0x15/0x1b [ 136.489337][ T8571] should_fail_ex+0x265/0x280 [ 136.489371][ T8571] should_fail+0xb/0x20 [ 136.489419][ T8571] should_fail_usercopy+0x1a/0x20 [ 136.489461][ T8571] _copy_to_user+0x20/0xa0 [ 136.489488][ T8571] simple_read_from_buffer+0xb5/0x130 [ 136.489533][ T8571] proc_fail_nth_read+0x100/0x140 [ 136.489555][ T8571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.489597][ T8571] vfs_read+0x1a0/0x6f0 [ 136.489712][ T8571] ? __rcu_read_unlock+0x4f/0x70 [ 136.489733][ T8571] ? __fget_files+0x184/0x1c0 [ 136.489754][ T8571] ksys_read+0xda/0x1a0 [ 136.489889][ T8571] __x64_sys_read+0x40/0x50 [ 136.489931][ T8571] x64_sys_call+0x2d77/0x2fb0 [ 136.489996][ T8571] do_syscall_64+0xd2/0x200 [ 136.490020][ T8571] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.490054][ T8571] ? clear_bhb_loop+0x40/0x90 [ 136.490075][ T8571] ? clear_bhb_loop+0x40/0x90 [ 136.490103][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.490190][ T8571] RIP: 0033:0x7fabe01cd33c [ 136.490211][ T8571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.490233][ T8571] RSP: 002b:00007fabde837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.490257][ T8571] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01cd33c [ 136.490274][ T8571] RDX: 000000000000000f RSI: 00007fabde8370a0 RDI: 0000000000000003 [ 136.490287][ T8571] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 136.490312][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.490329][ T8571] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 136.490351][ T8571] [ 136.985867][ T8588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.451269][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'. [ 137.455957][ T8594] bridge: RTM_NEWNEIGH with invalid ether address [ 137.977607][ T8630] bridge: RTM_NEWNEIGH with invalid ether address [ 138.022669][ T8636] FAULT_INJECTION: forcing a failure. [ 138.022669][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 138.035558][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.3.1960 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 138.035585][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.035598][ T8636] Call Trace: [ 138.035680][ T8636] [ 138.035688][ T8636] __dump_stack+0x1d/0x30 [ 138.035715][ T8636] dump_stack_lvl+0xe8/0x140 [ 138.035740][ T8636] dump_stack+0x15/0x1b [ 138.035761][ T8636] should_fail_ex+0x265/0x280 [ 138.035808][ T8636] should_failslab+0x8c/0xb0 [ 138.035854][ T8636] kmem_cache_alloc_noprof+0x50/0x310 [ 138.035881][ T8636] ? getname_flags+0x80/0x3b0 [ 138.035911][ T8636] getname_flags+0x80/0x3b0 [ 138.035940][ T8636] user_path_at+0x28/0x130 [ 138.035975][ T8636] __se_sys_pivot_root+0xbc/0x720 [ 138.036028][ T8636] ? fput+0x8f/0xc0 [ 138.036059][ T8636] __x64_sys_pivot_root+0x31/0x40 [ 138.036084][ T8636] x64_sys_call+0x2aac/0x2fb0 [ 138.036112][ T8636] do_syscall_64+0xd2/0x200 [ 138.036149][ T8636] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.036183][ T8636] ? clear_bhb_loop+0x40/0x90 [ 138.036214][ T8636] ? clear_bhb_loop+0x40/0x90 [ 138.036235][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.036256][ T8636] RIP: 0033:0x7f050ab4e929 [ 138.036275][ T8636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.036298][ T8636] RSP: 002b:00007f05091b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 138.036320][ T8636] RAX: ffffffffffffffda RBX: 00007f050ad75fa0 RCX: 00007f050ab4e929 [ 138.036405][ T8636] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000280 [ 138.036418][ T8636] RBP: 00007f05091b7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.036434][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.036481][ T8636] R13: 0000000000000000 R14: 00007f050ad75fa0 R15: 00007ffe195c6908 [ 138.036619][ T8636] [ 138.472313][ T8661] bridge: RTM_NEWNEIGH with invalid ether address [ 138.579928][ T8675] FAULT_INJECTION: forcing a failure. [ 138.579928][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 138.592729][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.1.1976 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 138.592780][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.592794][ T8675] Call Trace: [ 138.592801][ T8675] [ 138.592809][ T8675] __dump_stack+0x1d/0x30 [ 138.592897][ T8675] dump_stack_lvl+0xe8/0x140 [ 138.592982][ T8675] dump_stack+0x15/0x1b [ 138.592998][ T8675] should_fail_ex+0x265/0x280 [ 138.593044][ T8675] should_failslab+0x8c/0xb0 [ 138.593080][ T8675] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.593143][ T8675] ? __alloc_skb+0x101/0x320 [ 138.593181][ T8675] __alloc_skb+0x101/0x320 [ 138.593221][ T8675] netlink_alloc_large_skb+0xba/0xf0 [ 138.593260][ T8675] netlink_sendmsg+0x3cf/0x6b0 [ 138.593286][ T8675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.593317][ T8675] __sock_sendmsg+0x145/0x180 [ 138.593341][ T8675] ____sys_sendmsg+0x31e/0x4e0 [ 138.593474][ T8675] ___sys_sendmsg+0x17b/0x1d0 [ 138.593516][ T8675] __x64_sys_sendmsg+0xd4/0x160 [ 138.593587][ T8675] x64_sys_call+0x2999/0x2fb0 [ 138.593614][ T8675] do_syscall_64+0xd2/0x200 [ 138.593634][ T8675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.593658][ T8675] ? clear_bhb_loop+0x40/0x90 [ 138.593702][ T8675] ? clear_bhb_loop+0x40/0x90 [ 138.593722][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.593804][ T8675] RIP: 0033:0x7fabe01ce929 [ 138.593822][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.593981][ T8675] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.593999][ T8675] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 138.594013][ T8675] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 138.594028][ T8675] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 138.594043][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.594063][ T8675] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 138.594138][ T8675] [ 138.645435][ T8646] FAULT_INJECTION: forcing a failure. [ 138.645435][ T8646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.815068][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.4.1966 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 138.815100][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.815116][ T8646] Call Trace: [ 138.815124][ T8646] [ 138.815134][ T8646] __dump_stack+0x1d/0x30 [ 138.815231][ T8646] dump_stack_lvl+0xe8/0x140 [ 138.815249][ T8646] dump_stack+0x15/0x1b [ 138.815264][ T8646] should_fail_ex+0x265/0x280 [ 138.815293][ T8646] should_fail+0xb/0x20 [ 138.815376][ T8646] should_fail_usercopy+0x1a/0x20 [ 138.815408][ T8646] _copy_to_user+0x20/0xa0 [ 138.815433][ T8646] simple_read_from_buffer+0xb5/0x130 [ 138.815481][ T8646] proc_fail_nth_read+0x100/0x140 [ 138.815565][ T8646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.815596][ T8646] vfs_read+0x1a0/0x6f0 [ 138.815684][ T8646] ? __rcu_read_unlock+0x4f/0x70 [ 138.815749][ T8646] ? __rcu_read_unlock+0x4f/0x70 [ 138.815835][ T8646] ? __fget_files+0x184/0x1c0 [ 138.815880][ T8646] ksys_read+0xda/0x1a0 [ 138.815921][ T8646] __x64_sys_read+0x40/0x50 [ 138.816087][ T8646] x64_sys_call+0x2d77/0x2fb0 [ 138.816108][ T8646] do_syscall_64+0xd2/0x200 [ 138.816130][ T8646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.816180][ T8646] ? clear_bhb_loop+0x40/0x90 [ 138.816200][ T8646] ? clear_bhb_loop+0x40/0x90 [ 138.816225][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.816323][ T8646] RIP: 0033:0x7fbada2bd33c [ 138.816337][ T8646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.816354][ T8646] RSP: 002b:00007fbad8927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.816372][ T8646] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2bd33c [ 138.816385][ T8646] RDX: 000000000000000f RSI: 00007fbad89270a0 RDI: 0000000000000006 [ 138.816401][ T8646] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 138.816417][ T8646] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 138.816496][ T8646] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 138.816517][ T8646] [ 139.145990][ T8696] bridge: RTM_NEWNEIGH with invalid ether address [ 139.297577][ T8710] FAULT_INJECTION: forcing a failure. [ 139.297577][ T8710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.310873][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.2.1990 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 139.310951][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.310965][ T8710] Call Trace: [ 139.310973][ T8710] [ 139.310989][ T8710] __dump_stack+0x1d/0x30 [ 139.311011][ T8710] dump_stack_lvl+0xe8/0x140 [ 139.311030][ T8710] dump_stack+0x15/0x1b [ 139.311049][ T8710] should_fail_ex+0x265/0x280 [ 139.311104][ T8710] should_fail+0xb/0x20 [ 139.311137][ T8710] should_fail_usercopy+0x1a/0x20 [ 139.311176][ T8710] _copy_to_user+0x20/0xa0 [ 139.311271][ T8710] simple_read_from_buffer+0xb5/0x130 [ 139.311377][ T8710] proc_fail_nth_read+0x100/0x140 [ 139.311404][ T8710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.311496][ T8710] vfs_read+0x1a0/0x6f0 [ 139.311526][ T8710] ? __rcu_read_unlock+0x4f/0x70 [ 139.311549][ T8710] ? __fget_files+0x184/0x1c0 [ 139.311578][ T8710] ksys_read+0xda/0x1a0 [ 139.311667][ T8710] __x64_sys_read+0x40/0x50 [ 139.311770][ T8710] x64_sys_call+0x2d77/0x2fb0 [ 139.311799][ T8710] do_syscall_64+0xd2/0x200 [ 139.311817][ T8710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.311904][ T8710] ? clear_bhb_loop+0x40/0x90 [ 139.311932][ T8710] ? clear_bhb_loop+0x40/0x90 [ 139.311960][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.312024][ T8710] RIP: 0033:0x7f2baf6dd33c [ 139.312044][ T8710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.312068][ T8710] RSP: 002b:00007f2badd47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.312093][ T8710] RAX: ffffffffffffffda RBX: 00007f2baf905fa0 RCX: 00007f2baf6dd33c [ 139.312131][ T8710] RDX: 000000000000000f RSI: 00007f2badd470a0 RDI: 0000000000000006 [ 139.312147][ T8710] RBP: 00007f2badd47090 R08: 0000000000000000 R09: 0000000000000000 [ 139.312163][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.312176][ T8710] R13: 0000000000000000 R14: 00007f2baf905fa0 R15: 00007ffe0d8f65a8 [ 139.312193][ T8710] [ 140.127161][ T8752] FAULT_INJECTION: forcing a failure. [ 140.127161][ T8752] name failslab, interval 1, probability 0, space 0, times 0 [ 140.139875][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.4.2006 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 140.139977][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.140004][ T8752] Call Trace: [ 140.140011][ T8752] [ 140.140019][ T8752] __dump_stack+0x1d/0x30 [ 140.140110][ T8752] dump_stack_lvl+0xe8/0x140 [ 140.140137][ T8752] dump_stack+0x15/0x1b [ 140.140159][ T8752] should_fail_ex+0x265/0x280 [ 140.140200][ T8752] should_failslab+0x8c/0xb0 [ 140.140227][ T8752] __kmalloc_noprof+0xa5/0x3e0 [ 140.140328][ T8752] ? iovec_from_user+0x84/0x210 [ 140.140358][ T8752] iovec_from_user+0x84/0x210 [ 140.140437][ T8752] __import_iovec+0xf3/0x540 [ 140.140459][ T8752] ? mntput_no_expire+0x6f/0x3c0 [ 140.140484][ T8752] ? should_fail_ex+0xdb/0x280 [ 140.140588][ T8752] import_iovec+0x61/0x80 [ 140.140617][ T8752] ___sys_sendmsg+0x146/0x1d0 [ 140.140761][ T8752] __sys_sendmmsg+0x178/0x300 [ 140.140817][ T8752] __x64_sys_sendmmsg+0x57/0x70 [ 140.140842][ T8752] x64_sys_call+0x2f2f/0x2fb0 [ 140.140888][ T8752] do_syscall_64+0xd2/0x200 [ 140.140948][ T8752] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.140981][ T8752] ? clear_bhb_loop+0x40/0x90 [ 140.141009][ T8752] ? clear_bhb_loop+0x40/0x90 [ 140.141035][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.141055][ T8752] RIP: 0033:0x7fbada2be929 [ 140.141123][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.141142][ T8752] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.141160][ T8752] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 140.141172][ T8752] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000006 [ 140.141268][ T8752] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 140.141285][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.141301][ T8752] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 140.141324][ T8752] [ 140.195269][ T29] kauditd_printk_skb: 24150 callbacks suppressed [ 140.195292][ T29] audit: type=1400 audit(1750439900.881:206209): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.358308][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.384478][ T3035] audit: audit_lost=38789 audit_rate_limit=0 audit_backlog_limit=64 [ 140.390490][ T29] audit: type=1400 audit(1750439900.981:206210): avc: denied { read write } for pid=8747 comm="syz.0.2004" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.392486][ T3035] audit: backlog limit exceeded [ 140.417622][ T29] audit: type=1400 audit(1750439901.001:206211): avc: denied { execmem } for pid=8747 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 140.428668][ T8756] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.441836][ T29] audit: type=1400 audit(1750439901.001:206212): avc: denied { prog_load } for pid=8747 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.448484][ T8756] audit: audit_lost=38790 audit_rate_limit=0 audit_backlog_limit=64 [ 140.448502][ T8756] audit: backlog limit exceeded [ 140.483304][ T8753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2004'. [ 140.613214][ T8762] bridge: RTM_NEWNEIGH with invalid ether address [ 140.952256][ T8777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2015'. [ 141.287994][ T8788] FAULT_INJECTION: forcing a failure. [ 141.287994][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 141.300856][ T8788] CPU: 1 UID: 0 PID: 8788 Comm: syz.4.2017 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 141.300893][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.300970][ T8788] Call Trace: [ 141.300977][ T8788] [ 141.300989][ T8788] __dump_stack+0x1d/0x30 [ 141.301015][ T8788] dump_stack_lvl+0xe8/0x140 [ 141.301034][ T8788] dump_stack+0x15/0x1b [ 141.301049][ T8788] should_fail_ex+0x265/0x280 [ 141.301177][ T8788] should_failslab+0x8c/0xb0 [ 141.301204][ T8788] kmem_cache_alloc_node_noprof+0x57/0x320 [ 141.301269][ T8788] ? __alloc_skb+0x101/0x320 [ 141.301309][ T8788] __alloc_skb+0x101/0x320 [ 141.301338][ T8788] ? audit_log_start+0x365/0x6c0 [ 141.301370][ T8788] audit_log_start+0x380/0x6c0 [ 141.301431][ T8788] audit_seccomp+0x48/0x100 [ 141.301466][ T8788] ? __seccomp_filter+0x68c/0x10d0 [ 141.301540][ T8788] __seccomp_filter+0x69d/0x10d0 [ 141.301572][ T8788] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.301591][ T8788] ? vfs_write+0x75e/0x8e0 [ 141.301633][ T8788] __secure_computing+0x82/0x150 [ 141.301732][ T8788] syscall_trace_enter+0xcf/0x1e0 [ 141.301757][ T8788] do_syscall_64+0xac/0x200 [ 141.301776][ T8788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.301851][ T8788] ? clear_bhb_loop+0x40/0x90 [ 141.301872][ T8788] ? clear_bhb_loop+0x40/0x90 [ 141.301901][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.301930][ T8788] RIP: 0033:0x7fbada2be929 [ 141.302011][ T8788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.302030][ T8788] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000061 [ 141.302049][ T8788] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 141.302062][ T8788] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 141.302078][ T8788] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 141.302094][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.302122][ T8788] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 141.302163][ T8788] [ 141.576440][ T8792] FAULT_INJECTION: forcing a failure. [ 141.576440][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 141.589159][ T8792] CPU: 1 UID: 0 PID: 8792 Comm: syz.4.2022 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 141.589221][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.589234][ T8792] Call Trace: [ 141.589241][ T8792] [ 141.589248][ T8792] __dump_stack+0x1d/0x30 [ 141.589311][ T8792] dump_stack_lvl+0xe8/0x140 [ 141.589334][ T8792] dump_stack+0x15/0x1b [ 141.589350][ T8792] should_fail_ex+0x265/0x280 [ 141.589390][ T8792] ? syslog_print+0x6c/0x540 [ 141.589459][ T8792] should_failslab+0x8c/0xb0 [ 141.589486][ T8792] __kmalloc_cache_noprof+0x4c/0x320 [ 141.589515][ T8792] syslog_print+0x6c/0x540 [ 141.589621][ T8792] ? avc_has_perm+0xd3/0x150 [ 141.589650][ T8792] do_syslog+0x52b/0x7e0 [ 141.589704][ T8792] ? ksys_write+0x192/0x1a0 [ 141.589729][ T8792] __x64_sys_syslog+0x41/0x50 [ 141.589751][ T8792] x64_sys_call+0x2ea0/0x2fb0 [ 141.589774][ T8792] do_syscall_64+0xd2/0x200 [ 141.589862][ T8792] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.589896][ T8792] ? clear_bhb_loop+0x40/0x90 [ 141.589941][ T8792] ? clear_bhb_loop+0x40/0x90 [ 141.589970][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.589997][ T8792] RIP: 0033:0x7fbada2be929 [ 141.590017][ T8792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.590069][ T8792] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 141.590138][ T8792] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 141.590154][ T8792] RDX: 0000000000000055 RSI: 0000200000000180 RDI: 0000000000000002 [ 141.590171][ T8792] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 141.590188][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.590204][ T8792] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 141.590227][ T8792] [ 141.938356][ T8815] geneve0: entered allmulticast mode [ 142.065259][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 142.153709][ T8832] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2039'. [ 142.197094][ T8832] 0ªX¹¦À: renamed from caif0 [ 142.224386][ T8832] 0ªX¹¦À: entered allmulticast mode [ 142.229710][ T8832] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 142.326669][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 142.536816][ T8851] geneve0: entered allmulticast mode [ 142.737574][ T8856] FAULT_INJECTION: forcing a failure. [ 142.737574][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 142.750369][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.4.2049 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 142.750403][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.750419][ T8856] Call Trace: [ 142.750428][ T8856] [ 142.750447][ T8856] __dump_stack+0x1d/0x30 [ 142.750472][ T8856] dump_stack_lvl+0xe8/0x140 [ 142.750567][ T8856] dump_stack+0x15/0x1b [ 142.750697][ T8856] should_fail_ex+0x265/0x280 [ 142.750810][ T8856] ? rtm_new_nexthop+0x15c5/0x4530 [ 142.750837][ T8856] should_failslab+0x8c/0xb0 [ 142.750907][ T8856] __kmalloc_cache_noprof+0x4c/0x320 [ 142.750939][ T8856] rtm_new_nexthop+0x15c5/0x4530 [ 142.750965][ T8856] ? xas_load+0x413/0x430 [ 142.751041][ T8856] ? xas_load+0x413/0x430 [ 142.751083][ T8856] ? security_capable+0x83/0x90 [ 142.751111][ T8856] ? ns_capable+0x7d/0xb0 [ 142.751131][ T8856] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 142.751231][ T8856] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 142.751299][ T8856] netlink_rcv_skb+0x123/0x220 [ 142.751332][ T8856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.751414][ T8856] rtnetlink_rcv+0x1c/0x30 [ 142.751434][ T8856] netlink_unicast+0x59e/0x670 [ 142.751474][ T8856] netlink_sendmsg+0x58b/0x6b0 [ 142.751499][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.751528][ T8856] __sock_sendmsg+0x145/0x180 [ 142.751559][ T8856] ____sys_sendmsg+0x31e/0x4e0 [ 142.751603][ T8856] ___sys_sendmsg+0x17b/0x1d0 [ 142.751822][ T8856] __x64_sys_sendmsg+0xd4/0x160 [ 142.751860][ T8856] x64_sys_call+0x2999/0x2fb0 [ 142.751895][ T8856] do_syscall_64+0xd2/0x200 [ 142.751956][ T8856] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.751983][ T8856] ? clear_bhb_loop+0x40/0x90 [ 142.752077][ T8856] ? clear_bhb_loop+0x40/0x90 [ 142.752099][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.752121][ T8856] RIP: 0033:0x7fbada2be929 [ 142.752137][ T8856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.752157][ T8856] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.752216][ T8856] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 142.752229][ T8856] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 142.752242][ T8856] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 142.752254][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.752319][ T8856] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 142.752337][ T8856] [ 143.559899][ T8890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.664061][ T8895] FAULT_INJECTION: forcing a failure. [ 143.664061][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 143.676819][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.1.2066 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 143.676870][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.676957][ T8895] Call Trace: [ 143.676965][ T8895] [ 143.676974][ T8895] __dump_stack+0x1d/0x30 [ 143.677000][ T8895] dump_stack_lvl+0xe8/0x140 [ 143.677020][ T8895] dump_stack+0x15/0x1b [ 143.677036][ T8895] should_fail_ex+0x265/0x280 [ 143.677094][ T8895] should_failslab+0x8c/0xb0 [ 143.677116][ T8895] __kmalloc_noprof+0xa5/0x3e0 [ 143.677141][ T8895] ? sel_write_relabel+0x177/0x360 [ 143.677175][ T8895] sel_write_relabel+0x177/0x360 [ 143.677213][ T8895] selinux_transaction_write+0xc3/0x110 [ 143.677314][ T8895] ? __pfx_selinux_transaction_write+0x10/0x10 [ 143.677352][ T8895] vfs_write+0x269/0x8e0 [ 143.677389][ T8895] ? __rcu_read_unlock+0x4f/0x70 [ 143.677430][ T8895] ? __fget_files+0x184/0x1c0 [ 143.677458][ T8895] ksys_write+0xda/0x1a0 [ 143.677482][ T8895] __x64_sys_write+0x40/0x50 [ 143.677504][ T8895] x64_sys_call+0x2cdd/0x2fb0 [ 143.677529][ T8895] do_syscall_64+0xd2/0x200 [ 143.677559][ T8895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.677587][ T8895] ? clear_bhb_loop+0x40/0x90 [ 143.677614][ T8895] ? clear_bhb_loop+0x40/0x90 [ 143.677723][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.677744][ T8895] RIP: 0033:0x7fabe01ce929 [ 143.677759][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.677835][ T8895] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.677854][ T8895] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 143.677867][ T8895] RDX: 0000000000000056 RSI: 00002000000004c0 RDI: 0000000000000003 [ 143.677878][ T8895] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 143.677890][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.677901][ T8895] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 143.677919][ T8895] [ 143.940858][ T8897] FAULT_INJECTION: forcing a failure. [ 143.940858][ T8897] name failslab, interval 1, probability 0, space 0, times 0 [ 143.953619][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.0.2067 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 143.953650][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.953662][ T8897] Call Trace: [ 143.953669][ T8897] [ 143.953676][ T8897] __dump_stack+0x1d/0x30 [ 143.953708][ T8897] dump_stack_lvl+0xe8/0x140 [ 143.953775][ T8897] dump_stack+0x15/0x1b [ 143.953796][ T8897] should_fail_ex+0x265/0x280 [ 143.953868][ T8897] should_failslab+0x8c/0xb0 [ 143.953895][ T8897] kmem_cache_alloc_noprof+0x50/0x310 [ 143.953991][ T8897] ? dup_fd+0x3a/0x540 [ 143.954030][ T8897] dup_fd+0x3a/0x540 [ 143.954067][ T8897] copy_files+0x98/0xf0 [ 143.954140][ T8897] copy_process+0xc44/0x1fe0 [ 143.954253][ T8897] kernel_clone+0x16c/0x5b0 [ 143.954337][ T8897] ? vfs_write+0x75e/0x8e0 [ 143.954420][ T8897] __x64_sys_clone+0xe6/0x120 [ 143.954452][ T8897] x64_sys_call+0x2c59/0x2fb0 [ 143.954495][ T8897] do_syscall_64+0xd2/0x200 [ 143.954519][ T8897] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.954553][ T8897] ? clear_bhb_loop+0x40/0x90 [ 143.954588][ T8897] ? clear_bhb_loop+0x40/0x90 [ 143.954666][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.954691][ T8897] RIP: 0033:0x7f113593e929 [ 143.954710][ T8897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.954745][ T8897] RSP: 002b:00007f1133fa6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 143.954768][ T8897] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 143.954849][ T8897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 143.954865][ T8897] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.954880][ T8897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 143.954896][ T8897] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 143.954998][ T8897] [ 144.252894][ T8911] bond1 (unregistering): Released all slaves [ 144.658443][ T8950] bond2 (unregistering): Released all slaves [ 144.735881][ T8954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.769325][ T8956] bridge: RTM_NEWNEIGH with invalid ether address [ 144.849693][ T8960] C: renamed from team_slave_0 (while UP) [ 144.868356][ T8960] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 144.876233][ T8960] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2090'. [ 144.885408][ T8960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 145.099758][ T8985] netlink: 'syz.1.2097': attribute type 8 has an invalid length. [ 145.107612][ T8985] netlink: 'syz.1.2097': attribute type 39 has an invalid length. [ 145.210194][ T29] kauditd_printk_skb: 27112 callbacks suppressed [ 145.210211][ T29] audit: type=1400 audit(1750439905.891:224518): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.223577][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.247701][ T3035] audit: audit_lost=41727 audit_rate_limit=0 audit_backlog_limit=64 [ 145.255735][ T3035] audit: backlog limit exceeded [ 145.262476][ T8991] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.269109][ T8991] audit: audit_lost=41728 audit_rate_limit=0 audit_backlog_limit=64 [ 145.277168][ T8991] audit: backlog limit exceeded [ 145.282042][ T29] audit: type=1400 audit(1750439905.891:224519): avc: denied { read write } for pid=8990 comm="syz.3.2099" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 145.286174][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.306462][ T29] audit: type=1400 audit(1750439905.891:224520): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.343970][ T8993] FAULT_INJECTION: forcing a failure. [ 145.343970][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 145.356687][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.0.2100 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 145.356715][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.356727][ T8993] Call Trace: [ 145.356733][ T8993] [ 145.356741][ T8993] __dump_stack+0x1d/0x30 [ 145.356855][ T8993] dump_stack_lvl+0xe8/0x140 [ 145.356876][ T8993] dump_stack+0x15/0x1b [ 145.356891][ T8993] should_fail_ex+0x265/0x280 [ 145.356929][ T8993] should_failslab+0x8c/0xb0 [ 145.356958][ T8993] __kmalloc_noprof+0xa5/0x3e0 [ 145.357043][ T8993] ? copy_splice_read+0xc2/0x5f0 [ 145.357081][ T8993] copy_splice_read+0xc2/0x5f0 [ 145.357122][ T8993] ? __pfx_copy_splice_read+0x10/0x10 [ 145.357211][ T8993] splice_direct_to_actor+0x26c/0x680 [ 145.357249][ T8993] ? __pfx_direct_splice_actor+0x10/0x10 [ 145.357288][ T8993] do_splice_direct+0xda/0x150 [ 145.357338][ T8993] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 145.357380][ T8993] do_sendfile+0x380/0x650 [ 145.357444][ T8993] __x64_sys_sendfile64+0xb8/0x150 [ 145.357467][ T8993] x64_sys_call+0xb39/0x2fb0 [ 145.357493][ T8993] do_syscall_64+0xd2/0x200 [ 145.357581][ T8993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.357611][ T8993] ? clear_bhb_loop+0x40/0x90 [ 145.357637][ T8993] ? clear_bhb_loop+0x40/0x90 [ 145.357692][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.357719][ T8993] RIP: 0033:0x7f113593e929 [ 145.357733][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.357752][ T8993] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 145.357853][ T8993] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 145.357868][ T8993] RDX: 0000200000002700 RSI: 0000000000000003 RDI: 0000000000000004 [ 145.357880][ T8993] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.357892][ T8993] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 145.357980][ T8993] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 145.357997][ T8993] [ 145.613022][ T9003] tls_set_device_offload: netdev not found [ 145.639480][ T9005] FAULT_INJECTION: forcing a failure. [ 145.639480][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.652734][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.4.2106 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 145.652765][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.652806][ T9005] Call Trace: [ 145.652813][ T9005] [ 145.652821][ T9005] __dump_stack+0x1d/0x30 [ 145.652845][ T9005] dump_stack_lvl+0xe8/0x140 [ 145.652871][ T9005] dump_stack+0x15/0x1b [ 145.652892][ T9005] should_fail_ex+0x265/0x280 [ 145.653003][ T9005] should_fail+0xb/0x20 [ 145.653039][ T9005] should_fail_usercopy+0x1a/0x20 [ 145.653106][ T9005] strncpy_from_user+0x25/0x230 [ 145.653139][ T9005] ? kmem_cache_alloc_noprof+0x186/0x310 [ 145.653174][ T9005] ? getname_flags+0x80/0x3b0 [ 145.653214][ T9005] getname_flags+0xae/0x3b0 [ 145.653243][ T9005] __x64_sys_renameat2+0x6c/0x90 [ 145.653265][ T9005] x64_sys_call+0x2bf6/0x2fb0 [ 145.653313][ T9005] do_syscall_64+0xd2/0x200 [ 145.653336][ T9005] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.653369][ T9005] ? clear_bhb_loop+0x40/0x90 [ 145.653495][ T9005] ? clear_bhb_loop+0x40/0x90 [ 145.653524][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.653551][ T9005] RIP: 0033:0x7fbada2be929 [ 145.653570][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.653593][ T9005] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 145.653616][ T9005] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 145.653693][ T9005] RDX: ffffffffffffffff RSI: 00002000000001c0 RDI: ffffffffffffffff [ 145.653710][ T9005] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 145.653725][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.653741][ T9005] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 145.653763][ T9005] [ 145.847126][ T8998] netlink: 'syz.0.2103': attribute type 8 has an invalid length. [ 145.854986][ T8998] netlink: 'syz.0.2103': attribute type 39 has an invalid length. [ 145.869430][ T9007] FAULT_INJECTION: forcing a failure. [ 145.869430][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.882583][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.0.2103 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 145.882614][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.882630][ T9007] Call Trace: [ 145.882639][ T9007] [ 145.882652][ T9007] __dump_stack+0x1d/0x30 [ 145.882690][ T9007] dump_stack_lvl+0xe8/0x140 [ 145.882780][ T9007] dump_stack+0x15/0x1b [ 145.882809][ T9007] should_fail_ex+0x265/0x280 [ 145.882854][ T9007] should_fail+0xb/0x20 [ 145.882892][ T9007] should_fail_usercopy+0x1a/0x20 [ 145.882998][ T9007] _copy_to_user+0x20/0xa0 [ 145.883028][ T9007] simple_read_from_buffer+0xb5/0x130 [ 145.883072][ T9007] proc_fail_nth_read+0x100/0x140 [ 145.883172][ T9007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.883282][ T9007] vfs_read+0x1a0/0x6f0 [ 145.883327][ T9007] ? __se_sys_pselect6+0x22a/0x280 [ 145.883414][ T9007] ? xfd_validate_state+0x45/0xf0 [ 145.883532][ T9007] ksys_read+0xda/0x1a0 [ 145.883580][ T9007] __x64_sys_read+0x40/0x50 [ 145.883634][ T9007] x64_sys_call+0x2d77/0x2fb0 [ 145.883714][ T9007] do_syscall_64+0xd2/0x200 [ 145.883739][ T9007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.883783][ T9007] ? clear_bhb_loop+0x40/0x90 [ 145.883869][ T9007] ? clear_bhb_loop+0x40/0x90 [ 145.883918][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.883977][ T9007] RIP: 0033:0x7f113593d33c [ 145.883998][ T9007] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.884024][ T9007] RSP: 002b:00007f1133f86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.884050][ T9007] RAX: ffffffffffffffda RBX: 00007f1135b66080 RCX: 00007f113593d33c [ 145.884068][ T9007] RDX: 000000000000000f RSI: 00007f1133f860a0 RDI: 0000000000000008 [ 145.884116][ T9007] RBP: 00007f1133f86090 R08: 0000000000000000 R09: 0000000000000000 [ 145.884134][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.884153][ T9007] R13: 0000000000000000 R14: 00007f1135b66080 R15: 00007ffd7a5c4218 [ 145.884176][ T9007] [ 145.903519][ T9016] IPv6: Can't replace route, no match found [ 145.921351][ T9018] FAULT_INJECTION: forcing a failure. [ 145.921351][ T9018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.003450][ T9024] bridge: RTM_NEWNEIGH with invalid ether address [ 146.005607][ T9018] CPU: 1 UID: 0 PID: 9018 Comm: syz.1.2109 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 146.005647][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.005663][ T9018] Call Trace: [ 146.005670][ T9018] [ 146.005680][ T9018] __dump_stack+0x1d/0x30 [ 146.005724][ T9018] dump_stack_lvl+0xe8/0x140 [ 146.005754][ T9018] dump_stack+0x15/0x1b [ 146.005778][ T9018] should_fail_ex+0x265/0x280 [ 146.005883][ T9018] should_fail+0xb/0x20 [ 146.005918][ T9018] should_fail_usercopy+0x1a/0x20 [ 146.005963][ T9018] _copy_from_user+0x1c/0xb0 [ 146.005992][ T9018] kstrtouint_from_user+0x69/0xf0 [ 146.006093][ T9018] ? 0xffffffff81000000 [ 146.006124][ T9018] ? selinux_file_permission+0x1e4/0x320 [ 146.006227][ T9018] proc_fail_nth_write+0x50/0x160 [ 146.006281][ T9018] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.006348][ T9018] vfs_write+0x269/0x8e0 [ 146.006399][ T9018] ? vfs_read+0x47f/0x6f0 [ 146.006441][ T9018] ? __rcu_read_unlock+0x4f/0x70 [ 146.006471][ T9018] ? __fget_files+0x184/0x1c0 [ 146.006516][ T9018] ksys_write+0xda/0x1a0 [ 146.006607][ T9018] __x64_sys_write+0x40/0x50 [ 146.006624][ T9018] x64_sys_call+0x2cdd/0x2fb0 [ 146.006657][ T9018] do_syscall_64+0xd2/0x200 [ 146.006682][ T9018] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.006718][ T9018] ? clear_bhb_loop+0x40/0x90 [ 146.006779][ T9018] ? clear_bhb_loop+0x40/0x90 [ 146.006808][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.006839][ T9018] RIP: 0033:0x7fabe01cd3df [ 146.006859][ T9018] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 146.006884][ T9018] RSP: 002b:00007fabde837030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 146.006964][ T9018] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fabe01cd3df [ 146.006982][ T9018] RDX: 0000000000000001 RSI: 00007fabde8370a0 RDI: 0000000000000003 [ 146.006999][ T9018] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 146.007016][ T9018] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 146.007034][ T9018] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 146.007058][ T9018] [ 146.211770][ T9034] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 146.357439][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2114'. [ 146.366496][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 146.370357][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'. [ 146.388763][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 146.488300][ T9052] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 146.516924][ T9049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.528115][ T9052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.538121][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2122'. [ 146.766593][ T9078] FAULT_INJECTION: forcing a failure. [ 146.766593][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.779912][ T9078] CPU: 1 UID: 0 PID: 9078 Comm: syz.4.2130 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 146.779949][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.779965][ T9078] Call Trace: [ 146.779971][ T9078] [ 146.779978][ T9078] __dump_stack+0x1d/0x30 [ 146.780069][ T9078] dump_stack_lvl+0xe8/0x140 [ 146.780092][ T9078] dump_stack+0x15/0x1b [ 146.780112][ T9078] should_fail_ex+0x265/0x280 [ 146.780157][ T9078] should_fail+0xb/0x20 [ 146.780251][ T9078] should_fail_usercopy+0x1a/0x20 [ 146.780283][ T9078] _copy_from_iter+0xcf/0xe40 [ 146.780341][ T9078] ? mntput+0x4b/0x80 [ 146.780368][ T9078] ? terminate_walk+0x27f/0x2a0 [ 146.780399][ T9078] tun_get_user+0x2e7/0x2500 [ 146.780440][ T9078] ? ref_tracker_alloc+0x1f2/0x2f0 [ 146.780550][ T9078] ? selinux_file_permission+0x1e4/0x320 [ 146.780583][ T9078] tun_chr_write_iter+0x15e/0x210 [ 146.780618][ T9078] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 146.780653][ T9078] vfs_write+0x4a0/0x8e0 [ 146.780729][ T9078] ksys_write+0xda/0x1a0 [ 146.780753][ T9078] __x64_sys_write+0x40/0x50 [ 146.780772][ T9078] x64_sys_call+0x2cdd/0x2fb0 [ 146.780793][ T9078] do_syscall_64+0xd2/0x200 [ 146.780813][ T9078] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.780916][ T9078] ? clear_bhb_loop+0x40/0x90 [ 146.780945][ T9078] ? clear_bhb_loop+0x40/0x90 [ 146.780973][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.781044][ T9078] RIP: 0033:0x7fbada2be929 [ 146.781064][ T9078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.781087][ T9078] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.781110][ T9078] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 146.781127][ T9078] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000004 [ 146.781143][ T9078] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 146.781222][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.781237][ T9078] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 146.781276][ T9078] [ 147.090358][ T9084] FAULT_INJECTION: forcing a failure. [ 147.090358][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 147.103211][ T9084] CPU: 0 UID: 0 PID: 9084 Comm: syz.0.2134 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 147.103246][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.103262][ T9084] Call Trace: [ 147.103271][ T9084] [ 147.103281][ T9084] __dump_stack+0x1d/0x30 [ 147.103307][ T9084] dump_stack_lvl+0xe8/0x140 [ 147.103337][ T9084] dump_stack+0x15/0x1b [ 147.103358][ T9084] should_fail_ex+0x265/0x280 [ 147.103422][ T9084] should_failslab+0x8c/0xb0 [ 147.103444][ T9084] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 147.103544][ T9084] ? __d_alloc+0x3d/0x350 [ 147.103629][ T9084] __d_alloc+0x3d/0x350 [ 147.103668][ T9084] d_alloc_parallel+0x53/0xc40 [ 147.103699][ T9084] ? selinux_inode_permission+0x532/0x620 [ 147.103742][ T9084] ? make_vfsuid+0x49/0xa0 [ 147.103828][ T9084] ? lockref_get_not_dead+0x120/0x1c0 [ 147.103924][ T9084] ? __rcu_read_unlock+0x4f/0x70 [ 147.103964][ T9084] __lookup_slow+0x8c/0x250 [ 147.104000][ T9084] lookup_slow+0x3c/0x60 [ 147.104033][ T9084] walk_component+0x1ec/0x220 [ 147.104131][ T9084] path_lookupat+0xfe/0x2a0 [ 147.104184][ T9084] filename_lookup+0x147/0x340 [ 147.104223][ T9084] user_path_at+0x3e/0x130 [ 147.104248][ T9084] __se_sys_name_to_handle_at+0xff/0x5d0 [ 147.104275][ T9084] ? ksys_write+0x192/0x1a0 [ 147.104345][ T9084] __x64_sys_name_to_handle_at+0x67/0x80 [ 147.104372][ T9084] x64_sys_call+0x279f/0x2fb0 [ 147.104399][ T9084] do_syscall_64+0xd2/0x200 [ 147.104421][ T9084] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.104455][ T9084] ? clear_bhb_loop+0x40/0x90 [ 147.104546][ T9084] ? clear_bhb_loop+0x40/0x90 [ 147.104631][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.104658][ T9084] RIP: 0033:0x7f113593e929 [ 147.104678][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.104702][ T9084] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 147.104726][ T9084] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 147.104742][ T9084] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 147.104829][ T9084] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.104842][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.104854][ T9084] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 147.104870][ T9084] [ 147.381293][ T9096] FAULT_INJECTION: forcing a failure. [ 147.381293][ T9096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.394501][ T9096] CPU: 1 UID: 0 PID: 9096 Comm: syz.0.2139 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 147.394566][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.394642][ T9096] Call Trace: [ 147.394650][ T9096] [ 147.394709][ T9096] __dump_stack+0x1d/0x30 [ 147.394735][ T9096] dump_stack_lvl+0xe8/0x140 [ 147.394830][ T9096] dump_stack+0x15/0x1b [ 147.394852][ T9096] should_fail_ex+0x265/0x280 [ 147.394942][ T9096] should_fail+0xb/0x20 [ 147.394978][ T9096] should_fail_usercopy+0x1a/0x20 [ 147.395055][ T9096] strncpy_from_user+0x25/0x230 [ 147.395087][ T9096] ? kmem_cache_alloc_noprof+0x186/0x310 [ 147.395162][ T9096] ? getname_flags+0x80/0x3b0 [ 147.395192][ T9096] getname_flags+0xae/0x3b0 [ 147.395221][ T9096] path_setxattrat+0x223/0x310 [ 147.395335][ T9096] __x64_sys_setxattr+0x6e/0x90 [ 147.395438][ T9096] x64_sys_call+0x28a7/0x2fb0 [ 147.395466][ T9096] do_syscall_64+0xd2/0x200 [ 147.395489][ T9096] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.395594][ T9096] ? clear_bhb_loop+0x40/0x90 [ 147.395621][ T9096] ? clear_bhb_loop+0x40/0x90 [ 147.395648][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.395676][ T9096] RIP: 0033:0x7f113593e929 [ 147.395695][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.395763][ T9096] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 147.395788][ T9096] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 147.395804][ T9096] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000000 [ 147.395839][ T9096] RBP: 00007f1133fa7090 R08: 0000000000000003 R09: 0000000000000000 [ 147.395913][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.395929][ T9096] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 147.395952][ T9096] [ 147.659855][ T9113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.862760][ T9140] bridge: RTM_NEWNEIGH with invalid ether address [ 147.940809][ T9155] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.963444][ T9155] wireguard1: entered promiscuous mode [ 148.005882][ T9163] FAULT_INJECTION: forcing a failure. [ 148.005882][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.019138][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.3.2165 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 148.019176][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.019194][ T9163] Call Trace: [ 148.019202][ T9163] [ 148.019211][ T9163] __dump_stack+0x1d/0x30 [ 148.019242][ T9163] dump_stack_lvl+0xe8/0x140 [ 148.019275][ T9163] dump_stack+0x15/0x1b [ 148.019297][ T9163] should_fail_ex+0x265/0x280 [ 148.019338][ T9163] should_fail+0xb/0x20 [ 148.019369][ T9163] should_fail_usercopy+0x1a/0x20 [ 148.019525][ T9163] _copy_from_user+0x1c/0xb0 [ 148.019553][ T9163] kstrtouint_from_user+0x69/0xf0 [ 148.019674][ T9163] ? 0xffffffff81000000 [ 148.019692][ T9163] ? selinux_file_permission+0x1e4/0x320 [ 148.019786][ T9163] proc_fail_nth_write+0x50/0x160 [ 148.019806][ T9163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.019857][ T9163] vfs_write+0x269/0x8e0 [ 148.019897][ T9163] ? vfs_read+0x47f/0x6f0 [ 148.019962][ T9163] ? __rcu_read_unlock+0x4f/0x70 [ 148.020062][ T9163] ? __fget_files+0x184/0x1c0 [ 148.020092][ T9163] ksys_write+0xda/0x1a0 [ 148.020111][ T9163] __x64_sys_write+0x40/0x50 [ 148.020127][ T9163] x64_sys_call+0x2cdd/0x2fb0 [ 148.020148][ T9163] do_syscall_64+0xd2/0x200 [ 148.020168][ T9163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.020236][ T9163] ? clear_bhb_loop+0x40/0x90 [ 148.020298][ T9163] ? clear_bhb_loop+0x40/0x90 [ 148.020321][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.020411][ T9163] RIP: 0033:0x7f050ab4d3df [ 148.020430][ T9163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.020531][ T9163] RSP: 002b:00007f05091b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.020557][ T9163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f050ab4d3df [ 148.020573][ T9163] RDX: 0000000000000001 RSI: 00007f05091b70a0 RDI: 0000000000000003 [ 148.020589][ T9163] RBP: 00007f05091b7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.020606][ T9163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 148.020622][ T9163] R13: 0000000000000000 R14: 00007f050ad75fa0 R15: 00007ffe195c6908 [ 148.020670][ T9163] [ 148.257368][ T9165] FAULT_INJECTION: forcing a failure. [ 148.257368][ T9165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.270537][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.0.2166 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 148.270579][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.270595][ T9165] Call Trace: [ 148.270604][ T9165] [ 148.270612][ T9165] __dump_stack+0x1d/0x30 [ 148.270642][ T9165] dump_stack_lvl+0xe8/0x140 [ 148.270666][ T9165] dump_stack+0x15/0x1b [ 148.270685][ T9165] should_fail_ex+0x265/0x280 [ 148.270756][ T9165] should_fail+0xb/0x20 [ 148.270790][ T9165] should_fail_usercopy+0x1a/0x20 [ 148.270866][ T9165] _copy_to_user+0x20/0xa0 [ 148.270894][ T9165] simple_read_from_buffer+0xb5/0x130 [ 148.270934][ T9165] proc_fail_nth_read+0x100/0x140 [ 148.270953][ T9165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.271060][ T9165] vfs_read+0x1a0/0x6f0 [ 148.271119][ T9165] ? __rcu_read_unlock+0x4f/0x70 [ 148.271149][ T9165] ? __fget_files+0x184/0x1c0 [ 148.271175][ T9165] ksys_read+0xda/0x1a0 [ 148.271206][ T9165] __x64_sys_read+0x40/0x50 [ 148.271243][ T9165] x64_sys_call+0x2d77/0x2fb0 [ 148.271294][ T9165] do_syscall_64+0xd2/0x200 [ 148.271318][ T9165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.271377][ T9165] ? clear_bhb_loop+0x40/0x90 [ 148.271406][ T9165] ? clear_bhb_loop+0x40/0x90 [ 148.271457][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.271477][ T9165] RIP: 0033:0x7f113593d33c [ 148.271494][ T9165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 148.271555][ T9165] RSP: 002b:00007f1133fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.271614][ T9165] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593d33c [ 148.271630][ T9165] RDX: 000000000000000f RSI: 00007f1133fa70a0 RDI: 0000000000000003 [ 148.271771][ T9165] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.271830][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.271844][ T9165] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 148.271868][ T9165] [ 148.536883][ T9177] bridge: RTM_NEWNEIGH with invalid ether address [ 148.612884][ T9185] netlink: 'syz.2.2173': attribute type 21 has an invalid length. [ 148.627514][ T9188] FAULT_INJECTION: forcing a failure. [ 148.627514][ T9188] name failslab, interval 1, probability 0, space 0, times 0 [ 148.640256][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz.4.2176 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 148.640290][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.640320][ T9188] Call Trace: [ 148.640329][ T9188] [ 148.640339][ T9188] __dump_stack+0x1d/0x30 [ 148.640367][ T9188] dump_stack_lvl+0xe8/0x140 [ 148.640393][ T9188] dump_stack+0x15/0x1b [ 148.640413][ T9188] should_fail_ex+0x265/0x280 [ 148.640520][ T9188] should_failslab+0x8c/0xb0 [ 148.640544][ T9188] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 148.640630][ T9188] ? sidtab_sid2str_get+0xa0/0x130 [ 148.640665][ T9188] kmemdup_noprof+0x2b/0x70 [ 148.640698][ T9188] sidtab_sid2str_get+0xa0/0x130 [ 148.640730][ T9188] security_sid_to_context_core+0x1eb/0x2e0 [ 148.640759][ T9188] security_sid_to_context+0x27/0x40 [ 148.640781][ T9188] selinux_lsmprop_to_secctx+0x67/0xf0 [ 148.640843][ T9188] security_lsmprop_to_secctx+0x43/0x80 [ 148.640874][ T9188] audit_log_task_context+0x77/0x190 [ 148.640918][ T9188] audit_log_task+0xf4/0x250 [ 148.640958][ T9188] audit_seccomp+0x61/0x100 [ 148.641025][ T9188] ? __seccomp_filter+0x68c/0x10d0 [ 148.641063][ T9188] __seccomp_filter+0x69d/0x10d0 [ 148.641086][ T9188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.641113][ T9188] ? vfs_write+0x75e/0x8e0 [ 148.641155][ T9188] ? __rcu_read_unlock+0x4f/0x70 [ 148.641254][ T9188] ? __fget_files+0x184/0x1c0 [ 148.641318][ T9188] __secure_computing+0x82/0x150 [ 148.641348][ T9188] syscall_trace_enter+0xcf/0x1e0 [ 148.641442][ T9188] do_syscall_64+0xac/0x200 [ 148.641552][ T9188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.641647][ T9188] ? clear_bhb_loop+0x40/0x90 [ 148.641677][ T9188] ? clear_bhb_loop+0x40/0x90 [ 148.641704][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.641731][ T9188] RIP: 0033:0x7fbada2be929 [ 148.641751][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.641775][ T9188] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 148.641858][ T9188] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 148.641872][ T9188] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 148.641889][ T9188] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 148.641906][ T9188] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 148.641923][ T9188] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 148.641945][ T9188] [ 148.755099][ T9185] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2173'. [ 148.905449][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 148.994124][ T9205] FAULT_INJECTION: forcing a failure. [ 148.994124][ T9205] name failslab, interval 1, probability 0, space 0, times 0 [ 149.006982][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.1.2183 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 149.007037][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.007054][ T9205] Call Trace: [ 149.007062][ T9205] [ 149.007071][ T9205] __dump_stack+0x1d/0x30 [ 149.007099][ T9205] dump_stack_lvl+0xe8/0x140 [ 149.007122][ T9205] dump_stack+0x15/0x1b [ 149.007183][ T9205] should_fail_ex+0x265/0x280 [ 149.007215][ T9205] should_failslab+0x8c/0xb0 [ 149.007245][ T9205] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 149.007360][ T9205] ? sidtab_sid2str_get+0xa0/0x130 [ 149.007393][ T9205] kmemdup_noprof+0x2b/0x70 [ 149.007424][ T9205] sidtab_sid2str_get+0xa0/0x130 [ 149.007484][ T9205] security_sid_to_context_core+0x1eb/0x2e0 [ 149.007547][ T9205] security_sid_to_context+0x27/0x40 [ 149.007575][ T9205] selinux_lsmprop_to_secctx+0x67/0xf0 [ 149.007599][ T9205] security_lsmprop_to_secctx+0x43/0x80 [ 149.007629][ T9205] audit_log_task_context+0x77/0x190 [ 149.007711][ T9205] audit_log_task+0xf4/0x250 [ 149.007751][ T9205] audit_seccomp+0x61/0x100 [ 149.007786][ T9205] ? __seccomp_filter+0x68c/0x10d0 [ 149.007815][ T9205] __seccomp_filter+0x69d/0x10d0 [ 149.007919][ T9205] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.007955][ T9205] ? vfs_write+0x75e/0x8e0 [ 149.007993][ T9205] __secure_computing+0x82/0x150 [ 149.008045][ T9205] syscall_trace_enter+0xcf/0x1e0 [ 149.008118][ T9205] do_syscall_64+0xac/0x200 [ 149.008145][ T9205] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.008251][ T9205] ? clear_bhb_loop+0x40/0x90 [ 149.008279][ T9205] ? clear_bhb_loop+0x40/0x90 [ 149.008307][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.008334][ T9205] RIP: 0033:0x7fabe01ce929 [ 149.008353][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.008441][ T9205] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 149.008486][ T9205] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 149.008502][ T9205] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 149.008519][ T9205] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 149.008535][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.008552][ T9205] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 149.008603][ T9205] [ 149.026997][ T9211] bridge: RTM_NEWNEIGH with invalid ether address [ 149.324517][ T9227] xt_hashlimit: max too large, truncated to 1048576 [ 149.556815][ T9258] bridge: RTM_NEWNEIGH with invalid ether address [ 149.650282][ T9262] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.719682][ T9266] FAULT_INJECTION: forcing a failure. [ 149.719682][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.732867][ T9266] CPU: 0 UID: 0 PID: 9266 Comm: syz.4.2209 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 149.732917][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.732934][ T9266] Call Trace: [ 149.732942][ T9266] [ 149.732951][ T9266] __dump_stack+0x1d/0x30 [ 149.732977][ T9266] dump_stack_lvl+0xe8/0x140 [ 149.733002][ T9266] dump_stack+0x15/0x1b [ 149.733027][ T9266] should_fail_ex+0x265/0x280 [ 149.733060][ T9266] should_fail+0xb/0x20 [ 149.733169][ T9266] should_fail_usercopy+0x1a/0x20 [ 149.733204][ T9266] _copy_to_user+0x20/0xa0 [ 149.733224][ T9266] simple_read_from_buffer+0xb5/0x130 [ 149.733342][ T9266] proc_fail_nth_read+0x100/0x140 [ 149.733362][ T9266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.733394][ T9266] vfs_read+0x1a0/0x6f0 [ 149.733452][ T9266] ? __rcu_read_unlock+0x4f/0x70 [ 149.733480][ T9266] ? __fget_files+0x184/0x1c0 [ 149.733505][ T9266] ksys_read+0xda/0x1a0 [ 149.733621][ T9266] __x64_sys_read+0x40/0x50 [ 149.733659][ T9266] x64_sys_call+0x2d77/0x2fb0 [ 149.733687][ T9266] do_syscall_64+0xd2/0x200 [ 149.733706][ T9266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.733739][ T9266] ? clear_bhb_loop+0x40/0x90 [ 149.733762][ T9266] ? clear_bhb_loop+0x40/0x90 [ 149.733796][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.733816][ T9266] RIP: 0033:0x7fbada2bd33c [ 149.733872][ T9266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.733894][ T9266] RSP: 002b:00007fbad8927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.733919][ T9266] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2bd33c [ 149.733935][ T9266] RDX: 000000000000000f RSI: 00007fbad89270a0 RDI: 0000000000000004 [ 149.733951][ T9266] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 149.733968][ T9266] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 149.733983][ T9266] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 149.734044][ T9266] [ 150.161559][ T29] kauditd_printk_skb: 38686 callbacks suppressed [ 150.161592][ T29] audit: type=1400 audit(1750440678.895:237448): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.171523][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.189526][ T29] audit: type=1400 audit(1750440678.895:237449): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.196173][ T3035] audit: audit_lost=50315 audit_rate_limit=0 audit_backlog_limit=64 [ 150.217396][ T29] audit: type=1400 audit(1750440678.895:237450): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.225400][ T3035] audit: backlog limit exceeded [ 150.251578][ T29] audit: type=1400 audit(1750440678.895:237451): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.272862][ T29] audit: type=1400 audit(1750440678.895:237452): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.294171][ T29] audit: type=1400 audit(1750440678.895:237453): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.315527][ T29] audit: type=1400 audit(1750440678.895:237454): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.402692][ T9300] FAULT_INJECTION: forcing a failure. [ 150.402692][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 150.415595][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.0.2224 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 150.415651][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.415669][ T9300] Call Trace: [ 150.415678][ T9300] [ 150.415688][ T9300] __dump_stack+0x1d/0x30 [ 150.415715][ T9300] dump_stack_lvl+0xe8/0x140 [ 150.415792][ T9300] dump_stack+0x15/0x1b [ 150.415808][ T9300] should_fail_ex+0x265/0x280 [ 150.415886][ T9300] should_failslab+0x8c/0xb0 [ 150.415918][ T9300] __kvmalloc_node_noprof+0x123/0x4e0 [ 150.416022][ T9300] ? snd_seq_pool_init+0x50/0x1e0 [ 150.416059][ T9300] snd_seq_pool_init+0x50/0x1e0 [ 150.416161][ T9300] snd_seq_fifo_resize+0x71/0x1a0 [ 150.416229][ T9300] snd_seq_ioctl_set_client_pool+0x24c/0x310 [ 150.416257][ T9300] snd_seq_ioctl+0x17a/0x2e0 [ 150.416283][ T9300] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 150.416307][ T9300] __se_sys_ioctl+0xce/0x140 [ 150.416407][ T9300] __x64_sys_ioctl+0x43/0x50 [ 150.416444][ T9300] x64_sys_call+0x19a8/0x2fb0 [ 150.416473][ T9300] do_syscall_64+0xd2/0x200 [ 150.416493][ T9300] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.416592][ T9300] ? clear_bhb_loop+0x40/0x90 [ 150.416621][ T9300] ? clear_bhb_loop+0x40/0x90 [ 150.416643][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.416663][ T9300] RIP: 0033:0x7f113593e929 [ 150.416735][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.416761][ T9300] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.416780][ T9300] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 150.416794][ T9300] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000003 [ 150.416920][ T9300] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.416937][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.416954][ T9300] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 150.416977][ T9300] [ 150.417674][ T9298] FAULT_INJECTION: forcing a failure. [ 150.417674][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.469133][ T9301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.469609][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.4.2223 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 150.469644][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.469662][ T9298] Call Trace: [ 150.469671][ T9298] [ 150.469680][ T9298] __dump_stack+0x1d/0x30 [ 150.469792][ T9298] dump_stack_lvl+0xe8/0x140 [ 150.469819][ T9298] dump_stack+0x15/0x1b [ 150.469843][ T9298] should_fail_ex+0x265/0x280 [ 150.469885][ T9298] should_fail+0xb/0x20 [ 150.469969][ T9298] should_fail_usercopy+0x1a/0x20 [ 150.470057][ T9298] strncpy_from_user+0x25/0x230 [ 150.470150][ T9298] ? kmem_cache_alloc_noprof+0x186/0x310 [ 150.470194][ T9298] ? getname_flags+0x80/0x3b0 [ 150.470227][ T9298] getname_flags+0xae/0x3b0 [ 150.470257][ T9298] do_sys_openat2+0x60/0x110 [ 150.470351][ T9298] __x64_sys_open+0xe6/0x110 [ 150.470388][ T9298] x64_sys_call+0x14d4/0x2fb0 [ 150.470441][ T9298] do_syscall_64+0xd2/0x200 [ 150.470466][ T9298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.470570][ T9298] ? clear_bhb_loop+0x40/0x90 [ 150.470666][ T9298] ? clear_bhb_loop+0x40/0x90 [ 150.470697][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.470726][ T9298] RIP: 0033:0x7fbada2be929 [ 150.470753][ T9298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.470811][ T9298] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 150.470838][ T9298] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 150.470856][ T9298] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240 [ 150.470873][ T9298] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 150.470891][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.470956][ T9298] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 150.470980][ T9298] [ 150.621608][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'. [ 150.938356][ T9318] FAULT_INJECTION: forcing a failure. [ 150.938356][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 150.951219][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.0.2230 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 150.951256][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.951273][ T9318] Call Trace: [ 150.951282][ T9318] [ 150.951291][ T9318] __dump_stack+0x1d/0x30 [ 150.951368][ T9318] dump_stack_lvl+0xe8/0x140 [ 150.951393][ T9318] dump_stack+0x15/0x1b [ 150.951413][ T9318] should_fail_ex+0x265/0x280 [ 150.951452][ T9318] should_failslab+0x8c/0xb0 [ 150.951479][ T9318] kmem_cache_alloc_noprof+0x50/0x310 [ 150.951585][ T9318] ? audit_log_start+0x365/0x6c0 [ 150.951628][ T9318] audit_log_start+0x365/0x6c0 [ 150.951673][ T9318] audit_seccomp+0x48/0x100 [ 150.951766][ T9318] ? __seccomp_filter+0x68c/0x10d0 [ 150.951798][ T9318] __seccomp_filter+0x69d/0x10d0 [ 150.951821][ T9318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 150.951840][ T9318] ? vfs_write+0x75e/0x8e0 [ 150.951885][ T9318] __secure_computing+0x82/0x150 [ 150.951915][ T9318] syscall_trace_enter+0xcf/0x1e0 [ 150.951956][ T9318] do_syscall_64+0xac/0x200 [ 150.951980][ T9318] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.952023][ T9318] ? clear_bhb_loop+0x40/0x90 [ 150.952067][ T9318] ? clear_bhb_loop+0x40/0x90 [ 150.952095][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.952119][ T9318] RIP: 0033:0x7f113593e929 [ 150.952195][ T9318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.952220][ T9318] RSP: 002b:00007f1133fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.952245][ T9318] RAX: ffffffffffffffda RBX: 00007f1135b65fa0 RCX: 00007f113593e929 [ 150.952262][ T9318] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 150.952275][ T9318] RBP: 00007f1133fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.952354][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.952368][ T9318] R13: 0000000000000000 R14: 00007f1135b65fa0 R15: 00007ffd7a5c4218 [ 150.952388][ T9318] [ 150.976432][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 150.979242][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 151.496308][ T9368] FAULT_INJECTION: forcing a failure. [ 151.496308][ T9368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.509522][ T9368] CPU: 0 UID: 0 PID: 9368 Comm: syz.3.2252 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 151.509550][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.509634][ T9368] Call Trace: [ 151.509643][ T9368] [ 151.509652][ T9368] __dump_stack+0x1d/0x30 [ 151.509677][ T9368] dump_stack_lvl+0xe8/0x140 [ 151.509697][ T9368] dump_stack+0x15/0x1b [ 151.509738][ T9368] should_fail_ex+0x265/0x280 [ 151.509811][ T9368] should_fail+0xb/0x20 [ 151.509845][ T9368] should_fail_usercopy+0x1a/0x20 [ 151.509948][ T9368] _copy_from_user+0x1c/0xb0 [ 151.509974][ T9368] ___sys_sendmsg+0xc1/0x1d0 [ 151.510059][ T9368] __x64_sys_sendmsg+0xd4/0x160 [ 151.510101][ T9368] x64_sys_call+0x2999/0x2fb0 [ 151.510172][ T9368] do_syscall_64+0xd2/0x200 [ 151.510218][ T9368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.510306][ T9368] ? clear_bhb_loop+0x40/0x90 [ 151.510326][ T9368] ? clear_bhb_loop+0x40/0x90 [ 151.510353][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.510373][ T9368] RIP: 0033:0x7f050ab4e929 [ 151.510397][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.510421][ T9368] RSP: 002b:00007f05091b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.510448][ T9368] RAX: ffffffffffffffda RBX: 00007f050ad75fa0 RCX: 00007f050ab4e929 [ 151.510465][ T9368] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000008 [ 151.510480][ T9368] RBP: 00007f05091b7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.510499][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.510511][ T9368] R13: 0000000000000000 R14: 00007f050ad75fa0 R15: 00007ffe195c6908 [ 151.510528][ T9368] [ 151.560087][ T9367] FAULT_INJECTION: forcing a failure. [ 151.560087][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 151.646635][ T9369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.652052][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.4.2253 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 151.652167][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.652186][ T9367] Call Trace: [ 151.652195][ T9367] [ 151.652206][ T9367] __dump_stack+0x1d/0x30 [ 151.652235][ T9367] dump_stack_lvl+0xe8/0x140 [ 151.652260][ T9367] dump_stack+0x15/0x1b [ 151.652283][ T9367] should_fail_ex+0x265/0x280 [ 151.652334][ T9367] ? audit_log_d_path+0x8d/0x150 [ 151.652377][ T9367] should_failslab+0x8c/0xb0 [ 151.652407][ T9367] __kmalloc_cache_noprof+0x4c/0x320 [ 151.652472][ T9367] audit_log_d_path+0x8d/0x150 [ 151.652508][ T9367] audit_log_d_path_exe+0x42/0x70 [ 151.652544][ T9367] audit_log_task+0x1e9/0x250 [ 151.652576][ T9367] audit_seccomp+0x61/0x100 [ 151.652611][ T9367] ? __seccomp_filter+0x68c/0x10d0 [ 151.652662][ T9367] __seccomp_filter+0x69d/0x10d0 [ 151.652709][ T9367] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.652736][ T9367] ? vfs_write+0x75e/0x8e0 [ 151.652842][ T9367] ? putname+0xda/0x100 [ 151.652869][ T9367] ? __rcu_read_unlock+0x4f/0x70 [ 151.652916][ T9367] ? __fget_files+0x184/0x1c0 [ 151.652947][ T9367] __secure_computing+0x82/0x150 [ 151.653028][ T9367] syscall_trace_enter+0xcf/0x1e0 [ 151.653060][ T9367] do_syscall_64+0xac/0x200 [ 151.653167][ T9367] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.653202][ T9367] ? clear_bhb_loop+0x40/0x90 [ 151.653230][ T9367] ? clear_bhb_loop+0x40/0x90 [ 151.653258][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.653314][ T9367] RIP: 0033:0x7fbada2be929 [ 151.653335][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.653359][ T9367] RSP: 002b:00007fbad8927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 151.653384][ T9367] RAX: ffffffffffffffda RBX: 00007fbada4e5fa0 RCX: 00007fbada2be929 [ 151.653402][ T9367] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000798e2643 [ 151.653419][ T9367] RBP: 00007fbad8927090 R08: 0000000000000000 R09: 0000000000000000 [ 151.653509][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.653526][ T9367] R13: 0000000000000000 R14: 00007fbada4e5fa0 R15: 00007ffd163bcd08 [ 151.653552][ T9367] [ 152.060129][ T9392] __nla_validate_parse: 1 callbacks suppressed [ 152.060148][ T9392] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2259'. [ 152.075675][ T9392] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2259'. [ 152.088165][ T9395] netlink: 'syz.3.2261': attribute type 4 has an invalid length. [ 152.485416][ T9431] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2278'. [ 152.550712][ T9437] FAULT_INJECTION: forcing a failure. [ 152.550712][ T9437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.563924][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.2.2281 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 152.563962][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.563979][ T9437] Call Trace: [ 152.563987][ T9437] [ 152.563997][ T9437] __dump_stack+0x1d/0x30 [ 152.564097][ T9437] dump_stack_lvl+0xe8/0x140 [ 152.564120][ T9437] dump_stack+0x15/0x1b [ 152.564142][ T9437] should_fail_ex+0x265/0x280 [ 152.564183][ T9437] should_fail+0xb/0x20 [ 152.564275][ T9437] should_fail_usercopy+0x1a/0x20 [ 152.564317][ T9437] _copy_from_user+0x1c/0xb0 [ 152.564337][ T9437] kstrtouint_from_user+0x69/0xf0 [ 152.564436][ T9437] ? 0xffffffff81000000 [ 152.564448][ T9437] ? selinux_file_permission+0x1e4/0x320 [ 152.564517][ T9437] proc_fail_nth_write+0x50/0x160 [ 152.564539][ T9437] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 152.564557][ T9437] vfs_write+0x269/0x8e0 [ 152.564671][ T9437] ? vfs_read+0x47f/0x6f0 [ 152.564711][ T9437] ? __rcu_read_unlock+0x4f/0x70 [ 152.564740][ T9437] ? __fget_files+0x184/0x1c0 [ 152.564796][ T9437] ksys_write+0xda/0x1a0 [ 152.564813][ T9437] __x64_sys_write+0x40/0x50 [ 152.564832][ T9437] x64_sys_call+0x2cdd/0x2fb0 [ 152.564853][ T9437] do_syscall_64+0xd2/0x200 [ 152.564950][ T9437] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.564979][ T9437] ? clear_bhb_loop+0x40/0x90 [ 152.565000][ T9437] ? clear_bhb_loop+0x40/0x90 [ 152.565041][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.565093][ T9437] RIP: 0033:0x7f2baf6dd3df [ 152.565113][ T9437] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 152.565137][ T9437] RSP: 002b:00007f2badd47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.565162][ T9437] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2baf6dd3df [ 152.565174][ T9437] RDX: 0000000000000001 RSI: 00007f2badd470a0 RDI: 0000000000000005 [ 152.565186][ T9437] RBP: 00007f2badd47090 R08: 0000000000000000 R09: 0000000000000000 [ 152.565198][ T9437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 152.565297][ T9437] R13: 0000000000000000 R14: 00007f2baf905fa0 R15: 00007ffe0d8f65a8 [ 152.565321][ T9437] [ 152.797144][ T9438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.836149][ T9443] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 153.306051][ T9484] FAULT_INJECTION: forcing a failure. [ 153.306051][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 153.319016][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.3.2299 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 153.319053][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.319070][ T9484] Call Trace: [ 153.319078][ T9484] [ 153.319087][ T9484] __dump_stack+0x1d/0x30 [ 153.319113][ T9484] dump_stack_lvl+0xe8/0x140 [ 153.319138][ T9484] dump_stack+0x15/0x1b [ 153.319226][ T9484] should_fail_ex+0x265/0x280 [ 153.319305][ T9484] should_failslab+0x8c/0xb0 [ 153.319335][ T9484] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 153.319371][ T9484] ? sidtab_sid2str_get+0xa0/0x130 [ 153.319407][ T9484] kmemdup_noprof+0x2b/0x70 [ 153.319431][ T9484] sidtab_sid2str_get+0xa0/0x130 [ 153.319456][ T9484] security_sid_to_context_core+0x1eb/0x2e0 [ 153.319496][ T9484] security_sid_to_context+0x27/0x40 [ 153.319533][ T9484] avc_audit_post_callback+0x10f/0x520 [ 153.319569][ T9484] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 153.319630][ T9484] common_lsm_audit+0x1bb/0x230 [ 153.319675][ T9484] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 153.319784][ T9484] slow_avc_audit+0x104/0x140 [ 153.319885][ T9484] avc_has_perm+0x128/0x150 [ 153.319921][ T9484] selinux_mount+0x2ba/0x310 [ 153.320007][ T9484] security_sb_mount+0x5f/0xb0 [ 153.320034][ T9484] ? path_mount+0x89/0xb20 [ 153.320087][ T9484] path_mount+0xa9/0xb20 [ 153.320128][ T9484] ? user_path_at+0x109/0x130 [ 153.320162][ T9484] __se_sys_mount+0x28f/0x2e0 [ 153.320197][ T9484] ? fput+0x8f/0xc0 [ 153.320241][ T9484] __x64_sys_mount+0x67/0x80 [ 153.320264][ T9484] x64_sys_call+0xd36/0x2fb0 [ 153.320292][ T9484] do_syscall_64+0xd2/0x200 [ 153.320316][ T9484] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.320343][ T9484] ? clear_bhb_loop+0x40/0x90 [ 153.320426][ T9484] ? clear_bhb_loop+0x40/0x90 [ 153.320455][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.320535][ T9484] RIP: 0033:0x7f050ab4e929 [ 153.320550][ T9484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.320572][ T9484] RSP: 002b:00007f05091b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.320664][ T9484] RAX: ffffffffffffffda RBX: 00007f050ad75fa0 RCX: 00007f050ab4e929 [ 153.320681][ T9484] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 153.320696][ T9484] RBP: 00007f05091b7090 R08: 0000200000000400 R09: 0000000000000000 [ 153.320760][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.320772][ T9484] R13: 0000000000000000 R14: 00007f050ad75fa0 R15: 00007ffe195c6908 [ 153.320790][ T9484] [ 153.323718][ T9484] netlink: 'syz.3.2299': attribute type 13 has an invalid length. [ 153.664367][ T9498] FAULT_INJECTION: forcing a failure. [ 153.664367][ T9498] name failslab, interval 1, probability 0, space 0, times 0 [ 153.677163][ T9498] CPU: 1 UID: 0 PID: 9498 Comm: syz.2.2304 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 153.677280][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.677297][ T9498] Call Trace: [ 153.677305][ T9498] [ 153.677314][ T9498] __dump_stack+0x1d/0x30 [ 153.677339][ T9498] dump_stack_lvl+0xe8/0x140 [ 153.677378][ T9498] dump_stack+0x15/0x1b [ 153.677400][ T9498] should_fail_ex+0x265/0x280 [ 153.677439][ T9498] ? rtnl_newlink+0x5c/0x12d0 [ 153.677475][ T9498] should_failslab+0x8c/0xb0 [ 153.677505][ T9498] __kmalloc_cache_noprof+0x4c/0x320 [ 153.677542][ T9498] rtnl_newlink+0x5c/0x12d0 [ 153.677570][ T9498] ? xas_load+0x413/0x430 [ 153.677811][ T9498] ? xas_load+0x413/0x430 [ 153.677841][ T9498] ? __rcu_read_unlock+0x4f/0x70 [ 153.677865][ T9498] ? xa_load+0xb1/0xe0 [ 153.677882][ T9498] ? __kfree_skb+0x109/0x150 [ 153.677978][ T9498] ? __rcu_read_unlock+0x4f/0x70 [ 153.678005][ T9498] ? avc_has_perm_noaudit+0x1b1/0x200 [ 153.678078][ T9498] ? selinux_capable+0x1f9/0x270 [ 153.678112][ T9498] ? security_capable+0x83/0x90 [ 153.678137][ T9498] ? ns_capable+0x7d/0xb0 [ 153.678159][ T9498] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.678216][ T9498] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 153.678241][ T9498] netlink_rcv_skb+0x123/0x220 [ 153.678323][ T9498] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.678393][ T9498] rtnetlink_rcv+0x1c/0x30 [ 153.678419][ T9498] netlink_unicast+0x59e/0x670 [ 153.678455][ T9498] netlink_sendmsg+0x58b/0x6b0 [ 153.678482][ T9498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.678631][ T9498] __sock_sendmsg+0x145/0x180 [ 153.678709][ T9498] ____sys_sendmsg+0x31e/0x4e0 [ 153.678814][ T9498] ___sys_sendmsg+0x17b/0x1d0 [ 153.678869][ T9498] __x64_sys_sendmsg+0xd4/0x160 [ 153.678915][ T9498] x64_sys_call+0x2999/0x2fb0 [ 153.679013][ T9498] do_syscall_64+0xd2/0x200 [ 153.679035][ T9498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.679068][ T9498] ? clear_bhb_loop+0x40/0x90 [ 153.679168][ T9498] ? clear_bhb_loop+0x40/0x90 [ 153.679195][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.679222][ T9498] RIP: 0033:0x7f2baf6de929 [ 153.679246][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.679266][ T9498] RSP: 002b:00007f2badd47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.679308][ T9498] RAX: ffffffffffffffda RBX: 00007f2baf905fa0 RCX: 00007f2baf6de929 [ 153.679322][ T9498] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 153.679334][ T9498] RBP: 00007f2badd47090 R08: 0000000000000000 R09: 0000000000000000 [ 153.679345][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.679357][ T9498] R13: 0000000000000000 R14: 00007f2baf905fa0 R15: 00007ffe0d8f65a8 [ 153.679396][ T9498] [ 153.995637][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.021519][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.083170][ T9484] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.092181][ T9484] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.101118][ T9484] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.110040][ T9484] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.121913][ T9512] netlink: 'syz.2.2309': attribute type 13 has an invalid length. [ 154.166395][ T9505] pim6reg1: entered promiscuous mode [ 154.171820][ T9505] pim6reg1: entered allmulticast mode [ 154.331563][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.367406][ T9534] FAULT_INJECTION: forcing a failure. [ 154.367406][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 154.380261][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.1.2316 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 154.380295][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.380311][ T9534] Call Trace: [ 154.380319][ T9534] [ 154.380330][ T9534] __dump_stack+0x1d/0x30 [ 154.380349][ T9534] dump_stack_lvl+0xe8/0x140 [ 154.380366][ T9534] dump_stack+0x15/0x1b [ 154.380458][ T9534] should_fail_ex+0x265/0x280 [ 154.380492][ T9534] should_failslab+0x8c/0xb0 [ 154.380589][ T9534] kmem_cache_alloc_node_noprof+0x57/0x320 [ 154.380615][ T9534] ? __alloc_skb+0x101/0x320 [ 154.380669][ T9534] __alloc_skb+0x101/0x320 [ 154.380695][ T9534] netlink_alloc_large_skb+0xba/0xf0 [ 154.380723][ T9534] netlink_sendmsg+0x3cf/0x6b0 [ 154.380743][ T9534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.380833][ T9534] __sock_sendmsg+0x145/0x180 [ 154.380855][ T9534] ____sys_sendmsg+0x31e/0x4e0 [ 154.380925][ T9534] ___sys_sendmsg+0x17b/0x1d0 [ 154.381067][ T9534] __x64_sys_sendmsg+0xd4/0x160 [ 154.381100][ T9534] x64_sys_call+0x2999/0x2fb0 [ 154.381168][ T9534] do_syscall_64+0xd2/0x200 [ 154.381184][ T9534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.381207][ T9534] ? clear_bhb_loop+0x40/0x90 [ 154.381256][ T9534] ? clear_bhb_loop+0x40/0x90 [ 154.381275][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.381321][ T9534] RIP: 0033:0x7fabe01ce929 [ 154.381335][ T9534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.381359][ T9534] RSP: 002b:00007fabde837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.381395][ T9534] RAX: ffffffffffffffda RBX: 00007fabe03f5fa0 RCX: 00007fabe01ce929 [ 154.381411][ T9534] RDX: 0000000000004884 RSI: 0000200000000080 RDI: 0000000000000004 [ 154.381423][ T9534] RBP: 00007fabde837090 R08: 0000000000000000 R09: 0000000000000000 [ 154.381434][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.381445][ T9534] R13: 0000000000000000 R14: 00007fabe03f5fa0 R15: 00007ffc7888ae58 [ 154.381461][ T9534] [ 154.598846][ T9512] team0: left allmulticast mode [ 154.603915][ T9512] team_slave_0: left allmulticast mode [ 154.609991][ T9512] team_slave_1: left allmulticast mode [ 154.615865][ T9512] team0: left promiscuous mode [ 154.622186][ T9512] team_slave_0: left promiscuous mode [ 154.627887][ T9512] team_slave_1: left promiscuous mode [ 154.639357][ T9539] ================================================================== [ 154.647474][ T9539] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk [ 154.654865][ T9539] [ 154.657193][ T9539] write to 0xffff88811999b800 of 8 bytes by task 9536 on cpu 1: [ 154.664829][ T9539] mas_replace_node+0x1a6/0x410 [ 154.669725][ T9539] mas_wr_store_entry+0x2406/0x2b50 [ 154.674974][ T9539] mas_store_prealloc+0x74d/0x9e0 [ 154.680035][ T9539] vma_iter_store_new+0x1c5/0x200 [ 154.685097][ T9539] vma_complete+0x125/0x580 [ 154.689617][ T9539] __split_vma+0x591/0x650 [ 154.694056][ T9539] vma_modify+0x21e/0xc80 [ 154.698412][ T9539] vma_modify_flags+0x101/0x130 [ 154.703296][ T9539] mprotect_fixup+0x2cc/0x570 [ 154.708000][ T9539] do_mprotect_pkey+0x6d6/0x980 [ 154.712889][ T9539] __x64_sys_mprotect+0x48/0x60 [ 154.717777][ T9539] x64_sys_call+0x2794/0x2fb0 [ 154.722488][ T9539] do_syscall_64+0xd2/0x200 [ 154.727011][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.732942][ T9539] [ 154.735289][ T9539] read to 0xffff88811999b800 of 8 bytes by task 9539 on cpu 0: [ 154.742849][ T9539] mas_state_walk+0x485/0x650 [ 154.747559][ T9539] mas_walk+0x30/0x120 [ 154.751669][ T9539] lock_vma_under_rcu+0xa2/0x2f0 [ 154.756651][ T9539] do_user_addr_fault+0x233/0x1090 [ 154.761809][ T9539] exc_page_fault+0x62/0xa0 [ 154.766450][ T9539] asm_exc_page_fault+0x26/0x30 [ 154.771320][ T9539] [ 154.773665][ T9539] value changed: 0xffff88811999b206 -> 0xffff88811999b800 [ 154.780799][ T9539] [ 154.783149][ T9539] Reported by Kernel Concurrency Sanitizer on: [ 154.789324][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.1.2317 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 154.801769][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.811854][ T9539] ================================================================== [ 154.821139][ T9512] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.830116][ T9512] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.839139][ T9512] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.848241][ T9512] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.899364][ T29] kauditd_printk_skb: 36689 callbacks suppressed [ 154.899378][ T29] audit: type=1400 audit(1750440683.905:254970): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.904517][ T9532] syzkaller0: entered promiscuous mode [ 154.906606][ T29] audit: type=1400 audit(1750440683.905:254971): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.930173][ T9532] syzkaller0: entered allmulticast mode [ 154.953952][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.957365][ T29] audit: type=1400 audit(1750440683.947:254972): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.962739][ T3035] audit: audit_lost=56708 audit_rate_limit=0 audit_backlog_limit=64 [ 154.969275][ T29] audit: type=1400 audit(1750440683.947:254973): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.990529][ T3035] audit: backlog limit exceeded [ 154.997268][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.998580][ T29] audit: type=1400 audit(1750440683.947:254974): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.019786][ T3035] audit: audit_lost=56709 audit_rate_limit=0 audit_backlog_limit=64 [ 159.639977][ T29] kauditd_printk_skb: 46813 callbacks suppressed [ 159.639995][ T29] audit: type=1400 audit(1750440688.913:301169): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.647307][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.667780][ T29] audit: type=1400 audit(1750440688.913:301170): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.674330][ T3035] audit: audit_lost=56916 audit_rate_limit=0 audit_backlog_limit=64 [ 159.695518][ T29] audit: type=1400 audit(1750440688.913:301171): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.703517][ T3035] audit: backlog limit exceeded [ 159.704383][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.724731][ T29] audit: type=1400 audit(1750440688.913:301172): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.729588][ T3035] audit: audit_lost=56917 audit_rate_limit=0 audit_backlog_limit=64 [ 159.736164][ T29] audit: type=1400 audit(1750440688.913:301173): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.384904][ T29] kauditd_printk_skb: 47778 callbacks suppressed [ 164.384918][ T29] audit: type=1400 audit(1750440693.929:347697): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.400610][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.412507][ T29] audit: type=1400 audit(1750440693.929:347698): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.419010][ T3035] audit: audit_lost=57336 audit_rate_limit=0 audit_backlog_limit=64 [ 164.440228][ T29] audit: type=1400 audit(1750440693.929:347699): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.448205][ T3035] audit: backlog limit exceeded [ 164.448700][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.469497][ T29] audit: type=1400 audit(1750440693.929:347700): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.474519][ T3035] audit: audit_lost=57337 audit_rate_limit=0 audit_backlog_limit=64 [ 164.481123][ T29] audit: type=1400 audit(1750440693.929:347701): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0