last executing test programs: 1.964658792s ago: executing program 1 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) acct(0x0) 1.913110466s ago: executing program 1 (id=1129): fsmount(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) ioprio_set$uid(0x3, 0x0, 0x300) 1.840971262s ago: executing program 0 (id=1132): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="399ebad2ded80fa283e7f9edcbe3e5090f31c9a6df308591c43cd335cf884495bdae553d989c33360aabedafbebd700e814c88882fb6f8ac72017a0cbeca98b8e626dba9c6f81f384190ae4cf98560f9e14cd4a07f779aed2cb422d73684ce8ff6af049b58179de5470c06b85d15ee8561a58837b5cf2e247894194a2eba0e3fe187bf0ac0a4b07cca69547624aa1eda3af59d0efb5b73", 0x97}, {&(0x7f0000000500)="534f061249d69b8a583c4f2c6627b5b2f3bbd11222100e94b70b42f516f02c4bb813a6a473955e6a0b6bc717cb3b8dc502360c93575e5c65c397e22849a6c0627233e0e5436c0c2d9cc371149d7741f7a200c997cb0649ef6073522b8ce04e764da18e0ce09d8d2d3f29683206cc2f902f66709eb7588960ccaacad0d1", 0x7d}, {&(0x7f0000000580)="59d6c27c951f23ebcff95574f1964058c618bb11f42a0870d209514d8eab422dc46b505d3f5a82fba165a0ca87b09dafc8191735a5ec18f0322925957c44ca087478a30be3fbd67bf9ba43510f8e294df913b0c07f1e9bc75588589a7d52722673a31599b05c6ed7688752596d0732de033051a84e57", 0x76}, {&(0x7f0000000e80)="354d6849bd9b0e9b495201e499d6e9140bff4dc1bfc7a78ed4269995b3bd8da3e0e20b06834a0f096b54d880b9e5fb71cbd59f5f4a4d9e0ecf105d6534e908da8fdd71c8c9df3a900d971e13b1f01c0790d8f0053a41189f589122793e628b14f22a4ad3876bff075675e50424bd99a0e86b37458405af18e8516eae89340c0bb3815feeafdd6286e851b08e50100aa71e62d9945434859a5a6bdd2ecb4e48abc0cebf34117f5cce9169fdc2bda1f0d7bdb57173af8676f78cd8e2dbb9b8c885b9753663b4ce4a8dccdf8ad2c210023537002bc4f5405b8815f32d9f21d9ebc9e3d4cbfd83c99bf4563dccf005ed248cd188fe5fd5316185a831a8f65f983e4b06df09adebc1fbe961347e4b4f7348c60877dd1695b7216e952a9fd685184e830238b36f99f54b751ecad59e300bd42a8928ef11bee05ffd8ecdf960b76fb42995436ab9aa7808ad4db0971c6ff48db8565a46c53eed8a586a478cbb22ac4b90d2d055445440546176f41c7ab58d8ef13ca7dd3d8e597e2217640a9d0f67b2b09014b7f0592aaa22ad46bc791a514bd84741476124bc70bae445b774253339534ddec44cc73419c90767987af13d63e52202c56234da1728d5da595d3610cc7cb70c2cbf143e9356951906220522eace51e90566ca256c02e65640567c8ce0d4757679859bb8bcf1a839defd99774ddc60242c91153edb8f1e5eae9ffa573bb33713b6c3cb268fa0e02a2d4a5b0063c6fba48ed2c702f7a1d67924b0747408c40ad37f528e38c3046a6ba69991c86a5e112c86ad824ab6cb93b9922b2689a5527dfb4f62b5d3790f59fca562e80ac92131c8226eeafb215704bd55456c17c4c306bea304604d89d3ab6c2b25920bc157901f92140cfccf29881089cf3842316fd447ad60889e62ea76f0e5c3820ad87e853074013ef73979330aabf062222bdab5b80910415e4c7d5103586865423aca2c3ee4fe8de0d4725b29e0d7dc7c51550f6dd64dce34e26e9ebbdf7d1bcfb0b5e7ee51b0c5c4567ba803c89056112e9d50b1d7b5442cab555497e490678733fe364f0aceb92152175c8667aa4be1220eab20583e11710d6cf81c216c41ea2ef869a887664a411e1b79c306e70224851c3b320843a01290c380604ce7c077a940c536987493eac1d8f7980ac8727c924d32dd2909771d3e0c0960aa97194b1576da7c5b24941659224102f204fb2655cf013a760e2fe5e5828b8208a5b9b4decd3ae4d538bc81bc1efe4a42b03ee08fc48f448f2c0a5772eef45daebada0d6dba97c3596b40e79bf0b870509d3236346dc2f0e91e7a46a4862acb271be5f0db8235fc7d48fecbb7b6c4debf7b15b1d30c9a8282383fe2414b6677a495646b6e8dfcedab65a64c56f9d2a858eee4cd8041c99fdeaadb6fe603c2647de3e1a1ea75de9713fc71b4e6909a0b0c0ac3a0da81ddfb9bd202d2ea597ef50058e8afc6451170828d19299ae2475179577c0e66e50496689ca4dd98b3357fe50b09ecf2d7054199d2690d14771ac0b7c974a14b1fb63ebb332d50dc6911d695a340c059f2715f6e3f4753ad5d6bb700a5ee54ff4d8a903f274b23b7394d6e4c4e045eec5174900d3d102786bbfcb0327d1ac279e8a1b93764707f862689a4e4d379a83ea1f016f11276c12306a78689d544805febb6e6260e3ebaf7f5ed5dd338a8fb576636e45ed31a9b9ea84380109332a9b3e241d800de95889f6322f0045187d608642c2d968e350f0cc95bf047dcd896da42d5aa4d33030837cce9b86bdaf9bc4c06713ea11ca114e81a0e6d55e0050c7c9f2ee8a8555bbe313893f374714dfd6a07bfc1fa29b2d74546835ecdddd53905d6b3e7be50c1fb97389e26cf94272cc34ed455462d60fa5941b7fd0f3c1d388a4389ddf7ddfe1563680eff511f50a8a0816ec10c7554806739f07880e18462cf0412c99d80b154c0a6798c2341901d4c68f511f68969693f30fc53554f728a7b28847cd3ae4fa1eb071c4998f3f4c3023e1f392eca4f31577dbf946d56500cf6707e1a1f692fb4cd2d67521ea22159f73968110bba2598dd39f7e061ce5ffecb59a1acf38eb9ff1e292b4c25ca471077edc71611bc6051a69dad65a04331169b98a8bb59a1e6a7fd00270aaa21ea465071062e158e1b9ef9ef3d3a559e102e2a0ef65a5d1b63459b12e535893ad0e18eb29bac30a6211274f617526f8a22210a058941fa3a0bf423abbe27f4314843c702c35e4d649d17f56ae0f614b362a76d8ceeb300229c47fd1ba534e1f0dd07ae69da9cd96992e5a5fe741a0a14c02b297d7d09930f483fd9e52ff0d168904ba8e0759557b6a94b3707f7f3e3a04ff70251fe5ead9b67011d74b0e25f5f3c6562816a1d4e3dbb631805c7d4130c943fe3b97ddb6c5b1a2c9b69535437ad17a9fe67cfed5967bddd1238e467f80df620a781caa73857deddd12aa7442f662c4b503fe9aeea04b540ba1bda5dc93f8cc1f918a7fe7b823ce678304291391aeb6fb78bae9acdcf630aaea587b0dfeea2493206582c3d54491293e74c1072fe9a689461f3542e77b601eede92f6c8bbe483c4d08b9c8ac52ec07597e61ba4f6602b85363220d02f4917bd7e9c0504cdc722869cac1191506dd4e4de224cd00e6fafaddfcb8fd0a13785610c89fa14e7fd5aa7dc5182f13427c41e38f2e88c57122a32e83f773346e78d855d44fccda6a295215bc833e518b24183d52dc7880acd1245d7a7458b0e95c143d472bf1e7c97c6a9eb5e61fb4d521fcc270419f363b534c1517b8950c0db82658be1d435bc10e6ad11316d6d0abb7d838cc408a8882a43889c93c131a1c11e0dce7dfc93a2f0a874d4bbbd5c3aa5a047d7647251bd038fff1951d5c9cab4936337c4afe88926e2e036a6ce04fd84303715f8a553004899839a1764e662ec274b8bc7added2fc65c1350ee6e2e876d52b192bb8c010cc5b718be79c59ea17d55d23fd875ed50dfbc32ef28bc2b7d74718e5894627ee1418948ccbc1a0acee66c3211978eae13d9abda33928aa34e7d29846411235e4c88c0c4388822913479bba358b6172af791c30bc2a39b13e3a0a394485392e15ea6a97e5b915988330a7ab64cb427aebb23a9f348ba767275593dce80954b0fc844530838837ca8d33f71e40410e2db38fdeb23e5b0f9998ffb567947cb23cc607b9c722a688241756f3847b80a8a8f77f2d9587fa415c99a3de92beb0dd5ccf075229def20afa189ebea50fab787fe5fce6497cf4bd31e4f650fcb78cfc5d00322449b0230035c1da96691b7cf0b24920ef1a4d4250bbc53fbe51f3d0f6140b1d4ca5abe4f8ea982831f00677f4f74cd1c673188a621e95d18f05a0b536a14a45c58772c8bf5a25c185ec9f966835c938471eecb90815eabf824d0f318c778549d2fbb0f8689f6136d5b12b3d0ace19688d5c97df134757d3bd33a1502f58d3daff5362dcfb69fb56f889d5498a06f538700643f64b6505571486ceb19c51ea9a5f1a6ac35b499eacb69f66e31d3bae572c218106796cf15151301028ce6640dec2c7f1b58e5580258513ab914959df5c291490558ca1d658dac8b24208b3750ac5043ccc864ff15ae6b3057ecf59f396b03e873fee574c386ae5aa289fdb341abd38c406447e0d665cdbde8bc1b96de7df367b1d900bf03e5e232d242478dd8da98cae0e74f27ce34d8ccff0639804b49221616840328f386f085579c8b1fbdbd1dfc5ee542dd32934c7ca4f9ebfc72c25fb2e40ccbdde55f89be545e9697e63bbe236519f6b02110a0e15bd105e73ea0b070996db50153662efdce3fd1a9a75da18433439fe5f2c31e03028af0566cf9e2d45ed9eb241436edd121c71791b0dccfdd20596f7546c1a369f479b7d8e84570354926d90307144fde1781902033a636faa032f8db38d0c87bc729b7de05c0e7ef22a67cd908b5ec998e4bf5f4349f30ecea5ed0fd17d043e94f4bdf365b0a9f98fe434ada48537cfbc592ecbde38c634c6bf0a7b8b4456aa27b956536b13ccfb93d39fdd7dc3cef15791c887c026ae02dd0341a761e4c3daa3d6cc1cf80a223187ef6b0e965b760b3dac4c33a057dd70146b6259d04edd7fb4cdf8adaee1244dd4821f38232325ec53c7ad9ef1ec76d51e2e758d9875be1417d5f8338a6e7e0924870c65abc062fdde0bd11c7bc08fb6ec0280737946276866d0db49ec61e9f3a3a653cecfee32d19667cafa4a2b5710f60448c473c7300e747b523ab1622cb9b6db1b80b7d7ba2a682bbe20c7608008fbbc31cfc606226f3aeb47326a9197fb4fbe4b876070c1add8eccb6f57dfaf715bed9463238814331322ebb598b45037041a0bf366e603d3ef3046a78dc4ca13bceb2dd35a5b259eb3d995dc220a5a483b402bfbcddd7566d3f51f96322ddabdb12229200202d67a82a1eaa7e4e93b3e5869a517003bac751cab894226bd0e5ffd0d3e5d697d0e7c8a0d063fca519665b002c3af913b3488a754a92dc86b19e95418002c9f80ff047715801b85d123f1f3af3966ccf698ec383c4ed5c133fb2c1799798848f94d32ee42a4d6d00ee1f01e2d3510abe94f7de12e82d625bd41aee1f7d326f704b6fd213426922670278551c2c126196c6215535de4d09d6c44630a56461d92c1e6cfe77989320bd2688a9ed60d470528f6fe533805e2a845a9db3088bdaab39151f1d687f1313ef60df45ffaa0d6a69266274f849b07c364b1223d9b12605f811ca21b8baed42ce5c71ea62a7b5e449f590616cddc9817867a054c6acddf89d96431d96e7200f241accde818efbaab61cc6f5f42012df1d7f80ae446797694057a406ad99feef2d0b79e4332bbe3e2a14dcbd6b8d8e47890855c24ba7d4ef4e7e55b41fea714419467adbdf4f57eef6e715695409d414234d300f534579b4a8fd03bc2055847dfe364831b83a710e3be058bde3a76442eae7ef65c8186065f8968044adadc30b84a0b15310030f74a1df10ac4ced3187f9d4645b4c750599cd88079eb4c916e3f1b7569ea17bbf1ddf5bfc4dbb99505f29b89548c1f4a868e2d905ccf2f82f24391384d8184568c99e563e759a1813c5c950603f9a7be149dd6a0dba2a2bf4d6aef1e68fd581cc93719ac85cddaac7535adedc3dbd7fa4165670f94f15dff462aaf82c9c398f12d504a873c1da4ddcadfa2b207ba7d7c1343c095df924bf799e1410ffc24ef39e05d98d96a71b0812db2bde474897006163f073f01a56b95fbefd3d9c19c50b64a2b694eb9516194da421c5119cfe714f881c6e8f4f87fe8812b7d722c6a9a4c57d6f705ede74c487f05ee4262915ae0118ef23b8f98e4794096c4132ef81f31184193111058f408a49cd2335f2d322dd0774921681f45e958e9a28e39f4ee2d1d5034c5b9b53a2152a23b488d02649f04eb2b27ad07808f6613d48ca882c130f56fdeaa728b5105a7af843f194454ab4e9150e2841b7f33a8ac831b58c6bbced880ffebf43886725cbaae5229be4476ae8a1de993fe570cb8489d378c9ae91fff6a5b6662ccf73fa88cd48ab3518043a5bfa13c5dc40fd61cc0ed9712015a5322a5a9e7e5642e52bafe93644d98365098627a3af4f51f85ad127adc8a9f05ce4bb5990d56ce8104ad8169d8262c6a303f24909a2828c361871beee93a32bfa1c0594d354736faadd95923885772e411e05d513870c7873a3b50bc8c86954c3ec2b2dbbd114771c9f2d11c2038e9756e25ff27ee530e00084938037ff15323b01d3ee9a0b6a9bd862b8dbda3846e4b8978ad217088bf0e81003507be6310", 0x1000}, {&(0x7f0000000480)}, {&(0x7f0000000600)="05e87dc5bd1492cae82908c88f7fd8e2f54c6781bef2bb99701a754bf56b835aa753ef97b245f3c9d01f17146ab00179d740c9f5b2782f183c407a3654a34ae2c54c945cff53d2f2c4abe46fad2dfab735914ee98339c4210b37a80ddc8b228895fe464b32b2c7f090b9bf6ef0f846848a87237bbcaa1cfb62a6b4ff87b20eff08cea295ba5a003db762994634b2c42dfeb3cec82e5c04329cbe1e98808aabcdb8cc068e4129cef5a4b7aed2e480ef2dc7922e938f1b", 0xb6}, {&(0x7f00000006c0)="47abc46e7837bba92148b4edf8343016f69b627ecaf1dc627cdd6cb8c5aaddbd889fc09a8e4ee03fb5a2da4a668a1c4fd8681c32e326dd9836913eb1a900e90e1ebaa3606fb30e58d4078e86ee78694fbef0bc0275fe7f4fea61bd5b8127c1c2085a20092391e83ae9540c1d91251ac7a24745c33e8ceb7aec3d488155d42cbebe4c34659e76ba2f11611c97edc0bd1ba1e07e217fcaf8e945dcfa6fd4df7a7486dcdadf8bd7", 0xa6}], 0x8, &(0x7f0000000800)="e2f69f2d6ea7a41532eff8b6cd1fb74b8898eff0e43bbd10fa80356bfc46baa71c628aa59ca1fd5fdb5ade58928cd8a08199b18f1827faf5f3765402e7b7841d02c35721c60992c7a2224e2ec0e0f7fe0ad0788e68d491f5e5e8912280b6b8e3", 0x60, 0x4}, 0x44000) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) r2 = io_uring_setup(0x2092, &(0x7f0000000140)={0x0, 0xe91e, 0x1000, 0x1, 0x345}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/10, 0xa}], 0x2) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x3, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000100)=0xffffffff, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast1}, {0x306, @multicast}, 0x60, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wlan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_setup(0x1, &(0x7f00000004c0)) 1.693283834s ago: executing program 0 (id=1135): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) (fail_nth: 11) 1.670727216s ago: executing program 1 (id=1136): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) semop(0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0) 1.406515807s ago: executing program 3 (id=1137): open(&(0x7f0000000380)='./file0\x00', 0x80ff, 0x29c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0xfd}}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x10, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3e749129cdf9ca7c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000400)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xcf) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(r5, 0x400, 0x300000000000000) 1.253643119s ago: executing program 0 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) (fail_nth: 5) 1.252143929s ago: executing program 3 (id=1142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) prctl$PR_SVE_SET_VL(0x32, 0x3c726) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) lsetxattr$security_selinux(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000080)='system_u:object_r:setrans_var_run_t:s0\x00', 0x27, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a0c4937872932668f73ff9d09ea2be52111d148ef06def1786b50524e828926fe8babd5579a7b1f96a32228f517107d6ed0e5071970edf5458802d182c9ba77362e588cfee6f0cab83826b50777ad82e3838ad2e0039e4d04b7fb24b92b43d8290fa2f7b2a7602aace47088495a6415cad9552c7fd28314f0b7e21a1b66352ba7d00a0956a31b53a60147da2c254612eae4abec9c3583e0711ea297", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x69d, &(0x7f0000001880)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, &(0x7f0000000340)=0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000080803000000000000000000051200050500030084000000040004800900010073797a310000000005000300880000000600024000100000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) 1.231793531s ago: executing program 3 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_format(r3, &(0x7f0000000040)='-1\x00', 0x3) 1.177200335s ago: executing program 2 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b003031"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") r7 = socket(0x10, 0x803, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.175965325s ago: executing program 0 (id=1146): add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r3, 0x4000, r0}, 0x18) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000440)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x17, 0x2, 0x0, 0x0, "e1f56c17f67f533aefbabe5cd2c2c8c6ea8662721300943f00281c6e124f30aecd1295898fabec36c87c2e46c80cafa556008cc9c091c31b766d2a24e9687309"}, 0x48}, 0x118}, 0x81) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000063760000008500000086000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, &(0x7f0000000300), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x52, '\x00', r2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) socket$key(0xf, 0x3, 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) recvfrom$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r10, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.161945417s ago: executing program 2 (id=1147): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x440102, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x800}}]}}]}, 0x48}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x90, &(0x7f0000000480)='cgroz\xfbO\xd2\x18h\xd6yy\xba\xb5I$\xb3\xe2\xd1up\x00\x1a@+\xebQ\x9aj\xdb\x98\x84\x85\x9c&\xc7\x0f\x00a<\xd4y\xe4C\xf7yQ\x01l3\x8c\xd3\x9f\x9a\x18\xa2}$\xdc\xb9\xe4\xf3\x89C\x83\xc8\xebtN2\xc1oi\xbf\x14lii\x17\x94Vg\x1cy?N\xf9\x83\x98z\x8c[P\xee\xb3\xcboq\xb8Q\xa8\x18k{\xea|9aS\x1d\x9cr<\x06\xdb-\x80\x9cd\x94\x97\xb8\xf9\xdbFP&\xe7\x8a\xc2\x88\xbc\xa2H\xfa|\x15[H\x93\xb3Q '}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT=r7], 0x27) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff, 0xffff}, {0x7, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r10, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000002001456300b9e913f6d8d443e616e0000000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000001000009b68c39b2d0700000000000000", @ANYRES32=r13, @ANYBLOB="00050000000000004c001280110001006272696467655f736c6176650000000034000580050001000400000008002200", @ANYRES32=r13, @ANYBLOB="080025000300000005000400010000000500040000000000050021000000000008000a00", @ANYRES32=r13, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.071534654s ago: executing program 2 (id=1148): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque='\x00'/12}}}}}}, 0x3a) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) quotactl$Q_SYNC(0xeee9666b5c33a138, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='ramfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="9a3b4be7e674e119c9542a7f1d8e0c2b552b227171a3081024a6ddbdc15ff0aa874cca5ede8461aafcc7da89fdd0c83c513c610a74e62fb416b18b7f3336870fb98f42d5bb176187ca5681e1f9d93d03a7bf08ab4466a65a503216c24f083a7693f1fe2a1e2071", @ANYRES64=0x0], 0x20) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000060000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x2, @mcast2, 0x6}, 0x1c) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 961.163153ms ago: executing program 2 (id=1149): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setuid(0xee01) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(0xffffffffffffffff, &(0x7f00000002c0)=""/115, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='fsi_slave_invalid_cfam\x00', r2}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in=@private, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc6245000, &(0x7f0000000480)="cde313e0bcba9e4e2bbc55a3156ea130febfb392d84d3bfb1cded63db02842067c554ee10400000000000000935937126257d79d39d0da19ec0a0947a50ea648bf294c893942571f7b5d9b159a9311fb6dea6a6d0224152f238f043ea40a51e49d7607aecd3887319e66ee678a16840c6675bb3a2257ca46d7104b87b0194ea0f9309ecbcda9a23abfe20824c8c2e3b991af5458e82b3d373a1e5df54cb8990ce5eeb923b6", 0xa5, &(0x7f0000002d40), &(0x7f0000000340), &(0x7f0000002dc0)="3746de8c94d58218c95bc18c87c0ff") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000001c0), 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002e40)) r9 = geteuid() setreuid(r9, r9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000002ec0)) 884.168529ms ago: executing program 3 (id=1150): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff95"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x182) (async) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f0000000440)=ANY=[@ANYRESHEX=0xee00, @ANYBLOB=',g', @ANYRESHEX=0xee01, @ANYBLOB=',uid=', @ANYRESHEX=r1]) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x810, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x32, 0x36, 0x3a]}}}}, {@inode32}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x2d, 0x35]}}, {@grpquota}, {@mode={'mode', 0x3d, 0x5}}], [{@smackfsroot={'smackfsroot', 0x3d, '+[$'}}, {@obj_role}, {@obj_type={'obj_type', 0x3d, '/:(\'/!:^)$%)]}--\\.&^{8'}}, {@subj_type={'subj_type', 0x3d, 'minixdf'}}, {@dont_appraise}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x9, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x40, 0x202, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2162, 0x0) r5 = dup(r2) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f727400000005000100070000000c00078008001240"], 0x58}}, 0x20000004) 806.179085ms ago: executing program 2 (id=1152): open(&(0x7f0000000380)='./file0\x00', 0x80ff, 0x29c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0xfd}}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x10, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3e749129cdf9ca7c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000400)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xcf) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(r5, 0x400, 0x300000000000000) 805.860035ms ago: executing program 3 (id=1153): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="020000"], 0x24, 0x0) (fail_nth: 5) 607.394361ms ago: executing program 4 (id=1154): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b6", 0xa}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1203, &(0x7f0000003680)="$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") chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='nv\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) close(0x3) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) (fail_nth: 1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) 561.237405ms ago: executing program 3 (id=1155): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="02800000030605000000000000000000000000060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = gettid() syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x200000000000009f, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 485.169251ms ago: executing program 1 (id=1156): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b6", 0xa}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1203, &(0x7f0000003680)="$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") chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='nv\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) close(0x3) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) 412.255717ms ago: executing program 4 (id=1157): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2e000080452445196142b17c75b3cafde2607a5b9706810010b6", 0x1a}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1203, &(0x7f0000003680)="$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") chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='nv\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b708000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xbf}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) close(0x3) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 77.081764ms ago: executing program 4 (id=1162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="0400000000001900b7080000000000107b8abdce737a6ff86e5e00000000b703000008005623010d00000000030000009500"/59], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000002400)={r7, 0xfffe}, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f0000000500)}, 0x20) r8 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 75.041514ms ago: executing program 4 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), &(0x7f0000000700)="188116675e4441750d147bef763d87b6898d8e5aeab6529a38cfbbcd8ffd8ae130022c59da3b0cd8eda8b2e4a44fd2af56987a93e87d1778790099d2c54ea6b163ee64beff600b2f4fe0766d9807ad3bde2af6abd87002d5ca91f92c2edfec94b447d192948ce480cbad99e7f65ebfc5e6cb49e377249390457e50dea0469758b1b5284bfb554da41ebce0fc78effa806b0c1e8297157b96", 0x98, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r7, 0x0, 0x2, 0x4}}, 0x20) 44.643637ms ago: executing program 4 (id=1164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x9, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000b05999af1e8f6753451e39a7a5fc296f683898c313c8f8775408ce62b96b78ee6337291c9d44b27a40265d648b3fe8eeb4a2630c22abb822ad616fe3aa7db1b8a7ef32ea76ae83552d9cf2679a0d5b5cca132ce2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x97a3}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='ext4_fc_track_inode\x00', 0xffffffffffffffff, 0x0, 0x7ffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8521000000f9ffffffffffffff0000100000044000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x6000) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) statx(r6, &(0x7f0000000280)='./file0\x00', 0x100, 0x10, &(0x7f00000009c0)) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) 8.63489ms ago: executing program 4 (id=1165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) (fail_nth: 2) 0s ago: executing program 2 (id=1166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0a1414ac"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 2 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x101, 0x101, 0x3, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @datasec={0x4, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x0, 0xbfed}, {0x1, 0x5, 0xb72}, {0x1, 0x2, 0x8}, {0x5, 0x9, 0x7}, {0x2, 0x7, 0x8}], "a4d4e6"}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x5a, 0x4}, @datasec={0xa, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x46dd, 0x1}, {0x5, 0x6}, {0x3, 0x8, 0x2}, {0x2, 0xa7, 0x8}, {0x4, 0x3, 0x9}], '%if'}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @datasec={0xa, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x0, 0x3b23}, {0x1, 0xa, 0x4}], "816ab9"}]}, {0x0, [0x2e]}}, &(0x7f0000000380)=""/186, 0x11f, 0xba, 0x0, 0xfffffffb}, 0x28) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="aaeb7a0c1d967c18a8650ef41344000000000000000000970000000000000048b60e82ba9a1409ddbf4d48a0cb14314a004998b7127a3aefa1771e2f11799c46ec1b0710a7d01f1248f643834cb49d95603b1d4b50d27b4513b30a6820131d2476cd1b96ec77a91f9e528822096d5f3fdb425633fc585118f70a866b3e1c8825993aba413d3374fa156d90c0ba68568d97a54ee404366ad951abcedaadc8a47e1d03bc98e18145c8e8f05981be1cce4cebc958dd3d442bd11fdbeeb6f99812f4d9532408cb290cb3961e6ce8362143c369e55bb46d668fc6e53a3300"/230, @ANYRESDEC=r1, @ANYBLOB="ed38031faf08f4cc6ebc7f63bea373c38045703fb324c7da749a2146a3cb1b87dcbc9f189cbeb10a6d51d9041a3299376e6f067c62d0da559b398a03376a216cd1747e161ce31cc82295292c1cbd384f4936339ba0c69f65562ff0e4de5852ede78e5899b6ee624b871e04b9fe5431e87e20ac34c3737d0df63b3c092de20975e1c5d0be8a5e2f92f33afde84b1bf31d111b5e20770bc655b9be548300896abd650fdfc3b664f9e6d724b803778f9de1719a", @ANYRES16=r0, @ANYRES32=r0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.630891][ T5085] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 60.630911][ T5085] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 60.630924][ T5085] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 60.630985][ T5085] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 60.630998][ T5085] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 60.631015][ T5085] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 60.631033][ T5085] [ 60.965565][ T5097] FAULT_INJECTION: forcing a failure. [ 60.965565][ T5097] name failslab, interval 1, probability 0, space 0, times 0 [ 60.978285][ T5097] CPU: 0 UID: 0 PID: 5097 Comm: syz.3.610 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 60.978322][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.978338][ T5097] Call Trace: [ 60.978355][ T5097] [ 60.978363][ T5097] __dump_stack+0x1d/0x30 [ 60.978388][ T5097] dump_stack_lvl+0xe8/0x140 [ 60.978415][ T5097] dump_stack+0x15/0x1b [ 60.978436][ T5097] should_fail_ex+0x265/0x280 [ 60.978619][ T5097] ? audit_log_d_path+0x8d/0x150 [ 60.978680][ T5097] should_failslab+0x8c/0xb0 [ 60.978791][ T5097] __kmalloc_cache_noprof+0x4c/0x320 [ 60.978826][ T5097] audit_log_d_path+0x8d/0x150 [ 60.978873][ T5097] audit_log_d_path_exe+0x42/0x70 [ 60.979005][ T5097] audit_log_task+0x1e9/0x250 [ 60.979070][ T5097] audit_seccomp+0x61/0x100 [ 60.979103][ T5097] ? __seccomp_filter+0x68c/0x10d0 [ 60.979128][ T5097] __seccomp_filter+0x69d/0x10d0 [ 60.979157][ T5097] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.979217][ T5097] ? vfs_write+0x75e/0x8e0 [ 60.979271][ T5097] ? __rcu_read_unlock+0x4f/0x70 [ 60.979298][ T5097] ? __fget_files+0x184/0x1c0 [ 60.979385][ T5097] __secure_computing+0x82/0x150 [ 60.979449][ T5097] syscall_trace_enter+0xcf/0x1e0 [ 60.979473][ T5097] do_syscall_64+0xac/0x200 [ 60.979565][ T5097] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.979630][ T5097] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.979659][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.979687][ T5097] RIP: 0033:0x7f1efb8ceb69 [ 60.979704][ T5097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.979800][ T5097] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 60.979827][ T5097] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 60.979840][ T5097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 60.979852][ T5097] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 60.979864][ T5097] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 60.979876][ T5097] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 60.979899][ T5097] [ 61.228689][ T5101] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 61.236539][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 61.268038][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.286831][ T5101] netlink: 14 bytes leftover after parsing attributes in process `syz.1.611'. [ 61.297927][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.306819][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.315532][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.429853][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 61.960534][ T5178] FAULT_INJECTION: forcing a failure. [ 61.960534][ T5178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.973961][ T5178] CPU: 1 UID: 0 PID: 5178 Comm: syz.2.641 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 61.974044][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.974056][ T5178] Call Trace: [ 61.974063][ T5178] [ 61.974108][ T5178] __dump_stack+0x1d/0x30 [ 61.974135][ T5178] dump_stack_lvl+0xe8/0x140 [ 61.974159][ T5178] dump_stack+0x15/0x1b [ 61.974181][ T5178] should_fail_ex+0x265/0x280 [ 61.974250][ T5178] should_fail+0xb/0x20 [ 61.974286][ T5178] should_fail_usercopy+0x1a/0x20 [ 61.974311][ T5178] _copy_from_iter+0xcf/0xe40 [ 61.974336][ T5178] ? __build_skb_around+0x1a0/0x200 [ 61.974423][ T5178] ? __alloc_skb+0x223/0x320 [ 61.974512][ T5178] netlink_sendmsg+0x471/0x6b0 [ 61.974570][ T5178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.974620][ T5178] __sock_sendmsg+0x145/0x180 [ 61.974652][ T5178] ____sys_sendmsg+0x31e/0x4e0 [ 61.974698][ T5178] ___sys_sendmsg+0x17b/0x1d0 [ 61.974818][ T5178] __x64_sys_sendmsg+0xd4/0x160 [ 61.974884][ T5178] x64_sys_call+0x191e/0x2ff0 [ 61.974907][ T5178] do_syscall_64+0xd2/0x200 [ 61.974966][ T5178] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.975060][ T5178] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.975082][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.975103][ T5178] RIP: 0033:0x7fe183ddeb69 [ 61.975120][ T5178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.975139][ T5178] RSP: 002b:00007fe18243f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.975192][ T5178] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddeb69 [ 61.975217][ T5178] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 61.975232][ T5178] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.975244][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.975256][ T5178] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 61.975273][ T5178] [ 62.181586][ T5179] netlink: 'syz.0.640': attribute type 14 has an invalid length. [ 62.240207][ T5180] Process accounting resumed [ 62.325543][ T5191] FAULT_INJECTION: forcing a failure. [ 62.325543][ T5191] name failslab, interval 1, probability 0, space 0, times 0 [ 62.338255][ T5191] CPU: 1 UID: 0 PID: 5191 Comm: syz.3.646 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 62.338288][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.338304][ T5191] Call Trace: [ 62.338313][ T5191] [ 62.338322][ T5191] __dump_stack+0x1d/0x30 [ 62.338349][ T5191] dump_stack_lvl+0xe8/0x140 [ 62.338409][ T5191] dump_stack+0x15/0x1b [ 62.338431][ T5191] should_fail_ex+0x265/0x280 [ 62.338502][ T5191] ? tcf_action_init_1+0x11e/0x4a0 [ 62.338570][ T5191] should_failslab+0x8c/0xb0 [ 62.338596][ T5191] __kmalloc_cache_noprof+0x4c/0x320 [ 62.338630][ T5191] tcf_action_init_1+0x11e/0x4a0 [ 62.338660][ T5191] tcf_action_init+0x267/0x6d0 [ 62.338818][ T5191] tc_ctl_action+0x291/0x830 [ 62.338980][ T5191] ? __pfx_tc_ctl_action+0x10/0x10 [ 62.339006][ T5191] rtnetlink_rcv_msg+0x657/0x6d0 [ 62.339053][ T5191] netlink_rcv_skb+0x120/0x220 [ 62.339085][ T5191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.339114][ T5191] rtnetlink_rcv+0x1c/0x30 [ 62.339199][ T5191] netlink_unicast+0x5c0/0x690 [ 62.339232][ T5191] netlink_sendmsg+0x58b/0x6b0 [ 62.339424][ T5191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.339459][ T5191] __sock_sendmsg+0x145/0x180 [ 62.339535][ T5191] ____sys_sendmsg+0x31e/0x4e0 [ 62.339573][ T5191] ___sys_sendmsg+0x17b/0x1d0 [ 62.339641][ T5191] __x64_sys_sendmsg+0xd4/0x160 [ 62.339733][ T5191] x64_sys_call+0x191e/0x2ff0 [ 62.339756][ T5191] do_syscall_64+0xd2/0x200 [ 62.339786][ T5191] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.339814][ T5191] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.339885][ T5191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.339908][ T5191] RIP: 0033:0x7f1efb8ceb69 [ 62.339924][ T5191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.339990][ T5191] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.340010][ T5191] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 62.340023][ T5191] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 62.340036][ T5191] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 62.340049][ T5191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.340061][ T5191] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 62.340080][ T5191] [ 62.581533][ T5193] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 62.593337][ T5191] syz.3.646 (5191) used greatest stack depth: 10296 bytes left [ 62.678338][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 62.687697][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 62.898909][ T5209] team0 (unregistering): Port device vlan0 removed [ 63.483156][ T5270] FAULT_INJECTION: forcing a failure. [ 63.483156][ T5270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.496367][ T5270] CPU: 1 UID: 0 PID: 5270 Comm: syz.4.677 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 63.496453][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.496467][ T5270] Call Trace: [ 63.496474][ T5270] [ 63.496482][ T5270] __dump_stack+0x1d/0x30 [ 63.496573][ T5270] dump_stack_lvl+0xe8/0x140 [ 63.496595][ T5270] dump_stack+0x15/0x1b [ 63.496617][ T5270] should_fail_ex+0x265/0x280 [ 63.496653][ T5270] should_fail+0xb/0x20 [ 63.496757][ T5270] should_fail_usercopy+0x1a/0x20 [ 63.496782][ T5270] _copy_from_user+0x1c/0xb0 [ 63.496886][ T5270] ___sys_sendmsg+0xc1/0x1d0 [ 63.497018][ T5270] __x64_sys_sendmsg+0xd4/0x160 [ 63.497055][ T5270] x64_sys_call+0x191e/0x2ff0 [ 63.497084][ T5270] do_syscall_64+0xd2/0x200 [ 63.497115][ T5270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.497215][ T5270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.497253][ T5270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.497281][ T5270] RIP: 0033:0x7f805b8aeb69 [ 63.497301][ T5270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.497325][ T5270] RSP: 002b:00007f8059f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.497426][ T5270] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8aeb69 [ 63.497463][ T5270] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 63.497552][ T5270] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.497568][ T5270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.497650][ T5270] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 63.497710][ T5270] [ 64.026166][ T5303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 64.032781][ T5303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.041022][ T5303] vhci_hcd vhci_hcd.0: Device attached [ 64.048141][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 64.049555][ T5304] vhci_hcd: connection closed [ 64.062422][ T85] vhci_hcd: stop threads [ 64.071501][ T85] vhci_hcd: release socket [ 64.075942][ T85] vhci_hcd: disconnect device [ 64.650615][ T5336] FAULT_INJECTION: forcing a failure. [ 64.650615][ T5336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.664045][ T5336] CPU: 1 UID: 0 PID: 5336 Comm: syz.2.703 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 64.664149][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.664165][ T5336] Call Trace: [ 64.664174][ T5336] [ 64.664184][ T5336] __dump_stack+0x1d/0x30 [ 64.664213][ T5336] dump_stack_lvl+0xe8/0x140 [ 64.664237][ T5336] dump_stack+0x15/0x1b [ 64.664259][ T5336] should_fail_ex+0x265/0x280 [ 64.664323][ T5336] should_fail+0xb/0x20 [ 64.664402][ T5336] should_fail_usercopy+0x1a/0x20 [ 64.664429][ T5336] _copy_to_user+0x20/0xa0 [ 64.664463][ T5336] simple_read_from_buffer+0xb5/0x130 [ 64.664505][ T5336] proc_fail_nth_read+0x10e/0x150 [ 64.664588][ T5336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.664624][ T5336] vfs_read+0x19d/0x6f0 [ 64.664680][ T5336] ? __rcu_read_unlock+0x4f/0x70 [ 64.664706][ T5336] ? __fget_files+0x184/0x1c0 [ 64.664733][ T5336] ksys_read+0xda/0x1a0 [ 64.664768][ T5336] __x64_sys_read+0x40/0x50 [ 64.664851][ T5336] x64_sys_call+0x27bc/0x2ff0 [ 64.664873][ T5336] do_syscall_64+0xd2/0x200 [ 64.664896][ T5336] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.664928][ T5336] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.664956][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.665038][ T5336] RIP: 0033:0x7fe183ddd57c [ 64.665058][ T5336] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.665082][ T5336] RSP: 002b:00007fe18243f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.665139][ T5336] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddd57c [ 64.665151][ T5336] RDX: 000000000000000f RSI: 00007fe18243f0a0 RDI: 0000000000000003 [ 64.665190][ T5336] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.665202][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.665214][ T5336] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 64.665231][ T5336] [ 64.949498][ T5352] FAULT_INJECTION: forcing a failure. [ 64.949498][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 64.962358][ T5352] CPU: 1 UID: 0 PID: 5352 Comm: syz.3.709 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 64.962395][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.962437][ T5352] Call Trace: [ 64.962444][ T5352] [ 64.962452][ T5352] __dump_stack+0x1d/0x30 [ 64.962481][ T5352] dump_stack_lvl+0xe8/0x140 [ 64.962537][ T5352] dump_stack+0x15/0x1b [ 64.962559][ T5352] should_fail_ex+0x265/0x280 [ 64.962645][ T5352] ? __se_sys_mount+0xef/0x2e0 [ 64.962721][ T5352] should_failslab+0x8c/0xb0 [ 64.962764][ T5352] __kmalloc_cache_noprof+0x4c/0x320 [ 64.962825][ T5352] ? memdup_user+0x99/0xd0 [ 64.962856][ T5352] __se_sys_mount+0xef/0x2e0 [ 64.962884][ T5352] ? fput+0x8f/0xc0 [ 64.962920][ T5352] ? ksys_write+0x192/0x1a0 [ 64.963007][ T5352] __x64_sys_mount+0x67/0x80 [ 64.963037][ T5352] x64_sys_call+0x2b4d/0x2ff0 [ 64.963060][ T5352] do_syscall_64+0xd2/0x200 [ 64.963157][ T5352] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.963182][ T5352] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.963203][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.963224][ T5352] RIP: 0033:0x7f1efb8ceb69 [ 64.963243][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.963276][ T5352] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.963308][ T5352] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 64.963324][ T5352] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 64.963341][ T5352] RBP: 00007f1ef9f37090 R08: 0000200000000880 R09: 0000000000000000 [ 64.963356][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.963372][ T5352] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 64.963394][ T5352] [ 65.152118][ T29] kauditd_printk_skb: 1577 callbacks suppressed [ 65.152133][ T29] audit: type=1400 audit(1754362949.616:6890): avc: denied { mounton } for pid=5350 comm="syz.2.708" path="/147" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 65.187070][ T5354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5354 comm=syz.4.702 [ 65.195975][ T29] audit: type=1400 audit(1754362949.766:6891): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.225378][ T29] audit: type=1400 audit(1754362949.806:6892): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.259097][ T29] audit: type=1400 audit(1754362949.836:6893): avc: denied { map_create } for pid=5356 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.265107][ T5357] FAULT_INJECTION: forcing a failure. [ 65.265107][ T5357] name failslab, interval 1, probability 0, space 0, times 0 [ 65.278323][ T29] audit: type=1400 audit(1754362949.836:6894): avc: denied { prog_load } for pid=5356 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.290926][ T5357] CPU: 1 UID: 0 PID: 5357 Comm: syz.2.711 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 65.290954][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.291020][ T5357] Call Trace: [ 65.291030][ T5357] [ 65.291040][ T5357] __dump_stack+0x1d/0x30 [ 65.291078][ T5357] dump_stack_lvl+0xe8/0x140 [ 65.291108][ T5357] dump_stack+0x15/0x1b [ 65.291162][ T5357] should_fail_ex+0x265/0x280 [ 65.291211][ T5357] should_failslab+0x8c/0xb0 [ 65.291248][ T5357] __kmalloc_noprof+0xa5/0x3e0 [ 65.291296][ T5357] ? iter_file_splice_write+0xfe/0x970 [ 65.291381][ T5357] iter_file_splice_write+0xfe/0x970 [ 65.291409][ T5357] ? shmem_file_read_iter+0x488/0x540 [ 65.291504][ T5357] ? copy_splice_read+0x5ae/0x5f0 [ 65.291555][ T5357] ? copy_splice_read+0x5ae/0x5f0 [ 65.291662][ T5357] ? __pfx_iter_file_splice_write+0x10/0x10 [ 65.291690][ T5357] direct_splice_actor+0x156/0x2a0 [ 65.291719][ T5357] ? shmem_mmap+0x51/0xb0 [ 65.291763][ T5357] splice_direct_to_actor+0x312/0x680 [ 65.291793][ T5357] ? __pfx_direct_splice_actor+0x10/0x10 [ 65.291825][ T5357] do_splice_direct+0xda/0x150 [ 65.291852][ T5357] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 65.291888][ T5357] do_sendfile+0x380/0x650 [ 65.291938][ T5357] __x64_sys_sendfile64+0x105/0x150 [ 65.291980][ T5357] x64_sys_call+0x2bb0/0x2ff0 [ 65.292011][ T5357] do_syscall_64+0xd2/0x200 [ 65.292102][ T5357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.292137][ T5357] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.292230][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.292268][ T5357] RIP: 0033:0x7fe183ddeb69 [ 65.292289][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.292315][ T5357] RSP: 002b:00007fe18243f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 65.292342][ T5357] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddeb69 [ 65.292430][ T5357] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 65.292491][ T5357] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.292511][ T5357] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 65.292528][ T5357] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 65.292554][ T5357] [ 65.394343][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 65.398351][ T5338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 65.403386][ T3032] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 65.407767][ T5338] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 65.413133][ T3032] audit: backlog limit exceeded [ 65.603329][ T5377] FAULT_INJECTION: forcing a failure. [ 65.603329][ T5377] name failslab, interval 1, probability 0, space 0, times 0 [ 65.616164][ T5377] CPU: 0 UID: 0 PID: 5377 Comm: syz.1.716 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 65.616200][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.616216][ T5377] Call Trace: [ 65.616254][ T5377] [ 65.616263][ T5377] __dump_stack+0x1d/0x30 [ 65.616291][ T5377] dump_stack_lvl+0xe8/0x140 [ 65.616316][ T5377] dump_stack+0x15/0x1b [ 65.616407][ T5377] should_fail_ex+0x265/0x280 [ 65.616449][ T5377] should_failslab+0x8c/0xb0 [ 65.616488][ T5377] kmem_cache_alloc_noprof+0x50/0x310 [ 65.616583][ T5377] ? skb_clone+0x151/0x1f0 [ 65.616606][ T5377] skb_clone+0x151/0x1f0 [ 65.616626][ T5377] __netlink_deliver_tap+0x2c9/0x500 [ 65.616668][ T5377] ? netlink_attachskb+0x2d1/0x610 [ 65.616705][ T5377] netlink_sendskb+0x126/0x150 [ 65.616738][ T5377] netlink_unicast+0x2a2/0x690 [ 65.616857][ T5377] netlink_ack+0x4c8/0x500 [ 65.616891][ T5377] netlink_rcv_skb+0x192/0x220 [ 65.616930][ T5377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.616959][ T5377] rtnetlink_rcv+0x1c/0x30 [ 65.616993][ T5377] netlink_unicast+0x5c0/0x690 [ 65.617023][ T5377] netlink_sendmsg+0x58b/0x6b0 [ 65.617065][ T5377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.617174][ T5377] __sock_sendmsg+0x145/0x180 [ 65.617207][ T5377] ____sys_sendmsg+0x31e/0x4e0 [ 65.617253][ T5377] ___sys_sendmsg+0x17b/0x1d0 [ 65.617310][ T5377] __x64_sys_sendmsg+0xd4/0x160 [ 65.617460][ T5377] x64_sys_call+0x191e/0x2ff0 [ 65.617489][ T5377] do_syscall_64+0xd2/0x200 [ 65.617517][ T5377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.617578][ T5377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.617607][ T5377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.617630][ T5377] RIP: 0033:0x7f7d8fe3eb69 [ 65.617650][ T5377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.617674][ T5377] RSP: 002b:00007f7d8e4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.617699][ T5377] RAX: ffffffffffffffda RBX: 00007f7d90065fa0 RCX: 00007f7d8fe3eb69 [ 65.617716][ T5377] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 65.617788][ T5377] RBP: 00007f7d8e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.617898][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.617914][ T5377] R13: 0000000000000000 R14: 00007f7d90065fa0 R15: 00007ffcad69b9c8 [ 65.617937][ T5377] [ 65.880453][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.718'. [ 65.914743][ T5379] FAULT_INJECTION: forcing a failure. [ 65.914743][ T5379] name failslab, interval 1, probability 0, space 0, times 0 [ 65.927483][ T5379] CPU: 0 UID: 0 PID: 5379 Comm: syz.4.718 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 65.927512][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.927525][ T5379] Call Trace: [ 65.927534][ T5379] [ 65.927543][ T5379] __dump_stack+0x1d/0x30 [ 65.927570][ T5379] dump_stack_lvl+0xe8/0x140 [ 65.927633][ T5379] dump_stack+0x15/0x1b [ 65.927650][ T5379] should_fail_ex+0x265/0x280 [ 65.927683][ T5379] should_failslab+0x8c/0xb0 [ 65.927715][ T5379] kmem_cache_alloc_noprof+0x50/0x310 [ 65.927828][ T5379] ? security_inode_alloc+0x37/0x100 [ 65.927859][ T5379] security_inode_alloc+0x37/0x100 [ 65.927935][ T5379] inode_init_always_gfp+0x4b7/0x500 [ 65.927967][ T5379] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 65.927993][ T5379] alloc_inode+0x58/0x170 [ 65.928026][ T5379] new_inode+0x1d/0xe0 [ 65.928056][ T5379] __debugfs_create_file+0x109/0x330 [ 65.928087][ T5379] debugfs_create_file_full+0x3f/0x60 [ 65.928179][ T5379] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 65.928255][ T5379] ref_tracker_dir_debugfs+0x100/0x1e0 [ 65.928306][ T5379] alloc_netdev_mqs+0x1a2/0xa20 [ 65.928351][ T5379] rtnl_create_link+0x239/0x710 [ 65.928449][ T5379] rtnl_newlink_create+0x14c/0x620 [ 65.928483][ T5379] ? __list_del_entry_valid_or_report+0x65/0x130 [ 65.928519][ T5379] ? __mutex_lock+0x25d/0xcf0 [ 65.928549][ T5379] rtnl_newlink+0xf29/0x12d0 [ 65.928599][ T5379] ? xas_load+0x413/0x430 [ 65.928621][ T5379] ? __rcu_read_unlock+0x4f/0x70 [ 65.928696][ T5379] ? xa_load+0xb1/0xe0 [ 65.928724][ T5379] ? __rcu_read_unlock+0x4f/0x70 [ 65.928778][ T5379] ? avc_has_perm_noaudit+0x1b1/0x200 [ 65.928802][ T5379] ? cred_has_capability+0x210/0x280 [ 65.928850][ T5379] ? selinux_capable+0x31/0x40 [ 65.928913][ T5379] ? security_capable+0x83/0x90 [ 65.928939][ T5379] ? ns_capable+0x7d/0xb0 [ 65.929036][ T5379] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.929062][ T5379] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 65.929169][ T5379] netlink_rcv_skb+0x120/0x220 [ 65.929203][ T5379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.929330][ T5379] rtnetlink_rcv+0x1c/0x30 [ 65.929356][ T5379] netlink_unicast+0x5c0/0x690 [ 65.929392][ T5379] netlink_sendmsg+0x58b/0x6b0 [ 65.929497][ T5379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.929580][ T5379] __sock_sendmsg+0x145/0x180 [ 65.929605][ T5379] ____sys_sendmsg+0x31e/0x4e0 [ 65.929647][ T5379] ___sys_sendmsg+0x17b/0x1d0 [ 65.929742][ T5379] __x64_sys_sendmsg+0xd4/0x160 [ 65.929803][ T5379] x64_sys_call+0x191e/0x2ff0 [ 65.929837][ T5379] do_syscall_64+0xd2/0x200 [ 65.929867][ T5379] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.929898][ T5379] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.929949][ T5379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.929971][ T5379] RIP: 0033:0x7f805b8aeb69 [ 65.929986][ T5379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.930003][ T5379] RSP: 002b:00007f8059f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.930027][ T5379] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8aeb69 [ 65.930044][ T5379] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 65.930108][ T5379] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.930124][ T5379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.930136][ T5379] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 65.930153][ T5379] [ 65.930164][ T5379] debugfs: out of free dentries, can not create file 'netdev@ffff88811b3d0550' [ 65.949260][ T5387] FAULT_INJECTION: forcing a failure. [ 65.949260][ T5387] name failslab, interval 1, probability 0, space 0, times 0 [ 66.299317][ T5387] CPU: 1 UID: 0 PID: 5387 Comm: syz.2.720 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 66.299352][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.299418][ T5387] Call Trace: [ 66.299427][ T5387] [ 66.299436][ T5387] __dump_stack+0x1d/0x30 [ 66.299461][ T5387] dump_stack_lvl+0xe8/0x140 [ 66.299480][ T5387] dump_stack+0x15/0x1b [ 66.299506][ T5387] should_fail_ex+0x265/0x280 [ 66.299580][ T5387] should_failslab+0x8c/0xb0 [ 66.299612][ T5387] kmem_cache_alloc_noprof+0x50/0x310 [ 66.299650][ T5387] ? audit_log_start+0x365/0x6c0 [ 66.299691][ T5387] audit_log_start+0x365/0x6c0 [ 66.299759][ T5387] audit_seccomp+0x48/0x100 [ 66.299835][ T5387] ? __seccomp_filter+0x68c/0x10d0 [ 66.299864][ T5387] __seccomp_filter+0x69d/0x10d0 [ 66.299886][ T5387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.299922][ T5387] ? vfs_write+0x75e/0x8e0 [ 66.299976][ T5387] ? __rcu_read_unlock+0x4f/0x70 [ 66.300044][ T5387] ? __fget_files+0x184/0x1c0 [ 66.300081][ T5387] __secure_computing+0x82/0x150 [ 66.300110][ T5387] syscall_trace_enter+0xcf/0x1e0 [ 66.300143][ T5387] do_syscall_64+0xac/0x200 [ 66.300197][ T5387] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.300228][ T5387] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.300322][ T5387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.300348][ T5387] RIP: 0033:0x7fe183ddeb69 [ 66.300367][ T5387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.300390][ T5387] RSP: 002b:00007fe18243f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.300414][ T5387] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddeb69 [ 66.300431][ T5387] RDX: 0000000004048000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 66.300447][ T5387] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.300465][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.300481][ T5387] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 66.300514][ T5387] [ 66.586281][ T5387] sch_fq: defrate 4294967295 ignored. [ 66.665454][ T5379] syz.4.718 (5379) used greatest stack depth: 10008 bytes left [ 66.704204][ T5411] FAULT_INJECTION: forcing a failure. [ 66.704204][ T5411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.717544][ T5411] CPU: 1 UID: 0 PID: 5411 Comm: syz.3.729 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 66.717597][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.717662][ T5411] Call Trace: [ 66.717669][ T5411] [ 66.717675][ T5411] __dump_stack+0x1d/0x30 [ 66.717779][ T5411] dump_stack_lvl+0xe8/0x140 [ 66.717798][ T5411] dump_stack+0x15/0x1b [ 66.717814][ T5411] should_fail_ex+0x265/0x280 [ 66.717919][ T5411] should_fail_alloc_page+0xf2/0x100 [ 66.717946][ T5411] __alloc_frozen_pages_noprof+0xff/0x360 [ 66.717984][ T5411] alloc_pages_mpol+0xb3/0x250 [ 66.718084][ T5411] alloc_pages_noprof+0x90/0x130 [ 66.718127][ T5411] pte_alloc_one+0x2d/0x120 [ 66.718298][ T5411] __pte_alloc+0x32/0x2b0 [ 66.718341][ T5411] handle_mm_fault+0x1c55/0x2c20 [ 66.718379][ T5411] do_user_addr_fault+0x636/0x1090 [ 66.718461][ T5411] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.718497][ T5411] exc_page_fault+0x62/0xa0 [ 66.718519][ T5411] asm_exc_page_fault+0x26/0x30 [ 66.718544][ T5411] RIP: 0033:0x7f1efb790d86 [ 66.718566][ T5411] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 66.718586][ T5411] RSP: 002b:00007f1ef9f364a0 EFLAGS: 00010246 [ 66.718604][ T5411] RAX: 0000000000000001 RBX: 00007f1ef9f36540 RCX: 0000000000000101 [ 66.718618][ T5411] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f1ef9f365e0 [ 66.718630][ T5411] RBP: 0000000000000102 R08: 00007f1ef1b17000 R09: 0000000000000000 [ 66.718644][ T5411] R10: 0000000000000000 R11: 00007f1ef9f36550 R12: 0000000000000001 [ 66.718725][ T5411] R13: 00007f1efb96d940 R14: 0000000000000000 R15: 00007f1ef9f365e0 [ 66.718744][ T5411] [ 66.718763][ T5411] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.955532][ T5420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.732'. [ 67.109182][ T5440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.739'. [ 67.145762][ T5442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=5442 comm=syz.1.742 [ 67.201060][ T5447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'. [ 67.220782][ T5447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.745'. [ 67.371219][ T5462] netlink: 'syz.2.750': attribute type 27 has an invalid length. [ 67.453908][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.461238][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.523077][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.533805][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.567861][ T5449] FAULT_INJECTION: forcing a failure. [ 67.567861][ T5449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.581161][ T5449] CPU: 1 UID: 0 PID: 5449 Comm: syz.4.744 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 67.581195][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.581259][ T5449] Call Trace: [ 67.581266][ T5449] [ 67.581273][ T5449] __dump_stack+0x1d/0x30 [ 67.581300][ T5449] dump_stack_lvl+0xe8/0x140 [ 67.581320][ T5449] dump_stack+0x15/0x1b [ 67.581369][ T5449] should_fail_ex+0x265/0x280 [ 67.581421][ T5449] should_fail_alloc_page+0xf2/0x100 [ 67.581501][ T5449] __alloc_frozen_pages_noprof+0xff/0x360 [ 67.581553][ T5449] alloc_pages_mpol+0xb3/0x250 [ 67.581596][ T5449] folio_alloc_mpol_noprof+0x39/0x80 [ 67.581656][ T5449] shmem_get_folio_gfp+0x3cf/0xd60 [ 67.581701][ T5449] ? simple_xattr_get+0xb9/0x120 [ 67.581787][ T5449] shmem_write_begin+0xa8/0x190 [ 67.581814][ T5449] generic_perform_write+0x184/0x490 [ 67.581916][ T5449] shmem_file_write_iter+0xc5/0xf0 [ 67.581940][ T5449] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 67.581966][ T5449] vfs_write+0x49d/0x8e0 [ 67.581992][ T5449] ksys_write+0xda/0x1a0 [ 67.582157][ T5449] __x64_sys_write+0x40/0x50 [ 67.582189][ T5449] x64_sys_call+0x27fe/0x2ff0 [ 67.582218][ T5449] do_syscall_64+0xd2/0x200 [ 67.582247][ T5449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.582356][ T5449] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.582441][ T5449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.582471][ T5449] RIP: 0033:0x7f805b8aeb69 [ 67.582490][ T5449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.582516][ T5449] RSP: 002b:00007f8059f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.582584][ T5449] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8aeb69 [ 67.582599][ T5449] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000003 [ 67.582616][ T5449] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.582633][ T5449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.582722][ T5449] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 67.582740][ T5449] [ 67.820476][ T5462] team1: left promiscuous mode [ 67.825318][ T5462] team1: left allmulticast mode [ 67.847983][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.866307][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.885455][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.918338][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.083879][ T5480] FAULT_INJECTION: forcing a failure. [ 68.083879][ T5480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.097302][ T5480] CPU: 0 UID: 0 PID: 5480 Comm: syz.4.756 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 68.097360][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.097376][ T5480] Call Trace: [ 68.097382][ T5480] [ 68.097389][ T5480] __dump_stack+0x1d/0x30 [ 68.097411][ T5480] dump_stack_lvl+0xe8/0x140 [ 68.097436][ T5480] dump_stack+0x15/0x1b [ 68.097457][ T5480] should_fail_ex+0x265/0x280 [ 68.097561][ T5480] should_fail+0xb/0x20 [ 68.097631][ T5480] should_fail_usercopy+0x1a/0x20 [ 68.097721][ T5480] _copy_from_user+0x1c/0xb0 [ 68.097826][ T5480] kstrtouint_from_user+0x69/0xf0 [ 68.097845][ T5480] ? 0xffffffff81000000 [ 68.097858][ T5480] ? selinux_file_permission+0x1e4/0x320 [ 68.097899][ T5480] proc_fail_nth_write+0x50/0x160 [ 68.097928][ T5480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.097954][ T5480] vfs_write+0x266/0x8e0 [ 68.097979][ T5480] ? vfs_read+0x47f/0x6f0 [ 68.098005][ T5480] ? __rcu_read_unlock+0x4f/0x70 [ 68.098097][ T5480] ? __fget_files+0x184/0x1c0 [ 68.098126][ T5480] ksys_write+0xda/0x1a0 [ 68.098183][ T5480] __x64_sys_write+0x40/0x50 [ 68.098280][ T5480] x64_sys_call+0x27fe/0x2ff0 [ 68.098315][ T5480] do_syscall_64+0xd2/0x200 [ 68.098346][ T5480] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.098377][ T5480] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.098468][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.098512][ T5480] RIP: 0033:0x7f805b8ad61f [ 68.098536][ T5480] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 68.098561][ T5480] RSP: 002b:00007f8059f0f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.098587][ T5480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f805b8ad61f [ 68.098663][ T5480] RDX: 0000000000000001 RSI: 00007f8059f0f0a0 RDI: 0000000000000003 [ 68.098679][ T5480] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.098695][ T5480] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 68.098711][ T5480] R13: 0000000000000001 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 68.098735][ T5480] [ 68.350244][ T5486] FAULT_INJECTION: forcing a failure. [ 68.350244][ T5486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.363504][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.3.755 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 68.363542][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.363557][ T5486] Call Trace: [ 68.363565][ T5486] [ 68.363574][ T5486] __dump_stack+0x1d/0x30 [ 68.363600][ T5486] dump_stack_lvl+0xe8/0x140 [ 68.363624][ T5486] dump_stack+0x15/0x1b [ 68.363684][ T5486] should_fail_ex+0x265/0x280 [ 68.363727][ T5486] should_fail+0xb/0x20 [ 68.363807][ T5486] should_fail_usercopy+0x1a/0x20 [ 68.363827][ T5486] _copy_from_user+0x1c/0xb0 [ 68.363860][ T5486] ethtool_get_sset_info+0x4a/0x450 [ 68.363970][ T5486] ? strcmp+0x22/0x50 [ 68.364002][ T5486] dev_ethtool+0x10ab/0x1660 [ 68.364027][ T5486] ? full_name_hash+0x92/0xe0 [ 68.364092][ T5486] dev_ioctl+0x2e0/0x960 [ 68.364112][ T5486] sock_do_ioctl+0x197/0x220 [ 68.364206][ T5486] sock_ioctl+0x41b/0x610 [ 68.364231][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 68.364317][ T5486] __se_sys_ioctl+0xce/0x140 [ 68.364421][ T5486] __x64_sys_ioctl+0x43/0x50 [ 68.364461][ T5486] x64_sys_call+0x1816/0x2ff0 [ 68.364559][ T5486] do_syscall_64+0xd2/0x200 [ 68.364633][ T5486] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.364665][ T5486] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.364710][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.364732][ T5486] RIP: 0033:0x7f1efb8ceb69 [ 68.364746][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.364809][ T5486] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.364834][ T5486] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 68.364872][ T5486] RDX: 0000200000000300 RSI: 0000000000008946 RDI: 0000000000000003 [ 68.364888][ T5486] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 68.364900][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.364912][ T5486] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 68.364971][ T5486] [ 68.615929][ T5489] FAULT_INJECTION: forcing a failure. [ 68.615929][ T5489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.629239][ T5489] CPU: 0 UID: 0 PID: 5489 Comm: syz.4.759 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 68.629277][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.629294][ T5489] Call Trace: [ 68.629303][ T5489] [ 68.629313][ T5489] __dump_stack+0x1d/0x30 [ 68.629348][ T5489] dump_stack_lvl+0xe8/0x140 [ 68.629425][ T5489] dump_stack+0x15/0x1b [ 68.629447][ T5489] should_fail_ex+0x265/0x280 [ 68.629492][ T5489] should_fail+0xb/0x20 [ 68.629533][ T5489] should_fail_usercopy+0x1a/0x20 [ 68.629558][ T5489] fpu__restore_sig+0x12d/0xaa0 [ 68.629684][ T5489] ? should_fail_ex+0xdb/0x280 [ 68.629733][ T5489] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 68.629771][ T5489] x64_sys_call+0x2d3c/0x2ff0 [ 68.629874][ T5489] do_syscall_64+0xd2/0x200 [ 68.629906][ T5489] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.630013][ T5489] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.630036][ T5489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.630059][ T5489] RIP: 0033:0x7f805b8aeb67 [ 68.630078][ T5489] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 68.630100][ T5489] RSP: 002b:00007f8059f0f038 EFLAGS: 00000246 [ 68.630142][ T5489] RAX: 0000000000000013 RBX: 00007f805bad5fa0 RCX: 00007f805b8aeb69 [ 68.630159][ T5489] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000006 [ 68.630176][ T5489] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.630192][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.630208][ T5489] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 68.630231][ T5489] [ 68.838392][ T5504] FAULT_INJECTION: forcing a failure. [ 68.838392][ T5504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.851985][ T5504] CPU: 0 UID: 0 PID: 5504 Comm: syz.1.763 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 68.852019][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.852054][ T5504] Call Trace: [ 68.852060][ T5504] [ 68.852069][ T5504] __dump_stack+0x1d/0x30 [ 68.852092][ T5504] dump_stack_lvl+0xe8/0x140 [ 68.852181][ T5504] dump_stack+0x15/0x1b [ 68.852204][ T5504] should_fail_ex+0x265/0x280 [ 68.852288][ T5504] should_fail+0xb/0x20 [ 68.852343][ T5504] should_fail_usercopy+0x1a/0x20 [ 68.852368][ T5504] _copy_from_iter+0xcf/0xe40 [ 68.852392][ T5504] ? __build_skb_around+0x1a0/0x200 [ 68.852422][ T5504] ? __alloc_skb+0x223/0x320 [ 68.852499][ T5504] netlink_sendmsg+0x471/0x6b0 [ 68.852589][ T5504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.852638][ T5504] __sock_sendmsg+0x145/0x180 [ 68.852671][ T5504] ____sys_sendmsg+0x31e/0x4e0 [ 68.852791][ T5504] ___sys_sendmsg+0x17b/0x1d0 [ 68.852844][ T5504] __x64_sys_sendmsg+0xd4/0x160 [ 68.852922][ T5504] x64_sys_call+0x191e/0x2ff0 [ 68.852950][ T5504] do_syscall_64+0xd2/0x200 [ 68.852988][ T5504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.853019][ T5504] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.853047][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.853081][ T5504] RIP: 0033:0x7f7d8fe3eb69 [ 68.853101][ T5504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.853126][ T5504] RSP: 002b:00007f7d8e4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.853187][ T5504] RAX: ffffffffffffffda RBX: 00007f7d90065fa0 RCX: 00007f7d8fe3eb69 [ 68.853204][ T5504] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 68.853217][ T5504] RBP: 00007f7d8e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.853243][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.853256][ T5504] R13: 0000000000000000 R14: 00007f7d90065fa0 R15: 00007ffcad69b9c8 [ 68.853274][ T5504] [ 69.420249][ T5537] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 70.037665][ T5568] FAULT_INJECTION: forcing a failure. [ 70.037665][ T5568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.050902][ T5568] CPU: 1 UID: 0 PID: 5568 Comm: syz.4.789 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 70.051018][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.051032][ T5568] Call Trace: [ 70.051040][ T5568] [ 70.051049][ T5568] __dump_stack+0x1d/0x30 [ 70.051078][ T5568] dump_stack_lvl+0xe8/0x140 [ 70.051149][ T5568] dump_stack+0x15/0x1b [ 70.051170][ T5568] should_fail_ex+0x265/0x280 [ 70.051203][ T5568] should_fail+0xb/0x20 [ 70.051317][ T5568] should_fail_usercopy+0x1a/0x20 [ 70.051340][ T5568] _copy_to_user+0x20/0xa0 [ 70.051366][ T5568] simple_read_from_buffer+0xb5/0x130 [ 70.051388][ T5568] proc_fail_nth_read+0x10e/0x150 [ 70.051449][ T5568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.051535][ T5568] vfs_read+0x19d/0x6f0 [ 70.051619][ T5568] ? __rcu_read_unlock+0x4f/0x70 [ 70.051639][ T5568] ? __fget_files+0x184/0x1c0 [ 70.051665][ T5568] ksys_read+0xda/0x1a0 [ 70.051693][ T5568] __x64_sys_read+0x40/0x50 [ 70.051771][ T5568] x64_sys_call+0x27bc/0x2ff0 [ 70.051853][ T5568] do_syscall_64+0xd2/0x200 [ 70.051947][ T5568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.051978][ T5568] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.052033][ T5568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.052098][ T5568] RIP: 0033:0x7f805b8ad57c [ 70.052119][ T5568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.052144][ T5568] RSP: 002b:00007f8059f0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.052179][ T5568] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8ad57c [ 70.052192][ T5568] RDX: 000000000000000f RSI: 00007f8059f0f0a0 RDI: 0000000000000003 [ 70.052284][ T5568] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.052297][ T5568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.052309][ T5568] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 70.052346][ T5568] [ 70.259006][ T29] kauditd_printk_skb: 16629 callbacks suppressed [ 70.259021][ T29] audit: type=1400 audit(1754362955.625:18765): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.289718][ T29] audit: type=1400 audit(1754362955.865:18770): avc: denied { prog_load } for pid=5569 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.336590][ T29] audit: type=1400 audit(1754362955.895:18771): avc: denied { prog_load } for pid=5570 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.355971][ T29] audit: type=1400 audit(1754362955.895:18772): avc: denied { prog_load } for pid=5570 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.375914][ T29] audit: type=1326 audit(1754362955.895:18773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea6ceb69 code=0x7ffc0000 [ 70.399683][ T29] audit: type=1326 audit(1754362955.895:18774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f97ea6ceb69 code=0x7ffc0000 [ 70.423367][ T29] audit: type=1326 audit(1754362955.895:18775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea6ceb69 code=0x7ffc0000 [ 70.446919][ T29] audit: type=1326 audit(1754362955.895:18776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f97ea6ceb69 code=0x7ffc0000 [ 70.470473][ T29] audit: type=1400 audit(1754362955.905:18777): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.494875][ T29] audit: type=1400 audit(1754362955.915:18778): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.521990][ T5590] FAULT_INJECTION: forcing a failure. [ 70.521990][ T5590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.535357][ T5590] CPU: 0 UID: 0 PID: 5590 Comm: syz.4.793 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 70.535472][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.535485][ T5590] Call Trace: [ 70.535492][ T5590] [ 70.535499][ T5590] __dump_stack+0x1d/0x30 [ 70.535524][ T5590] dump_stack_lvl+0xe8/0x140 [ 70.535586][ T5590] dump_stack+0x15/0x1b [ 70.535603][ T5590] should_fail_ex+0x265/0x280 [ 70.535655][ T5590] should_fail+0xb/0x20 [ 70.535694][ T5590] should_fail_usercopy+0x1a/0x20 [ 70.535717][ T5590] _copy_to_user+0x20/0xa0 [ 70.535772][ T5590] simple_read_from_buffer+0xb5/0x130 [ 70.535834][ T5590] proc_fail_nth_read+0x10e/0x150 [ 70.535863][ T5590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.535894][ T5590] vfs_read+0x19d/0x6f0 [ 70.535915][ T5590] ? __rcu_read_unlock+0x4f/0x70 [ 70.535936][ T5590] ? __fget_files+0x184/0x1c0 [ 70.536127][ T5590] ksys_read+0xda/0x1a0 [ 70.536183][ T5590] __x64_sys_read+0x40/0x50 [ 70.536209][ T5590] x64_sys_call+0x27bc/0x2ff0 [ 70.536231][ T5590] do_syscall_64+0xd2/0x200 [ 70.536332][ T5590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.536402][ T5590] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.536424][ T5590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.536445][ T5590] RIP: 0033:0x7f805b8ad57c [ 70.536461][ T5590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.536486][ T5590] RSP: 002b:00007f8059f0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.536563][ T5590] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8ad57c [ 70.536580][ T5590] RDX: 000000000000000f RSI: 00007f8059f0f0a0 RDI: 0000000000000005 [ 70.536594][ T5590] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.536675][ T5590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.536691][ T5590] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 70.536709][ T5590] [ 70.822959][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 70.879231][ T5603] bond1: entered promiscuous mode [ 70.884306][ T5603] bond1: entered allmulticast mode [ 70.891618][ T5603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.256459][ T5641] FAULT_INJECTION: forcing a failure. [ 71.256459][ T5641] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.269434][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz.0.815 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 71.269472][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.269488][ T5641] Call Trace: [ 71.269497][ T5641] [ 71.269508][ T5641] __dump_stack+0x1d/0x30 [ 71.269575][ T5641] dump_stack_lvl+0xe8/0x140 [ 71.269674][ T5641] dump_stack+0x15/0x1b [ 71.269728][ T5641] should_fail_ex+0x265/0x280 [ 71.269770][ T5641] should_fail+0xb/0x20 [ 71.269800][ T5641] get_futex_key+0x594/0xbd0 [ 71.269830][ T5641] futex_wait_setup+0x4a/0x3e0 [ 71.269907][ T5641] __futex_wait+0x9d/0x260 [ 71.269945][ T5641] ? __pfx_futex_wake_mark+0x10/0x10 [ 71.270141][ T5641] futex_wait+0x9d/0x1d0 [ 71.270175][ T5641] do_futex+0x2bf/0x380 [ 71.270206][ T5641] __se_sys_futex+0x2ed/0x360 [ 71.270242][ T5641] __x64_sys_futex+0x78/0x90 [ 71.270276][ T5641] x64_sys_call+0x2e39/0x2ff0 [ 71.270364][ T5641] do_syscall_64+0xd2/0x200 [ 71.270395][ T5641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.270426][ T5641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.270454][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.270550][ T5641] RIP: 0033:0x7f97ea6ceb69 [ 71.270569][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.270594][ T5641] RSP: 002b:00007f97e8d0e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.270618][ T5641] RAX: ffffffffffffffda RBX: 00007f97ea8f6080 RCX: 00007f97ea6ceb69 [ 71.270632][ T5641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000000cffc [ 71.270645][ T5641] RBP: 00007f97e8d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 71.270721][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.270736][ T5641] R13: 0000000000000000 R14: 00007f97ea8f6080 R15: 00007fff4b619d58 [ 71.270755][ T5641] [ 72.060932][ T5667] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 72.087149][ T5668] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 72.111561][ T5671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.826'. [ 72.116381][ T5668] team0: Port device dummy0 added [ 72.343899][ T5685] netlink: 3 bytes leftover after parsing attributes in process `syz.2.830'. [ 72.388186][ T5685] 0ªX¹¦À: renamed from caif0 [ 72.426763][ T5685] 0ªX¹¦À: entered allmulticast mode [ 72.432087][ T5685] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 72.549853][ T5699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 72.871541][ T5741] FAULT_INJECTION: forcing a failure. [ 72.871541][ T5741] name failslab, interval 1, probability 0, space 0, times 0 [ 72.884667][ T5741] CPU: 0 UID: 0 PID: 5741 Comm: syz.4.853 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 72.884738][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.884754][ T5741] Call Trace: [ 72.884762][ T5741] [ 72.884771][ T5741] __dump_stack+0x1d/0x30 [ 72.884855][ T5741] dump_stack_lvl+0xe8/0x140 [ 72.884881][ T5741] dump_stack+0x15/0x1b [ 72.884955][ T5741] should_fail_ex+0x265/0x280 [ 72.884998][ T5741] should_failslab+0x8c/0xb0 [ 72.885083][ T5741] __kmalloc_noprof+0xa5/0x3e0 [ 72.885116][ T5741] ? sock_kmalloc+0x85/0xc0 [ 72.885135][ T5741] ? iovec_from_user+0x179/0x210 [ 72.885163][ T5741] sock_kmalloc+0x85/0xc0 [ 72.885259][ T5741] ____sys_sendmsg+0xf8/0x4e0 [ 72.885367][ T5741] ___sys_sendmsg+0x17b/0x1d0 [ 72.885496][ T5741] __sys_sendmmsg+0x178/0x300 [ 72.885568][ T5741] __x64_sys_sendmmsg+0x57/0x70 [ 72.885742][ T5741] x64_sys_call+0x1c4a/0x2ff0 [ 72.885784][ T5741] do_syscall_64+0xd2/0x200 [ 72.885816][ T5741] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.885850][ T5741] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.885952][ T5741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.885977][ T5741] RIP: 0033:0x7f805b8aeb69 [ 72.885994][ T5741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.886018][ T5741] RSP: 002b:00007f8059f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.886112][ T5741] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8aeb69 [ 72.886130][ T5741] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 72.886147][ T5741] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.886163][ T5741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.886178][ T5741] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 72.886259][ T5741] [ 72.931326][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.085727][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.114915][ T5747] bridge_slave_1: left allmulticast mode [ 73.120838][ T5747] bridge_slave_1: left promiscuous mode [ 73.126744][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.137032][ T5747] bridge_slave_0: left allmulticast mode [ 73.142777][ T5747] bridge_slave_0: left promiscuous mode [ 73.148506][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.487195][ T5781] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 73.856931][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 73.885550][ T5818] bond0: entered promiscuous mode [ 73.891029][ T5818] bond0: entered allmulticast mode [ 73.899304][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.059958][ T5828] FAULT_INJECTION: forcing a failure. [ 74.059958][ T5828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.073191][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.1.887 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 74.073231][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.073247][ T5828] Call Trace: [ 74.073256][ T5828] [ 74.073265][ T5828] __dump_stack+0x1d/0x30 [ 74.073369][ T5828] dump_stack_lvl+0xe8/0x140 [ 74.073395][ T5828] dump_stack+0x15/0x1b [ 74.073416][ T5828] should_fail_ex+0x265/0x280 [ 74.073459][ T5828] should_fail+0xb/0x20 [ 74.073497][ T5828] should_fail_usercopy+0x1a/0x20 [ 74.073517][ T5828] _copy_to_user+0x20/0xa0 [ 74.073547][ T5828] simple_read_from_buffer+0xb5/0x130 [ 74.073607][ T5828] proc_fail_nth_read+0x10e/0x150 [ 74.073639][ T5828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.073668][ T5828] vfs_read+0x19d/0x6f0 [ 74.073691][ T5828] ? __rcu_read_unlock+0x4f/0x70 [ 74.073745][ T5828] ? __fget_files+0x184/0x1c0 [ 74.073774][ T5828] ksys_read+0xda/0x1a0 [ 74.073799][ T5828] __x64_sys_read+0x40/0x50 [ 74.073822][ T5828] x64_sys_call+0x27bc/0x2ff0 [ 74.073870][ T5828] do_syscall_64+0xd2/0x200 [ 74.073897][ T5828] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.073924][ T5828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.074004][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.074026][ T5828] RIP: 0033:0x7f7d8fe3d57c [ 74.074044][ T5828] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.074074][ T5828] RSP: 002b:00007f7d8e4a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.074096][ T5828] RAX: ffffffffffffffda RBX: 00007f7d90065fa0 RCX: 00007f7d8fe3d57c [ 74.074110][ T5828] RDX: 000000000000000f RSI: 00007f7d8e4a70a0 RDI: 0000000000000005 [ 74.074193][ T5828] RBP: 00007f7d8e4a7090 R08: 0000000000000000 R09: 000000000000001c [ 74.074206][ T5828] R10: 00000000200008c5 R11: 0000000000000246 R12: 0000000000000001 [ 74.074220][ T5828] R13: 0000000000000000 R14: 00007f7d90065fa0 R15: 00007ffcad69b9c8 [ 74.074238][ T5828] [ 74.427533][ T5843] FAULT_INJECTION: forcing a failure. [ 74.427533][ T5843] name failslab, interval 1, probability 0, space 0, times 0 [ 74.440363][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz.2.893 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 74.440402][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.440498][ T5843] Call Trace: [ 74.440504][ T5843] [ 74.440512][ T5843] __dump_stack+0x1d/0x30 [ 74.440539][ T5843] dump_stack_lvl+0xe8/0x140 [ 74.440572][ T5843] dump_stack+0x15/0x1b [ 74.440594][ T5843] should_fail_ex+0x265/0x280 [ 74.440641][ T5843] should_failslab+0x8c/0xb0 [ 74.440667][ T5843] kmem_cache_alloc_noprof+0x50/0x310 [ 74.440703][ T5843] ? audit_log_start+0x365/0x6c0 [ 74.440788][ T5843] audit_log_start+0x365/0x6c0 [ 74.440831][ T5843] audit_seccomp+0x48/0x100 [ 74.440867][ T5843] ? __seccomp_filter+0x68c/0x10d0 [ 74.440959][ T5843] __seccomp_filter+0x69d/0x10d0 [ 74.441024][ T5843] ? alloc_pages_mpol+0x201/0x250 [ 74.441080][ T5843] ? __rcu_read_unlock+0x4f/0x70 [ 74.441101][ T5843] ? __mod_node_page_state+0x1c/0x80 [ 74.441147][ T5843] __secure_computing+0x82/0x150 [ 74.441181][ T5843] syscall_trace_enter+0xcf/0x1e0 [ 74.441213][ T5843] do_syscall_64+0xac/0x200 [ 74.441238][ T5843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.441263][ T5843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.441371][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.441395][ T5843] RIP: 0033:0x7fe183ddd57c [ 74.441411][ T5843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.441437][ T5843] RSP: 002b:00007fe18243f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.441462][ T5843] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddd57c [ 74.441479][ T5843] RDX: 000000000000000f RSI: 00007fe18243f0a0 RDI: 0000000000000003 [ 74.441551][ T5843] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.441593][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.441606][ T5843] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 74.441623][ T5843] [ 74.703405][ T5849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5849 comm=syz.0.896 [ 74.760887][ T5857] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.800180][ T5859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.900'. [ 74.848848][ T5861] FAULT_INJECTION: forcing a failure. [ 74.848848][ T5861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.861959][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz.0.901 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 74.861996][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.862079][ T5861] Call Trace: [ 74.862089][ T5861] [ 74.862098][ T5861] __dump_stack+0x1d/0x30 [ 74.862127][ T5861] dump_stack_lvl+0xe8/0x140 [ 74.862151][ T5861] dump_stack+0x15/0x1b [ 74.862170][ T5861] should_fail_ex+0x265/0x280 [ 74.862286][ T5861] should_fail+0xb/0x20 [ 74.862325][ T5861] should_fail_usercopy+0x1a/0x20 [ 74.862360][ T5861] _copy_to_user+0x20/0xa0 [ 74.862386][ T5861] simple_read_from_buffer+0xb5/0x130 [ 74.862414][ T5861] proc_fail_nth_read+0x10e/0x150 [ 74.862450][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.862506][ T5861] vfs_read+0x19d/0x6f0 [ 74.862530][ T5861] ? __rcu_read_unlock+0x4f/0x70 [ 74.862564][ T5861] ? __fget_files+0x184/0x1c0 [ 74.862592][ T5861] ksys_read+0xda/0x1a0 [ 74.862649][ T5861] __x64_sys_read+0x40/0x50 [ 74.862672][ T5861] x64_sys_call+0x27bc/0x2ff0 [ 74.862695][ T5861] do_syscall_64+0xd2/0x200 [ 74.862721][ T5861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.862864][ T5861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.862887][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.862910][ T5861] RIP: 0033:0x7f97ea6cd57c [ 74.862926][ T5861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.862991][ T5861] RSP: 002b:00007f97e8d2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.863011][ T5861] RAX: ffffffffffffffda RBX: 00007f97ea8f5fa0 RCX: 00007f97ea6cd57c [ 74.863025][ T5861] RDX: 000000000000000f RSI: 00007f97e8d2f0a0 RDI: 0000000000000004 [ 74.863038][ T5861] RBP: 00007f97e8d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.863050][ T5861] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 74.863063][ T5861] R13: 0000000000000000 R14: 00007f97ea8f5fa0 R15: 00007fff4b619d58 [ 74.863081][ T5861] [ 75.122160][ T5869] netlink: 'syz.0.904': attribute type 21 has an invalid length. [ 75.130166][ T5869] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.904'. [ 75.213819][ T5875] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 75.266255][ T29] kauditd_printk_skb: 20087 callbacks suppressed [ 75.266272][ T29] audit: type=1400 audit(1754362960.845:36283): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.299815][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.306484][ T3032] audit: audit_lost=2459 audit_rate_limit=0 audit_backlog_limit=64 [ 75.314515][ T3032] audit: backlog limit exceeded [ 75.319675][ T29] audit: type=1400 audit(1754362960.845:36284): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.344113][ T29] audit: type=1400 audit(1754362960.845:36285): avc: denied { prog_load } for pid=5881 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.363377][ T29] audit: type=1400 audit(1754362960.845:36286): avc: denied { prog_load } for pid=5881 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.382608][ T29] audit: type=1400 audit(1754362960.845:36287): avc: denied { map_create } for pid=5881 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.401981][ T29] audit: type=1400 audit(1754362960.845:36288): avc: denied { map_create } for pid=5881 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.421200][ T29] audit: type=1400 audit(1754362960.845:36289): avc: denied { prog_load } for pid=5881 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.597463][ T5891] Falling back ldisc for ttyS3. [ 75.788028][ T5904] FAULT_INJECTION: forcing a failure. [ 75.788028][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 75.800884][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.0.917 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 75.800930][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.800942][ T5904] Call Trace: [ 75.801009][ T5904] [ 75.801018][ T5904] __dump_stack+0x1d/0x30 [ 75.801042][ T5904] dump_stack_lvl+0xe8/0x140 [ 75.801061][ T5904] dump_stack+0x15/0x1b [ 75.801077][ T5904] should_fail_ex+0x265/0x280 [ 75.801138][ T5904] should_failslab+0x8c/0xb0 [ 75.801163][ T5904] kmem_cache_alloc_node_noprof+0x57/0x320 [ 75.801195][ T5904] ? alloc_vmap_area+0x231/0xe50 [ 75.801251][ T5904] alloc_vmap_area+0x231/0xe50 [ 75.801293][ T5904] ? should_failslab+0x8c/0xb0 [ 75.801316][ T5904] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 75.801352][ T5904] __get_vm_area_node+0x173/0x1d0 [ 75.801393][ T5904] __vmalloc_node_range_noprof+0x273/0xe00 [ 75.801448][ T5904] ? n_tty_open+0x1b/0xf0 [ 75.801468][ T5904] ? rb_insert_color+0x264/0x2b0 [ 75.801495][ T5904] ? __list_add_valid_or_report+0x38/0xe0 [ 75.801529][ T5904] ? __list_add_valid_or_report+0x38/0xe0 [ 75.801614][ T5904] ? free_frozen_page_commit+0x6f/0x2a0 [ 75.801647][ T5904] ? vfree+0x295/0x3a0 [ 75.801708][ T5904] ? kfree+0xd9/0x320 [ 75.801783][ T5904] ? should_failslab+0x19/0xb0 [ 75.801815][ T5904] ? n_tty_open+0x1b/0xf0 [ 75.801839][ T5904] vzalloc_noprof+0x82/0xc0 [ 75.801882][ T5904] ? n_tty_open+0x1b/0xf0 [ 75.801915][ T5904] n_tty_open+0x1b/0xf0 [ 75.801933][ T5904] tty_ldisc_failto+0xe5/0x1a0 [ 75.801962][ T5904] tty_ldisc_restore+0x2f/0xc0 [ 75.801990][ T5904] tty_set_ldisc+0x209/0x380 [ 75.802084][ T5904] tiocsetd+0x51/0x60 [ 75.802122][ T5904] tty_ioctl+0xa7f/0xb80 [ 75.802160][ T5904] ? __pfx_tty_ioctl+0x10/0x10 [ 75.802187][ T5904] __se_sys_ioctl+0xce/0x140 [ 75.802248][ T5904] __x64_sys_ioctl+0x43/0x50 [ 75.802294][ T5904] x64_sys_call+0x1816/0x2ff0 [ 75.802323][ T5904] do_syscall_64+0xd2/0x200 [ 75.802355][ T5904] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.802387][ T5904] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.802464][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.802495][ T5904] RIP: 0033:0x7f97ea6ceb69 [ 75.802515][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.802576][ T5904] RSP: 002b:00007f97e8d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.802609][ T5904] RAX: ffffffffffffffda RBX: 00007f97ea8f5fa0 RCX: 00007f97ea6ceb69 [ 75.802627][ T5904] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000007 [ 75.802644][ T5904] RBP: 00007f97e8d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.802694][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.802710][ T5904] R13: 0000000000000000 R14: 00007f97ea8f5fa0 R15: 00007fff4b619d58 [ 75.802732][ T5904] [ 75.802740][ T5904] syz.0.917: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 75.824588][ T5906] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 75.825327][ T5904] ,cpuset=/,mems_allowed=0 [ 76.114862][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.0.917 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 76.114976][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.114994][ T5904] Call Trace: [ 76.115002][ T5904] [ 76.115011][ T5904] __dump_stack+0x1d/0x30 [ 76.115038][ T5904] dump_stack_lvl+0xe8/0x140 [ 76.115113][ T5904] dump_stack+0x15/0x1b [ 76.115134][ T5904] warn_alloc+0x12b/0x1a0 [ 76.115178][ T5904] __vmalloc_node_range_noprof+0x297/0xe00 [ 76.115262][ T5904] ? rb_insert_color+0x264/0x2b0 [ 76.115290][ T5904] ? __list_add_valid_or_report+0x38/0xe0 [ 76.115324][ T5904] ? __list_add_valid_or_report+0x38/0xe0 [ 76.115384][ T5904] ? free_frozen_page_commit+0x6f/0x2a0 [ 76.115426][ T5904] ? vfree+0x295/0x3a0 [ 76.115457][ T5904] ? kfree+0xd9/0x320 [ 76.115488][ T5904] ? should_failslab+0x19/0xb0 [ 76.115569][ T5904] ? n_tty_open+0x1b/0xf0 [ 76.115603][ T5904] vzalloc_noprof+0x82/0xc0 [ 76.115641][ T5904] ? n_tty_open+0x1b/0xf0 [ 76.115686][ T5904] n_tty_open+0x1b/0xf0 [ 76.115708][ T5904] tty_ldisc_failto+0xe5/0x1a0 [ 76.115744][ T5904] tty_ldisc_restore+0x2f/0xc0 [ 76.115771][ T5904] tty_set_ldisc+0x209/0x380 [ 76.115799][ T5904] tiocsetd+0x51/0x60 [ 76.115905][ T5904] tty_ioctl+0xa7f/0xb80 [ 76.115942][ T5904] ? __pfx_tty_ioctl+0x10/0x10 [ 76.115980][ T5904] __se_sys_ioctl+0xce/0x140 [ 76.116028][ T5904] __x64_sys_ioctl+0x43/0x50 [ 76.116091][ T5904] x64_sys_call+0x1816/0x2ff0 [ 76.116121][ T5904] do_syscall_64+0xd2/0x200 [ 76.116150][ T5904] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.116212][ T5904] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.116243][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.116274][ T5904] RIP: 0033:0x7f97ea6ceb69 [ 76.116294][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.116318][ T5904] RSP: 002b:00007f97e8d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.116369][ T5904] RAX: ffffffffffffffda RBX: 00007f97ea8f5fa0 RCX: 00007f97ea6ceb69 [ 76.116387][ T5904] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000007 [ 76.116405][ T5904] RBP: 00007f97e8d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.116422][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.116439][ T5904] R13: 0000000000000000 R14: 00007f97ea8f5fa0 R15: 00007fff4b619d58 [ 76.116464][ T5904] [ 76.361630][ T5904] Mem-Info: [ 76.364825][ T5904] active_anon:5636 inactive_anon:5 isolated_anon:0 [ 76.364825][ T5904] active_file:22287 inactive_file:2576 isolated_file:0 [ 76.364825][ T5904] unevictable:0 dirty:173 writeback:0 [ 76.364825][ T5904] slab_reclaimable:3289 slab_unreclaimable:14360 [ 76.364825][ T5904] mapped:29565 shmem:561 pagetables:1313 [ 76.364825][ T5904] sec_pagetables:0 bounce:0 [ 76.364825][ T5904] kernel_misc_reclaimable:0 [ 76.364825][ T5904] free:1869040 free_pcp:26742 free_cma:0 [ 76.411268][ T5904] Node 0 active_anon:22544kB inactive_anon:20kB active_file:89148kB inactive_file:10304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118260kB dirty:692kB writeback:0kB shmem:2244kB kernel_stack:3456kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 76.440626][ T5904] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.469482][ T5904] lowmem_reserve[]: 0 2883 7862 7862 [ 76.475075][ T5904] Node 0 DMA32 free:2949232kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952864kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 76.505752][ T5904] lowmem_reserve[]: 0 0 4978 4978 [ 76.510942][ T5904] Node 0 Normal free:4511568kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22544kB inactive_anon:20kB active_file:89148kB inactive_file:10304kB unevictable:0kB writepending:692kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:103468kB local_pcp:38360kB free_cma:0kB [ 76.543187][ T5904] lowmem_reserve[]: 0 0 0 0 [ 76.547886][ T5904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.560689][ T5904] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949232kB [ 76.577102][ T5904] Node 0 Normal: 3478*4kB (UME) 1261*8kB (UM) 681*16kB (UM) 437*32kB (UM) 322*64kB (UME) 26*128kB (UM) 17*256kB (UM) 47*512kB (UM) 27*1024kB (UM) 12*2048kB (UME) 1064*4096kB (UM) = 4511600kB [ 76.596234][ T5904] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 76.605551][ T5904] 25457 total pagecache pages [ 76.610646][ T5904] 9 pages in swap cache [ 76.614820][ T5904] Free swap = 124960kB [ 76.619028][ T5904] Total swap = 124996kB [ 76.623199][ T5904] 2097051 pages RAM [ 76.627356][ T5904] 0 pages HighMem/MovableOnly [ 76.632053][ T5904] 80435 pages reserved [ 76.636165][ T5904] Falling back ldisc for ttyS3. [ 76.746122][ T5920] netlink: 96 bytes leftover after parsing attributes in process `syz.3.925'. [ 76.888363][ T5931] FAULT_INJECTION: forcing a failure. [ 76.888363][ T5931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.901591][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.2.929 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 76.901669][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.901686][ T5931] Call Trace: [ 76.901695][ T5931] [ 76.901706][ T5931] __dump_stack+0x1d/0x30 [ 76.901735][ T5931] dump_stack_lvl+0xe8/0x140 [ 76.901762][ T5931] dump_stack+0x15/0x1b [ 76.901785][ T5931] should_fail_ex+0x265/0x280 [ 76.901852][ T5931] should_fail+0xb/0x20 [ 76.901893][ T5931] should_fail_usercopy+0x1a/0x20 [ 76.901920][ T5931] _copy_to_user+0x20/0xa0 [ 76.901964][ T5931] simple_read_from_buffer+0xb5/0x130 [ 76.901986][ T5931] proc_fail_nth_read+0x10e/0x150 [ 76.902013][ T5931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.902049][ T5931] vfs_read+0x19d/0x6f0 [ 76.902078][ T5931] ? __rcu_read_unlock+0x4f/0x70 [ 76.902252][ T5931] ? __fget_files+0x184/0x1c0 [ 76.902289][ T5931] ksys_read+0xda/0x1a0 [ 76.902319][ T5931] __x64_sys_read+0x40/0x50 [ 76.902394][ T5931] x64_sys_call+0x27bc/0x2ff0 [ 76.902424][ T5931] do_syscall_64+0xd2/0x200 [ 76.902458][ T5931] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.902593][ T5931] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.902619][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.902640][ T5931] RIP: 0033:0x7fe183ddd57c [ 76.902656][ T5931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.902750][ T5931] RSP: 002b:00007fe18243f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.902777][ T5931] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddd57c [ 76.902794][ T5931] RDX: 000000000000000f RSI: 00007fe18243f0a0 RDI: 0000000000000004 [ 76.902812][ T5931] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.902829][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.902844][ T5931] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 76.902909][ T5931] [ 77.153250][ T5935] netlink: 'syz.2.931': attribute type 21 has an invalid length. [ 77.174021][ T5935] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 77.181959][ T5935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.931'. [ 77.278349][ T5951] FAULT_INJECTION: forcing a failure. [ 77.278349][ T5951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.291508][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.4.937 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 77.291591][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.291606][ T5951] Call Trace: [ 77.291613][ T5951] [ 77.291620][ T5951] __dump_stack+0x1d/0x30 [ 77.291641][ T5951] dump_stack_lvl+0xe8/0x140 [ 77.291666][ T5951] dump_stack+0x15/0x1b [ 77.291748][ T5951] should_fail_ex+0x265/0x280 [ 77.291786][ T5951] should_fail+0xb/0x20 [ 77.291824][ T5951] should_fail_usercopy+0x1a/0x20 [ 77.291907][ T5951] _copy_from_user+0x1c/0xb0 [ 77.291934][ T5951] kstrtouint_from_user+0x69/0xf0 [ 77.292016][ T5951] ? 0xffffffff81000000 [ 77.292033][ T5951] ? selinux_file_permission+0x1e4/0x320 [ 77.292201][ T5951] proc_fail_nth_write+0x50/0x160 [ 77.292317][ T5951] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.292351][ T5951] vfs_write+0x266/0x8e0 [ 77.292393][ T5951] ? vfs_read+0x47f/0x6f0 [ 77.292416][ T5951] ? __rcu_read_unlock+0x4f/0x70 [ 77.292437][ T5951] ? __fget_files+0x184/0x1c0 [ 77.292534][ T5951] ksys_write+0xda/0x1a0 [ 77.292559][ T5951] __x64_sys_write+0x40/0x50 [ 77.292585][ T5951] x64_sys_call+0x27fe/0x2ff0 [ 77.292606][ T5951] do_syscall_64+0xd2/0x200 [ 77.292694][ T5951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.292718][ T5951] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.292744][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.292769][ T5951] RIP: 0033:0x7f805b8ad61f [ 77.292863][ T5951] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 77.292924][ T5951] RSP: 002b:00007f8059f0f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 77.292945][ T5951] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f805b8ad61f [ 77.292961][ T5951] RDX: 0000000000000001 RSI: 00007f8059f0f0a0 RDI: 0000000000000003 [ 77.292977][ T5951] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.292990][ T5951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 77.293002][ T5951] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 77.293023][ T5951] [ 77.558074][ T5958] bond2: entered promiscuous mode [ 77.563213][ T5958] bond2: entered allmulticast mode [ 77.569214][ T5958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.657544][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 77.806933][ T5991] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 77.814742][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.951'. [ 77.835766][ T5991] team0: Port device geneve1 added [ 77.843536][ T378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.852629][ T378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.864438][ T378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.878244][ T378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.906093][ T5996] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 77.914012][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.952'. [ 77.956595][ T5996] team0: Port device geneve1 added [ 78.180243][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 78.220613][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 78.232143][ T6019] FAULT_INJECTION: forcing a failure. [ 78.232143][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.245501][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.2.961 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 78.245591][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.245607][ T6019] Call Trace: [ 78.245614][ T6019] [ 78.245622][ T6019] __dump_stack+0x1d/0x30 [ 78.245710][ T6019] dump_stack_lvl+0xe8/0x140 [ 78.245749][ T6019] dump_stack+0x15/0x1b [ 78.245771][ T6019] should_fail_ex+0x265/0x280 [ 78.245890][ T6019] should_fail+0xb/0x20 [ 78.245929][ T6019] should_fail_usercopy+0x1a/0x20 [ 78.245955][ T6019] _copy_from_iter+0xcf/0xe40 [ 78.246012][ T6019] ? __build_skb_around+0x1a0/0x200 [ 78.246042][ T6019] ? __alloc_skb+0x223/0x320 [ 78.246075][ T6019] netlink_sendmsg+0x471/0x6b0 [ 78.246231][ T6019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.246284][ T6019] __sock_sendmsg+0x145/0x180 [ 78.246314][ T6019] ____sys_sendmsg+0x31e/0x4e0 [ 78.246349][ T6019] ___sys_sendmsg+0x17b/0x1d0 [ 78.246445][ T6019] __x64_sys_sendmsg+0xd4/0x160 [ 78.246542][ T6019] x64_sys_call+0x191e/0x2ff0 [ 78.246570][ T6019] do_syscall_64+0xd2/0x200 [ 78.246598][ T6019] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.246675][ T6019] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.246702][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.246809][ T6019] RIP: 0033:0x7fe183ddeb69 [ 78.246824][ T6019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.246843][ T6019] RSP: 002b:00007fe18243f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.246867][ T6019] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddeb69 [ 78.246884][ T6019] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 78.246900][ T6019] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.246981][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.246994][ T6019] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 78.247011][ T6019] [ 78.600136][ T6030] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 78.612144][ T6030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6030 comm=syz.4.967 [ 78.947247][ T6055] netlink: 'syz.0.976': attribute type 4 has an invalid length. [ 79.328398][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 79.442507][ T6087] FAULT_INJECTION: forcing a failure. [ 79.442507][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 79.455431][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.3.986 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 79.455510][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.455527][ T6087] Call Trace: [ 79.455534][ T6087] [ 79.455541][ T6087] __dump_stack+0x1d/0x30 [ 79.455638][ T6087] dump_stack_lvl+0xe8/0x140 [ 79.455708][ T6087] dump_stack+0x15/0x1b [ 79.455731][ T6087] should_fail_ex+0x265/0x280 [ 79.455767][ T6087] ? audit_log_d_path+0x8d/0x150 [ 79.455802][ T6087] should_failslab+0x8c/0xb0 [ 79.455953][ T6087] __kmalloc_cache_noprof+0x4c/0x320 [ 79.455987][ T6087] audit_log_d_path+0x8d/0x150 [ 79.456023][ T6087] audit_log_d_path_exe+0x42/0x70 [ 79.456117][ T6087] audit_log_task+0x1e9/0x250 [ 79.456245][ T6087] audit_seccomp+0x61/0x100 [ 79.456293][ T6087] ? __seccomp_filter+0x68c/0x10d0 [ 79.456325][ T6087] __seccomp_filter+0x69d/0x10d0 [ 79.456353][ T6087] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.456387][ T6087] ? vfs_write+0x75e/0x8e0 [ 79.456489][ T6087] ? __rcu_read_unlock+0x4f/0x70 [ 79.456515][ T6087] ? __fget_files+0x184/0x1c0 [ 79.456542][ T6087] __secure_computing+0x82/0x150 [ 79.456563][ T6087] syscall_trace_enter+0xcf/0x1e0 [ 79.456634][ T6087] do_syscall_64+0xac/0x200 [ 79.456715][ T6087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.456741][ T6087] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.456858][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.456883][ T6087] RIP: 0033:0x7f1efb8ceb69 [ 79.456899][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.456969][ T6087] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d2 [ 79.456992][ T6087] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 79.457010][ T6087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.457026][ T6087] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 79.457043][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.457073][ T6087] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 79.457097][ T6087] [ 79.878483][ T6101] ip6gre1: entered allmulticast mode [ 80.276191][ T29] kauditd_printk_skb: 24423 callbacks suppressed [ 80.276211][ T29] audit: type=1400 audit(1754362965.845:56790): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.287907][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.304524][ T29] audit: type=1400 audit(1754362965.855:56791): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.311245][ T3032] audit: audit_lost=3768 audit_rate_limit=0 audit_backlog_limit=64 [ 80.340387][ T3032] audit: backlog limit exceeded [ 80.349118][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.355672][ T3032] audit: audit_lost=3769 audit_rate_limit=0 audit_backlog_limit=64 [ 80.363669][ T3032] audit: backlog limit exceeded [ 80.373950][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.375641][ T29] audit: type=1400 audit(1754362965.855:56792): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.456937][ T6126] syzkaller0: entered promiscuous mode [ 80.462467][ T6126] syzkaller0: entered allmulticast mode [ 80.895527][ T6147] netlink: 'syz.2.1011': attribute type 29 has an invalid length. [ 80.903457][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 81.071280][ T6155] FAULT_INJECTION: forcing a failure. [ 81.071280][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 81.084031][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.3.1014 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 81.084069][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.084086][ T6155] Call Trace: [ 81.084095][ T6155] [ 81.084182][ T6155] __dump_stack+0x1d/0x30 [ 81.084204][ T6155] dump_stack_lvl+0xe8/0x140 [ 81.084223][ T6155] dump_stack+0x15/0x1b [ 81.084245][ T6155] should_fail_ex+0x265/0x280 [ 81.084362][ T6155] should_failslab+0x8c/0xb0 [ 81.084394][ T6155] __kmalloc_noprof+0xa5/0x3e0 [ 81.084572][ T6155] ? security_prepare_creds+0x52/0x120 [ 81.084614][ T6155] security_prepare_creds+0x52/0x120 [ 81.084651][ T6155] prepare_creds+0x34a/0x4c0 [ 81.084682][ T6155] lookup_user_key+0x12a/0xd10 [ 81.084711][ T6155] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 81.084740][ T6155] __se_sys_add_key+0x263/0x350 [ 81.084761][ T6155] __x64_sys_add_key+0x67/0x80 [ 81.084780][ T6155] x64_sys_call+0x28c4/0x2ff0 [ 81.084838][ T6155] do_syscall_64+0xd2/0x200 [ 81.084869][ T6155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.084900][ T6155] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.084922][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.084982][ T6155] RIP: 0033:0x7f1efb8ceb69 [ 81.085002][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.085027][ T6155] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 81.085051][ T6155] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 81.085066][ T6155] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 81.085078][ T6155] RBP: 00007f1ef9f37090 R08: ffffffffffffffff R09: 0000000000000000 [ 81.085137][ T6155] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 81.085180][ T6155] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 81.085275][ T6155] [ 81.574355][ T6184] FAULT_INJECTION: forcing a failure. [ 81.574355][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 81.587201][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.3.1027 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 81.587311][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.587328][ T6184] Call Trace: [ 81.587336][ T6184] [ 81.587346][ T6184] __dump_stack+0x1d/0x30 [ 81.587400][ T6184] dump_stack_lvl+0xe8/0x140 [ 81.587521][ T6184] dump_stack+0x15/0x1b [ 81.587544][ T6184] should_fail_ex+0x265/0x280 [ 81.587585][ T6184] should_failslab+0x8c/0xb0 [ 81.587705][ T6184] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 81.587742][ T6184] ? sidtab_sid2str_get+0xa0/0x130 [ 81.587782][ T6184] kmemdup_noprof+0x2b/0x70 [ 81.587816][ T6184] sidtab_sid2str_get+0xa0/0x130 [ 81.587842][ T6184] security_sid_to_context_core+0x1eb/0x2e0 [ 81.587964][ T6184] security_sid_to_context+0x27/0x40 [ 81.588036][ T6184] selinux_lsmprop_to_secctx+0x67/0xf0 [ 81.588073][ T6184] security_lsmprop_to_secctx+0x43/0x80 [ 81.588133][ T6184] audit_log_task_context+0x77/0x190 [ 81.588176][ T6184] audit_log_task+0xf4/0x250 [ 81.588284][ T6184] audit_seccomp+0x61/0x100 [ 81.588372][ T6184] ? __seccomp_filter+0x68c/0x10d0 [ 81.588452][ T6184] __seccomp_filter+0x69d/0x10d0 [ 81.588480][ T6184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.588636][ T6184] ? vfs_write+0x75e/0x8e0 [ 81.588670][ T6184] __secure_computing+0x82/0x150 [ 81.588698][ T6184] syscall_trace_enter+0xcf/0x1e0 [ 81.588731][ T6184] do_syscall_64+0xac/0x200 [ 81.588822][ T6184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.588846][ T6184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.588867][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.588890][ T6184] RIP: 0033:0x7f1efb8ceb69 [ 81.588909][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.589012][ T6184] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000025 [ 81.589037][ T6184] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 81.589054][ T6184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 81.589070][ T6184] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 81.589085][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.589113][ T6184] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 81.589131][ T6184] [ 81.868830][ T6189] geneve2: entered promiscuous mode [ 81.874207][ T6189] geneve2: entered allmulticast mode [ 81.889403][ T6190] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1026'. [ 81.909381][ T6190] sit0: entered promiscuous mode [ 81.917307][ T6190] netlink: 'syz.4.1026': attribute type 1 has an invalid length. [ 81.925083][ T6190] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1026'. [ 81.975043][ T6192] FAULT_INJECTION: forcing a failure. [ 81.975043][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 81.987791][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.3.1029 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 81.987854][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.987868][ T6192] Call Trace: [ 81.987875][ T6192] [ 81.987884][ T6192] __dump_stack+0x1d/0x30 [ 81.987913][ T6192] dump_stack_lvl+0xe8/0x140 [ 81.987938][ T6192] dump_stack+0x15/0x1b [ 81.987960][ T6192] should_fail_ex+0x265/0x280 [ 81.988022][ T6192] should_failslab+0x8c/0xb0 [ 81.988056][ T6192] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 81.988090][ T6192] ? __d_alloc+0x3d/0x340 [ 81.988128][ T6192] __d_alloc+0x3d/0x340 [ 81.988220][ T6192] d_alloc_pseudo+0x1e/0x80 [ 81.988269][ T6192] alloc_file_pseudo+0x71/0x160 [ 81.988307][ T6192] ? alloc_fd+0x38a/0x3c0 [ 81.988337][ T6192] anon_inode_getfile_fmode+0xa5/0x140 [ 81.988379][ T6192] do_eventfd+0x116/0x1b0 [ 81.988463][ T6192] __x64_sys_eventfd+0x20/0x30 [ 81.988491][ T6192] x64_sys_call+0x2e91/0x2ff0 [ 81.988599][ T6192] do_syscall_64+0xd2/0x200 [ 81.988635][ T6192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.988659][ T6192] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.988685][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.988714][ T6192] RIP: 0033:0x7f1efb8ceb69 [ 81.988805][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.988824][ T6192] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 81.988844][ T6192] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 81.988865][ T6192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000375 [ 81.988881][ T6192] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 81.988905][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.988921][ T6192] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 81.988940][ T6192] [ 82.614269][ T6221] FAULT_INJECTION: forcing a failure. [ 82.614269][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 82.627045][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.0.1041 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 82.627075][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.627125][ T6221] Call Trace: [ 82.627135][ T6221] [ 82.627145][ T6221] __dump_stack+0x1d/0x30 [ 82.627173][ T6221] dump_stack_lvl+0xe8/0x140 [ 82.627303][ T6221] dump_stack+0x15/0x1b [ 82.627322][ T6221] should_fail_ex+0x265/0x280 [ 82.627365][ T6221] should_failslab+0x8c/0xb0 [ 82.627397][ T6221] kmem_cache_alloc_noprof+0x50/0x310 [ 82.627471][ T6221] ? flock_lock_inode+0x135/0xf60 [ 82.627559][ T6221] ? finish_task_switch+0xad/0x2b0 [ 82.627585][ T6221] flock_lock_inode+0x135/0xf60 [ 82.627624][ T6221] locks_lock_inode_wait+0x6f/0x2a0 [ 82.627654][ T6221] ? __pfx_autoremove_wake_function+0x10/0x10 [ 82.627700][ T6221] __se_sys_flock+0x2f1/0x3b0 [ 82.627771][ T6221] __x64_sys_flock+0x31/0x40 [ 82.627794][ T6221] x64_sys_call+0x1e5a/0x2ff0 [ 82.627815][ T6221] do_syscall_64+0xd2/0x200 [ 82.627850][ T6221] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.627977][ T6221] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.627999][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.628028][ T6221] RIP: 0033:0x7f97ea6ceb69 [ 82.628043][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.628064][ T6221] RSP: 002b:00007f97e8d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 82.628125][ T6221] RAX: ffffffffffffffda RBX: 00007f97ea8f5fa0 RCX: 00007f97ea6ceb69 [ 82.628142][ T6221] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 82.628158][ T6221] RBP: 00007f97e8d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.628174][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.628186][ T6221] R13: 0000000000000000 R14: 00007f97ea8f5fa0 R15: 00007fff4b619d58 [ 82.628203][ T6221] [ 83.178751][ T6236] FAULT_INJECTION: forcing a failure. [ 83.178751][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.192065][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.4.1044 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 83.192103][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.192177][ T6236] Call Trace: [ 83.192191][ T6236] [ 83.192200][ T6236] __dump_stack+0x1d/0x30 [ 83.192228][ T6236] dump_stack_lvl+0xe8/0x140 [ 83.192309][ T6236] dump_stack+0x15/0x1b [ 83.192326][ T6236] should_fail_ex+0x265/0x280 [ 83.192368][ T6236] should_fail+0xb/0x20 [ 83.192563][ T6236] should_fail_usercopy+0x1a/0x20 [ 83.192587][ T6236] _copy_from_user+0x1c/0xb0 [ 83.192619][ T6236] kstrtouint_from_user+0x69/0xf0 [ 83.192644][ T6236] ? 0xffffffff81000000 [ 83.192660][ T6236] ? selinux_file_permission+0x1e4/0x320 [ 83.192758][ T6236] proc_fail_nth_write+0x50/0x160 [ 83.192790][ T6236] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.192850][ T6236] vfs_write+0x266/0x8e0 [ 83.192874][ T6236] ? vfs_read+0x47f/0x6f0 [ 83.192895][ T6236] ? __rcu_read_unlock+0x4f/0x70 [ 83.192918][ T6236] ? __fget_files+0x184/0x1c0 [ 83.192978][ T6236] ksys_write+0xda/0x1a0 [ 83.193007][ T6236] __x64_sys_write+0x40/0x50 [ 83.193042][ T6236] x64_sys_call+0x27fe/0x2ff0 [ 83.193063][ T6236] do_syscall_64+0xd2/0x200 [ 83.193147][ T6236] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.193177][ T6236] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.193198][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.193220][ T6236] RIP: 0033:0x7f805b8ad61f [ 83.193234][ T6236] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 83.193277][ T6236] RSP: 002b:00007f8059eee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 83.193302][ T6236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f805b8ad61f [ 83.193319][ T6236] RDX: 0000000000000001 RSI: 00007f8059eee0a0 RDI: 0000000000000006 [ 83.193335][ T6236] RBP: 00007f8059eee090 R08: 0000000000000000 R09: 0000000000000000 [ 83.193357][ T6236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 83.193369][ T6236] R13: 0000000000000000 R14: 00007f805bad6080 R15: 00007fff82eba528 [ 83.193445][ T6236] [ 83.417472][ T6249] FAULT_INJECTION: forcing a failure. [ 83.417472][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 83.430278][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.2.1052 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 83.430311][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.430323][ T6249] Call Trace: [ 83.430336][ T6249] [ 83.430346][ T6249] __dump_stack+0x1d/0x30 [ 83.430386][ T6249] dump_stack_lvl+0xe8/0x140 [ 83.430415][ T6249] dump_stack+0x15/0x1b [ 83.430437][ T6249] should_fail_ex+0x265/0x280 [ 83.430474][ T6249] should_failslab+0x8c/0xb0 [ 83.430499][ T6249] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 83.430615][ T6249] ? sidtab_sid2str_get+0xa0/0x130 [ 83.430641][ T6249] kmemdup_noprof+0x2b/0x70 [ 83.430741][ T6249] sidtab_sid2str_get+0xa0/0x130 [ 83.430763][ T6249] security_sid_to_context_core+0x1eb/0x2e0 [ 83.430808][ T6249] security_sid_to_context+0x27/0x40 [ 83.430849][ T6249] selinux_lsmprop_to_secctx+0x67/0xf0 [ 83.430940][ T6249] security_lsmprop_to_secctx+0x43/0x80 [ 83.430965][ T6249] audit_log_task_context+0x77/0x190 [ 83.431008][ T6249] audit_log_task+0xf4/0x250 [ 83.431052][ T6249] audit_seccomp+0x61/0x100 [ 83.431148][ T6249] ? __seccomp_filter+0x68c/0x10d0 [ 83.431170][ T6249] __seccomp_filter+0x69d/0x10d0 [ 83.431246][ T6249] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.431282][ T6249] ? vfs_write+0x75e/0x8e0 [ 83.431303][ T6249] ? kmem_cache_free+0xdf/0x300 [ 83.431375][ T6249] __secure_computing+0x82/0x150 [ 83.431402][ T6249] syscall_trace_enter+0xcf/0x1e0 [ 83.431426][ T6249] do_syscall_64+0xac/0x200 [ 83.431498][ T6249] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.431583][ T6249] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.431631][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.431658][ T6249] RIP: 0033:0x7fe183ddeb69 [ 83.431677][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.431751][ T6249] RSP: 002b:00007fe18243f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 83.431856][ T6249] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddeb69 [ 83.431872][ T6249] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 00007fe183fdf000 [ 83.431888][ T6249] RBP: 00007fe18243f090 R08: 0000200000001140 R09: 0000000000000000 [ 83.431934][ T6249] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 83.431946][ T6249] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 83.431963][ T6249] [ 83.761354][ T6259] FAULT_INJECTION: forcing a failure. [ 83.761354][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.774816][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.1.1055 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 83.774853][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.774867][ T6259] Call Trace: [ 83.774874][ T6259] [ 83.774882][ T6259] __dump_stack+0x1d/0x30 [ 83.774982][ T6259] dump_stack_lvl+0xe8/0x140 [ 83.775002][ T6259] dump_stack+0x15/0x1b [ 83.775020][ T6259] should_fail_ex+0x265/0x280 [ 83.775062][ T6259] should_fail+0xb/0x20 [ 83.775094][ T6259] should_fail_usercopy+0x1a/0x20 [ 83.775154][ T6259] strncpy_from_user+0x25/0x230 [ 83.775190][ T6259] ? kmem_cache_alloc_noprof+0x186/0x310 [ 83.775294][ T6259] ? getname_flags+0x80/0x3b0 [ 83.775482][ T6259] getname_flags+0xae/0x3b0 [ 83.775510][ T6259] path_removexattrat+0xf5/0x570 [ 83.775557][ T6259] __x64_sys_removexattr+0x38/0x50 [ 83.775591][ T6259] x64_sys_call+0x242f/0x2ff0 [ 83.775656][ T6259] do_syscall_64+0xd2/0x200 [ 83.775681][ T6259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.775730][ T6259] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.775753][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.775802][ T6259] RIP: 0033:0x7f7d8fe3eb69 [ 83.775821][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.775846][ T6259] RSP: 002b:00007f7d8e4a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 83.775871][ T6259] RAX: ffffffffffffffda RBX: 00007f7d90065fa0 RCX: 00007f7d8fe3eb69 [ 83.775888][ T6259] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000000c0 [ 83.775949][ T6259] RBP: 00007f7d8e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.775962][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.775982][ T6259] R13: 0000000000000000 R14: 00007f7d90065fa0 R15: 00007ffcad69b9c8 [ 83.776009][ T6259] [ 84.390407][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 84.395073][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 84.412307][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 84.727616][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1075'. [ 84.789947][ T6320] FAULT_INJECTION: forcing a failure. [ 84.789947][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 84.802656][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.2.1078 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 84.802737][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.802834][ T6320] Call Trace: [ 84.802843][ T6320] [ 84.802853][ T6320] __dump_stack+0x1d/0x30 [ 84.802883][ T6320] dump_stack_lvl+0xe8/0x140 [ 84.802909][ T6320] dump_stack+0x15/0x1b [ 84.802931][ T6320] should_fail_ex+0x265/0x280 [ 84.803031][ T6320] should_failslab+0x8c/0xb0 [ 84.803065][ T6320] kmem_cache_alloc_noprof+0x50/0x310 [ 84.803103][ T6320] ? security_file_alloc+0x32/0x100 [ 84.803154][ T6320] security_file_alloc+0x32/0x100 [ 84.803195][ T6320] init_file+0x5c/0x1d0 [ 84.803228][ T6320] alloc_empty_file+0x8b/0x200 [ 84.803266][ T6320] path_openat+0x68/0x2170 [ 84.803292][ T6320] ? _parse_integer_limit+0x170/0x190 [ 84.803340][ T6320] ? kstrtoull+0x111/0x140 [ 84.803400][ T6320] ? kstrtouint+0x76/0xc0 [ 84.803433][ T6320] do_filp_open+0x109/0x230 [ 84.803519][ T6320] do_sys_openat2+0xa6/0x110 [ 84.803566][ T6320] __x64_sys_openat+0xf2/0x120 [ 84.803609][ T6320] x64_sys_call+0x2e9c/0x2ff0 [ 84.803639][ T6320] do_syscall_64+0xd2/0x200 [ 84.803668][ T6320] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.803701][ T6320] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.803785][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.803806][ T6320] RIP: 0033:0x7fe183ddeb69 [ 84.803821][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.803845][ T6320] RSP: 002b:00007fe18243f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.803903][ T6320] RAX: ffffffffffffffda RBX: 00007fe184005fa0 RCX: 00007fe183ddeb69 [ 84.803921][ T6320] RDX: 0000000000101842 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 84.803939][ T6320] RBP: 00007fe18243f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.803956][ T6320] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 84.803969][ T6320] R13: 0000000000000000 R14: 00007fe184005fa0 R15: 00007ffec75f39c8 [ 84.804008][ T6320] [ 84.929179][ T6324] netlink: 'syz.4.1079': attribute type 4 has an invalid length. [ 85.066438][ T6329] FAULT_INJECTION: forcing a failure. [ 85.066438][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 85.079142][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.0.1081 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 85.079181][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.079198][ T6329] Call Trace: [ 85.079207][ T6329] [ 85.079217][ T6329] __dump_stack+0x1d/0x30 [ 85.079258][ T6329] dump_stack_lvl+0xe8/0x140 [ 85.079282][ T6329] dump_stack+0x15/0x1b [ 85.079306][ T6329] should_fail_ex+0x265/0x280 [ 85.079382][ T6329] should_failslab+0x8c/0xb0 [ 85.079407][ T6329] kmem_cache_alloc_noprof+0x50/0x310 [ 85.079438][ T6329] ? security_file_alloc+0x32/0x100 [ 85.079506][ T6329] security_file_alloc+0x32/0x100 [ 85.079578][ T6329] init_file+0x5c/0x1d0 [ 85.079624][ T6329] alloc_empty_file+0x8b/0x200 [ 85.079665][ T6329] path_openat+0x68/0x2170 [ 85.079766][ T6329] ? _parse_integer_limit+0x170/0x190 [ 85.079810][ T6329] ? _parse_integer+0x27/0x40 [ 85.079852][ T6329] ? kstrtoull+0x111/0x140 [ 85.079962][ T6329] ? kstrtouint+0x76/0xc0 [ 85.080115][ T6329] do_filp_open+0x109/0x230 [ 85.080151][ T6329] do_sys_openat2+0xa6/0x110 [ 85.080196][ T6329] __x64_sys_creat+0x65/0x90 [ 85.080245][ T6329] x64_sys_call+0x2d94/0x2ff0 [ 85.080274][ T6329] do_syscall_64+0xd2/0x200 [ 85.080306][ T6329] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.080401][ T6329] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.080424][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.080483][ T6329] RIP: 0033:0x7f97ea6ceb69 [ 85.080504][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.080529][ T6329] RSP: 002b:00007f97e8d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 85.080555][ T6329] RAX: ffffffffffffffda RBX: 00007f97ea8f5fa0 RCX: 00007f97ea6ceb69 [ 85.080572][ T6329] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 85.080606][ T6329] RBP: 00007f97e8d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.080623][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.080641][ T6329] R13: 0000000000000000 R14: 00007f97ea8f5fa0 R15: 00007fff4b619d58 [ 85.080664][ T6329] [ 85.301349][ T29] kauditd_printk_skb: 20164 callbacks suppressed [ 85.301367][ T29] audit: type=1400 audit(1754362970.655:68691): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.328939][ T29] audit: type=1400 audit(1754362970.655:68692): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.350107][ T29] audit: type=1400 audit(1754362970.655:68693): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.371561][ T29] audit: type=1400 audit(1754362970.655:68694): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.391680][ T6331] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.392877][ T29] audit: type=1400 audit(1754362970.655:68695): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.399362][ T6331] audit: audit_lost=6525 audit_rate_limit=0 audit_backlog_limit=64 [ 85.399380][ T6331] audit: backlog limit exceeded [ 85.411374][ T6333] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.420816][ T29] audit: type=1400 audit(1754362970.655:68696): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.466343][ T6331] FAULT_INJECTION: forcing a failure. [ 85.466343][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 85.479034][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.4.1082 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 85.479070][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.479085][ T6331] Call Trace: [ 85.479093][ T6331] [ 85.479159][ T6331] __dump_stack+0x1d/0x30 [ 85.479225][ T6331] dump_stack_lvl+0xe8/0x140 [ 85.479250][ T6331] dump_stack+0x15/0x1b [ 85.479272][ T6331] should_fail_ex+0x265/0x280 [ 85.479384][ T6331] should_failslab+0x8c/0xb0 [ 85.479435][ T6331] kmem_cache_alloc_node_noprof+0x57/0x320 [ 85.479524][ T6331] ? __alloc_skb+0x101/0x320 [ 85.479567][ T6331] __alloc_skb+0x101/0x320 [ 85.479601][ T6331] ? audit_log_start+0x365/0x6c0 [ 85.479679][ T6331] audit_log_start+0x380/0x6c0 [ 85.479717][ T6331] audit_seccomp+0x48/0x100 [ 85.479811][ T6331] ? __seccomp_filter+0x68c/0x10d0 [ 85.479892][ T6331] __seccomp_filter+0x69d/0x10d0 [ 85.479914][ T6331] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.479993][ T6331] ? vfs_write+0x75e/0x8e0 [ 85.480055][ T6331] ? __rcu_read_unlock+0x4f/0x70 [ 85.480083][ T6331] ? __fget_files+0x184/0x1c0 [ 85.480150][ T6331] __secure_computing+0x82/0x150 [ 85.480258][ T6331] syscall_trace_enter+0xcf/0x1e0 [ 85.480290][ T6331] do_syscall_64+0xac/0x200 [ 85.480326][ T6331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.480353][ T6331] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.480381][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.480424][ T6331] RIP: 0033:0x7f805b8aeb69 [ 85.480512][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.480608][ T6331] RSP: 002b:00007f8059f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.480632][ T6331] RAX: ffffffffffffffda RBX: 00007f805bad5fa0 RCX: 00007f805b8aeb69 [ 85.480647][ T6331] RDX: 0000000000032600 RSI: 0000200000000000 RDI: 0000000000000004 [ 85.480699][ T6331] RBP: 00007f8059f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.480716][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.480800][ T6331] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 85.480824][ T6331] [ 85.710318][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 85.773623][ T6344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1087'. [ 85.818253][ T6347] ip6gre1: entered allmulticast mode [ 86.240403][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 86.255742][ T6378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1100'. [ 87.063839][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 87.234195][ T6422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1116'. [ 87.329727][ T6431] netlink: 'syz.2.1122': attribute type 39 has an invalid length. [ 87.393150][ T6436] netlink: 'syz.3.1124': attribute type 6 has an invalid length. [ 87.410060][ T6436] FAULT_INJECTION: forcing a failure. [ 87.410060][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 87.422872][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.3.1124 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 87.422984][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.423001][ T6436] Call Trace: [ 87.423009][ T6436] [ 87.423016][ T6436] __dump_stack+0x1d/0x30 [ 87.423038][ T6436] dump_stack_lvl+0xe8/0x140 [ 87.423059][ T6436] dump_stack+0x15/0x1b [ 87.423159][ T6436] should_fail_ex+0x265/0x280 [ 87.423197][ T6436] should_failslab+0x8c/0xb0 [ 87.423222][ T6436] __kmalloc_noprof+0xa5/0x3e0 [ 87.423286][ T6436] ? fib_create_info+0xbb1/0x1980 [ 87.423359][ T6436] fib_create_info+0xbb1/0x1980 [ 87.423472][ T6436] fib_table_insert+0x60/0xeb0 [ 87.423539][ T6436] ? fib_trie_table+0xd0/0xf0 [ 87.423569][ T6436] ? fib_new_table+0x1ac/0x1c0 [ 87.423601][ T6436] inet_rtm_newroute+0xab/0x140 [ 87.423637][ T6436] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 87.423696][ T6436] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 87.423751][ T6436] netlink_rcv_skb+0x120/0x220 [ 87.423792][ T6436] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.423879][ T6436] rtnetlink_rcv+0x1c/0x30 [ 87.423921][ T6436] netlink_unicast+0x5c0/0x690 [ 87.423962][ T6436] netlink_sendmsg+0x58b/0x6b0 [ 87.424008][ T6436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.424044][ T6436] __sock_sendmsg+0x145/0x180 [ 87.424161][ T6436] ____sys_sendmsg+0x31e/0x4e0 [ 87.424207][ T6436] ___sys_sendmsg+0x17b/0x1d0 [ 87.424300][ T6436] __x64_sys_sendmsg+0xd4/0x160 [ 87.424416][ T6436] x64_sys_call+0x191e/0x2ff0 [ 87.424443][ T6436] do_syscall_64+0xd2/0x200 [ 87.424478][ T6436] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.424509][ T6436] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.424535][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.424612][ T6436] RIP: 0033:0x7f1efb8ceb69 [ 87.424630][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.424654][ T6436] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.424743][ T6436] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 87.424759][ T6436] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000003 [ 87.424774][ T6436] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 87.424790][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.424805][ T6436] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 87.424826][ T6436] [ 87.979068][ T6466] FAULT_INJECTION: forcing a failure. [ 87.979068][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 87.991879][ T6466] CPU: 1 UID: 0 PID: 6466 Comm: syz.0.1135 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 87.991919][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.991936][ T6466] Call Trace: [ 87.991966][ T6466] [ 87.992003][ T6466] __dump_stack+0x1d/0x30 [ 87.992032][ T6466] dump_stack_lvl+0xe8/0x140 [ 87.992057][ T6466] dump_stack+0x15/0x1b [ 87.992078][ T6466] should_fail_ex+0x265/0x280 [ 87.992111][ T6466] should_failslab+0x8c/0xb0 [ 87.992204][ T6466] kmem_cache_alloc_noprof+0x50/0x310 [ 87.992232][ T6466] ? skb_clone+0x151/0x1f0 [ 87.992305][ T6466] skb_clone+0x151/0x1f0 [ 87.992323][ T6466] __netlink_deliver_tap+0x2c9/0x500 [ 87.992360][ T6466] ? netlink_attachskb+0x2d1/0x610 [ 87.992397][ T6466] netlink_sendskb+0x126/0x150 [ 87.992474][ T6466] netlink_unicast+0x2a2/0x690 [ 87.992514][ T6466] netlink_ack+0x4c8/0x500 [ 87.992567][ T6466] netlink_rcv_skb+0x192/0x220 [ 87.992661][ T6466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.992698][ T6466] rtnetlink_rcv+0x1c/0x30 [ 87.992796][ T6466] netlink_unicast+0x5c0/0x690 [ 87.992836][ T6466] netlink_sendmsg+0x58b/0x6b0 [ 87.992877][ T6466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.992987][ T6466] __sock_sendmsg+0x145/0x180 [ 87.993045][ T6466] ____sys_sendmsg+0x31e/0x4e0 [ 87.993087][ T6466] ___sys_sendmsg+0x17b/0x1d0 [ 87.993183][ T6466] __x64_sys_sendmsg+0xd4/0x160 [ 87.993230][ T6466] x64_sys_call+0x191e/0x2ff0 [ 87.993252][ T6466] do_syscall_64+0xd2/0x200 [ 87.993276][ T6466] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.993342][ T6466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.993371][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.993399][ T6466] RIP: 0033:0x7f97ea6ceb69 [ 87.993418][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.993442][ T6466] RSP: 002b:00007f97e8d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.993527][ T6466] RAX: ffffffffffffffda RBX: 00007f97ea8f5fa0 RCX: 00007f97ea6ceb69 [ 87.993542][ T6466] RDX: 0000000000000000 RSI: 0000200000005c40 RDI: 0000000000000004 [ 87.993558][ T6466] RBP: 00007f97e8d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.993570][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.993593][ T6466] R13: 0000000000000000 R14: 00007f97ea8f5fa0 R15: 00007fff4b619d58 [ 87.993616][ T6466] [ 88.539168][ T6493] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 88.844018][ T6510] FAULT_INJECTION: forcing a failure. [ 88.844018][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.857200][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.3.1153 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 88.857264][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.857281][ T6510] Call Trace: [ 88.857358][ T6510] [ 88.857366][ T6510] __dump_stack+0x1d/0x30 [ 88.857388][ T6510] dump_stack_lvl+0xe8/0x140 [ 88.857412][ T6510] dump_stack+0x15/0x1b [ 88.857434][ T6510] should_fail_ex+0x265/0x280 [ 88.857490][ T6510] should_fail+0xb/0x20 [ 88.857547][ T6510] should_fail_usercopy+0x1a/0x20 [ 88.857572][ T6510] strncpy_from_user+0x25/0x230 [ 88.857612][ T6510] ? kmem_cache_alloc_noprof+0x186/0x310 [ 88.857647][ T6510] ? getname_flags+0x80/0x3b0 [ 88.857676][ T6510] getname_flags+0xae/0x3b0 [ 88.857787][ T6510] path_setxattrat+0x223/0x310 [ 88.857832][ T6510] __x64_sys_lsetxattr+0x71/0x90 [ 88.857892][ T6510] x64_sys_call+0x2877/0x2ff0 [ 88.857914][ T6510] do_syscall_64+0xd2/0x200 [ 88.857956][ T6510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.857987][ T6510] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.858016][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.858089][ T6510] RIP: 0033:0x7f1efb8ceb69 [ 88.858104][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.858192][ T6510] RSP: 002b:00007f1ef9f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 88.858211][ T6510] RAX: ffffffffffffffda RBX: 00007f1efbaf5fa0 RCX: 00007f1efb8ceb69 [ 88.858223][ T6510] RDX: 0000200000000640 RSI: 0000200000000540 RDI: 00002000000003c0 [ 88.858240][ T6510] RBP: 00007f1ef9f37090 R08: 0000000000000000 R09: 0000000000000000 [ 88.858256][ T6510] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 88.858273][ T6510] R13: 0000000000000000 R14: 00007f1efbaf5fa0 R15: 00007ffc543c3a08 [ 88.858368][ T6510] [ 89.114326][ T6520] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.180663][ T6517] FAULT_INJECTION: forcing a failure. [ 89.180663][ T6517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.194022][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.4.1154 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 89.194137][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.194150][ T6517] Call Trace: [ 89.194157][ T6517] [ 89.194164][ T6517] __dump_stack+0x1d/0x30 [ 89.194188][ T6517] dump_stack_lvl+0xe8/0x140 [ 89.194212][ T6517] dump_stack+0x15/0x1b [ 89.194233][ T6517] should_fail_ex+0x265/0x280 [ 89.194353][ T6517] should_fail_alloc_page+0xf2/0x100 [ 89.194389][ T6517] __alloc_frozen_pages_noprof+0xff/0x360 [ 89.194433][ T6517] alloc_pages_mpol+0xb3/0x250 [ 89.194516][ T6517] vma_alloc_folio_noprof+0x1aa/0x300 [ 89.194561][ T6517] handle_mm_fault+0xec2/0x2c20 [ 89.194599][ T6517] do_user_addr_fault+0x636/0x1090 [ 89.194660][ T6517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.194691][ T6517] exc_page_fault+0x62/0xa0 [ 89.194714][ T6517] asm_exc_page_fault+0x26/0x30 [ 89.194739][ T6517] RIP: 0033:0x7f805b85c19b [ 89.194814][ T6517] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 89.194833][ T6517] RSP: 002b:00007f8059f0ce10 EFLAGS: 00010246 [ 89.194854][ T6517] RAX: 00007f8059f0ef30 RBX: 00007f805baa7640 RCX: 0000000000000000 [ 89.194869][ T6517] RDX: 00007f8059f0ef78 RSI: 00007f805b90ec80 RDI: 00007f8059f0ce30 [ 89.194881][ T6517] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 89.194893][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.194960][ T6517] R13: 0000000000000000 R14: 00007f805bad5fa0 R15: 00007fff82eba528 [ 89.194983][ T6517] [ 89.194995][ T6517] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 89.196948][ T6523] netlink: 'syz.3.1155': attribute type 3 has an invalid length. [ 89.695163][ T6553] ================================================================== [ 89.703304][ T6553] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 89.710638][ T6553] [ 89.713070][ T6553] write to 0xffff888103777d00 of 8 bytes by task 6551 on cpu 0: [ 89.720713][ T6553] mas_wmb_replace+0x20d/0x14a0 [ 89.725613][ T6553] mas_wr_store_entry+0x1773/0x2b50 [ 89.730828][ T6553] mas_store_prealloc+0x74d/0x9e0 [ 89.735864][ T6553] vma_iter_store_new+0x1c5/0x200 [ 89.740924][ T6553] vma_complete+0x125/0x580 [ 89.745439][ T6553] __split_vma+0x5d9/0x650 [ 89.749880][ T6553] vma_modify+0x3f2/0xc80 [ 89.754272][ T6553] vma_modify_flags+0x101/0x130 [ 89.759136][ T6553] mprotect_fixup+0x2cc/0x570 [ 89.763923][ T6553] do_mprotect_pkey+0x6d6/0x980 [ 89.768880][ T6553] __x64_sys_mprotect+0x48/0x60 [ 89.773749][ T6553] x64_sys_call+0x274e/0x2ff0 [ 89.778441][ T6553] do_syscall_64+0xd2/0x200 [ 89.783063][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.788970][ T6553] [ 89.791300][ T6553] read to 0xffff888103777d00 of 8 bytes by task 6553 on cpu 1: [ 89.798848][ T6553] mas_state_walk+0x119/0x650 [ 89.803547][ T6553] mas_walk+0x60/0x150 [ 89.807627][ T6553] lock_vma_under_rcu+0xa2/0x2f0 [ 89.812598][ T6553] do_user_addr_fault+0x233/0x1090 [ 89.817748][ T6553] exc_page_fault+0x62/0xa0 [ 89.822271][ T6553] asm_exc_page_fault+0x26/0x30 [ 89.827410][ T6553] [ 89.829838][ T6553] value changed: 0xffff88810416dc41 -> 0xffff888103777d00 [ 89.836970][ T6553] [ 89.839298][ T6553] Reported by Kernel Concurrency Sanitizer on: [ 89.845462][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.2.1167 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 89.857550][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.867827][ T6553] ================================================================== [ 89.878849][ T6556] FAULT_INJECTION: forcing a failure. [ 89.878849][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 89.891677][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.4.1165 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 89.891761][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.891779][ T6556] Call Trace: [ 89.891788][ T6556] [ 89.891803][ T6556] __dump_stack+0x1d/0x30 [ 89.891832][ T6556] dump_stack_lvl+0xe8/0x140 [ 89.891857][ T6556] dump_stack+0x15/0x1b [ 89.891877][ T6556] should_fail_ex+0x265/0x280 [ 89.891941][ T6556] should_failslab+0x8c/0xb0 [ 89.891970][ T6556] __kmalloc_noprof+0xa5/0x3e0 [ 89.892015][ T6556] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 89.892116][ T6556] ? unlist_netdevice+0x2cc/0x320 [ 89.892140][ T6556] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 89.892167][ T6556] ? __queue_delayed_work+0x165/0x1e0 [ 89.892205][ T6556] ? queue_delayed_work_on+0x106/0x170 [ 89.892293][ T6556] unregister_netdevice_queue+0x1f5/0x220 [ 89.892334][ T6556] __tun_detach+0x7db/0xad0 [ 89.892381][ T6556] ? __pfx_tun_chr_close+0x10/0x10 [ 89.892423][ T6556] tun_chr_close+0x5a/0x100 [ 89.892462][ T6556] __fput+0x29b/0x650 [ 89.892510][ T6556] fput_close_sync+0x6e/0x120 [ 89.892658][ T6556] __x64_sys_close+0x56/0xf0 [ 89.892681][ T6556] x64_sys_call+0x2738/0x2ff0 [ 89.892703][ T6556] do_syscall_64+0xd2/0x200 [ 89.892787][ T6556] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.892818][ T6556] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.892846][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.892871][ T6556] RIP: 0033:0x7f805b8aeb69 [ 89.892964][ T6556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.893036][ T6556] RSP: 002b:00007f8059eee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 89.893056][ T6556] RAX: ffffffffffffffda RBX: 00007f805bad6080 RCX: 00007f805b8aeb69 [ 89.893073][ T6556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 89.893088][ T6556] RBP: 00007f8059eee090 R08: 0000000000000000 R09: 0000000000000000 [ 89.893105][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.893126][ T6556] R13: 0000000000000001 R14: 00007f805bad6080 R15: 00007fff82eba528 [ 89.893236][ T6556] [ 90.306679][ T29] kauditd_printk_skb: 20973 callbacks suppressed [ 90.306697][ T29] audit: type=1400 audit(1754362975.875:87341): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.316120][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.335182][ T29] audit: type=1400 audit(1754362975.885:87342): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.340853][ T3032] audit: audit_lost=7303 audit_rate_limit=0 audit_backlog_limit=64 [ 90.362048][ T29] audit: type=1400 audit(1754362975.885:87343): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.370008][ T3032] audit: backlog limit exceeded [ 90.391202][ T29] audit: type=1400 audit(1754362975.885:87344): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.396701][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.417367][ T29] audit: type=1400 audit(1754362975.885:87345): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.423821][ T3032] audit: audit_lost=7304 audit_rate_limit=0 audit_backlog_limit=64 [ 95.317041][ T29] kauditd_printk_skb: 48298 callbacks suppressed [ 95.317056][ T29] audit: type=1400 audit(1754362980.885:134977): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.331157][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.345117][ T29] audit: type=1400 audit(1754362980.895:134978): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.351752][ T3032] audit: audit_lost=7527 audit_rate_limit=0 audit_backlog_limit=64 [ 95.373594][ T29] audit: type=1400 audit(1754362980.895:134979): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.381489][ T3032] audit: backlog limit exceeded [ 95.403055][ T29] audit: type=1400 audit(1754362980.895:134980): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.411038][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.429444][ T29] audit: type=1400 audit(1754362980.895:134981): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.429474][ T29] audit: type=1400 audit(1754362980.895:134982): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0