last executing test programs: 3.277234829s ago: executing program 1 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572001000018009000100"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) (fail_nth: 3) 3.203141613s ago: executing program 1 (id=1465): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba}, 0x94) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/119) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = io_uring_setup(0x21bf, &(0x7f0000000300)={0x0, 0xad6c, 0x18, 0x2, 0x20000000}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/204, 0xcc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/134, 0x86}, {&(0x7f0000000640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) creat(&(0x7f0000000140)='.\x00', 0x126) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xf) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.201719223s ago: executing program 1 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000ac0)={{0x2, 0x0, @multicast2}, {0x1}, 0x2a, {0x2, 0x0, @empty}, 'bond_slave_1\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) symlink(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = syz_io_uring_setup(0x309, &(0x7f0000000140)={0x0, 0x114df, 0x400, 0x1, 0x87}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000100008000001fea6604"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 3.176545263s ago: executing program 1 (id=1469): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x2000, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r4, 0x4, r3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) 2.618731418s ago: executing program 2 (id=1477): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200"], 0x98}, 0x1, 0x7}, 0x8890) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x1005, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdir(0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.187831356s ago: executing program 1 (id=1480): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56) writev(r2, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000480)="a0f16a5b31d4060b7cd9b0e9e557c9944a689f9a2db29eaca8f93b9ffad4d978fb55d566dd01e8703daa1c37be50da7a3892e0db386bc52f48fd3f3a0e67a17a4500", 0x42}, {&(0x7f0000000640)="f211439d1627f3286a78497b1b24d74fbf49b9aee065305cda04c8b5b9ef8727b924ea86a1e89a7e498f539a9b8984a4535e247ee657c9a5380e8708db573d6717ecaa7dbadce851779afbe241f034864bd377d5e52bf90ebf5cadbd66aa49b30a8530f4d91ffa552b9944177bfa625c6f3145b2595990e11f2fc040a0396a1061a2dc6e3cb220ca5275dd678f2d33452bc675c772f9761aa922e4fa613f92a4020f749406658a6a79d5721c7853f476", 0xb0}, {&(0x7f0000000e40)="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", 0x199}], 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) sendmsg$inet(r0, 0x0, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x9) sendto$inet6(r8, 0x0, 0x0, 0x40000, &(0x7f0000000300)={0xa, 0x5e20, 0x0, @mcast1}, 0x1c) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x1}, 0x50) 1.964162586s ago: executing program 0 (id=1483): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}], 0x18}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@local, @in6=@mcast2, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x20, 0x80}, {0x8, 0x10, 0x1, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xd424}, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) writev(r5, &(0x7f00000007c0)=[{&(0x7f0000000380)="02", 0x1}], 0x1) 1.890309239s ago: executing program 3 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") creat(&(0x7f0000000100)='./file2\x00', 0x40) 1.86530263s ago: executing program 3 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) 1.848650851s ago: executing program 3 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000400)=""/19, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x49, &(0x7f0000000180), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x800000000000008, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000340)={0x0, @rc={0x1f, @none, 0x5}, @xdp={0x2c, 0x10, 0x0, 0x14}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, 0x4}, 0x8000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='bond0\x00', 0x4, 0x800, 0x4}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.763142164s ago: executing program 2 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x0, 0x4, 0x8, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0xddfefc41af69ab0b, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='./file0\x00', 0x80000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572001000018009000100"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) 1.762446294s ago: executing program 2 (id=1490): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x2000, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r4, 0x4, r3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) 1.349959282s ago: executing program 1 (id=1491): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_clone(0x40042711, 0x0, 0x0, 0x0, 0x0, 0x0) 1.199903908s ago: executing program 3 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001600)={@empty, 0x0}, &(0x7f0000001640)=0x14) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="04010000120000082cbd7000fddbdf251e050f054e234e2200000000ffffffff79020000c702000004000000000200000e76000000100000", @ANYRES32=r4, @ANYBLOB="10100000400000000000090000000000b6000100dc2aaa70c75a65a41075a773205a8ce9b8a52b3bea263e4497dbad876c557d7662508a4cdd92f65ce4d658340e02f2e3f99cc2075d819459e89ec3efd78e21283b9ab11b860a28a2c5d3b6fce931faec76c0f26760e70738e5fca07803fbde7621603d52454143a396ff97216c6fe5ef427e61fdec12875cb4c2f0e41d964a8e9865df884234f4e300202b79d3be3e58abba1a98db3c5f4e7830d4ac7c6c1476ee153bf1c8112062810a0d73b8350000"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x100000}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001280)={@rand_addr, @broadcast, 0x0}, &(0x7f00000012c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'gretap0\x00', 0x0, 0x20, 0x1, 0x2, 0x70, {{0xe, 0x4, 0x0, 0x4, 0x38, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @private=0xa010101, {[@lsrr={0x83, 0x23, 0xa0, [@remote, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, @empty, @multicast2]}]}}}}}) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x39}}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001400)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000001580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xc4, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x40) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r15}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ac0)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x24, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x0, 0x2, 0x2, 0x2, 0x0, 0x6, 0x7ffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @map_fd={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x5, 0x33, &(0x7f0000001a00)=""/51, 0x40f00, 0x0, '\x00', r14, @fallback=0x2b, r8, 0x8, &(0x7f0000001a40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r16, r2, 0x2, 0x0, &(0x7f0000001b00)=[{0x3, 0x2, 0x3, 0x2}, {0x5, 0x2, 0x6, 0xc}], 0x10, 0x5}, 0x94) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x200, 0x0, 0xfffffffd, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0xfffffffd, 0xc3}, {0x2, 0x5}, {0x3}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {0x0, 0x0, 0x10, 0x0, 0xfffffffc}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x4}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {0x80}, {0x80, 0x2}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8510, 0x400}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffff9, 0x200}, {0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x800, 0x0, 0x2}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10000, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000}, {0x0, 0x8000}, {0x1000, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3, 0x400000}, {0x80, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {0x5}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.130943402s ago: executing program 3 (id=1493): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000640)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x4a, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x1, 0x8, 0x3]}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0x5, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x80) sendto$inet6(r0, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r4 = gettid() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f6be000000000002000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000062000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000003b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0xffffff81, r9}, 0x38) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r6, @ANYRESOCT=r3, @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x109) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.090057993s ago: executing program 0 (id=1494): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getrandom(0x0, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000480)={@remote}, 0x14) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x400) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x40}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={r6, 0x8001}, 0x8) 1.066434204s ago: executing program 0 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0x2}]}}}]}, 0x50}}, 0x0) (fail_nth: 4) 802.198196ms ago: executing program 2 (id=1497): r0 = syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x4a000200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001400190100000000000000"], 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001580)={{0x1, 0x1, 0x18, r2, {0x28a6, 0xfec}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'syztnl0\x00', &(0x7f00000015c0)={'syztnl1\x00', 0x0, 0x700, 0x20, 0xfffffff8, 0x5, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0xe, 0x29, 0x0, @local, @remote, {[@ssrr={0x89, 0x13, 0x33, [@loopback, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp={0x44, 0x18, 0x62, 0x0, 0x2, [0x7, 0x1, 0xc8, 0x7, 0x5]}, @noop, @lsrr={0x83, 0xb, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @rr={0x7, 0x7, 0x73, [@loopback]}, @lsrr={0x83, 0x7, 0x9, [@multicast1]}, @lsrr={0x83, 0x13, 0xdd, [@local, @multicast2, @private=0xa010100, @empty]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="21f900"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05000000030000000200"/28], 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRESDEC=r8, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000014c0)={r12, r9, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x6, 0x1, 0x4, 0x0], &(0x7f0000000240)=[0x2, 0x0, 0x1, 0x4, 0x0], 0x7, 0x4, 0x0, r0}}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r8}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 716.284259ms ago: executing program 0 (id=1499): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='mlxsw_sp_acl_tcam_vregion_rehash\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff0008000000a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009538f76c38e1b4040b2853027ae6490b2fb976596e5f806dc76cd84b8a0cbe71951e29f8435c859a1f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x3, 0x0, 0x4e, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x80d7, 0x7f, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00003c6000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mmap(&(0x7f0000ec5000/0x4000)=nil, 0x4000, 0x200000a, 0x200000005c831, 0xffffffffffffffff, 0xf06fa000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000300), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x7}], 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x10, "e694abf4edb93a477ce5d15a32fe8365"}, &(0x7f0000000280)=0x18) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 715.552809ms ago: executing program 4 (id=1500): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}], 0x8) bind$can_raw(r0, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1604"], 0x98) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r9}, 0x18) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r11, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r6, @ANYRESHEX=0x0, @ANYRES64=r10, @ANYRESOCT=r4, @ANYRESHEX, @ANYRESHEX=r5], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r13}, 0x18) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 611.156824ms ago: executing program 4 (id=1501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101d81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x402, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 605.239914ms ago: executing program 0 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000400)=""/19, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x49, &(0x7f0000000180), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x800000000000008, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000340)={0x0, @rc={0x1f, @none, 0x5}, @xdp={0x2c, 0x10, 0x0, 0x14}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, 0x4}, 0x8000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='bond0\x00', 0x4, 0x800, 0x4}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 535.199297ms ago: executing program 4 (id=1503): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 481.03681ms ago: executing program 4 (id=1504): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000000) 419.350952ms ago: executing program 4 (id=1505): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) (fail_nth: 1) 202.474791ms ago: executing program 4 (id=1506): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 152.793923ms ago: executing program 3 (id=1507): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x2000, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r4, 0x4, r3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) 76.157907ms ago: executing program 2 (id=1508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x8}, 0x18) close(r1) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)=""/12, &(0x7f00000002c0)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000000)={0x0, 0x3, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) 28.027879ms ago: executing program 2 (id=1509): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x401, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000001500)='\xb8\x8dD\x13G\xfd\xfes\xee\a\xc3A)\x00'/27, 0x1b, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=1510): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) (async, rerun: 32) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000002b80)={0x0, 0xfb, 0x1020, 0x1, 0xe8, "ecebedeb833f00", "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"/4107}, 0x1020, 0x0) (rerun: 32) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): uld_fail_ex+0x265/0x280 [ 62.908645][ T5571] should_fail_alloc_page+0xf2/0x100 [ 62.908697][ T5571] __alloc_frozen_pages_noprof+0x109/0x360 [ 62.908725][ T5571] alloc_pages_mpol+0xb3/0x260 [ 62.908753][ T5571] alloc_pages_noprof+0x90/0x130 [ 62.908852][ T5571] pte_alloc_one+0x1e/0xd0 [ 62.908978][ T5571] __pte_alloc+0x32/0x2c0 [ 62.909006][ T5571] handle_mm_fault+0x1c8e/0x2c60 [ 62.909110][ T5571] ? _raw_spin_lock+0x52/0xa0 [ 62.909134][ T5571] ? __pte_offset_map_lock+0x1d9/0x240 [ 62.909164][ T5571] __get_user_pages+0x1024/0x1ed0 [ 62.909323][ T5571] __gup_longterm_locked+0x8ef/0xe60 [ 62.909360][ T5571] ? should_fail_ex+0xdb/0x280 [ 62.909445][ T5571] pin_user_pages_remote+0x7e/0xb0 [ 62.909481][ T5571] process_vm_rw+0x484/0x960 [ 62.909529][ T5571] __x64_sys_process_vm_readv+0x78/0x90 [ 62.909553][ T5571] x64_sys_call+0x148a/0x3000 [ 62.909580][ T5571] do_syscall_64+0xd8/0x2a0 [ 62.909744][ T5571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.909767][ T5571] RIP: 0033:0x7f420d3df749 [ 62.909783][ T5571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.909799][ T5571] RSP: 002b:00007f420be47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 62.909814][ T5571] RAX: ffffffffffffffda RBX: 00007f420d635fa0 RCX: 00007f420d3df749 [ 62.909864][ T5571] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000001c3 [ 62.909877][ T5571] RBP: 00007f420be47090 R08: 0000000000000286 R09: 0000000000000000 [ 62.909890][ T5571] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 62.909900][ T5571] R13: 00007f420d636038 R14: 00007f420d635fa0 R15: 00007ffe05506288 [ 62.909915][ T5571] [ 63.204759][ T29] kauditd_printk_skb: 1757 callbacks suppressed [ 63.204773][ T29] audit: type=1400 audit(1765270093.112:7843): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.235382][ T29] audit: type=1400 audit(1765270093.122:7844): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.259682][ T29] audit: type=1400 audit(1765270093.132:7845): avc: denied { prog_load } for pid=5580 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.278657][ T29] audit: type=1400 audit(1765270093.132:7846): avc: denied { create } for pid=5580 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.299060][ T29] audit: type=1400 audit(1765270093.132:7847): avc: denied { create } for pid=5580 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.324377][ T29] audit: type=1400 audit(1765270093.162:7848): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.348663][ T29] audit: type=1400 audit(1765270093.182:7849): avc: denied { map_create } for pid=5579 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.367810][ T29] audit: type=1400 audit(1765270093.182:7850): avc: denied { prog_load } for pid=5579 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.386824][ T29] audit: type=1400 audit(1765270093.182:7851): avc: denied { mounton } for pid=5579 comm="syz.0.873" path="/159/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 63.409301][ T29] audit: type=1400 audit(1765270093.182:7852): avc: denied { create } for pid=5579 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 63.439630][ T5598] Falling back ldisc for ttyS3. [ 63.636529][ T5628] FAULT_INJECTION: forcing a failure. [ 63.636529][ T5628] name failslab, interval 1, probability 0, space 0, times 0 [ 63.649294][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz.4.895 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.649324][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.649338][ T5628] Call Trace: [ 63.649347][ T5628] [ 63.649353][ T5628] __dump_stack+0x1d/0x30 [ 63.649375][ T5628] dump_stack_lvl+0xe8/0x140 [ 63.649451][ T5628] dump_stack+0x15/0x1b [ 63.649471][ T5628] should_fail_ex+0x265/0x280 [ 63.649523][ T5628] should_failslab+0x8c/0xb0 [ 63.649543][ T5628] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 63.649568][ T5628] ? __alloc_skb+0x324/0x4d0 [ 63.649596][ T5628] __alloc_skb+0x324/0x4d0 [ 63.649656][ T5628] ? __alloc_skb+0x24d/0x4d0 [ 63.649678][ T5628] audit_log_start+0x3a0/0x720 [ 63.649703][ T5628] ? kstrtouint+0x76/0xc0 [ 63.649722][ T5628] audit_seccomp+0x48/0x100 [ 63.649830][ T5628] ? __seccomp_filter+0x832/0x1260 [ 63.649856][ T5628] __seccomp_filter+0x843/0x1260 [ 63.649882][ T5628] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 63.649949][ T5628] ? vfs_write+0x7e8/0x960 [ 63.649969][ T5628] ? __rcu_read_unlock+0x4f/0x70 [ 63.649993][ T5628] ? __fget_files+0x184/0x1c0 [ 63.650020][ T5628] __secure_computing+0x82/0x150 [ 63.650091][ T5628] syscall_trace_enter+0xcf/0x1e0 [ 63.650114][ T5628] do_syscall_64+0xb2/0x2a0 [ 63.650145][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.650164][ T5628] RIP: 0033:0x7f99ad86f749 [ 63.650186][ T5628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.650240][ T5628] RSP: 002b:00007f99ac2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 63.650329][ T5628] RAX: ffffffffffffffda RBX: 00007f99adac5fa0 RCX: 00007f99ad86f749 [ 63.650343][ T5628] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000200000952000 [ 63.650358][ T5628] RBP: 00007f99ac2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 63.650373][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.650422][ T5628] R13: 00007f99adac6038 R14: 00007f99adac5fa0 R15: 00007ffe52c26618 [ 63.650445][ T5628] [ 63.925677][ T5638] ip6erspan0: entered promiscuous mode [ 64.239741][ T3628] Process accounting resumed [ 64.498431][ T5695] FAULT_INJECTION: forcing a failure. [ 64.498431][ T5695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.511539][ T5695] CPU: 1 UID: 0 PID: 5695 Comm: syz.3.924 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.511564][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.511577][ T5695] Call Trace: [ 64.511584][ T5695] [ 64.511593][ T5695] __dump_stack+0x1d/0x30 [ 64.511697][ T5695] dump_stack_lvl+0xe8/0x140 [ 64.511719][ T5695] dump_stack+0x15/0x1b [ 64.511779][ T5695] should_fail_ex+0x265/0x280 [ 64.511828][ T5695] should_fail+0xb/0x20 [ 64.511853][ T5695] should_fail_usercopy+0x1a/0x20 [ 64.511886][ T5695] _copy_to_iter+0xd2/0xe70 [ 64.511909][ T5695] ? xa_load+0xb1/0xe0 [ 64.511945][ T5695] ? __account_obj_stock+0x211/0x350 [ 64.511968][ T5695] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 64.512046][ T5695] __skb_datagram_iter+0x2f4/0x690 [ 64.512081][ T5695] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 64.512192][ T5695] skb_copy_datagram_iter+0x3d/0x110 [ 64.512279][ T5695] mptcp_recvmsg+0x4a0/0x1480 [ 64.512391][ T5695] ? selinux_socket_recvmsg+0x175/0x1b0 [ 64.512412][ T5695] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 64.512428][ T5695] inet6_recvmsg+0x16b/0x290 [ 64.512527][ T5695] sock_recvmsg+0x95/0x170 [ 64.512543][ T5695] ____sys_recvmsg+0xf5/0x280 [ 64.512599][ T5695] ___sys_recvmsg+0x11f/0x370 [ 64.512633][ T5695] do_recvmmsg+0x1ef/0x540 [ 64.512664][ T5695] ? fput+0x8f/0xc0 [ 64.512712][ T5695] __x64_sys_recvmmsg+0xe5/0x170 [ 64.512739][ T5695] x64_sys_call+0x2b75/0x3000 [ 64.512760][ T5695] do_syscall_64+0xd8/0x2a0 [ 64.512837][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.512854][ T5695] RIP: 0033:0x7f420d3df749 [ 64.512867][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.512886][ T5695] RSP: 002b:00007f420be47038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 64.512901][ T5695] RAX: ffffffffffffffda RBX: 00007f420d635fa0 RCX: 00007f420d3df749 [ 64.512912][ T5695] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 64.512939][ T5695] RBP: 00007f420be47090 R08: 0000000000000000 R09: 0000000000000000 [ 64.512951][ T5695] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 64.512964][ T5695] R13: 00007f420d636038 R14: 00007f420d635fa0 R15: 00007ffe05506288 [ 64.512984][ T5695] [ 64.974993][ T5719] FAULT_INJECTION: forcing a failure. [ 64.974993][ T5719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.988203][ T5719] CPU: 1 UID: 0 PID: 5719 Comm: syz.1.934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.988227][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.988240][ T5719] Call Trace: [ 64.988247][ T5719] [ 64.988254][ T5719] __dump_stack+0x1d/0x30 [ 64.988386][ T5719] dump_stack_lvl+0xe8/0x140 [ 64.988406][ T5719] dump_stack+0x15/0x1b [ 64.988425][ T5719] should_fail_ex+0x265/0x280 [ 64.988451][ T5719] should_fail+0xb/0x20 [ 64.988514][ T5719] should_fail_usercopy+0x1a/0x20 [ 64.988538][ T5719] _copy_from_iter+0xcf/0xe70 [ 64.988562][ T5719] ? alloc_pages_mpol+0x217/0x260 [ 64.988596][ T5719] copy_page_from_iter+0x178/0x2a0 [ 64.988710][ T5719] tun_get_user+0x679/0x2670 [ 64.988759][ T5719] ? ref_tracker_alloc+0x1f2/0x2f0 [ 64.988792][ T5719] tun_chr_write_iter+0x15e/0x210 [ 64.988819][ T5719] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 64.988839][ T5719] vfs_write+0x52a/0x960 [ 64.988861][ T5719] ksys_write+0xda/0x1a0 [ 64.988891][ T5719] __x64_sys_write+0x40/0x50 [ 64.988909][ T5719] x64_sys_call+0x2847/0x3000 [ 64.988937][ T5719] do_syscall_64+0xd8/0x2a0 [ 64.988976][ T5719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.989035][ T5719] RIP: 0033:0x7fb1f548e1ff [ 64.989050][ T5719] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 64.989066][ T5719] RSP: 002b:00007fb1f3eef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 64.989143][ T5719] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548e1ff [ 64.989154][ T5719] RDX: 00000000000000be RSI: 0000200000000100 RDI: 00000000000000c8 [ 64.989166][ T5719] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 64.989177][ T5719] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 64.989188][ T5719] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 64.989208][ T5719] [ 65.305199][ T5739] FAULT_INJECTION: forcing a failure. [ 65.305199][ T5739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.318309][ T5739] CPU: 0 UID: 0 PID: 5739 Comm: syz.2.942 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.318378][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.318392][ T5739] Call Trace: [ 65.318399][ T5739] [ 65.318406][ T5739] __dump_stack+0x1d/0x30 [ 65.318442][ T5739] dump_stack_lvl+0xe8/0x140 [ 65.318462][ T5739] dump_stack+0x15/0x1b [ 65.318547][ T5739] should_fail_ex+0x265/0x280 [ 65.318578][ T5739] should_fail+0xb/0x20 [ 65.318678][ T5739] should_fail_usercopy+0x1a/0x20 [ 65.318743][ T5739] _copy_from_user+0x1c/0xb0 [ 65.318769][ T5739] kstrtouint_from_user+0x69/0xf0 [ 65.318794][ T5739] ? 0xffffffff81000000 [ 65.318820][ T5739] ? selinux_file_permission+0x1e2/0x320 [ 65.318851][ T5739] proc_fail_nth_write+0x50/0x160 [ 65.318929][ T5739] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.318962][ T5739] vfs_write+0x269/0x960 [ 65.318977][ T5739] ? vfs_read+0x4e6/0x770 [ 65.319032][ T5739] ? __rcu_read_unlock+0x4f/0x70 [ 65.319054][ T5739] ? __fget_files+0x184/0x1c0 [ 65.319081][ T5739] ? mutex_lock+0x58/0x90 [ 65.319120][ T5739] ksys_write+0xda/0x1a0 [ 65.319138][ T5739] __x64_sys_write+0x40/0x50 [ 65.319154][ T5739] x64_sys_call+0x2847/0x3000 [ 65.319252][ T5739] do_syscall_64+0xd8/0x2a0 [ 65.319331][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.319369][ T5739] RIP: 0033:0x7fb9020de1ff [ 65.319383][ T5739] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 65.319471][ T5739] RSP: 002b:00007fb900b3f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 65.319492][ T5739] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9020de1ff [ 65.319507][ T5739] RDX: 0000000000000001 RSI: 00007fb900b3f0a0 RDI: 0000000000000004 [ 65.319521][ T5739] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.319534][ T5739] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 65.319548][ T5739] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 65.319568][ T5739] [ 65.584019][ T5749] FAULT_INJECTION: forcing a failure. [ 65.584019][ T5749] name failslab, interval 1, probability 0, space 0, times 0 [ 65.596767][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz.1.947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.596864][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.596958][ T5749] Call Trace: [ 65.596964][ T5749] [ 65.596971][ T5749] __dump_stack+0x1d/0x30 [ 65.597001][ T5749] dump_stack_lvl+0xe8/0x140 [ 65.597030][ T5749] dump_stack+0x15/0x1b [ 65.597084][ T5749] should_fail_ex+0x265/0x280 [ 65.597108][ T5749] should_failslab+0x8c/0xb0 [ 65.597162][ T5749] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 65.597189][ T5749] ? sidtab_sid2str_get+0xa0/0x130 [ 65.597236][ T5749] kmemdup_noprof+0x2b/0x70 [ 65.597255][ T5749] sidtab_sid2str_get+0xa0/0x130 [ 65.597344][ T5749] security_sid_to_context_core+0x1eb/0x2e0 [ 65.597384][ T5749] security_sid_to_context+0x27/0x40 [ 65.597414][ T5749] avc_audit_post_callback+0x10f/0x520 [ 65.597459][ T5749] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 65.597524][ T5749] common_lsm_audit+0x1bb/0x230 [ 65.597556][ T5749] ? _parse_integer_limit+0x170/0x190 [ 65.597580][ T5749] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 65.597621][ T5749] slow_avc_audit+0x104/0x140 [ 65.597696][ T5749] avc_has_perm+0x13a/0x180 [ 65.597716][ T5749] selinux_bpf+0xa3/0xc0 [ 65.597776][ T5749] security_bpf+0x52/0x90 [ 65.597810][ T5749] __sys_bpf+0x1c3/0x7c0 [ 65.597840][ T5749] __x64_sys_bpf+0x41/0x50 [ 65.597860][ T5749] x64_sys_call+0x28e1/0x3000 [ 65.597892][ T5749] do_syscall_64+0xd8/0x2a0 [ 65.597998][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.598033][ T5749] RIP: 0033:0x7fb1f548f749 [ 65.598052][ T5749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.598073][ T5749] RSP: 002b:00007fb1f3eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.598108][ T5749] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548f749 [ 65.598124][ T5749] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 65.598140][ T5749] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 65.598154][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.598165][ T5749] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 65.598182][ T5749] [ 65.858254][ T5754] FAULT_INJECTION: forcing a failure. [ 65.858254][ T5754] name failslab, interval 1, probability 0, space 0, times 0 [ 65.871049][ T5754] CPU: 1 UID: 0 PID: 5754 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.871082][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.871098][ T5754] Call Trace: [ 65.871105][ T5754] [ 65.871112][ T5754] __dump_stack+0x1d/0x30 [ 65.871152][ T5754] dump_stack_lvl+0xe8/0x140 [ 65.871233][ T5754] dump_stack+0x15/0x1b [ 65.871253][ T5754] should_fail_ex+0x265/0x280 [ 65.871323][ T5754] should_failslab+0x8c/0xb0 [ 65.871350][ T5754] kmem_cache_alloc_noprof+0x69/0x4b0 [ 65.871409][ T5754] ? security_file_alloc+0x32/0x100 [ 65.871439][ T5754] security_file_alloc+0x32/0x100 [ 65.871518][ T5754] init_file+0x5c/0x1c0 [ 65.871544][ T5754] alloc_empty_file+0x8b/0x200 [ 65.871569][ T5754] alloc_file_pseudo+0xc6/0x160 [ 65.871666][ T5754] __shmem_file_setup+0x1de/0x210 [ 65.871749][ T5754] shmem_file_setup+0x3b/0x50 [ 65.871819][ T5754] __se_sys_memfd_create+0x2f7/0x6b0 [ 65.871853][ T5754] __x64_sys_memfd_create+0x31/0x40 [ 65.871890][ T5754] x64_sys_call+0x28cb/0x3000 [ 65.872018][ T5754] do_syscall_64+0xd8/0x2a0 [ 65.872061][ T5754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.872136][ T5754] RIP: 0033:0x7f4304aff749 [ 65.872205][ T5754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.872255][ T5754] RSP: 002b:00007f430355ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 65.872277][ T5754] RAX: ffffffffffffffda RBX: 000000000000046b RCX: 00007f4304aff749 [ 65.872291][ T5754] RDX: 00007f430355eef0 RSI: 0000000000000000 RDI: 00007f4304b84960 [ 65.872306][ T5754] RBP: 0000200000000b00 R08: 00007f430355ebb7 R09: 00007f430355ee40 [ 65.872352][ T5754] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 65.872364][ T5754] R13: 00007f430355eef0 R14: 00007f430355eeb0 R15: 00002000000000c0 [ 65.872380][ T5754] [ 66.100552][ T5760] Falling back ldisc for ttyS3. [ 66.160326][ T5767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'. [ 66.169292][ T5767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'. [ 66.259009][ T5772] FAULT_INJECTION: forcing a failure. [ 66.259009][ T5772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.272303][ T5772] CPU: 1 UID: 0 PID: 5772 Comm: syz.3.957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.272329][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.272344][ T5772] Call Trace: [ 66.272351][ T5772] [ 66.272406][ T5772] __dump_stack+0x1d/0x30 [ 66.272432][ T5772] dump_stack_lvl+0xe8/0x140 [ 66.272535][ T5772] dump_stack+0x15/0x1b [ 66.272561][ T5772] should_fail_ex+0x265/0x280 [ 66.272585][ T5772] should_fail+0xb/0x20 [ 66.272607][ T5772] should_fail_usercopy+0x1a/0x20 [ 66.272663][ T5772] _copy_to_user+0x20/0xa0 [ 66.272690][ T5772] do_pagemap_cmd+0x91d/0x9c0 [ 66.272725][ T5772] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 66.272800][ T5772] __se_sys_ioctl+0xce/0x140 [ 66.272836][ T5772] __x64_sys_ioctl+0x43/0x50 [ 66.272875][ T5772] x64_sys_call+0x14b0/0x3000 [ 66.272966][ T5772] do_syscall_64+0xd8/0x2a0 [ 66.273008][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.273029][ T5772] RIP: 0033:0x7f420d3df749 [ 66.273042][ T5772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.273059][ T5772] RSP: 002b:00007f420be26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.273133][ T5772] RAX: ffffffffffffffda RBX: 00007f420d636090 RCX: 00007f420d3df749 [ 66.273148][ T5772] RDX: 0000200000000800 RSI: 00000000c0606610 RDI: 0000000000000004 [ 66.273162][ T5772] RBP: 00007f420be26090 R08: 0000000000000000 R09: 0000000000000000 [ 66.273173][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.273252][ T5772] R13: 00007f420d636128 R14: 00007f420d636090 R15: 00007ffe05506288 [ 66.273274][ T5772] [ 66.990315][ T5809] geneve2: entered promiscuous mode [ 66.995744][ T5809] geneve2: entered allmulticast mode [ 67.007008][ T1879] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.016064][ T5804] netlink: 96 bytes leftover after parsing attributes in process `syz.4.971'. [ 67.027242][ T1879] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.045277][ T1879] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.064040][ T1879] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.266643][ T5824] FAULT_INJECTION: forcing a failure. [ 67.266643][ T5824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.279808][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz.4.978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.279837][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.279851][ T5824] Call Trace: [ 67.279858][ T5824] [ 67.279866][ T5824] __dump_stack+0x1d/0x30 [ 67.279938][ T5824] dump_stack_lvl+0xe8/0x140 [ 67.280020][ T5824] dump_stack+0x15/0x1b [ 67.280116][ T5824] should_fail_ex+0x265/0x280 [ 67.280137][ T5824] should_fail+0xb/0x20 [ 67.280154][ T5824] should_fail_usercopy+0x1a/0x20 [ 67.280276][ T5824] _copy_from_user+0x1c/0xb0 [ 67.280385][ T5824] copy_from_sockptr_offset+0x66/0xa0 [ 67.280411][ T5824] do_ipt_set_ctl+0x5c8/0x820 [ 67.280441][ T5824] nf_setsockopt+0x199/0x1b0 [ 67.280466][ T5824] ip_setsockopt+0x102/0x110 [ 67.280500][ T5824] udp_setsockopt+0x99/0xb0 [ 67.280548][ T5824] sock_common_setsockopt+0x69/0x80 [ 67.280566][ T5824] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.280651][ T5824] __sys_setsockopt+0x184/0x200 [ 67.280805][ T5824] __x64_sys_setsockopt+0x64/0x80 [ 67.280909][ T5824] x64_sys_call+0x21d5/0x3000 [ 67.280937][ T5824] do_syscall_64+0xd8/0x2a0 [ 67.280975][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.280994][ T5824] RIP: 0033:0x7f99ad86f749 [ 67.281047][ T5824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.281086][ T5824] RSP: 002b:00007f99ac2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.281108][ T5824] RAX: ffffffffffffffda RBX: 00007f99adac5fa0 RCX: 00007f99ad86f749 [ 67.281121][ T5824] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.281132][ T5824] RBP: 00007f99ac2cf090 R08: 00000000000003c8 R09: 0000000000000000 [ 67.281145][ T5824] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 67.281214][ T5824] R13: 00007f99adac6038 R14: 00007f99adac5fa0 R15: 00007ffe52c26618 [ 67.281235][ T5824] [ 67.567763][ T5840] FAULT_INJECTION: forcing a failure. [ 67.567763][ T5840] name failslab, interval 1, probability 0, space 0, times 0 [ 67.580495][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz.1.987 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.580523][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.580537][ T5840] Call Trace: [ 67.580556][ T5840] [ 67.580565][ T5840] __dump_stack+0x1d/0x30 [ 67.580592][ T5840] dump_stack_lvl+0xe8/0x140 [ 67.580617][ T5840] dump_stack+0x15/0x1b [ 67.580639][ T5840] should_fail_ex+0x265/0x280 [ 67.580689][ T5840] should_failslab+0x8c/0xb0 [ 67.580708][ T5840] __kmalloc_noprof+0xb9/0x5a0 [ 67.580734][ T5840] ? cond_policydb_dup+0xa3/0x4e0 [ 67.580840][ T5840] cond_policydb_dup+0xa3/0x4e0 [ 67.580871][ T5840] security_set_bools+0xa0/0x340 [ 67.580924][ T5840] sel_commit_bools_write+0x1ea/0x270 [ 67.580954][ T5840] vfs_writev+0x406/0x8b0 [ 67.580986][ T5840] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 67.581090][ T5840] do_writev+0xe7/0x210 [ 67.581123][ T5840] __x64_sys_writev+0x45/0x50 [ 67.581185][ T5840] x64_sys_call+0x1ba5/0x3000 [ 67.581217][ T5840] do_syscall_64+0xd8/0x2a0 [ 67.581259][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.581334][ T5840] RIP: 0033:0x7fb1f548f749 [ 67.581352][ T5840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.581374][ T5840] RSP: 002b:00007fb1f3eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 67.581399][ T5840] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548f749 [ 67.581414][ T5840] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 67.581474][ T5840] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 67.581489][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.581505][ T5840] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 67.581528][ T5840] [ 67.689364][ T5850] Falling back ldisc for ttyS3. [ 67.740350][ T5861] netlink: 'syz.1.994': attribute type 30 has an invalid length. [ 67.762106][ T5863] SET target dimension over the limit! [ 67.860719][ T5871] FAULT_INJECTION: forcing a failure. [ 67.860719][ T5871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.873813][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz.0.999 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.873893][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.873907][ T5871] Call Trace: [ 67.873914][ T5871] [ 67.873923][ T5871] __dump_stack+0x1d/0x30 [ 67.873971][ T5871] dump_stack_lvl+0xe8/0x140 [ 67.874010][ T5871] dump_stack+0x15/0x1b [ 67.874090][ T5871] should_fail_ex+0x265/0x280 [ 67.874112][ T5871] should_fail+0xb/0x20 [ 67.874129][ T5871] should_fail_usercopy+0x1a/0x20 [ 67.874150][ T5871] copy_fpstate_to_sigframe+0x628/0x7d0 [ 67.874208][ T5871] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 67.874269][ T5871] ? x86_task_fpu+0x36/0x60 [ 67.874290][ T5871] get_sigframe+0x34d/0x490 [ 67.874316][ T5871] ? get_signal+0xdc7/0xf70 [ 67.874351][ T5871] x64_setup_rt_frame+0xa8/0x580 [ 67.874382][ T5871] arch_do_signal_or_restart+0x24c/0x450 [ 67.874472][ T5871] exit_to_user_mode_loop+0x6a/0x740 [ 67.874497][ T5871] ? __x64_sys_splice+0x78/0x90 [ 67.874522][ T5871] do_syscall_64+0x202/0x2a0 [ 67.874606][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.874701][ T5871] RIP: 0033:0x7f4304aff747 [ 67.874717][ T5871] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 67.874739][ T5871] RSP: 002b:00007f430355f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 67.874758][ T5871] RAX: 0000000000000113 RBX: 00007f4304d55fa0 RCX: 00007f4304aff749 [ 67.874772][ T5871] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.874799][ T5871] RBP: 00007f430355f090 R08: 0000000000000007 R09: 0000000000000009 [ 67.874813][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.874825][ T5871] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 67.874846][ T5871] [ 68.097766][ T5880] Falling back ldisc for ttyS3. [ 68.123609][ T5881] bond2 (unregistering): Released all slaves [ 68.159003][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 68.168068][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'. [ 68.184855][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 68.193736][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'. [ 68.217499][ T29] kauditd_printk_skb: 1297 callbacks suppressed [ 68.217512][ T29] audit: type=1400 audit(1765270098.162:9146): avc: denied { map_create } for pid=5894 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.285036][ T29] audit: type=1400 audit(1765270098.172:9147): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.309401][ T29] audit: type=1400 audit(1765270098.182:9148): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.333717][ T29] audit: type=1400 audit(1765270098.182:9149): avc: denied { prog_load } for pid=5894 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.336752][ T5904] FAULT_INJECTION: forcing a failure. [ 68.336752][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 68.352935][ T29] audit: type=1400 audit(1765270098.182:9150): avc: denied { prog_load } for pid=5894 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.365573][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.1.1012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.365645][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.365661][ T5904] Call Trace: [ 68.365668][ T5904] [ 68.365678][ T5904] __dump_stack+0x1d/0x30 [ 68.365710][ T5904] dump_stack_lvl+0xe8/0x140 [ 68.365742][ T5904] dump_stack+0x15/0x1b [ 68.365842][ T5904] should_fail_ex+0x265/0x280 [ 68.365871][ T5904] should_failslab+0x8c/0xb0 [ 68.365925][ T5904] kmem_cache_alloc_noprof+0x69/0x4b0 [ 68.365956][ T5904] ? getname_flags+0x80/0x3b0 [ 68.365988][ T5904] getname_flags+0x80/0x3b0 [ 68.366019][ T5904] path_setxattrat+0x223/0x310 [ 68.366077][ T5904] __x64_sys_lsetxattr+0x71/0x90 [ 68.366108][ T5904] x64_sys_call+0x2ef0/0x3000 [ 68.366143][ T5904] do_syscall_64+0xd8/0x2a0 [ 68.366187][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.366214][ T5904] RIP: 0033:0x7fb1f548f749 [ 68.366283][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.366307][ T5904] RSP: 002b:00007fb1f3ece038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 68.366331][ T5904] RAX: ffffffffffffffda RBX: 00007fb1f56e6090 RCX: 00007fb1f548f749 [ 68.366347][ T5904] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000900 [ 68.366364][ T5904] RBP: 00007fb1f3ece090 R08: 0000000000000000 R09: 0000000000000000 [ 68.366380][ T5904] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 68.366428][ T5904] R13: 00007fb1f56e6128 R14: 00007fb1f56e6090 R15: 00007fffa0776938 [ 68.366452][ T5904] [ 68.547571][ T5916] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.548371][ T29] audit: type=1400 audit(1765270098.192:9151): avc: denied { read write } for pid=5894 comm="syz.1.1009" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.554954][ T5916] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 68.578890][ T29] audit: type=1400 audit(1765270098.192:9152): avc: denied { map_create } for pid=5897 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.578927][ T29] audit: type=1400 audit(1765270098.192:9153): avc: denied { prog_load } for pid=5897 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.595750][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 68.633733][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1018'. [ 68.635454][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 68.693482][ T5920] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 68.705110][ T5920] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 68.724276][ T5920] netlink: 'syz.4.1019': attribute type 13 has an invalid length. [ 68.770482][ T5929] FAULT_INJECTION: forcing a failure. [ 68.770482][ T5929] name failslab, interval 1, probability 0, space 0, times 0 [ 68.783163][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: syz.0.1024 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.783199][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.783216][ T5929] Call Trace: [ 68.783224][ T5929] [ 68.783233][ T5929] __dump_stack+0x1d/0x30 [ 68.783319][ T5929] dump_stack_lvl+0xe8/0x140 [ 68.783377][ T5929] dump_stack+0x15/0x1b [ 68.783404][ T5929] should_fail_ex+0x265/0x280 [ 68.783513][ T5929] should_failslab+0x8c/0xb0 [ 68.783542][ T5929] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 68.783572][ T5929] ? __d_alloc+0x37/0x340 [ 68.783607][ T5929] __d_alloc+0x37/0x340 [ 68.783651][ T5929] ? mpol_shared_policy_init+0xbd/0x4c0 [ 68.783711][ T5929] d_alloc_pseudo+0x1e/0x80 [ 68.783744][ T5929] alloc_file_pseudo+0x71/0x160 [ 68.783781][ T5929] __shmem_file_setup+0x1de/0x210 [ 68.783840][ T5929] shmem_file_setup+0x3b/0x50 [ 68.783902][ T5929] __se_sys_memfd_create+0x2f7/0x6b0 [ 68.783964][ T5929] __x64_sys_memfd_create+0x31/0x40 [ 68.784007][ T5929] x64_sys_call+0x28cb/0x3000 [ 68.784038][ T5929] do_syscall_64+0xd8/0x2a0 [ 68.784160][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.784189][ T5929] RIP: 0033:0x7f4304aff749 [ 68.784207][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.784282][ T5929] RSP: 002b:00007f430355ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 68.784307][ T5929] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f4304aff749 [ 68.784324][ T5929] RDX: 00007f430355eef0 RSI: 0000000000000000 RDI: 00007f4304b84960 [ 68.784340][ T5929] RBP: 0000200000001cc0 R08: 00007f430355ebb7 R09: 00007f430355ee40 [ 68.784356][ T5929] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 68.784372][ T5929] R13: 00007f430355eef0 R14: 00007f430355eeb0 R15: 0000200000000880 [ 68.784396][ T5929] [ 69.093017][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.100435][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.164145][ T5945] Cannot find add_set index 0 as target [ 69.273999][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.298533][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.430282][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.459757][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.488574][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.511214][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.750489][ T5979] mmap: syz.2.1043 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.782167][ T5981] FAULT_INJECTION: forcing a failure. [ 69.782167][ T5981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.795341][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.2.1044 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.795425][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.795438][ T5981] Call Trace: [ 69.795445][ T5981] [ 69.795454][ T5981] __dump_stack+0x1d/0x30 [ 69.795492][ T5981] dump_stack_lvl+0xe8/0x140 [ 69.795512][ T5981] dump_stack+0x15/0x1b [ 69.795536][ T5981] should_fail_ex+0x265/0x280 [ 69.795576][ T5981] should_fail+0xb/0x20 [ 69.795593][ T5981] should_fail_usercopy+0x1a/0x20 [ 69.795615][ T5981] copy_folio_from_iter_atomic+0x26a/0x1150 [ 69.795706][ T5981] ? shmem_write_begin+0xfc/0x1f0 [ 69.795729][ T5981] ? shmem_write_begin+0x135/0x1f0 [ 69.795794][ T5981] generic_perform_write+0x2c2/0x490 [ 69.795830][ T5981] shmem_file_write_iter+0xc5/0xf0 [ 69.795859][ T5981] do_iter_readv_writev+0x4a1/0x540 [ 69.795921][ T5981] vfs_writev+0x2df/0x8b0 [ 69.795955][ T5981] __se_sys_pwritev2+0xfc/0x1c0 [ 69.795994][ T5981] __x64_sys_pwritev2+0x67/0x80 [ 69.796018][ T5981] x64_sys_call+0x2c9e/0x3000 [ 69.796046][ T5981] do_syscall_64+0xd8/0x2a0 [ 69.796111][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.796135][ T5981] RIP: 0033:0x7fb9020df749 [ 69.796150][ T5981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.796169][ T5981] RSP: 002b:00007fb900b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 69.796189][ T5981] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020df749 [ 69.796207][ T5981] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 69.796298][ T5981] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000003 [ 69.796312][ T5981] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 69.796376][ T5981] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 69.796394][ T5981] [ 70.175543][ T6000] FAULT_INJECTION: forcing a failure. [ 70.175543][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 70.188251][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.2.1052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.188279][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.188295][ T6000] Call Trace: [ 70.188302][ T6000] [ 70.188310][ T6000] __dump_stack+0x1d/0x30 [ 70.188345][ T6000] dump_stack_lvl+0xe8/0x140 [ 70.188365][ T6000] dump_stack+0x15/0x1b [ 70.188444][ T6000] should_fail_ex+0x265/0x280 [ 70.188534][ T6000] should_failslab+0x8c/0xb0 [ 70.188560][ T6000] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 70.188699][ T6000] ? __d_alloc+0x37/0x340 [ 70.188724][ T6000] __d_alloc+0x37/0x340 [ 70.188754][ T6000] d_alloc+0x2e/0x100 [ 70.188855][ T6000] lookup_one_qstr_excl+0x99/0x250 [ 70.188887][ T6000] __start_renaming+0x13f/0x2a0 [ 70.188951][ T6000] do_renameat2+0x2b4/0x810 [ 70.188977][ T6000] __x64_sys_rename+0x58/0x70 [ 70.189003][ T6000] x64_sys_call+0x24e/0x3000 [ 70.189032][ T6000] do_syscall_64+0xd8/0x2a0 [ 70.189104][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.189128][ T6000] RIP: 0033:0x7fb9020df749 [ 70.189156][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.189178][ T6000] RSP: 002b:00007fb900b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 70.189214][ T6000] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020df749 [ 70.189225][ T6000] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000002c0 [ 70.189236][ T6000] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.189246][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.189312][ T6000] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 70.189329][ T6000] [ 70.389316][ T6006] ipvlan2: entered promiscuous mode [ 70.395601][ T6006] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 70.445579][ T6012] Falling back ldisc for ttyS3. [ 70.473293][ T6016] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 70.474969][ T6014] Falling back ldisc for ttyS3. [ 70.726166][ T6053] Falling back ldisc for ttyS3. [ 70.847239][ T6061] FAULT_INJECTION: forcing a failure. [ 70.847239][ T6061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.860397][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.4.1078 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.860451][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.860464][ T6061] Call Trace: [ 70.860469][ T6061] [ 70.860476][ T6061] __dump_stack+0x1d/0x30 [ 70.860506][ T6061] dump_stack_lvl+0xe8/0x140 [ 70.860594][ T6061] dump_stack+0x15/0x1b [ 70.860632][ T6061] should_fail_ex+0x265/0x280 [ 70.860652][ T6061] should_fail+0xb/0x20 [ 70.860669][ T6061] should_fail_usercopy+0x1a/0x20 [ 70.860693][ T6061] _copy_to_user+0x20/0xa0 [ 70.860726][ T6061] copy_siginfo_to_user+0x22/0xb0 [ 70.860787][ T6061] x64_setup_rt_frame+0x2b5/0x580 [ 70.860848][ T6061] arch_do_signal_or_restart+0x24c/0x450 [ 70.860876][ T6061] exit_to_user_mode_loop+0x6a/0x740 [ 70.860897][ T6061] do_syscall_64+0x202/0x2a0 [ 70.860935][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.861029][ T6061] RIP: 0033:0x7f99ad86f747 [ 70.861046][ T6061] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 70.861067][ T6061] RSP: 002b:00007f99ac2ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 70.861085][ T6061] RAX: 0000000000000014 RBX: 00007f99adac6090 RCX: 00007f99ad86f749 [ 70.861099][ T6061] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000006 [ 70.861168][ T6061] RBP: 00007f99ac2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 70.861178][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.861189][ T6061] R13: 00007f99adac6128 R14: 00007f99adac6090 R15: 00007ffe52c26618 [ 70.861209][ T6061] [ 71.411492][ T6079] FAULT_INJECTION: forcing a failure. [ 71.411492][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.424801][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.0.1085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.424829][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.424854][ T6079] Call Trace: [ 71.424863][ T6079] [ 71.424871][ T6079] __dump_stack+0x1d/0x30 [ 71.424900][ T6079] dump_stack_lvl+0xe8/0x140 [ 71.424918][ T6079] dump_stack+0x15/0x1b [ 71.424934][ T6079] should_fail_ex+0x265/0x280 [ 71.424952][ T6079] should_fail+0xb/0x20 [ 71.425024][ T6079] should_fail_usercopy+0x1a/0x20 [ 71.425097][ T6079] strncpy_from_user+0x27/0x260 [ 71.425124][ T6079] __se_sys_memfd_create+0x206/0x6b0 [ 71.425154][ T6079] __x64_sys_memfd_create+0x31/0x40 [ 71.425218][ T6079] x64_sys_call+0x28cb/0x3000 [ 71.425238][ T6079] do_syscall_64+0xd8/0x2a0 [ 71.425345][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.425364][ T6079] RIP: 0033:0x7f4304aff749 [ 71.425376][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.425437][ T6079] RSP: 002b:00007f430353de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.425453][ T6079] RAX: ffffffffffffffda RBX: 00000000000004a0 RCX: 00007f4304aff749 [ 71.425463][ T6079] RDX: 00007f430353def0 RSI: 0000000000000000 RDI: 00007f4304b84960 [ 71.425473][ T6079] RBP: 0000200000000b80 R08: 00007f430353dbb7 R09: 00007f430353de40 [ 71.425483][ T6079] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 71.425505][ T6079] R13: 00007f430353def0 R14: 00007f430353deb0 R15: 0000200000000000 [ 71.425578][ T6079] [ 71.616275][ T6082] Falling back ldisc for ttyS3. [ 71.856759][ T6111] Falling back ldisc for ttyS3. [ 72.129634][ T6129] bond1: (slave dummy0): Releasing backup interface [ 72.146361][ T6129] bridge_slave_0: left allmulticast mode [ 72.152043][ T6129] bridge_slave_0: left promiscuous mode [ 72.157828][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.166821][ T6129] bridge_slave_1: left allmulticast mode [ 72.172540][ T6129] bridge_slave_1: left promiscuous mode [ 72.178265][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.187937][ T6129] bond0: (slave bond_slave_0): Releasing backup interface [ 72.205835][ T6129] bond0: (slave bond_slave_1): Releasing backup interface [ 72.224652][ T6129] team0: Port device team_slave_0 removed [ 72.249222][ T6129] team0: Port device team_slave_1 removed [ 72.272683][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.280216][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.282875][ T6138] Falling back ldisc for ttyS3. [ 72.293860][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.301417][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.315440][ T6129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.343373][ T6143] __nla_validate_parse: 2 callbacks suppressed [ 72.343387][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 72.423445][ T6153] FAULT_INJECTION: forcing a failure. [ 72.423445][ T6153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.436650][ T6153] CPU: 0 UID: 0 PID: 6153 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.436673][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.436684][ T6153] Call Trace: [ 72.436689][ T6153] [ 72.436695][ T6153] __dump_stack+0x1d/0x30 [ 72.436715][ T6153] dump_stack_lvl+0xe8/0x140 [ 72.436762][ T6153] dump_stack+0x15/0x1b [ 72.436829][ T6153] should_fail_ex+0x265/0x280 [ 72.436867][ T6153] should_fail+0xb/0x20 [ 72.436884][ T6153] should_fail_usercopy+0x1a/0x20 [ 72.436905][ T6153] _copy_from_iter+0xcf/0xe70 [ 72.436934][ T6153] ? selinux_file_open+0x2dc/0x330 [ 72.436961][ T6153] ? skb_set_owner_w+0x19b/0x200 [ 72.436985][ T6153] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 72.437025][ T6153] skb_copy_datagram_from_iter+0xb1/0x490 [ 72.437119][ T6153] ? skb_put+0xa9/0xf0 [ 72.437268][ T6153] tun_get_user+0xafb/0x2670 [ 72.437305][ T6153] ? ref_tracker_alloc+0x1f2/0x2f0 [ 72.437332][ T6153] ? selinux_file_permission+0x2ee/0x320 [ 72.437406][ T6153] tun_chr_write_iter+0x15e/0x210 [ 72.437436][ T6153] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 72.437464][ T6153] vfs_write+0x52a/0x960 [ 72.437504][ T6153] ksys_write+0xda/0x1a0 [ 72.437522][ T6153] __x64_sys_write+0x40/0x50 [ 72.437539][ T6153] x64_sys_call+0x2847/0x3000 [ 72.437595][ T6153] do_syscall_64+0xd8/0x2a0 [ 72.437624][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.437643][ T6153] RIP: 0033:0x7fb9020de1ff [ 72.437656][ T6153] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 72.437672][ T6153] RSP: 002b:00007fb900b3f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 72.437757][ T6153] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020de1ff [ 72.437769][ T6153] RDX: 0000000000000d81 RSI: 0000200000002740 RDI: 00000000000000c8 [ 72.437780][ T6153] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.437791][ T6153] R10: 0000000000000d81 R11: 0000000000000293 R12: 0000000000000001 [ 72.437801][ T6153] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 72.437818][ T6153] [ 72.521773][ T6161] Falling back ldisc for ttyS3. [ 72.539418][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1119'. [ 72.764388][ T6189] FAULT_INJECTION: forcing a failure. [ 72.764388][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.777516][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.3.1132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.777609][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.777626][ T6189] Call Trace: [ 72.777633][ T6189] [ 72.777642][ T6189] __dump_stack+0x1d/0x30 [ 72.777699][ T6189] dump_stack_lvl+0xe8/0x140 [ 72.777730][ T6189] dump_stack+0x15/0x1b [ 72.777763][ T6189] should_fail_ex+0x265/0x280 [ 72.777792][ T6189] should_fail+0xb/0x20 [ 72.777877][ T6189] should_fail_usercopy+0x1a/0x20 [ 72.777910][ T6189] _copy_to_user+0x20/0xa0 [ 72.777942][ T6189] simple_read_from_buffer+0xb5/0x130 [ 72.777983][ T6189] proc_fail_nth_read+0x10e/0x150 [ 72.778030][ T6189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.778170][ T6189] vfs_read+0x1a8/0x770 [ 72.778191][ T6189] ? __rcu_read_unlock+0x4f/0x70 [ 72.778216][ T6189] ? __fget_files+0x184/0x1c0 [ 72.778260][ T6189] ? mutex_lock+0x58/0x90 [ 72.778293][ T6189] ksys_read+0xda/0x1a0 [ 72.778377][ T6189] __x64_sys_read+0x40/0x50 [ 72.778401][ T6189] x64_sys_call+0x2889/0x3000 [ 72.778473][ T6189] do_syscall_64+0xd8/0x2a0 [ 72.778521][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.778544][ T6189] RIP: 0033:0x7f420d3de15c [ 72.778559][ T6189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.778582][ T6189] RSP: 002b:00007f420be47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.778605][ T6189] RAX: ffffffffffffffda RBX: 00007f420d635fa0 RCX: 00007f420d3de15c [ 72.778622][ T6189] RDX: 000000000000000f RSI: 00007f420be470a0 RDI: 0000000000000003 [ 72.778692][ T6189] RBP: 00007f420be47090 R08: 0000000000000000 R09: 0000000000000000 [ 72.778708][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.778724][ T6189] R13: 00007f420d636038 R14: 00007f420d635fa0 R15: 00007ffe05506288 [ 72.778817][ T6189] [ 72.811206][ T6192] Falling back ldisc for ttyS3. [ 73.015919][ T6219] FAULT_INJECTION: forcing a failure. [ 73.015919][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 73.028742][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.028765][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.028779][ T6219] Call Trace: [ 73.028785][ T6219] [ 73.028793][ T6219] __dump_stack+0x1d/0x30 [ 73.028878][ T6219] dump_stack_lvl+0xe8/0x140 [ 73.028901][ T6219] dump_stack+0x15/0x1b [ 73.028917][ T6219] should_fail_ex+0x265/0x280 [ 73.028990][ T6219] should_failslab+0x8c/0xb0 [ 73.029016][ T6219] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 73.029042][ T6219] ? __d_alloc+0x37/0x340 [ 73.029072][ T6219] __d_alloc+0x37/0x340 [ 73.029137][ T6219] ? mpol_shared_policy_init+0xbd/0x4c0 [ 73.029192][ T6219] d_alloc_pseudo+0x1e/0x80 [ 73.029236][ T6219] alloc_file_pseudo+0x71/0x160 [ 73.029376][ T6219] __shmem_file_setup+0x1de/0x210 [ 73.029437][ T6219] shmem_file_setup+0x3b/0x50 [ 73.029466][ T6219] __se_sys_memfd_create+0x2f7/0x6b0 [ 73.029506][ T6219] __x64_sys_memfd_create+0x31/0x40 [ 73.029620][ T6219] x64_sys_call+0x28cb/0x3000 [ 73.029648][ T6219] do_syscall_64+0xd8/0x2a0 [ 73.029686][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.029784][ T6219] RIP: 0033:0x7f4304aff749 [ 73.029801][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.029871][ T6219] RSP: 002b:00007f430355ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 73.029893][ T6219] RAX: ffffffffffffffda RBX: 000000000000050b RCX: 00007f4304aff749 [ 73.029907][ T6219] RDX: 00007f430355eef0 RSI: 0000000000000000 RDI: 00007f4304b84960 [ 73.029921][ T6219] RBP: 0000200000003f40 R08: 00007f430355ebb7 R09: 00007f430355ee40 [ 73.029936][ T6219] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 73.030020][ T6219] R13: 00007f430355eef0 R14: 00007f430355eeb0 R15: 0000200000000380 [ 73.030043][ T6219] [ 73.224748][ T29] kauditd_printk_skb: 1600 callbacks suppressed [ 73.224763][ T29] audit: type=1400 audit(1765270103.172:10753): avc: denied { prog_load } for pid=6221 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.307580][ T29] audit: type=1400 audit(1765270103.192:10754): avc: denied { read write } for pid=6221 comm="syz.3.1143" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.331744][ T29] audit: type=1400 audit(1765270103.202:10755): avc: denied { create } for pid=6221 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 73.352345][ T29] audit: type=1400 audit(1765270103.202:10756): avc: denied { map_create } for pid=6221 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.371584][ T29] audit: type=1400 audit(1765270103.202:10757): avc: denied { prog_load } for pid=6221 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.390829][ T29] audit: type=1400 audit(1765270103.202:10758): avc: denied { read } for pid=6221 comm="syz.3.1143" dev="nsfs" ino=4026532434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 73.412040][ T29] audit: type=1400 audit(1765270103.202:10759): avc: denied { create } for pid=6221 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 73.432582][ T29] audit: type=1400 audit(1765270103.202:10760): avc: denied { create } for pid=6221 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 73.453250][ T29] audit: type=1400 audit(1765270103.222:10761): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.477671][ T29] audit: type=1400 audit(1765270103.232:10762): avc: denied { read write } for pid=6224 comm="syz.1.1144" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.521828][ T6232] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 73.569434][ T6228] FAULT_INJECTION: forcing a failure. [ 73.569434][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 73.582095][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.2.1146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.582126][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.582202][ T6228] Call Trace: [ 73.582210][ T6228] [ 73.582218][ T6228] __dump_stack+0x1d/0x30 [ 73.582257][ T6228] dump_stack_lvl+0xe8/0x140 [ 73.582281][ T6228] dump_stack+0x15/0x1b [ 73.582302][ T6228] should_fail_ex+0x265/0x280 [ 73.582353][ T6228] should_failslab+0x8c/0xb0 [ 73.582441][ T6228] kmem_cache_alloc_noprof+0x69/0x4b0 [ 73.582464][ T6228] ? security_file_alloc+0x32/0x100 [ 73.582488][ T6228] security_file_alloc+0x32/0x100 [ 73.582567][ T6228] init_file+0x5c/0x1c0 [ 73.582596][ T6228] alloc_empty_file+0x8b/0x200 [ 73.582631][ T6228] path_openat+0x63/0x23b0 [ 73.582714][ T6228] ? _parse_integer_limit+0x170/0x190 [ 73.582733][ T6228] ? _parse_integer+0x27/0x40 [ 73.582828][ T6228] ? kstrtoull+0x111/0x140 [ 73.582846][ T6228] ? kstrtouint+0x76/0xc0 [ 73.582863][ T6228] do_filp_open+0x109/0x230 [ 73.582960][ T6228] do_sys_openat2+0xa6/0x150 [ 73.583115][ T6228] __x64_sys_openat+0xf2/0x120 [ 73.583167][ T6228] x64_sys_call+0x2b07/0x3000 [ 73.583254][ T6228] do_syscall_64+0xd8/0x2a0 [ 73.583293][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.583320][ T6228] RIP: 0033:0x7fb9020ddf90 [ 73.583344][ T6228] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 73.583363][ T6228] RSP: 002b:00007fb900b3ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 73.583380][ T6228] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb9020ddf90 [ 73.583399][ T6228] RDX: 0000000000000002 RSI: 00007fb900b3efa0 RDI: 00000000ffffff9c [ 73.583413][ T6228] RBP: 00007fb900b3efa0 R08: 0000000000000000 R09: 00007fb900b3ecd5 [ 73.583427][ T6228] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 73.583460][ T6228] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 73.583482][ T6228] [ 73.597174][ T6248] Falling back ldisc for ttyS3. [ 73.681051][ T6256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6256 comm=syz.4.1156 [ 73.778149][ T6262] FAULT_INJECTION: forcing a failure. [ 73.778149][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 73.817122][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.1.1158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.817155][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.817171][ T6262] Call Trace: [ 73.817179][ T6262] [ 73.817189][ T6262] __dump_stack+0x1d/0x30 [ 73.817219][ T6262] dump_stack_lvl+0xe8/0x140 [ 73.817270][ T6262] dump_stack+0x15/0x1b [ 73.817294][ T6262] should_fail_ex+0x265/0x280 [ 73.817320][ T6262] should_failslab+0x8c/0xb0 [ 73.817347][ T6262] kmem_cache_alloc_noprof+0x69/0x4b0 [ 73.817375][ T6262] ? getname_flags+0x80/0x3b0 [ 73.817474][ T6262] getname_flags+0x80/0x3b0 [ 73.817521][ T6262] path_setxattrat+0x223/0x310 [ 73.817571][ T6262] __x64_sys_lsetxattr+0x71/0x90 [ 73.817595][ T6262] x64_sys_call+0x2ef0/0x3000 [ 73.817717][ T6262] do_syscall_64+0xd8/0x2a0 [ 73.817753][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.817779][ T6262] RIP: 0033:0x7fb1f548f749 [ 73.817797][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.817827][ T6262] RSP: 002b:00007fb1f3eef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 73.817846][ T6262] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548f749 [ 73.817862][ T6262] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000900 [ 73.817877][ T6262] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 73.817893][ T6262] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 73.817909][ T6262] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 73.817932][ T6262] [ 73.989166][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 74.136964][ T6281] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 74.144973][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 74.156961][ T6281] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 74.321733][ T6296] Falling back ldisc for ttyS3. [ 74.743951][ T6303] FAULT_INJECTION: forcing a failure. [ 74.743951][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 74.756702][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz.0.1172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.756732][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.756744][ T6303] Call Trace: [ 74.756749][ T6303] [ 74.756755][ T6303] __dump_stack+0x1d/0x30 [ 74.756839][ T6303] dump_stack_lvl+0xe8/0x140 [ 74.756894][ T6303] dump_stack+0x15/0x1b [ 74.756914][ T6303] should_fail_ex+0x265/0x280 [ 74.756978][ T6303] should_failslab+0x8c/0xb0 [ 74.757013][ T6303] kmem_cache_alloc_noprof+0x69/0x4b0 [ 74.757117][ T6303] ? sk_prot_alloc+0x3f/0x190 [ 74.757154][ T6303] sk_prot_alloc+0x3f/0x190 [ 74.757188][ T6303] sk_alloc+0x34/0x3d0 [ 74.757220][ T6303] inet_create+0x3c0/0x780 [ 74.757253][ T6303] __sock_create+0x2e5/0x580 [ 74.757298][ T6303] sock_create_kern+0x38/0x50 [ 74.757324][ T6303] mptcp_subflow_create_socket+0x84/0x500 [ 74.757405][ T6303] ? should_fail_ex+0x30/0x280 [ 74.757427][ T6303] __mptcp_nmpc_sk+0xb5/0x3d0 [ 74.757454][ T6303] mptcp_sendmsg_fastopen+0x90/0x320 [ 74.757476][ T6303] mptcp_sendmsg+0xcf0/0xf50 [ 74.757564][ T6303] ? avc_has_perm+0xf7/0x180 [ 74.757590][ T6303] ? selinux_socket_sendmsg+0x175/0x1b0 [ 74.757623][ T6303] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 74.757649][ T6303] inet_sendmsg+0xc5/0xd0 [ 74.757716][ T6303] __sock_sendmsg+0x102/0x180 [ 74.757759][ T6303] ____sys_sendmsg+0x31e/0x4a0 [ 74.757860][ T6303] ___sys_sendmsg+0x17b/0x1d0 [ 74.757913][ T6303] __x64_sys_sendmsg+0xd4/0x160 [ 74.757961][ T6303] x64_sys_call+0x17ba/0x3000 [ 74.757985][ T6303] do_syscall_64+0xd8/0x2a0 [ 74.758043][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.758070][ T6303] RIP: 0033:0x7f4304aff749 [ 74.758137][ T6303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.758199][ T6303] RSP: 002b:00007f430355f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.758224][ T6303] RAX: ffffffffffffffda RBX: 00007f4304d55fa0 RCX: 00007f4304aff749 [ 74.758240][ T6303] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 0000000000000003 [ 74.758256][ T6303] RBP: 00007f430355f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.758272][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.758363][ T6303] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 74.758388][ T6303] [ 74.767167][ T6305] FAULT_INJECTION: forcing a failure. [ 74.767167][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 74.940408][ T6311] FAULT_INJECTION: forcing a failure. [ 74.940408][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.949697][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.4.1173 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.949743][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.949759][ T6305] Call Trace: [ 74.949767][ T6305] [ 74.949776][ T6305] __dump_stack+0x1d/0x30 [ 74.949808][ T6305] dump_stack_lvl+0xe8/0x140 [ 74.949880][ T6305] dump_stack+0x15/0x1b [ 74.949905][ T6305] should_fail_ex+0x265/0x280 [ 74.949952][ T6305] should_failslab+0x8c/0xb0 [ 74.949998][ T6305] kmem_cache_alloc_noprof+0x69/0x4b0 [ 74.950044][ T6305] ? sk_prot_alloc+0x3f/0x190 [ 74.950152][ T6305] sk_prot_alloc+0x3f/0x190 [ 74.950187][ T6305] sk_alloc+0x34/0x3d0 [ 74.950220][ T6305] inet_create+0x3c0/0x780 [ 74.950342][ T6305] __sock_create+0x2e5/0x580 [ 74.950371][ T6305] sock_create_kern+0x38/0x50 [ 74.950400][ T6305] mptcp_subflow_create_socket+0x84/0x500 [ 74.950460][ T6305] ? should_fail_ex+0x30/0x280 [ 74.950490][ T6305] __mptcp_nmpc_sk+0xb5/0x3d0 [ 74.950527][ T6305] mptcp_sendmsg_fastopen+0x90/0x320 [ 74.950605][ T6305] mptcp_sendmsg+0xcf0/0xf50 [ 74.950630][ T6305] ? avc_has_perm+0xf7/0x180 [ 74.950711][ T6305] ? selinux_socket_sendmsg+0x175/0x1b0 [ 74.950746][ T6305] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 74.950800][ T6305] inet_sendmsg+0xc5/0xd0 [ 74.950830][ T6305] __sock_sendmsg+0x102/0x180 [ 74.950874][ T6305] ____sys_sendmsg+0x31e/0x4a0 [ 74.950916][ T6305] ___sys_sendmsg+0x17b/0x1d0 [ 74.951004][ T6305] __x64_sys_sendmsg+0xd4/0x160 [ 74.951046][ T6305] x64_sys_call+0x17ba/0x3000 [ 74.951082][ T6305] do_syscall_64+0xd8/0x2a0 [ 74.951150][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.951181][ T6305] RIP: 0033:0x7f99ad86f749 [ 74.951201][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.951257][ T6305] RSP: 002b:00007f99ac2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.951282][ T6305] RAX: ffffffffffffffda RBX: 00007f99adac5fa0 RCX: 00007f99ad86f749 [ 74.951365][ T6305] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 0000000000000004 [ 74.951381][ T6305] RBP: 00007f99ac2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 74.951397][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.951413][ T6305] R13: 00007f99adac6038 R14: 00007f99adac5fa0 R15: 00007ffe52c26618 [ 74.951435][ T6305] [ 75.046329][ T6323] Falling back ldisc for ttyS3. [ 75.046817][ T6311] CPU: 1 UID: 0 PID: 6311 Comm: syz.2.1177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.046872][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.046890][ T6311] Call Trace: [ 75.046899][ T6311] [ 75.046909][ T6311] __dump_stack+0x1d/0x30 [ 75.046946][ T6311] dump_stack_lvl+0xe8/0x140 [ 75.046986][ T6311] dump_stack+0x15/0x1b [ 75.047093][ T6311] should_fail_ex+0x265/0x280 [ 75.047186][ T6311] should_fail+0xb/0x20 [ 75.047213][ T6311] should_fail_usercopy+0x1a/0x20 [ 75.047247][ T6311] _copy_from_iter+0xcf/0xe70 [ 75.047284][ T6311] ? __alloc_skb+0x3bb/0x4d0 [ 75.047327][ T6311] ? __alloc_skb+0x24d/0x4d0 [ 75.047362][ T6311] netlink_sendmsg+0x471/0x6b0 [ 75.047481][ T6311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.047526][ T6311] __sock_sendmsg+0x145/0x180 [ 75.047600][ T6311] ____sys_sendmsg+0x31e/0x4a0 [ 75.047758][ T6311] ___sys_sendmsg+0x17b/0x1d0 [ 75.047858][ T6311] __x64_sys_sendmsg+0xd4/0x160 [ 75.047902][ T6311] x64_sys_call+0x17ba/0x3000 [ 75.047997][ T6311] do_syscall_64+0xd8/0x2a0 [ 75.048042][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.048072][ T6311] RIP: 0033:0x7fb9020df749 [ 75.048119][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.048184][ T6311] RSP: 002b:00007fb900b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.048210][ T6311] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020df749 [ 75.048226][ T6311] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 75.048246][ T6311] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.048263][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.048286][ T6311] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 75.048330][ T6311] [ 75.185383][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.350907][ T6347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 75.355336][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.480028][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.487468][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.521651][ T6358] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 75.522859][ T6360] FAULT_INJECTION: forcing a failure. [ 75.522859][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.532459][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.542796][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.0.1191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.542832][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.542848][ T6360] Call Trace: [ 75.542889][ T6360] [ 75.542898][ T6360] __dump_stack+0x1d/0x30 [ 75.542930][ T6360] dump_stack_lvl+0xe8/0x140 [ 75.542957][ T6360] dump_stack+0x15/0x1b [ 75.542974][ T6360] should_fail_ex+0x265/0x280 [ 75.543016][ T6360] should_fail+0xb/0x20 [ 75.543040][ T6360] should_fail_usercopy+0x1a/0x20 [ 75.543070][ T6360] _copy_to_user+0x20/0xa0 [ 75.543108][ T6360] simple_read_from_buffer+0xb5/0x130 [ 75.543211][ T6360] proc_fail_nth_read+0x10e/0x150 [ 75.543250][ T6360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.543286][ T6360] vfs_read+0x1a8/0x770 [ 75.543309][ T6360] ? __fget_files+0x184/0x1c0 [ 75.543376][ T6360] ? __rcu_read_unlock+0x4f/0x70 [ 75.543415][ T6360] ? __fget_files+0x184/0x1c0 [ 75.543443][ T6360] ? mutex_lock+0x58/0x90 [ 75.543552][ T6360] ksys_read+0xda/0x1a0 [ 75.543577][ T6360] __x64_sys_read+0x40/0x50 [ 75.543602][ T6360] x64_sys_call+0x2889/0x3000 [ 75.543633][ T6360] do_syscall_64+0xd8/0x2a0 [ 75.543706][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.543734][ T6360] RIP: 0033:0x7f4304afe15c [ 75.543771][ T6360] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.543833][ T6360] RSP: 002b:00007f430355f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.543901][ T6360] RAX: ffffffffffffffda RBX: 00007f4304d55fa0 RCX: 00007f4304afe15c [ 75.543919][ T6360] RDX: 000000000000000f RSI: 00007f430355f0a0 RDI: 0000000000000007 [ 75.543936][ T6360] RBP: 00007f430355f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.543958][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.543975][ T6360] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 75.544000][ T6360] [ 75.729217][ T6362] SET target dimension over the limit! [ 75.746641][ T6358] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 75.805769][ T6375] Falling back ldisc for ttyS3. [ 76.010471][ T6399] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 76.091793][ T6407] FAULT_INJECTION: forcing a failure. [ 76.091793][ T6407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.091828][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.2.1209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.091890][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.091904][ T6407] Call Trace: [ 76.091910][ T6407] [ 76.091916][ T6407] __dump_stack+0x1d/0x30 [ 76.091940][ T6407] dump_stack_lvl+0xe8/0x140 [ 76.092014][ T6407] dump_stack+0x15/0x1b [ 76.092035][ T6407] should_fail_ex+0x265/0x280 [ 76.092061][ T6407] should_fail+0xb/0x20 [ 76.092082][ T6407] should_fail_usercopy+0x1a/0x20 [ 76.092181][ T6407] strncpy_from_user+0x27/0x260 [ 76.092224][ T6407] getname_flags+0xae/0x3b0 [ 76.092326][ T6407] do_sys_openat2+0x60/0x150 [ 76.092371][ T6407] __x64_sys_openat+0xf2/0x120 [ 76.092413][ T6407] x64_sys_call+0x2b07/0x3000 [ 76.092451][ T6407] do_syscall_64+0xd8/0x2a0 [ 76.092525][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.092546][ T6407] RIP: 0033:0x7fb9020ddf90 [ 76.092577][ T6407] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 76.092601][ T6407] RSP: 002b:00007fb900b3cef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 76.092696][ T6407] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb9020ddf90 [ 76.092712][ T6407] RDX: 0000000000000002 RSI: 00007fb902163c6c RDI: 00000000ffffff9c [ 76.092728][ T6407] RBP: 00007fb902163c6c R08: 0000000000000000 R09: 0000000000000000 [ 76.092744][ T6407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 76.092789][ T6407] R13: 00000000000002ae R14: 00002000000006c0 R15: 00007ffd74d810a8 [ 76.092831][ T6407] [ 76.410165][ T6418] Falling back ldisc for ttyS3. [ 76.478999][ T6426] FAULT_INJECTION: forcing a failure. [ 76.478999][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 76.491716][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.1.1216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.491747][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.491870][ T6426] Call Trace: [ 76.491876][ T6426] [ 76.491882][ T6426] __dump_stack+0x1d/0x30 [ 76.491904][ T6426] dump_stack_lvl+0xe8/0x140 [ 76.491929][ T6426] dump_stack+0x15/0x1b [ 76.491951][ T6426] should_fail_ex+0x265/0x280 [ 76.492026][ T6426] should_failslab+0x8c/0xb0 [ 76.492048][ T6426] kmem_cache_alloc_noprof+0x69/0x4b0 [ 76.492068][ T6426] ? skb_clone+0x151/0x1f0 [ 76.492190][ T6426] skb_clone+0x151/0x1f0 [ 76.492214][ T6426] __netlink_deliver_tap+0x2c9/0x500 [ 76.492254][ T6426] netlink_unicast+0x66b/0x690 [ 76.492366][ T6426] netlink_sendmsg+0x58b/0x6b0 [ 76.492425][ T6426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.492464][ T6426] __sock_sendmsg+0x145/0x180 [ 76.492506][ T6426] ____sys_sendmsg+0x31e/0x4a0 [ 76.492607][ T6426] ___sys_sendmsg+0x17b/0x1d0 [ 76.492656][ T6426] __x64_sys_sendmsg+0xd4/0x160 [ 76.492694][ T6426] x64_sys_call+0x17ba/0x3000 [ 76.492725][ T6426] do_syscall_64+0xd8/0x2a0 [ 76.492770][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.492794][ T6426] RIP: 0033:0x7fb1f548f749 [ 76.492812][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.492897][ T6426] RSP: 002b:00007fb1f3eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.492989][ T6426] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548f749 [ 76.493005][ T6426] RDX: 0000000024040884 RSI: 00002000000012c0 RDI: 0000000000000003 [ 76.493020][ T6426] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 76.493035][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.493051][ T6426] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 76.493138][ T6426] [ 76.542604][ T6430] FAULT_INJECTION: forcing a failure. [ 76.542604][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.698681][ T6438] FAULT_INJECTION: forcing a failure. [ 76.698681][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 76.708240][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.1.1218 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.708271][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.708288][ T6430] Call Trace: [ 76.708300][ T6430] [ 76.708309][ T6430] __dump_stack+0x1d/0x30 [ 76.708341][ T6430] dump_stack_lvl+0xe8/0x140 [ 76.708371][ T6430] dump_stack+0x15/0x1b [ 76.708453][ T6430] should_fail_ex+0x265/0x280 [ 76.708482][ T6430] should_fail+0xb/0x20 [ 76.708507][ T6430] should_fail_usercopy+0x1a/0x20 [ 76.708616][ T6430] _copy_to_user+0x20/0xa0 [ 76.708650][ T6430] simple_read_from_buffer+0xb5/0x130 [ 76.708680][ T6430] proc_fail_nth_read+0x10e/0x150 [ 76.708783][ T6430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.708829][ T6430] vfs_read+0x1a8/0x770 [ 76.708877][ T6430] ? __rcu_read_unlock+0x4f/0x70 [ 76.708903][ T6430] ? __fget_files+0x184/0x1c0 [ 76.708932][ T6430] ? mutex_lock+0x58/0x90 [ 76.709046][ T6430] ksys_read+0xda/0x1a0 [ 76.709069][ T6430] __x64_sys_read+0x40/0x50 [ 76.709093][ T6430] x64_sys_call+0x2889/0x3000 [ 76.709178][ T6430] do_syscall_64+0xd8/0x2a0 [ 76.709220][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.709306][ T6430] RIP: 0033:0x7fb1f548e15c [ 76.709325][ T6430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.709349][ T6430] RSP: 002b:00007fb1f3eef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.709373][ T6430] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548e15c [ 76.709453][ T6430] RDX: 000000000000000f RSI: 00007fb1f3eef0a0 RDI: 0000000000000003 [ 76.709469][ T6430] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 76.709485][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.709508][ T6430] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 76.709532][ T6430] [ 76.808862][ T6443] Falling back ldisc for ttyS3. [ 76.812442][ T6438] CPU: 1 UID: 0 PID: 6438 Comm: syz.3.1221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.812470][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.812597][ T6438] Call Trace: [ 76.812606][ T6438] [ 76.812615][ T6438] __dump_stack+0x1d/0x30 [ 76.812648][ T6438] dump_stack_lvl+0xe8/0x140 [ 76.812678][ T6438] dump_stack+0x15/0x1b [ 76.812716][ T6438] should_fail_ex+0x265/0x280 [ 76.812830][ T6438] should_failslab+0x8c/0xb0 [ 76.812858][ T6438] __kvmalloc_node_noprof+0x149/0x6b0 [ 76.812946][ T6438] ? recent_mt_check+0x3e7/0x8f0 [ 76.812978][ T6438] ? strnlen+0x28/0x50 [ 76.813062][ T6438] recent_mt_check+0x3e7/0x8f0 [ 76.813096][ T6438] recent_mt_check_v0+0x67/0x90 [ 76.813146][ T6438] xt_check_match+0x2ad/0x4f0 [ 76.813184][ T6438] ? mutex_unlock+0x4f/0x90 [ 76.813215][ T6438] ? xt_find_match+0x1d1/0x210 [ 76.813249][ T6438] translate_table+0xa9c/0xf90 [ 76.813360][ T6438] ? _copy_from_user+0x89/0xb0 [ 76.813460][ T6438] do_ipt_set_ctl+0x66f/0x820 [ 76.813481][ T6438] ? _raw_spin_unlock_bh+0x36/0x40 [ 76.813583][ T6438] ? tcp_release_cb+0xf1/0x370 [ 76.813626][ T6438] nf_setsockopt+0x199/0x1b0 [ 76.813720][ T6438] ip_setsockopt+0x102/0x110 [ 76.813754][ T6438] tcp_setsockopt+0x98/0xb0 [ 76.813863][ T6438] sock_common_setsockopt+0x69/0x80 [ 76.813887][ T6438] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.813911][ T6438] __sys_setsockopt+0x184/0x200 [ 76.813982][ T6438] __x64_sys_setsockopt+0x64/0x80 [ 76.814015][ T6438] x64_sys_call+0x21d5/0x3000 [ 76.814045][ T6438] do_syscall_64+0xd8/0x2a0 [ 76.814086][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.814112][ T6438] RIP: 0033:0x7f420d3df749 [ 76.814129][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.814151][ T6438] RSP: 002b:00007f420be47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.814240][ T6438] RAX: ffffffffffffffda RBX: 00007f420d635fa0 RCX: 00007f420d3df749 [ 76.814255][ T6438] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 76.814349][ T6438] RBP: 00007f420be47090 R08: 0000000000000480 R09: 0000000000000000 [ 76.814365][ T6438] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 76.814381][ T6438] R13: 00007f420d636038 R14: 00007f420d635fa0 R15: 00007ffe05506288 [ 76.814405][ T6438] [ 76.998555][ T6458] FAULT_INJECTION: forcing a failure. [ 76.998555][ T6458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.168309][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.2.1230 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.168341][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.168356][ T6458] Call Trace: [ 77.168365][ T6458] [ 77.168374][ T6458] __dump_stack+0x1d/0x30 [ 77.168404][ T6458] dump_stack_lvl+0xe8/0x140 [ 77.168506][ T6458] dump_stack+0x15/0x1b [ 77.168579][ T6458] should_fail_ex+0x265/0x280 [ 77.168607][ T6458] should_fail_alloc_page+0xf2/0x100 [ 77.168656][ T6458] __alloc_frozen_pages_noprof+0x109/0x360 [ 77.168704][ T6458] alloc_pages_mpol+0xb3/0x260 [ 77.168741][ T6458] folio_alloc_mpol_noprof+0x39/0x80 [ 77.168821][ T6458] shmem_get_folio_gfp+0x3cf/0xd50 [ 77.168863][ T6458] shmem_write_begin+0xfc/0x1f0 [ 77.168900][ T6458] generic_perform_write+0x184/0x490 [ 77.169058][ T6458] shmem_file_write_iter+0xc5/0xf0 [ 77.169101][ T6458] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.169142][ T6458] vfs_write+0x52a/0x960 [ 77.169172][ T6458] ksys_write+0xda/0x1a0 [ 77.169260][ T6458] __x64_sys_write+0x40/0x50 [ 77.169285][ T6458] x64_sys_call+0x2847/0x3000 [ 77.169310][ T6458] do_syscall_64+0xd8/0x2a0 [ 77.169344][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.169391][ T6458] RIP: 0033:0x7fb9020df749 [ 77.169477][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.169533][ T6458] RSP: 002b:00007fb900b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.169558][ T6458] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020df749 [ 77.169575][ T6458] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004 [ 77.169592][ T6458] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.169606][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.169689][ T6458] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 77.169713][ T6458] [ 77.283664][ T6470] FAULT_INJECTION: forcing a failure. [ 77.283664][ T6470] name failslab, interval 1, probability 0, space 0, times 0 [ 77.390961][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.2.1235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.391044][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.391063][ T6470] Call Trace: [ 77.391072][ T6470] [ 77.391080][ T6470] __dump_stack+0x1d/0x30 [ 77.391107][ T6470] dump_stack_lvl+0xe8/0x140 [ 77.391128][ T6470] dump_stack+0x15/0x1b [ 77.391147][ T6470] should_fail_ex+0x265/0x280 [ 77.391206][ T6470] should_failslab+0x8c/0xb0 [ 77.391229][ T6470] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 77.391253][ T6470] ? __d_alloc+0x37/0x340 [ 77.391280][ T6470] __d_alloc+0x37/0x340 [ 77.391354][ T6470] ? mpol_shared_policy_init+0xbd/0x4c0 [ 77.391401][ T6470] d_alloc_pseudo+0x1e/0x80 [ 77.391440][ T6470] alloc_file_pseudo+0x71/0x160 [ 77.391471][ T6470] __shmem_file_setup+0x1de/0x210 [ 77.391498][ T6470] shmem_file_setup+0x3b/0x50 [ 77.391522][ T6470] __se_sys_memfd_create+0x2f7/0x6b0 [ 77.391600][ T6470] __x64_sys_memfd_create+0x31/0x40 [ 77.391632][ T6470] x64_sys_call+0x28cb/0x3000 [ 77.391657][ T6470] do_syscall_64+0xd8/0x2a0 [ 77.391763][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.391785][ T6470] RIP: 0033:0x7fb9020df749 [ 77.391800][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.391856][ T6470] RSP: 002b:00007fb900b3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 77.391876][ T6470] RAX: ffffffffffffffda RBX: 000000000000050b RCX: 00007fb9020df749 [ 77.391888][ T6470] RDX: 00007fb900b3eef0 RSI: 0000000000000000 RDI: 00007fb902164960 [ 77.391901][ T6470] RBP: 0000200000003f40 R08: 00007fb900b3ebb7 R09: 00007fb900b3ee40 [ 77.391913][ T6470] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 77.391925][ T6470] R13: 00007fb900b3eef0 R14: 00007fb900b3eeb0 R15: 0000200000000380 [ 77.391963][ T6470] [ 77.691753][ T6483] Falling back ldisc for ttyS3. [ 77.719389][ T6487] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1243'. [ 77.822506][ T6504] IPv6: Can't replace route, no match found [ 77.897187][ T6515] Falling back ldisc for ttyS3. [ 78.047944][ T6538] FAULT_INJECTION: forcing a failure. [ 78.047944][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.061130][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.3.1263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.061156][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.061185][ T6538] Call Trace: [ 78.061190][ T6538] [ 78.061262][ T6538] __dump_stack+0x1d/0x30 [ 78.061283][ T6538] dump_stack_lvl+0xe8/0x140 [ 78.061302][ T6538] dump_stack+0x15/0x1b [ 78.061326][ T6538] should_fail_ex+0x265/0x280 [ 78.061407][ T6538] should_fail+0xb/0x20 [ 78.061474][ T6538] should_fail_usercopy+0x1a/0x20 [ 78.061494][ T6538] _copy_to_user+0x20/0xa0 [ 78.061528][ T6538] simple_read_from_buffer+0xb5/0x130 [ 78.061571][ T6538] proc_fail_nth_read+0x10e/0x150 [ 78.061609][ T6538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.061631][ T6538] vfs_read+0x1a8/0x770 [ 78.061645][ T6538] ? __rcu_read_unlock+0x4f/0x70 [ 78.061671][ T6538] ? __fget_files+0x184/0x1c0 [ 78.061690][ T6538] ? mutex_lock+0x58/0x90 [ 78.061738][ T6538] ksys_read+0xda/0x1a0 [ 78.061754][ T6538] __x64_sys_read+0x40/0x50 [ 78.061769][ T6538] x64_sys_call+0x2889/0x3000 [ 78.061789][ T6538] do_syscall_64+0xd8/0x2a0 [ 78.061834][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.061851][ T6538] RIP: 0033:0x7f420d3de15c [ 78.061871][ T6538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.061885][ T6538] RSP: 002b:00007f420be47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.061979][ T6538] RAX: ffffffffffffffda RBX: 00007f420d635fa0 RCX: 00007f420d3de15c [ 78.061990][ T6538] RDX: 000000000000000f RSI: 00007f420be470a0 RDI: 0000000000000003 [ 78.062001][ T6538] RBP: 00007f420be47090 R08: 0000000000000000 R09: 0000000000000000 [ 78.062018][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.062032][ T6538] R13: 00007f420d636038 R14: 00007f420d635fa0 R15: 00007ffe05506288 [ 78.062082][ T6538] [ 78.259170][ T29] kauditd_printk_skb: 1924 callbacks suppressed [ 78.259184][ T29] audit: type=1400 audit(1765270108.202:12687): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.294615][ T29] audit: type=1400 audit(1765270108.242:12688): avc: denied { prog_load } for pid=6539 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.315251][ T29] audit: type=1400 audit(1765270108.242:12689): avc: denied { prog_load } for pid=6539 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.334464][ T29] audit: type=1400 audit(1765270108.242:12690): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.358949][ T29] audit: type=1400 audit(1765270108.242:12691): avc: denied { read write } for pid=6539 comm="syz.3.1264" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.376919][ T6545] Falling back ldisc for ttyS3. [ 78.430263][ T6548] audit: audit_backlog=66 > audit_backlog_limit=64 [ 78.436997][ T6548] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 78.441359][ T3314] audit: audit_backlog=66 > audit_backlog_limit=64 [ 78.444838][ T6548] audit: backlog limit exceeded [ 78.451319][ T3314] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 78.492625][ T6563] FAULT_INJECTION: forcing a failure. [ 78.492625][ T6563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.505805][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.0.1272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.505861][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.505875][ T6563] Call Trace: [ 78.505883][ T6563] [ 78.505892][ T6563] __dump_stack+0x1d/0x30 [ 78.505929][ T6563] dump_stack_lvl+0xe8/0x140 [ 78.505958][ T6563] dump_stack+0x15/0x1b [ 78.506064][ T6563] should_fail_ex+0x265/0x280 [ 78.506087][ T6563] should_fail+0xb/0x20 [ 78.506110][ T6563] should_fail_usercopy+0x1a/0x20 [ 78.506140][ T6563] _copy_from_user+0x1c/0xb0 [ 78.506171][ T6563] do_ip_setsockopt+0x338/0x2240 [ 78.506244][ T6563] ip_setsockopt+0x58/0x110 [ 78.506324][ T6563] udp_setsockopt+0x99/0xb0 [ 78.506356][ T6563] sock_common_setsockopt+0x69/0x80 [ 78.506375][ T6563] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.506533][ T6563] __sys_setsockopt+0x184/0x200 [ 78.506627][ T6563] __x64_sys_setsockopt+0x64/0x80 [ 78.506660][ T6563] x64_sys_call+0x21d5/0x3000 [ 78.506690][ T6563] do_syscall_64+0xd8/0x2a0 [ 78.506730][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.506786][ T6563] RIP: 0033:0x7f4304aff749 [ 78.506808][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.506856][ T6563] RSP: 002b:00007f430355f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.506903][ T6563] RAX: ffffffffffffffda RBX: 00007f4304d55fa0 RCX: 00007f4304aff749 [ 78.506983][ T6563] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.506998][ T6563] RBP: 00007f430355f090 R08: 000000000000000c R09: 0000000000000000 [ 78.507051][ T6563] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 78.507067][ T6563] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 78.507090][ T6563] [ 78.725140][ T6568] FAULT_INJECTION: forcing a failure. [ 78.725140][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.738299][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.1.1275 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.738333][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.738376][ T6568] Call Trace: [ 78.738383][ T6568] [ 78.738463][ T6568] __dump_stack+0x1d/0x30 [ 78.738487][ T6568] dump_stack_lvl+0xe8/0x140 [ 78.738508][ T6568] dump_stack+0x15/0x1b [ 78.738526][ T6568] should_fail_ex+0x265/0x280 [ 78.738626][ T6568] should_fail+0xb/0x20 [ 78.738644][ T6568] should_fail_usercopy+0x1a/0x20 [ 78.738736][ T6568] strncpy_from_user+0x27/0x260 [ 78.738820][ T6568] getname_flags+0xae/0x3b0 [ 78.738843][ T6568] do_sys_openat2+0x60/0x150 [ 78.738922][ T6568] __x64_sys_openat+0xf2/0x120 [ 78.738998][ T6568] x64_sys_call+0x2b07/0x3000 [ 78.739021][ T6568] do_syscall_64+0xd8/0x2a0 [ 78.739052][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.739074][ T6568] RIP: 0033:0x7fb1f548f749 [ 78.739167][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.739184][ T6568] RSP: 002b:00007fb1f3eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.739202][ T6568] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548f749 [ 78.739242][ T6568] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 78.739312][ T6568] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 78.739395][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.739407][ T6568] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 78.739424][ T6568] [ 78.938518][ T6574] Falling back ldisc for ttyS3. [ 79.037442][ T6594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6594 comm=syz.3.1286 [ 79.116176][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1286'. [ 79.335611][ T6608] Falling back ldisc for ttyS3. [ 79.677069][ T6623] FAULT_INJECTION: forcing a failure. [ 79.677069][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.690187][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.0.1297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.690217][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.690229][ T6623] Call Trace: [ 79.690235][ T6623] [ 79.690242][ T6623] __dump_stack+0x1d/0x30 [ 79.690322][ T6623] dump_stack_lvl+0xe8/0x140 [ 79.690346][ T6623] dump_stack+0x15/0x1b [ 79.690415][ T6623] should_fail_ex+0x265/0x280 [ 79.690439][ T6623] should_fail+0xb/0x20 [ 79.690493][ T6623] should_fail_usercopy+0x1a/0x20 [ 79.690520][ T6623] _copy_from_user+0x1c/0xb0 [ 79.690613][ T6623] kstrtouint_from_user+0x69/0xf0 [ 79.690634][ T6623] ? 0xffffffff81000000 [ 79.690647][ T6623] ? selinux_file_permission+0x1e2/0x320 [ 79.690757][ T6623] proc_fail_nth_write+0x50/0x160 [ 79.690793][ T6623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.690819][ T6623] vfs_write+0x269/0x960 [ 79.690834][ T6623] ? vfs_read+0x4e6/0x770 [ 79.690854][ T6623] ? __rcu_read_unlock+0x4f/0x70 [ 79.690951][ T6623] ? __fget_files+0x184/0x1c0 [ 79.690978][ T6623] ? mutex_lock+0x58/0x90 [ 79.691005][ T6623] ksys_write+0xda/0x1a0 [ 79.691027][ T6623] __x64_sys_write+0x40/0x50 [ 79.691087][ T6623] x64_sys_call+0x2847/0x3000 [ 79.691109][ T6623] do_syscall_64+0xd8/0x2a0 [ 79.691143][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.691169][ T6623] RIP: 0033:0x7f4304afe1ff [ 79.691184][ T6623] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 79.691224][ T6623] RSP: 002b:00007f430355f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.691241][ T6623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4304afe1ff [ 79.691253][ T6623] RDX: 0000000000000001 RSI: 00007f430355f0a0 RDI: 0000000000000003 [ 79.691263][ T6623] RBP: 00007f430355f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.691276][ T6623] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 79.691322][ T6623] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 79.691343][ T6623] [ 79.945229][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 80.029494][ T6637] netlink: 4 bytes leftover after parsing attributes in process `+°ç@'. [ 80.049084][ T6635] Falling back ldisc for ttyS3. [ 80.188949][ T6661] FAULT_INJECTION: forcing a failure. [ 80.188949][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.202257][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.0.1312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.202289][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.202305][ T6661] Call Trace: [ 80.202313][ T6661] [ 80.202321][ T6661] __dump_stack+0x1d/0x30 [ 80.202350][ T6661] dump_stack_lvl+0xe8/0x140 [ 80.202407][ T6661] dump_stack+0x15/0x1b [ 80.202440][ T6661] should_fail_ex+0x265/0x280 [ 80.202486][ T6661] should_fail+0xb/0x20 [ 80.202507][ T6661] should_fail_usercopy+0x1a/0x20 [ 80.202532][ T6661] _copy_to_user+0x20/0xa0 [ 80.202559][ T6661] simple_read_from_buffer+0xb5/0x130 [ 80.202676][ T6661] proc_fail_nth_read+0x10e/0x150 [ 80.202707][ T6661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.202743][ T6661] vfs_read+0x1a8/0x770 [ 80.202762][ T6661] ? __rcu_read_unlock+0x4f/0x70 [ 80.202855][ T6661] ? __fget_files+0x184/0x1c0 [ 80.202880][ T6661] ? mutex_lock+0x58/0x90 [ 80.202907][ T6661] ksys_read+0xda/0x1a0 [ 80.202989][ T6661] __x64_sys_read+0x40/0x50 [ 80.203061][ T6661] x64_sys_call+0x2889/0x3000 [ 80.203088][ T6661] do_syscall_64+0xd8/0x2a0 [ 80.203122][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.203169][ T6661] RIP: 0033:0x7f4304afe15c [ 80.203185][ T6661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.203208][ T6661] RSP: 002b:00007f430355f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.203228][ T6661] RAX: ffffffffffffffda RBX: 00007f4304d55fa0 RCX: 00007f4304afe15c [ 80.203274][ T6661] RDX: 000000000000000f RSI: 00007f430355f0a0 RDI: 0000000000000003 [ 80.203288][ T6661] RBP: 00007f430355f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.203302][ T6661] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 80.203385][ T6661] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 80.203406][ T6661] [ 80.420328][ T6664] binfmt_misc: register: failed to install interpreter file ./file0 [ 80.454396][ T6668] Falling back ldisc for ttyS3. [ 80.905310][ T6698] Falling back ldisc for ttyS3. [ 80.911545][ T6693] FAULT_INJECTION: forcing a failure. [ 80.911545][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.924695][ T6693] CPU: 1 UID: 0 PID: 6693 Comm: syz.1.1324 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.924728][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.924826][ T6693] Call Trace: [ 80.924831][ T6693] [ 80.924837][ T6693] __dump_stack+0x1d/0x30 [ 80.924919][ T6693] dump_stack_lvl+0xe8/0x140 [ 80.924964][ T6693] dump_stack+0x15/0x1b [ 80.924982][ T6693] should_fail_ex+0x265/0x280 [ 80.925053][ T6693] should_fail+0xb/0x20 [ 80.925073][ T6693] should_fail_usercopy+0x1a/0x20 [ 80.925128][ T6693] copy_folio_from_iter_atomic+0x26a/0x1150 [ 80.925155][ T6693] ? shmem_write_begin+0xfc/0x1f0 [ 80.925211][ T6693] ? shmem_write_begin+0x135/0x1f0 [ 80.925235][ T6693] generic_perform_write+0x2c2/0x490 [ 80.925308][ T6693] shmem_file_write_iter+0xc5/0xf0 [ 80.925335][ T6693] do_iter_readv_writev+0x4a1/0x540 [ 80.925386][ T6693] vfs_writev+0x2df/0x8b0 [ 80.925421][ T6693] do_writev+0xe7/0x210 [ 80.925583][ T6693] __x64_sys_writev+0x45/0x50 [ 80.925674][ T6693] x64_sys_call+0x1ba5/0x3000 [ 80.925762][ T6693] do_syscall_64+0xd8/0x2a0 [ 80.925845][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.925864][ T6693] RIP: 0033:0x7fb1f548f749 [ 80.925907][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.925923][ T6693] RSP: 002b:00007fb1f3eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 80.925942][ T6693] RAX: ffffffffffffffda RBX: 00007fb1f56e5fa0 RCX: 00007fb1f548f749 [ 80.925956][ T6693] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 80.925969][ T6693] RBP: 00007fb1f3eef090 R08: 0000000000000000 R09: 0000000000000000 [ 80.925999][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.926012][ T6693] R13: 00007fb1f56e6038 R14: 00007fb1f56e5fa0 R15: 00007fffa0776938 [ 80.926032][ T6693] [ 80.952333][ T6702] netlink: 6772 bytes leftover after parsing attributes in process `syz.0.1328'. [ 81.275039][ T5934] Process accounting resumed [ 81.375907][ T23] Process accounting resumed [ 81.382402][ T6728] FAULT_INJECTION: forcing a failure. [ 81.382402][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 81.395102][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.2.1339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.395135][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.395151][ T6728] Call Trace: [ 81.395165][ T6728] [ 81.395174][ T6728] __dump_stack+0x1d/0x30 [ 81.395204][ T6728] dump_stack_lvl+0xe8/0x140 [ 81.395232][ T6728] dump_stack+0x15/0x1b [ 81.395250][ T6728] should_fail_ex+0x265/0x280 [ 81.395357][ T6728] should_failslab+0x8c/0xb0 [ 81.395386][ T6728] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 81.395422][ T6728] ? sidtab_sid2str_get+0xa0/0x130 [ 81.395513][ T6728] kmemdup_noprof+0x2b/0x70 [ 81.395537][ T6728] sidtab_sid2str_get+0xa0/0x130 [ 81.395571][ T6728] security_sid_to_context_core+0x1eb/0x2e0 [ 81.395608][ T6728] security_sid_to_context+0x27/0x40 [ 81.395688][ T6728] avc_audit_post_callback+0x10f/0x520 [ 81.395729][ T6728] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 81.395826][ T6728] common_lsm_audit+0x1bb/0x230 [ 81.395851][ T6728] ? _parse_integer_limit+0x170/0x190 [ 81.395870][ T6728] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 81.395967][ T6728] slow_avc_audit+0x104/0x140 [ 81.396008][ T6728] avc_has_perm+0x13a/0x180 [ 81.396091][ T6728] selinux_bpf+0xa3/0xc0 [ 81.396178][ T6728] security_bpf+0x52/0x90 [ 81.396211][ T6728] __sys_bpf+0x1c3/0x7c0 [ 81.396314][ T6728] __x64_sys_bpf+0x41/0x50 [ 81.396335][ T6728] x64_sys_call+0x28e1/0x3000 [ 81.396365][ T6728] do_syscall_64+0xd8/0x2a0 [ 81.396441][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.396466][ T6728] RIP: 0033:0x7fb9020df749 [ 81.396484][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.396613][ T6728] RSP: 002b:00007fb900b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.396634][ T6728] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020df749 [ 81.396648][ T6728] RDX: 0000000000000050 RSI: 0000200000002040 RDI: 0000000000000000 [ 81.396662][ T6728] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.396675][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.396688][ T6728] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 81.396708][ T6728] [ 81.795979][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6758 comm=syz.2.1351 [ 81.816576][ T6760] FAULT_INJECTION: forcing a failure. [ 81.816576][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.829687][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.3.1352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.829715][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.829726][ T6760] Call Trace: [ 81.829732][ T6760] [ 81.829739][ T6760] __dump_stack+0x1d/0x30 [ 81.829763][ T6760] dump_stack_lvl+0xe8/0x140 [ 81.829786][ T6760] dump_stack+0x15/0x1b [ 81.829879][ T6760] should_fail_ex+0x265/0x280 [ 81.829907][ T6760] should_fail+0xb/0x20 [ 81.829930][ T6760] should_fail_usercopy+0x1a/0x20 [ 81.829959][ T6760] strncpy_from_user+0x27/0x260 [ 81.830010][ T6760] __se_sys_memfd_create+0x206/0x6b0 [ 81.830044][ T6760] __x64_sys_memfd_create+0x31/0x40 [ 81.830075][ T6760] x64_sys_call+0x28cb/0x3000 [ 81.830166][ T6760] do_syscall_64+0xd8/0x2a0 [ 81.830196][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.830277][ T6760] RIP: 0033:0x7f420d3df749 [ 81.830295][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.830317][ T6760] RSP: 002b:00007f420be46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 81.830335][ T6760] RAX: ffffffffffffffda RBX: 0000000000000525 RCX: 00007f420d3df749 [ 81.830347][ T6760] RDX: 00007f420be46ef0 RSI: 0000000000000000 RDI: 00007f420d464960 [ 81.830358][ T6760] RBP: 0000200000000100 R08: 00007f420be46bb7 R09: 00007f420be46e40 [ 81.830373][ T6760] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 81.830404][ T6760] R13: 00007f420be46ef0 R14: 00007f420be46eb0 R15: 0000200000000000 [ 81.830427][ T6760] [ 82.373672][ T6800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.766117][ T6826] FAULT_INJECTION: forcing a failure. [ 82.766117][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.779314][ T6826] CPU: 0 UID: 0 PID: 6826 Comm: syz.2.1378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.779335][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.779375][ T6826] Call Trace: [ 82.779380][ T6826] [ 82.779386][ T6826] __dump_stack+0x1d/0x30 [ 82.779406][ T6826] dump_stack_lvl+0xe8/0x140 [ 82.779460][ T6826] dump_stack+0x15/0x1b [ 82.779549][ T6826] should_fail_ex+0x265/0x280 [ 82.779631][ T6826] should_fail+0xb/0x20 [ 82.779648][ T6826] should_fail_usercopy+0x1a/0x20 [ 82.779669][ T6826] _copy_to_user+0x20/0xa0 [ 82.779693][ T6826] simple_read_from_buffer+0xb5/0x130 [ 82.779783][ T6826] proc_fail_nth_read+0x10e/0x150 [ 82.779865][ T6826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.779900][ T6826] vfs_read+0x1a8/0x770 [ 82.779959][ T6826] ? __rcu_read_unlock+0x4f/0x70 [ 82.779976][ T6826] ? __fget_files+0x184/0x1c0 [ 82.779996][ T6826] ? mutex_lock+0x58/0x90 [ 82.780019][ T6826] ksys_read+0xda/0x1a0 [ 82.780104][ T6826] __x64_sys_read+0x40/0x50 [ 82.780121][ T6826] x64_sys_call+0x2889/0x3000 [ 82.780275][ T6826] do_syscall_64+0xd8/0x2a0 [ 82.780304][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.780323][ T6826] RIP: 0033:0x7fb9020de15c [ 82.780335][ T6826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.780415][ T6826] RSP: 002b:00007fb900b3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.780431][ T6826] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020de15c [ 82.780512][ T6826] RDX: 000000000000000f RSI: 00007fb900b3f0a0 RDI: 0000000000000005 [ 82.780523][ T6826] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.780534][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.780544][ T6826] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 82.780561][ T6826] [ 83.305911][ T29] kauditd_printk_skb: 1483 callbacks suppressed [ 83.305929][ T29] audit: type=1400 audit(1765270113.252:14141): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.420015][ T29] audit: type=1400 audit(1765270113.362:14142): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.450011][ T29] audit: type=1400 audit(1765270113.392:14143): avc: denied { read } for pid=6844 comm="syz.2.1385" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 83.491041][ T29] audit: type=1400 audit(1765270113.412:14144): avc: denied { create } for pid=6844 comm="syz.2.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 83.511001][ T29] audit: type=1400 audit(1765270113.412:14145): avc: denied { allowed } for pid=6844 comm="syz.2.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 83.530411][ T29] audit: type=1400 audit(1765270113.422:14146): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.554725][ T29] audit: type=1400 audit(1765270113.432:14147): avc: denied { prog_load } for pid=6846 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.573975][ T29] audit: type=1400 audit(1765270113.432:14148): avc: denied { execmem } for pid=6846 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 83.614502][ T29] audit: type=1400 audit(1765270113.552:14149): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.638824][ T29] audit: type=1400 audit(1765270113.552:14150): avc: denied { create } for pid=6849 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 83.672876][ T6853] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1387'. [ 84.523371][ T6895] netlink: 'syz.0.1406': attribute type 4 has an invalid length. [ 84.534552][ T6895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6895 comm=syz.0.1406 [ 84.548517][ T6897] netlink: 'syz.0.1406': attribute type 4 has an invalid length. [ 84.572618][ T6903] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 84.580685][ T6903] ipvlan0: entered allmulticast mode [ 84.586037][ T6903] veth0_vlan: entered allmulticast mode [ 84.591598][ T6903] FAULT_INJECTION: forcing a failure. [ 84.591598][ T6903] name failslab, interval 1, probability 0, space 0, times 0 [ 84.604221][ T6903] CPU: 1 UID: 0 PID: 6903 Comm: syz.0.1408 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.604259][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.604325][ T6903] Call Trace: [ 84.604331][ T6903] [ 84.604337][ T6903] __dump_stack+0x1d/0x30 [ 84.604358][ T6903] dump_stack_lvl+0xe8/0x140 [ 84.604472][ T6903] dump_stack+0x15/0x1b [ 84.604488][ T6903] should_fail_ex+0x265/0x280 [ 84.604506][ T6903] should_failslab+0x8c/0xb0 [ 84.604549][ T6903] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 84.604568][ T6903] ? __alloc_skb+0x324/0x4d0 [ 84.604585][ T6903] ? _raw_spin_lock+0x52/0xa0 [ 84.604747][ T6903] __alloc_skb+0x324/0x4d0 [ 84.604772][ T6903] ? __alloc_skb+0x24d/0x4d0 [ 84.604798][ T6903] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 84.604851][ T6903] rtmsg_ifinfo+0x6d/0x110 [ 84.604905][ T6903] __dev_notify_flags+0x76/0x360 [ 84.605024][ T6903] ? vprintk_emit+0x5f8/0x610 [ 84.605058][ T6903] netif_change_flags+0xac/0xd0 [ 84.605080][ T6903] do_setlink+0x8db/0x2780 [ 84.605099][ T6903] ? _raw_spin_unlock+0x26/0x50 [ 84.605142][ T6903] ? finish_task_switch+0x7a/0x2a0 [ 84.605200][ T6903] ? __schedule+0x85f/0xcd0 [ 84.605217][ T6903] ? security_capable+0x83/0x90 [ 84.605244][ T6903] ? __cond_resched+0x4e/0x90 [ 84.605262][ T6903] rtnl_newlink+0xea4/0x1360 [ 84.605304][ T6903] ? xas_load+0x413/0x430 [ 84.605338][ T6903] ? try_charge_memcg+0x215/0xa10 [ 84.605353][ T6903] ? __memcg_slab_free_hook+0x135/0x230 [ 84.605404][ T6903] ? __rcu_read_unlock+0x4f/0x70 [ 84.605420][ T6903] ? avc_has_perm_noaudit+0xab/0x130 [ 84.605447][ T6903] ? cred_has_capability+0x210/0x280 [ 84.605472][ T6903] ? selinux_capable+0x31/0x40 [ 84.605522][ T6903] ? security_capable+0x83/0x90 [ 84.605545][ T6903] ? ns_capable+0x7d/0xb0 [ 84.605567][ T6903] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.605664][ T6903] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 84.605721][ T6903] netlink_rcv_skb+0x123/0x220 [ 84.605778][ T6903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.605808][ T6903] rtnetlink_rcv+0x1c/0x30 [ 84.605872][ T6903] netlink_unicast+0x5c0/0x690 [ 84.605893][ T6903] netlink_sendmsg+0x58b/0x6b0 [ 84.605917][ T6903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.605988][ T6903] __sock_sendmsg+0x145/0x180 [ 84.606012][ T6903] ____sys_sendmsg+0x31e/0x4a0 [ 84.606048][ T6903] ___sys_sendmsg+0x17b/0x1d0 [ 84.606109][ T6903] __x64_sys_sendmsg+0xd4/0x160 [ 84.606135][ T6903] x64_sys_call+0x17ba/0x3000 [ 84.606165][ T6903] do_syscall_64+0xd8/0x2a0 [ 84.606312][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.606369][ T6903] RIP: 0033:0x7f4304aff749 [ 84.606411][ T6903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.606425][ T6903] RSP: 002b:00007f430355f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.606440][ T6903] RAX: ffffffffffffffda RBX: 00007f4304d55fa0 RCX: 00007f4304aff749 [ 84.606451][ T6903] RDX: 0000000024008800 RSI: 0000200000000140 RDI: 0000000000000003 [ 84.606461][ T6903] RBP: 00007f430355f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.606474][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.606484][ T6903] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 84.606524][ T6903] [ 84.745634][ T6908] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1409'. [ 84.751996][ T6903] team0: Device ipvlan0 failed to register rx_handler [ 85.124884][ T6929] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1417'. [ 85.303205][ T6938] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.684544][ T6949] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.953652][ T6966] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.041927][ T6978] FAULT_INJECTION: forcing a failure. [ 86.041927][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.055037][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: syz.2.1438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.055133][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.055146][ T6978] Call Trace: [ 86.055153][ T6978] [ 86.055162][ T6978] __dump_stack+0x1d/0x30 [ 86.055193][ T6978] dump_stack_lvl+0xe8/0x140 [ 86.055218][ T6978] dump_stack+0x15/0x1b [ 86.055238][ T6978] should_fail_ex+0x265/0x280 [ 86.055280][ T6978] should_fail+0xb/0x20 [ 86.055299][ T6978] should_fail_usercopy+0x1a/0x20 [ 86.055323][ T6978] _copy_from_iter+0xcf/0xe70 [ 86.055359][ T6978] ? __alloc_skb+0x3bb/0x4d0 [ 86.055397][ T6978] ? __alloc_skb+0x24d/0x4d0 [ 86.055420][ T6978] netlink_sendmsg+0x471/0x6b0 [ 86.055452][ T6978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.055512][ T6978] __sock_sendmsg+0x145/0x180 [ 86.055544][ T6978] ____sys_sendmsg+0x31e/0x4a0 [ 86.055575][ T6978] ___sys_sendmsg+0x17b/0x1d0 [ 86.055612][ T6978] __x64_sys_sendmsg+0xd4/0x160 [ 86.055671][ T6978] x64_sys_call+0x17ba/0x3000 [ 86.055694][ T6978] do_syscall_64+0xd8/0x2a0 [ 86.055784][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.055804][ T6978] RIP: 0033:0x7fb9020df749 [ 86.055818][ T6978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.055835][ T6978] RSP: 002b:00007fb900b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.055911][ T6978] RAX: ffffffffffffffda RBX: 00007fb902335fa0 RCX: 00007fb9020df749 [ 86.055922][ T6978] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 86.055934][ T6978] RBP: 00007fb900b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.055946][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.055957][ T6978] R13: 00007fb902336038 R14: 00007fb902335fa0 R15: 00007ffd74d810a8 [ 86.055974][ T6978] [ 86.273488][ T6981] FAULT_INJECTION: forcing a failure. [ 86.273488][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 86.286268][ T6981] CPU: 0 UID: 0 PID: 6981 Comm: syz.4.1439 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.286297][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.286313][ T6981] Call Trace: [ 86.286320][ T6981] [ 86.286329][ T6981] __dump_stack+0x1d/0x30 [ 86.286369][ T6981] dump_stack_lvl+0xe8/0x140 [ 86.286391][ T6981] dump_stack+0x15/0x1b [ 86.286411][ T6981] should_fail_ex+0x265/0x280 [ 86.286491][ T6981] should_failslab+0x8c/0xb0 [ 86.286572][ T6981] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 86.286601][ T6981] ? __d_alloc+0x37/0x340 [ 86.286629][ T6981] __d_alloc+0x37/0x340 [ 86.286722][ T6981] ? selinux_inode_permission+0x6be/0x7c0 [ 86.286758][ T6981] d_alloc_parallel+0x54/0xcd0 [ 86.286797][ T6981] ? security_inode_permission+0x4a/0xb0 [ 86.286900][ T6981] ? lockref_get_not_dead+0x120/0x1c0 [ 86.286931][ T6981] ? __rcu_read_unlock+0x4f/0x70 [ 86.286957][ T6981] __lookup_slow+0x8c/0x250 [ 86.287009][ T6981] lookup_slow+0x3c/0x60 [ 86.287066][ T6981] path_lookupat+0x2f7/0x500 [ 86.287111][ T6981] filename_lookup+0x147/0x340 [ 86.287157][ T6981] user_path_at+0x3e/0x130 [ 86.287219][ T6981] do_sys_truncate+0x5c/0x130 [ 86.287247][ T6981] __x64_sys_truncate+0x31/0x40 [ 86.287272][ T6981] x64_sys_call+0x1864/0x3000 [ 86.287296][ T6981] do_syscall_64+0xd8/0x2a0 [ 86.287372][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.287396][ T6981] RIP: 0033:0x7f99ad86f749 [ 86.287411][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.287506][ T6981] RSP: 002b:00007f99ac2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 86.287525][ T6981] RAX: ffffffffffffffda RBX: 00007f99adac5fa0 RCX: 00007f99ad86f749 [ 86.287538][ T6981] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 86.287551][ T6981] RBP: 00007f99ac2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 86.287586][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.287681][ T6981] R13: 00007f99adac6038 R14: 00007f99adac5fa0 R15: 00007ffe52c26618 [ 86.287701][ T6981] [ 86.625816][ T7001] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1444'. [ 87.499282][ T7043] Falling back ldisc for ttyS3. [ 87.731947][ T7058] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 87.757380][ T7058] team0: Device ipvlan0 failed to register rx_handler [ 87.951965][ T7064] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1474'. [ 88.314738][ T29] kauditd_printk_skb: 6234 callbacks suppressed [ 88.314754][ T29] audit: type=1400 audit(1765270118.252:19986): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.346552][ T29] audit: type=1400 audit(1765270118.282:19987): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.367888][ T29] audit: type=1400 audit(1765270118.282:19988): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.387715][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.389138][ T29] audit: type=1400 audit(1765270118.282:19989): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.395688][ T3045] audit: audit_lost=160 audit_rate_limit=0 audit_backlog_limit=64 [ 88.416732][ T29] audit: type=1400 audit(1765270118.282:19990): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.424522][ T3045] audit: backlog limit exceeded [ 88.446370][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.450563][ T29] audit: type=1400 audit(1765270118.282:19991): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.537845][ T7082] FAULT_INJECTION: forcing a failure. [ 88.537845][ T7082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.551145][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.4.1482 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.551175][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.551191][ T7082] Call Trace: [ 88.551223][ T7082] [ 88.551230][ T7082] __dump_stack+0x1d/0x30 [ 88.551254][ T7082] dump_stack_lvl+0xe8/0x140 [ 88.551350][ T7082] dump_stack+0x15/0x1b [ 88.551370][ T7082] should_fail_ex+0x265/0x280 [ 88.551392][ T7082] should_fail+0xb/0x20 [ 88.551414][ T7082] should_fail_usercopy+0x1a/0x20 [ 88.551443][ T7082] _copy_from_iter+0xcf/0xe70 [ 88.551480][ T7082] ? __alloc_skb+0x3bb/0x4d0 [ 88.551509][ T7082] ? __alloc_skb+0x24d/0x4d0 [ 88.551541][ T7082] netlink_sendmsg+0x471/0x6b0 [ 88.551654][ T7082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.551691][ T7082] __sock_sendmsg+0x145/0x180 [ 88.551761][ T7082] ____sys_sendmsg+0x31e/0x4a0 [ 88.551791][ T7082] ___sys_sendmsg+0x17b/0x1d0 [ 88.551882][ T7082] __x64_sys_sendmsg+0xd4/0x160 [ 88.551914][ T7082] x64_sys_call+0x17ba/0x3000 [ 88.551945][ T7082] do_syscall_64+0xd8/0x2a0 [ 88.552058][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.552085][ T7082] RIP: 0033:0x7f99ad86f749 [ 88.552104][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.552125][ T7082] RSP: 002b:00007f99ac2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.552144][ T7082] RAX: ffffffffffffffda RBX: 00007f99adac5fa0 RCX: 00007f99ad86f749 [ 88.552156][ T7082] RDX: 0000000020000800 RSI: 0000200000000080 RDI: 0000000000000003 [ 88.552224][ T7082] RBP: 00007f99ac2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.552241][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.552305][ T7082] R13: 00007f99adac6038 R14: 00007f99adac5fa0 R15: 00007ffe52c26618 [ 88.552330][ T7082] [ 89.616170][ T7115] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1493'. [ 89.662938][ T7119] FAULT_INJECTION: forcing a failure. [ 89.662938][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 89.675685][ T7119] CPU: 0 UID: 0 PID: 7119 Comm: syz.0.1495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.675780][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.675792][ T7119] Call Trace: [ 89.675800][ T7119] [ 89.675808][ T7119] __dump_stack+0x1d/0x30 [ 89.675838][ T7119] dump_stack_lvl+0xe8/0x140 [ 89.675864][ T7119] dump_stack+0x15/0x1b [ 89.675996][ T7119] should_fail_ex+0x265/0x280 [ 89.676023][ T7119] should_failslab+0x8c/0xb0 [ 89.676050][ T7119] kmem_cache_alloc_noprof+0x69/0x4b0 [ 89.676074][ T7119] ? skb_clone+0x151/0x1f0 [ 89.676122][ T7119] skb_clone+0x151/0x1f0 [ 89.676154][ T7119] __netlink_deliver_tap+0x2c9/0x500 [ 89.676196][ T7119] netlink_unicast+0x66b/0x690 [ 89.676261][ T7119] netlink_sendmsg+0x58b/0x6b0 [ 89.676295][ T7119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.676326][ T7119] __sock_sendmsg+0x145/0x180 [ 89.676412][ T7119] ____sys_sendmsg+0x31e/0x4a0 [ 89.676472][ T7119] ___sys_sendmsg+0x17b/0x1d0 [ 89.676518][ T7119] __x64_sys_sendmsg+0xd4/0x160 [ 89.676550][ T7119] x64_sys_call+0x17ba/0x3000 [ 89.676585][ T7119] do_syscall_64+0xd8/0x2a0 [ 89.676615][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.676635][ T7119] RIP: 0033:0x7f4304aff749 [ 89.676669][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.676703][ T7119] RSP: 002b:00007f430355f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.676777][ T7119] RAX: ffffffffffffffda RBX: 00007f4304d55fa0 RCX: 00007f4304aff749 [ 89.676790][ T7119] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 89.676806][ T7119] RBP: 00007f430355f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.676822][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.676837][ T7119] R13: 00007f4304d56038 R14: 00007f4304d55fa0 R15: 00007ffc31392f18 [ 89.676855][ T7119] [ 89.746120][ T7119] netem: change failed [ 90.197388][ T7143] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 90.318000][ T7147] FAULT_INJECTION: forcing a failure. [ 90.318000][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.331179][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.4.1505 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.331291][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.331338][ T7147] Call Trace: [ 90.331346][ T7147] [ 90.331355][ T7147] __dump_stack+0x1d/0x30 [ 90.331384][ T7147] dump_stack_lvl+0xe8/0x140 [ 90.331412][ T7147] dump_stack+0x15/0x1b [ 90.331436][ T7147] should_fail_ex+0x265/0x280 [ 90.331594][ T7147] should_fail+0xb/0x20 [ 90.331613][ T7147] should_fail_usercopy+0x1a/0x20 [ 90.331636][ T7147] _copy_from_user+0x1c/0xb0 [ 90.331676][ T7147] ___sys_sendmsg+0xc1/0x1d0 [ 90.331742][ T7147] __x64_sys_sendmsg+0xd4/0x160 [ 90.331774][ T7147] x64_sys_call+0x17ba/0x3000 [ 90.331843][ T7147] do_syscall_64+0xd8/0x2a0 [ 90.331883][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.331903][ T7147] RIP: 0033:0x7f99ad86f749 [ 90.331916][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.332005][ T7147] RSP: 002b:00007f99ac2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.332064][ T7147] RAX: ffffffffffffffda RBX: 00007f99adac5fa0 RCX: 00007f99ad86f749 [ 90.332079][ T7147] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 90.332094][ T7147] RBP: 00007f99ac2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 90.332109][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.332123][ T7147] R13: 00007f99adac6038 R14: 00007f99adac5fa0 R15: 00007ffe52c26618 [ 90.332139][ T7147] [ 90.626010][ T7153] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 90.735358][ T7158] ================================================================== [ 90.743503][ T7158] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 90.750809][ T7158] [ 90.753140][ T7158] write to 0xffff888104d6cc00 of 8 bytes by task 7157 on cpu 1: [ 90.760791][ T7158] mas_wmb_replace+0x208/0xfa0 [ 90.765565][ T7158] mas_wr_store_entry+0x13e3/0x2750 [ 90.770785][ T7158] mas_store_prealloc+0x760/0xa90 [ 90.775827][ T7158] vma_iter_store_new+0x1c5/0x200 [ 90.780878][ T7158] vma_complete+0x125/0x580 [ 90.785399][ T7158] __split_vma+0x59b/0x660 [ 90.789817][ T7158] vma_modify+0xb53/0xd50 [ 90.794162][ T7158] vma_modify_flags+0x10c/0x190 [ 90.799028][ T7158] mprotect_fixup+0x30f/0x5e0 [ 90.803720][ T7158] do_mprotect_pkey+0x6d6/0x980 [ 90.808573][ T7158] __x64_sys_mprotect+0x48/0x60 [ 90.813430][ T7158] x64_sys_call+0x2c3b/0x3000 [ 90.818113][ T7158] do_syscall_64+0xd8/0x2a0 [ 90.822633][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.828553][ T7158] [ 90.830880][ T7158] read to 0xffff888104d6cc00 of 8 bytes by task 7158 on cpu 0: [ 90.838426][ T7158] mas_state_walk+0x485/0x650 [ 90.843114][ T7158] mas_walk+0x60/0x150 [ 90.847229][ T7158] lock_vma_under_rcu+0x95/0x1b0 [ 90.852176][ T7158] do_user_addr_fault+0x233/0x1080 [ 90.857310][ T7158] exc_page_fault+0x62/0xa0 [ 90.861824][ T7158] asm_exc_page_fault+0x26/0x30 [ 90.866678][ T7158] [ 90.869001][ T7158] value changed: 0xffff88811a7a1481 -> 0xffff888104d6cc00 [ 90.876110][ T7158] [ 90.878438][ T7158] Reported by Kernel Concurrency Sanitizer on: [ 90.884586][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.1510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.894317][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.904375][ T7158] ================================================================== [ 93.324741][ T29] kauditd_printk_skb: 39195 callbacks suppressed [ 93.324829][ T29] audit: type=1400 audit(1765270123.262:51142): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.342005][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.352513][ T29] audit: type=1400 audit(1765270123.272:51143): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.358932][ T3045] audit: audit_lost=2843 audit_rate_limit=0 audit_backlog_limit=64 [ 93.358951][ T3045] audit: backlog limit exceeded [ 93.359592][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.380060][ T29] audit: type=1400 audit(1765270123.272:51144): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.380092][ T29] audit: type=1400 audit(1765270123.272:51145): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.387990][ T3045] audit: audit_lost=2844 audit_rate_limit=0 audit_backlog_limit=64 [ 93.388008][ T3045] audit: backlog limit exceeded [ 98.335233][ T29] kauditd_printk_skb: 51907 callbacks suppressed [ 98.335247][ T29] audit: type=1400 audit(1765270128.272:100248): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 98.351017][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.362812][ T29] audit: type=1400 audit(1765270128.282:100249): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 98.369318][ T3045] audit: audit_lost=3780 audit_rate_limit=0 audit_backlog_limit=64 [ 98.369335][ T3045] audit: backlog limit exceeded [ 98.390505][ T29] audit: type=1400 audit(1765270128.282:100250): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 98.399273][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.403365][ T29] audit: type=1400 audit(1765270128.282:100251): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 98.424591][ T3045] audit: audit_lost=3781 audit_rate_limit=0 audit_backlog_limit=64 [ 98.424653][ T3045] audit: backlog limit exceeded