last executing test programs: 4.776903346s ago: executing program 4 (id=1077): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00'}, 0x18) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 3.917766959s ago: executing program 4 (id=1094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30"], 0x122}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, 0x0, 0x5a, 0x24040890, 0x1}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xc9e7}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="85003544df70b040c458546b962afe000073"], &(0x7f0000000400)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000002000)=""/4096, 0x41000, 0x5b, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x1bc000, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540), &(0x7f0000000580)=[{0x4, 0x2, 0x8, 0x4}, {0x2, 0x5, 0xe, 0x1}, {0x1, 0x2, 0x0, 0xb}, {0x3, 0x3, 0xc}, {0x1, 0x4, 0x8, 0x12}, {0x4, 0x3, 0x10, 0x4}, {0x1, 0x4, 0x5}, {0x1, 0x5, 0xf, 0xb}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) 3.833633181s ago: executing program 4 (id=1098): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa39e675270b98873, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x51) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) preadv(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x4, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) 3.368199098s ago: executing program 3 (id=1104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00'}, 0x18) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 2.894963436s ago: executing program 4 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 2.444225812s ago: executing program 3 (id=1122): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000a80)={@broadcast, @random="6487a2bed3d6", @void, {@llc={0x4, {@snap={0xaa, 0x1, "93", "4b9fa3"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c5"}}}}}}, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 2.119244677s ago: executing program 3 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.117009387s ago: executing program 3 (id=1129): syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x52e, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x3e80}, 0x3) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r5, &(0x7f0000003f80)=""/4101, 0x1005) mkdirat(r5, &(0x7f0000002040)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x301042, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0xfecc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) io_uring_setup(0x758a, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) 1.816742932s ago: executing program 4 (id=1141): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (fail_nth: 12) 1.739769503s ago: executing program 2 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) ioperm(0x9, 0x2, 0x1000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='sched\x00') 1.690653924s ago: executing program 0 (id=1147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (fail_nth: 4) 1.689701834s ago: executing program 0 (id=1148): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000a80)={@broadcast, @random="6487a2bed3d6", @void, {@llc={0x4, {@snap={0xaa, 0x1, "93", "4b9fa3"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c5"}}}}}}, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.687335884s ago: executing program 0 (id=1150): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900ea0073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYBLOB="40973833efbf17dca19a44efed7f23c0d53af5d33024a96fe182f740368fcf5039ae1e056bff3d98de14f779c2ca602ff287f897c577fee84fea50ab145131e3e474e9434c360ba151b9d4108e9306d6bef6561a6101bfdd4a6f25bf99d9fc4f6e4549df87599d9fbcef09775f786e0091a531c86be5591c14ff0fa315692ff0288a59bf85737061028768fc1e0b19127571986cd2dc55d9266f08f3fc3856faee8c2ab7a0c665685497892efb946c1e73ecc941e83b7ad48af85467a8e5989646a6967dc962764a0d1cdc52b5e299d0387d6ced4b7f6c849317724413c7cca778622feafe835570", @ANYRES16=r0, @ANYRES32=r1], 0x0, 0xe555, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1.672774144s ago: executing program 2 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 1.672462364s ago: executing program 4 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.668979794s ago: executing program 1 (id=1153): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r7, 0x0, 0x80001}, 0x18) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) write$selinux_validatetrans(r1, 0x0, 0x79) 1.639299665s ago: executing program 32 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.600309185s ago: executing program 2 (id=1155): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$selinux_user(r2, &(0x7f0000000240)={'system_u:object_r:dhcpd_initrc_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x36) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.599793275s ago: executing program 1 (id=1156): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x40000000, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.571372496s ago: executing program 1 (id=1157): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0c42) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000400000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r3}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x100, 0x103, 0x0, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x2002) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="4dbbb40e0781a6051aee29962feb57b02146a5caa7093230757f53519d95eb414c17a972710b31d07a167b896f39bac70e30736919e1fc9a964a5be28b675ece42853d516d5a56d1d8bb138b2c85664309c9a112686e39e9ced6188aa0d027d09e11f78ec28fc92263bba8c0bc09fba1c429ff5af98b21dbb0cf8d882c0e6c44e0", @ANYRESOCT=r7, @ANYRES16=r4, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0xc087, 0x88f, 0x0, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x2c, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffff8}, {@private=0xa010101, 0xc0}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x28}, {@empty, 0x600}, {@multicast2, 0x478}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xfffffff6}, {@loopback, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x4}]}]}}}}}) 1.155432872s ago: executing program 0 (id=1158): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 1.146591692s ago: executing program 1 (id=1159): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x1, 0x2, 0x3, 0x0, 0xc, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x3a, &(0x7f0000000100)=""/58, 0x41100, 0x4d, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0xc, 0x9, 0xffffffff}, 0x10, 0x10447, 0xffffffffffffffff, 0x6, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x4, 0x1, 0xf, 0xa}, {0x3, 0x2, 0xa, 0x3}, {0x0, 0x5, 0x2, 0x4}, {0x0, 0x5, 0x5, 0x5}, {0x5, 0x4, 0x4, 0xb}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x29, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x2000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x2200, 0x100, 0x35}, 0x18) r5 = open_tree(r4, &(0x7f0000000880)='./file0\x00', 0x8001) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000008c0), 0x0) symlinkat(&(0x7f0000000900)='./file0\x00', r5, &(0x7f0000000940)='./file0\x00') connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @multicast1}, 0x1, 0x3, 0x3}}, 0x26) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}]}, 0x20}, 0x1, 0x0, 0x0, 0x4042}, 0x44000) pread64(r0, &(0x7f0000000c00)=""/77, 0x4d, 0x9) r7 = socket$inet(0x2, 0x3, 0x1000) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000c80)={0x6, 0xf8}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000d00)={0x4, &(0x7f0000000cc0)=[{0x3, 0x81, 0x4, 0x8}, {0xfff9, 0xa9, 0x5}, {0x401, 0x9, 0x8, 0x401}, {0x8, 0xd4, 0x1, 0xc}]}) unlink(&(0x7f0000000d40)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept4$inet(r7, &(0x7f0000000dc0)={0x2, 0x0, @multicast1}, &(0x7f0000000e00)=0x10, 0x0) sendfile(r9, r8, 0x0, 0x7fbf121f) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) setsockopt$inet_buf(r10, 0x0, 0x37, &(0x7f0000000e80)="0aae698e91da39f8d418a5aee1f79b8ba9c29f6daa39e8cb9c25289104e8e358d5b03f1336f968c64f865e48a7e237f4e55998b94417fe51b5269e8fb168a98d3c527b421165179fd96a9845684f450b1e5dac0f4c3dd8c00b0e44ae99c34c0485ab06c72c6c660c99ae04a341ccd69955cd69fe2ff48a33ecc1dabdc5949368ff272d1718a9cb165b6a8f93d98281740918f2c1819d9c0e7caa95d93667eb80e27aa49c1af8ae466e6c139de0d37fb4d4a2ceba94f8aceba32cfdb100f32c612483184c6254b1207fb899d12cc2dfdc96885393df3fe2ed", 0xd8) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000f80)={0x5, 0x4fc7, 0xd, 0x6}, 0x8) dup(r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000fc0)={'vcan0\x00'}) close(0xffffffffffffffff) 1.144989292s ago: executing program 2 (id=1160): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000a80)={@broadcast, @random="6487a2bed3d6", @void, {@llc={0x4, {@snap={0xaa, 0x1, "93", "4b9fa3"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c5"}}}}}}, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.126945772s ago: executing program 3 (id=1161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r6, 0x1}, &(0x7f00000001c0)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 623.246771ms ago: executing program 0 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) iopl(0x3) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x2, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@struct={0x5, 0x5, 0x0, 0x4, 0x0, 0x4, [{0x5, 0x1, 0xffff2c5f}, {0x6, 0x4, 0x3}, {0xb, 0x4, 0x4}, {0x6, 0x0, 0x7}, {0x5, 0x5, 0x4}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f00000004c0)=""/154, 0x64, 0x9a, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e00000004000000050000000000000000500000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0500000000000000020000000500"/28], 0x50) pselect6(0x40, &(0x7f0000000fc0)={0x64, 0x2, 0x1, 0x4, 0x100000000, 0x4, 0x5, 0x5}, &(0x7f0000001000)={0x7, 0x3ff, 0x5, 0x8, 0x10001, 0x1, 0xfffffffffffffff9}, &(0x7f0000001040)={0x100000001, 0x0, 0x3, 0x0, 0x3, 0xe7, 0x3, 0x5a18edee}, &(0x7f0000001080)={0x77359400}, &(0x7f0000001100)={0x0}) 622.591491ms ago: executing program 1 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0xc000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r6, 0x0) listen(r5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 621.948491ms ago: executing program 2 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 1.75454ms ago: executing program 0 (id=1165): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 1.23327ms ago: executing program 1 (id=1166): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x2000000000004}}]}, 0x1, 0x60c, &(0x7f00000005c0)="$eJzs3c9vVNUeAPDvnZmWlvJeC3l57/EWjybGQKK0tIAhxgVsDWnwR9y4sdKCSIGG1mjRhJLgxsS4McbElQvxv1AiW1a6cuHGlSEhaliaOGZu7207nTuFDm0vdj6fZOi599zLObfT75wzZ865E0DXGm78U4nYHxGzScRgsricV4ssc3jpuAe/f3C28UiiXn/l1ySSbF9+fJL9HMhO7ouI779LYl+1tdy5hWsXJ2dmpq9m26Pzl2ZH5xauHb5wafL89Pnpy+PPjZ84fuz4ibEjHV3X9YJ9p2++/e7gRxOvf/XFH8nY1z9NJHEyXswOXH0dm2U4htPfSdKaNXBiswsrSTX7O1n9FCe1EivEhuTPX09E/CcGoxorT95gfPhSqZUDtlQ9iagDXSoR/9Cl8n5A/t5+7fvgSim9EmA73D+1NADQGv+1pbHB6EvHBnY/SGL1sE4SEZ2NzDXbExF370zcPHdn4mZs0TgcUGzxRkT8tyj+kzT+h6IvhtL4rzTFf6NfcCb72dj/coflrx0qFv+wfZbiv69d/PcPpZ/iFcf/G6vi/80Oyx9eSb7V3xT//Z1eEgAAAAAAAHSt26ci4tmiz/8ry/N/omD+z0BEnNyE8ofXbLd+/l+5twnFAAXun4p4oXD+byWf/TtUzVL/SOcD9STnLsxMH4mIf0bEoejZ1dgeW6eMwx/v+7xd3nA2/y9/NMq/m80FzOpxr7ar+ZypyfnJx71uIOL+jYj/tc7/7Vk5oi+d67u2/W+8Hsw+Yhn7nr51pl3ew+Mf2Cr1LyMOFrb/K3etSNa/P8do2h8YzXsFrf7//ifftCu/0/h3iwl4fI32f/f68T+UpB2C7H49cxsv4+hCrd4ur9P+f2/yanrLmd5s33uT8/NXxyJ6k9PVxt6m/eMbrzPsRHk85PHSiP9DT60//lfU/++PiMU1/3fyW/Oa4ty//xz4uV199P+hPI34n1q//U/DfPl+fR0kxm8Nfduu/Edr/4+lbf2hbI/xP1jyWR6mvc37C8KxVpS13fUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ2gEhF7IqmMLKcrlZGRiIGI+FfsrsxcmZt/5tyVdy5PNfLS7/+v5N/0O7i0neTf/z+0ant8zfbRiNgbEZ9W+9PtkbNXZqbKvngAAAAAAAAAAAAAAAAAAAB4Qgy0Wf/f8Es1P6qvxBoCW6pWdgWA0tSyxn+VH8qqC7C9mtv/XaXVA9h++v/QvZbjv6fcegDbT/sP3Uv8Q/cS/9C9xD90L/EPAAAAAAA7yt4Dt39MImLx+f700dCb5ZkNDDtbpewKAKWpll0BoDSm/kD38h4fSJZTxT2CwjuAJs1nbtzs2cc4GQAAAAAAAAAAAAC6zsH91v9Dt7L+H7qX9f/QvfLVfgdKrgew/bzHB+IhK/kL1/8/9CwAAAAAAAAAAAAAYDPNLVy7ODkzM321JRGLEW2ydmbita0sIlmMKPsCWxP1ev1646/gSanP3zyRT4V/UuqzJpGv9Xu0s8p7TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr9FQAA//9dyiGs") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095", @ANYRES64=r0, @ANYRES16=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 820.41µs ago: executing program 2 (id=1167): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x25, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="c6", 0x1}], 0x1}, 0x800) 0s ago: executing program 3 (id=1168): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0c42) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000400000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r3}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x100, 0x103, 0x0, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x2002) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="4dbbb40e0781a6051aee29962feb57b02146a5caa7093230757f53519d95eb414c17a972710b31d07a167b896f39bac70e30736919e1fc9a964a5be28b675ece42853d516d5a56d1d8bb138b2c85664309c9a112686e39e9ced6188aa0d027d09e11f78ec28fc92263bba8c0bc09fba1c429ff5af98b21dbb0cf8d882c0e6c44e0", @ANYRESOCT=r7, @ANYRES16=r4, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0xc087, 0x88f, 0x0, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x2c, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffff8}, {@private=0xa010101, 0xc0}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x28}, {@empty, 0x600}, {@multicast2, 0x478}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xfffffff6}, {@loopback, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x4}]}]}}}}}) kernel console output (not intermixed with test programs): ad_unlock+0x4f/0x70 [ 52.174862][ T4434] ? __rcu_read_unlock+0x4f/0x70 [ 52.174888][ T4434] ? __fget_files+0x184/0x1c0 [ 52.174979][ T4434] ksys_read+0xda/0x1a0 [ 52.175010][ T4434] __x64_sys_read+0x40/0x50 [ 52.175084][ T4434] x64_sys_call+0x2d77/0x2fb0 [ 52.175127][ T4434] do_syscall_64+0xd2/0x200 [ 52.175178][ T4434] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.175207][ T4434] ? clear_bhb_loop+0x40/0x90 [ 52.175233][ T4434] ? clear_bhb_loop+0x40/0x90 [ 52.175308][ T4434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.175334][ T4434] RIP: 0033:0x7f951528d33c [ 52.175353][ T4434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.175447][ T4434] RSP: 002b:00007f95138f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.175466][ T4434] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528d33c [ 52.175481][ T4434] RDX: 000000000000000f RSI: 00007f95138f70a0 RDI: 0000000000000006 [ 52.175497][ T4434] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.175565][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.175576][ T4434] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 52.175672][ T4434] [ 52.426658][ T4436] netlink: 'syz.0.348': attribute type 4 has an invalid length. [ 52.654515][ T4458] FAULT_INJECTION: forcing a failure. [ 52.654515][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 52.668041][ T4458] CPU: 1 UID: 0 PID: 4458 Comm: syz.3.359 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 52.668075][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.668091][ T4458] Call Trace: [ 52.668171][ T4458] [ 52.668181][ T4458] __dump_stack+0x1d/0x30 [ 52.668207][ T4458] dump_stack_lvl+0xe8/0x140 [ 52.668228][ T4458] dump_stack+0x15/0x1b [ 52.668244][ T4458] should_fail_ex+0x265/0x280 [ 52.668282][ T4458] should_failslab+0x8c/0xb0 [ 52.668354][ T4458] kmem_cache_alloc_node_noprof+0x57/0x320 [ 52.668384][ T4458] ? __alloc_skb+0x101/0x320 [ 52.668411][ T4458] __alloc_skb+0x101/0x320 [ 52.668445][ T4458] alloc_uevent_skb+0x5c/0x120 [ 52.668511][ T4458] kobject_uevent_net_broadcast+0xfb/0x410 [ 52.668547][ T4458] kobject_uevent_env+0x43d/0x570 [ 52.668583][ T4458] kobject_uevent+0x1d/0x30 [ 52.668616][ T4458] __kobject_del+0x88/0x190 [ 52.668764][ T4458] kobject_put+0x127/0x190 [ 52.668791][ T4458] net_rx_queue_update_kobjects+0x477/0x520 [ 52.668830][ T4458] netdev_unregister_kobject+0xbf/0x270 [ 52.668931][ T4458] unregister_netdevice_many_notify+0x1292/0x1690 [ 52.668982][ T4458] unregister_netdevice_queue+0x1f5/0x220 [ 52.669024][ T4458] unregister_netdev+0xb3/0xe0 [ 52.669067][ T4458] slip_close+0xe4/0x100 [ 52.669092][ T4458] ? __pfx_slip_close+0x10/0x10 [ 52.669151][ T4458] tty_ldisc_close+0x71/0xa0 [ 52.669184][ T4458] tty_set_ldisc+0x1b9/0x380 [ 52.669212][ T4458] tiocsetd+0x51/0x60 [ 52.669280][ T4458] tty_ioctl+0xa7f/0xb80 [ 52.669308][ T4458] ? __pfx_tty_ioctl+0x10/0x10 [ 52.669398][ T4458] __se_sys_ioctl+0xcb/0x140 [ 52.669426][ T4458] __x64_sys_ioctl+0x43/0x50 [ 52.669453][ T4458] x64_sys_call+0x19a8/0x2fb0 [ 52.669494][ T4458] do_syscall_64+0xd2/0x200 [ 52.669514][ T4458] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.669540][ T4458] ? clear_bhb_loop+0x40/0x90 [ 52.669619][ T4458] ? clear_bhb_loop+0x40/0x90 [ 52.669688][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.669714][ T4458] RIP: 0033:0x7f700145e929 [ 52.669730][ T4458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.669748][ T4458] RSP: 002b:00007f6fffac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.669767][ T4458] RAX: ffffffffffffffda RBX: 00007f7001685fa0 RCX: 00007f700145e929 [ 52.669839][ T4458] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 52.669850][ T4458] RBP: 00007f6fffac7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.669863][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.669874][ T4458] R13: 0000000000000000 R14: 00007f7001685fa0 R15: 00007ffe787f1f08 [ 52.669894][ T4458] [ 52.977257][ T4460] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 52.983884][ T4460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.991606][ T4460] vhci_hcd vhci_hcd.0: Device attached [ 53.003895][ T4458] Falling back ldisc for ttyS3. [ 53.009711][ T4462] vhci_hcd: connection closed [ 53.014185][ T58] vhci_hcd: stop threads [ 53.023238][ T58] vhci_hcd: release socket [ 53.027872][ T58] vhci_hcd: disconnect device [ 53.052715][ T4469] FAULT_INJECTION: forcing a failure. [ 53.052715][ T4469] name failslab, interval 1, probability 0, space 0, times 0 [ 53.065751][ T4469] CPU: 1 UID: 0 PID: 4469 Comm: syz.0.362 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 53.065786][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.065800][ T4469] Call Trace: [ 53.065809][ T4469] [ 53.065819][ T4469] __dump_stack+0x1d/0x30 [ 53.065849][ T4469] dump_stack_lvl+0xe8/0x140 [ 53.065871][ T4469] dump_stack+0x15/0x1b [ 53.065890][ T4469] should_fail_ex+0x265/0x280 [ 53.065929][ T4469] should_failslab+0x8c/0xb0 [ 53.066016][ T4469] __kvmalloc_node_noprof+0x123/0x4e0 [ 53.066052][ T4469] ? xt_alloc_table_info+0x3b/0x80 [ 53.066093][ T4469] ? should_fail_ex+0xdb/0x280 [ 53.066194][ T4469] xt_alloc_table_info+0x3b/0x80 [ 53.066234][ T4469] do_ipt_set_ctl+0x59c/0x820 [ 53.066352][ T4469] ? _raw_spin_unlock_bh+0x36/0x40 [ 53.066382][ T4469] ? tcp_release_cb+0xf1/0x370 [ 53.066428][ T4469] nf_setsockopt+0x196/0x1b0 [ 53.066528][ T4469] ip_setsockopt+0x102/0x110 [ 53.066562][ T4469] ipv6_setsockopt+0xfb/0x130 [ 53.066660][ T4469] tcp_setsockopt+0x95/0xb0 [ 53.066700][ T4469] sock_common_setsockopt+0x69/0x80 [ 53.066837][ T4469] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.066927][ T4469] __sys_setsockopt+0x184/0x200 [ 53.066965][ T4469] __x64_sys_setsockopt+0x64/0x80 [ 53.067067][ T4469] x64_sys_call+0x2bd5/0x2fb0 [ 53.067091][ T4469] do_syscall_64+0xd2/0x200 [ 53.067108][ T4469] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.067138][ T4469] ? clear_bhb_loop+0x40/0x90 [ 53.067161][ T4469] ? clear_bhb_loop+0x40/0x90 [ 53.067185][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.067271][ T4469] RIP: 0033:0x7ffa889ae929 [ 53.067290][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.067307][ T4469] RSP: 002b:00007ffa87017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.067333][ T4469] RAX: ffffffffffffffda RBX: 00007ffa88bd5fa0 RCX: 00007ffa889ae929 [ 53.067344][ T4469] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.067358][ T4469] RBP: 00007ffa87017090 R08: 0000000000000468 R09: 0000000000000000 [ 53.067438][ T4469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.067452][ T4469] R13: 0000000000000000 R14: 00007ffa88bd5fa0 R15: 00007ffefe94b1c8 [ 53.067476][ T4469] [ 53.335983][ T4498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 53.369640][ T4496] netem: change failed [ 53.377835][ T4502] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.403761][ T4502] xt_HMARK: spi-set and port-set can't be combined [ 53.424962][ T4496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.363'. [ 53.482509][ T4509] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 53.498529][ T4509] bond1: entered promiscuous mode [ 53.513271][ T4509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.530889][ T4509] bond1: (slave dummy0): making interface the new active one [ 53.538430][ T4509] dummy0: entered promiscuous mode [ 53.545110][ T4509] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 53.703861][ T4520] Falling back ldisc for ttyS3. [ 53.779675][ T4527] xt_HMARK: spi-set and port-set can't be combined [ 53.915691][ T4530] syz.1.378 (4530) used greatest stack depth: 9776 bytes left [ 54.057238][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 54.071171][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 54.095318][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 54.104560][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 54.161659][ T4546] FAULT_INJECTION: forcing a failure. [ 54.161659][ T4546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.175107][ T4546] CPU: 1 UID: 0 PID: 4546 Comm: syz.1.384 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 54.175133][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.175147][ T4546] Call Trace: [ 54.175153][ T4546] [ 54.175160][ T4546] __dump_stack+0x1d/0x30 [ 54.175185][ T4546] dump_stack_lvl+0xe8/0x140 [ 54.175273][ T4546] dump_stack+0x15/0x1b [ 54.175294][ T4546] should_fail_ex+0x265/0x280 [ 54.175400][ T4546] should_fail+0xb/0x20 [ 54.175492][ T4546] should_fail_usercopy+0x1a/0x20 [ 54.175619][ T4546] _copy_to_iter+0xcf/0xe30 [ 54.175649][ T4546] ? __memcg_slab_free_hook+0xbc/0x230 [ 54.175686][ T4546] ? refill_obj_stock+0x254/0x2e0 [ 54.175722][ T4546] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 54.175794][ T4546] __skb_datagram_iter+0xc6/0x690 [ 54.175826][ T4546] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 54.175918][ T4546] ? __kfree_skb+0x109/0x150 [ 54.175945][ T4546] ? kmem_cache_free+0xdf/0x300 [ 54.175975][ T4546] skb_copy_datagram_iter+0x3d/0x110 [ 54.176142][ T4546] unix_stream_read_actor+0x43/0x70 [ 54.176185][ T4546] unix_stream_read_generic+0x65b/0x13a0 [ 54.176229][ T4546] unix_stream_recvmsg+0xc3/0xf0 [ 54.176254][ T4546] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 54.176285][ T4546] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 54.176381][ T4546] sock_recvmsg+0x136/0x170 [ 54.176408][ T4546] __sys_recvfrom+0x122/0x1f0 [ 54.176467][ T4546] __x64_sys_recvfrom+0x76/0x90 [ 54.176506][ T4546] x64_sys_call+0x1a52/0x2fb0 [ 54.176529][ T4546] do_syscall_64+0xd2/0x200 [ 54.176547][ T4546] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.176668][ T4546] ? clear_bhb_loop+0x40/0x90 [ 54.176696][ T4546] ? clear_bhb_loop+0x40/0x90 [ 54.176725][ T4546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.176788][ T4546] RIP: 0033:0x7f8fc1c2e929 [ 54.176807][ T4546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.176830][ T4546] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 54.176854][ T4546] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 54.176871][ T4546] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000010 [ 54.176886][ T4546] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 54.176901][ T4546] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000002 [ 54.176957][ T4546] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 54.176977][ T4546] [ 54.517617][ T4554] FAULT_INJECTION: forcing a failure. [ 54.517617][ T4554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.531402][ T4554] CPU: 1 UID: 0 PID: 4554 Comm: syz.2.386 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 54.531432][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.531447][ T4554] Call Trace: [ 54.531455][ T4554] [ 54.531465][ T4554] __dump_stack+0x1d/0x30 [ 54.531489][ T4554] dump_stack_lvl+0xe8/0x140 [ 54.531508][ T4554] dump_stack+0x15/0x1b [ 54.531594][ T4554] should_fail_ex+0x265/0x280 [ 54.531683][ T4554] should_fail+0xb/0x20 [ 54.531748][ T4554] should_fail_usercopy+0x1a/0x20 [ 54.531778][ T4554] _copy_from_user+0x1c/0xb0 [ 54.531796][ T4554] ___sys_sendmsg+0xc1/0x1d0 [ 54.531851][ T4554] __x64_sys_sendmsg+0xd4/0x160 [ 54.532033][ T4554] x64_sys_call+0x2999/0x2fb0 [ 54.532066][ T4554] do_syscall_64+0xd2/0x200 [ 54.532110][ T4554] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.532135][ T4554] ? clear_bhb_loop+0x40/0x90 [ 54.532233][ T4554] ? clear_bhb_loop+0x40/0x90 [ 54.532260][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.532303][ T4554] RIP: 0033:0x7f951528e929 [ 54.532320][ T4554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.532341][ T4554] RSP: 002b:00007f95138f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.532385][ T4554] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528e929 [ 54.532465][ T4554] RDX: 00000000200c4004 RSI: 0000200000000580 RDI: 0000000000000007 [ 54.532543][ T4554] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.532558][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.532573][ T4554] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 54.532596][ T4554] [ 54.749363][ T4556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 54.756057][ T4556] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.763575][ T4556] vhci_hcd vhci_hcd.0: Device attached [ 54.794560][ T4557] vhci_hcd: connection closed [ 54.799485][ T37] vhci_hcd: stop threads [ 54.809132][ T37] vhci_hcd: release socket [ 54.813937][ T37] vhci_hcd: disconnect device [ 54.900916][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 54.976650][ T4568] vxcan1 speed is unknown, defaulting to 1000 [ 55.020409][ T4568] lo speed is unknown, defaulting to 1000 [ 55.318503][ T4585] netlink: 18 bytes leftover after parsing attributes in process `syz.1.396'. [ 55.348864][ T4585] xt_hashlimit: size too large, truncated to 1048576 [ 55.356467][ T4585] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 55.377096][ T4591] @: renamed from vlan0 (while UP) [ 55.741486][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 55.741504][ T29] audit: type=1400 audit(1752594457.634:1112): avc: denied { lock } for pid=4621 comm="syz.2.409" path="socket:[7927]" dev="sockfs" ino=7927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.757234][ T4617] random: crng reseeded on system resumption [ 55.765843][ T4622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=4622 comm=syz.2.409 [ 55.765960][ T4622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4622 comm=syz.2.409 [ 55.950863][ T4634] FAULT_INJECTION: forcing a failure. [ 55.950863][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.950890][ T4634] CPU: 1 UID: 0 PID: 4634 Comm: syz.3.415 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 55.950918][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.950933][ T4634] Call Trace: [ 55.950942][ T4634] [ 55.950951][ T4634] __dump_stack+0x1d/0x30 [ 55.950977][ T4634] dump_stack_lvl+0xe8/0x140 [ 55.951054][ T4634] dump_stack+0x15/0x1b [ 55.951075][ T4634] should_fail_ex+0x265/0x280 [ 55.951109][ T4634] should_fail+0xb/0x20 [ 55.951137][ T4634] should_fail_usercopy+0x1a/0x20 [ 55.951219][ T4634] copy_fpstate_to_sigframe+0x628/0x7d0 [ 55.951257][ T4634] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 55.951320][ T4634] ? kmem_cache_free+0xdf/0x300 [ 55.951344][ T4634] ? x86_task_fpu+0x36/0x60 [ 55.951370][ T4634] get_sigframe+0x34d/0x490 [ 55.951391][ T4634] ? get_signal+0xdc8/0xf70 [ 55.951485][ T4634] x64_setup_rt_frame+0xa8/0x580 [ 55.951511][ T4634] arch_do_signal_or_restart+0x27c/0x480 [ 55.951542][ T4634] irqentry_exit_to_user_mode+0x5e/0xa0 [ 55.951578][ T4634] irqentry_exit+0x12/0x50 [ 55.951652][ T4634] exc_general_protection+0x15b/0x1f0 [ 55.951691][ T4634] asm_exc_general_protection+0x26/0x30 [ 55.951721][ T4634] RIP: 0033:0x7f7001437479 [ 55.951741][ T4634] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 55.951800][ T4634] RSP: 002b:00007f6fffac67c8 EFLAGS: 00010283 [ 55.951873][ T4634] RAX: 0000000000000999 RBX: 00007f6fffac6d30 RCX: 00007f7001646120 [ 55.951890][ T4634] RDX: 9999999999999999 RSI: 00007f70014e083c RDI: 9999999999999999 [ 55.951907][ T4634] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 55.951922][ T4634] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 55.951939][ T4634] R13: 00007f6fffac6eb0 R14: 9999999999999999 R15: 0000000000000000 [ 55.951965][ T4634] [ 56.361383][ T4648] batman_adv: batadv0: Adding interface: ipvlan2 [ 56.368083][ T4648] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.396557][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.408267][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.420294][ T4648] batman_adv: batadv0: Interface activated: ipvlan2 [ 56.672306][ T4650] syzkaller0: entered allmulticast mode [ 56.745200][ T4650] syzkaller0: entered promiscuous mode [ 56.755592][ T4650] syzkaller0 (unregistering): left allmulticast mode [ 56.763406][ T4650] syzkaller0 (unregistering): left promiscuous mode [ 56.845324][ T29] audit: type=1400 audit(1752594458.744:1113): avc: denied { bind } for pid=4662 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.891215][ T29] audit: type=1400 audit(1752594458.764:1114): avc: denied { setopt } for pid=4662 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.912226][ T29] audit: type=1400 audit(1752594458.764:1115): avc: denied { write } for pid=4662 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.071349][ T4672] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.081648][ T4672] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.092823][ T4672] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.104123][ T4672] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.143739][ T4672] vxlan0: entered promiscuous mode [ 57.227036][ T29] audit: type=1326 audit(1752594459.124:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 57.252055][ T29] audit: type=1326 audit(1752594459.124:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 57.280250][ T4678] sd 0:0:1:0: device reset [ 57.285967][ T29] audit: type=1326 audit(1752594459.174:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fc1c2d290 code=0x7ffc0000 [ 57.310871][ T29] audit: type=1326 audit(1752594459.174:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 57.336837][ T29] audit: type=1326 audit(1752594459.174:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 57.362962][ T29] audit: type=1326 audit(1752594459.174:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 57.419778][ T4680] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 57.426854][ T4680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.434570][ T4680] vhci_hcd vhci_hcd.0: Device attached [ 57.473778][ T4682] vhci_hcd: connection closed [ 57.474352][ T37] vhci_hcd: stop threads [ 57.483914][ T37] vhci_hcd: release socket [ 57.488710][ T37] vhci_hcd: disconnect device [ 57.612850][ T4694] __nla_validate_parse: 5 callbacks suppressed [ 57.612870][ T4694] netlink: 14 bytes leftover after parsing attributes in process `syz.4.431'. [ 57.796567][ T4703] FAULT_INJECTION: forcing a failure. [ 57.796567][ T4703] name failslab, interval 1, probability 0, space 0, times 0 [ 57.809868][ T4703] CPU: 1 UID: 0 PID: 4703 Comm: syz.4.436 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 57.809900][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.809916][ T4703] Call Trace: [ 57.809927][ T4703] [ 57.809937][ T4703] __dump_stack+0x1d/0x30 [ 57.809966][ T4703] dump_stack_lvl+0xe8/0x140 [ 57.810002][ T4703] dump_stack+0x15/0x1b [ 57.810025][ T4703] should_fail_ex+0x265/0x280 [ 57.810064][ T4703] ? alloc_pipe_info+0xae/0x350 [ 57.810134][ T4703] should_failslab+0x8c/0xb0 [ 57.810208][ T4703] __kmalloc_cache_noprof+0x4c/0x320 [ 57.810244][ T4703] alloc_pipe_info+0xae/0x350 [ 57.810324][ T4703] splice_direct_to_actor+0x592/0x680 [ 57.810361][ T4703] ? kstrtouint_from_user+0x9f/0xf0 [ 57.810394][ T4703] ? __pfx_direct_splice_actor+0x10/0x10 [ 57.810477][ T4703] ? __rcu_read_unlock+0x4f/0x70 [ 57.810498][ T4703] ? get_pid_task+0x96/0xd0 [ 57.810517][ T4703] ? avc_policy_seqno+0x15/0x30 [ 57.810548][ T4703] ? selinux_file_permission+0x1e4/0x320 [ 57.810638][ T4703] do_splice_direct+0xda/0x150 [ 57.810664][ T4703] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 57.810779][ T4703] do_sendfile+0x380/0x650 [ 57.810811][ T4703] __x64_sys_sendfile64+0x105/0x150 [ 57.810846][ T4703] x64_sys_call+0xb39/0x2fb0 [ 57.810870][ T4703] do_syscall_64+0xd2/0x200 [ 57.810887][ T4703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.810919][ T4703] ? clear_bhb_loop+0x40/0x90 [ 57.811020][ T4703] ? clear_bhb_loop+0x40/0x90 [ 57.811055][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.811100][ T4703] RIP: 0033:0x7f254976e929 [ 57.811118][ T4703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.811140][ T4703] RSP: 002b:00007f2547dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 57.811162][ T4703] RAX: ffffffffffffffda RBX: 00007f2549995fa0 RCX: 00007f254976e929 [ 57.811178][ T4703] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 57.811192][ T4703] RBP: 00007f2547dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.811207][ T4703] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.811221][ T4703] R13: 0000000000000000 R14: 00007f2549995fa0 R15: 00007ffd562807c8 [ 57.811252][ T4703] [ 58.181447][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 58.278198][ T4727] Driver unsupported XDP return value 0 on prog (id 303) dev N/A, expect packet loss! [ 58.420999][ T4743] vxcan1 speed is unknown, defaulting to 1000 [ 58.482173][ T4743] lo speed is unknown, defaulting to 1000 [ 58.587949][ T4749] FAULT_INJECTION: forcing a failure. [ 58.587949][ T4749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.604843][ T4749] CPU: 1 UID: 0 PID: 4749 Comm: syz.1.455 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 58.604981][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.604996][ T4749] Call Trace: [ 58.605003][ T4749] [ 58.605015][ T4749] __dump_stack+0x1d/0x30 [ 58.605075][ T4749] dump_stack_lvl+0xe8/0x140 [ 58.605160][ T4749] dump_stack+0x15/0x1b [ 58.605251][ T4749] should_fail_ex+0x265/0x280 [ 58.605300][ T4749] should_fail_alloc_page+0xf2/0x100 [ 58.605329][ T4749] __alloc_frozen_pages_noprof+0xff/0x360 [ 58.605398][ T4749] alloc_pages_mpol+0xb3/0x250 [ 58.605430][ T4749] folio_alloc_mpol_noprof+0x39/0x80 [ 58.605468][ T4749] shmem_get_folio_gfp+0x3cf/0xd60 [ 58.605504][ T4749] ? simple_xattr_get+0xb9/0x120 [ 58.605582][ T4749] shmem_write_begin+0xa8/0x190 [ 58.605622][ T4749] generic_perform_write+0x181/0x490 [ 58.605725][ T4749] shmem_file_write_iter+0xc5/0xf0 [ 58.605755][ T4749] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 58.605775][ T4749] vfs_write+0x49d/0x8e0 [ 58.605815][ T4749] ksys_write+0xda/0x1a0 [ 58.605935][ T4749] __x64_sys_write+0x40/0x50 [ 58.605986][ T4749] x64_sys_call+0x2cdd/0x2fb0 [ 58.606048][ T4749] do_syscall_64+0xd2/0x200 [ 58.606067][ T4749] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.606154][ T4749] ? clear_bhb_loop+0x40/0x90 [ 58.606180][ T4749] ? clear_bhb_loop+0x40/0x90 [ 58.606246][ T4749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.606273][ T4749] RIP: 0033:0x7f8fc1c2e929 [ 58.606291][ T4749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.606413][ T4749] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.606501][ T4749] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 58.606517][ T4749] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000009 [ 58.606532][ T4749] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 58.606543][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.606556][ T4749] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 58.606580][ T4749] [ 58.998797][ T4757] random: crng reseeded on system resumption [ 59.326701][ T4788] syzkaller1: entered promiscuous mode [ 59.332623][ T4788] syzkaller1: entered allmulticast mode [ 59.473049][ T4767] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 59.485547][ T4799] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 59.556533][ T4801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.705274][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 59.748233][ T4822] netlink: 'syz.3.486': attribute type 7 has an invalid length. [ 59.756089][ T4822] netlink: 'syz.3.486': attribute type 8 has an invalid length. [ 59.878264][ T4825] vxcan1 speed is unknown, defaulting to 1000 [ 59.959074][ T4831] netlink: 68 bytes leftover after parsing attributes in process `syz.4.488'. [ 59.970018][ T4831] netlink: 232 bytes leftover after parsing attributes in process `syz.4.488'. [ 59.995673][ T4825] lo speed is unknown, defaulting to 1000 [ 60.089080][ T4836] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 60.095672][ T4837] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 60.095828][ T4836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.096077][ T4836] vhci_hcd vhci_hcd.0: Device attached [ 60.102430][ T4837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.122827][ T4837] vhci_hcd vhci_hcd.0: Device attached [ 60.149276][ T4838] vhci_hcd: connection closed [ 60.149581][ T328] vhci_hcd: stop threads [ 60.154770][ T4840] vhci_hcd: connection closed [ 60.158710][ T328] vhci_hcd: release socket [ 60.158728][ T328] vhci_hcd: disconnect device [ 60.184795][ T328] vhci_hcd: stop threads [ 60.189838][ T328] vhci_hcd: release socket [ 60.194498][ T328] vhci_hcd: disconnect device [ 60.627949][ T4862] FAULT_INJECTION: forcing a failure. [ 60.627949][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 60.641789][ T4862] CPU: 0 UID: 0 PID: 4862 Comm: ,:/.}& Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 60.641826][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.641842][ T4862] Call Trace: [ 60.641850][ T4862] [ 60.641912][ T4862] __dump_stack+0x1d/0x30 [ 60.641936][ T4862] dump_stack_lvl+0xe8/0x140 [ 60.642220][ T4862] dump_stack+0x15/0x1b [ 60.642306][ T4862] should_fail_ex+0x265/0x280 [ 60.642346][ T4862] should_failslab+0x8c/0xb0 [ 60.642388][ T4862] kmem_cache_alloc_noprof+0x50/0x310 [ 60.642430][ T4862] ? audit_log_start+0x365/0x6c0 [ 60.642470][ T4862] audit_log_start+0x365/0x6c0 [ 60.642505][ T4862] ? __list_add_valid_or_report+0x38/0xe0 [ 60.642535][ T4862] audit_seccomp+0x48/0x100 [ 60.642694][ T4862] ? __seccomp_filter+0x68c/0x10d0 [ 60.642720][ T4862] __seccomp_filter+0x69d/0x10d0 [ 60.642748][ T4862] ? __rcu_read_unlock+0x4f/0x70 [ 60.642897][ T4862] ? do_io_getevents+0x332/0x400 [ 60.642923][ T4862] ? __pfx_autoremove_wake_function+0x10/0x10 [ 60.642985][ T4862] __secure_computing+0x82/0x150 [ 60.643012][ T4862] syscall_trace_enter+0xcf/0x1e0 [ 60.643043][ T4862] do_syscall_64+0xac/0x200 [ 60.643166][ T4862] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.643266][ T4862] ? clear_bhb_loop+0x40/0x90 [ 60.643293][ T4862] ? clear_bhb_loop+0x40/0x90 [ 60.643319][ T4862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.643354][ T4862] RIP: 0033:0x7f951528d33c [ 60.643408][ T4862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.643438][ T4862] RSP: 002b:00007f95138f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.643463][ T4862] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528d33c [ 60.643479][ T4862] RDX: 000000000000000f RSI: 00007f95138f70a0 RDI: 0000000000000003 [ 60.643495][ T4862] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.643507][ T4862] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 60.643521][ T4862] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 60.643589][ T4862] [ 60.863265][ T4862] audit_log_lost: 142 callbacks suppressed [ 60.863332][ T4862] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 60.877896][ T4862] audit: out of memory in audit_log_start [ 60.886533][ T29] audit: type=1326 audit(1752594462.784:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4861 comm=",:/.}&" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f951528d3df code=0x7ffc0000 [ 60.910666][ T29] audit: type=1326 audit(1752594462.784:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4861 comm=",:/.}&" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f951528d58a code=0x7ffc0000 [ 60.936129][ T29] audit: type=1326 audit(1752594462.784:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4861 comm=",:/.}&" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 60.965961][ T29] audit: type=1326 audit(1752594462.784:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4861 comm=",:/.}&" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 61.023500][ T29] audit: type=1400 audit(1752594462.914:1268): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.108036][ T4878] netlink: 14 bytes leftover after parsing attributes in process `syz.3.502'. [ 61.128938][ T4878] hsr_slave_0: left promiscuous mode [ 61.142765][ T4878] hsr_slave_1: left promiscuous mode [ 61.199621][ T4884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.510'. [ 61.209895][ T4888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 61.224068][ T4890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.510'. [ 61.262571][ T4884] x_tables: duplicate underflow at hook 2 [ 61.339466][ T2996] udevd[2996]: worker [3522] terminated by signal 33 (Unknown signal 33) [ 61.352174][ T4893] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 61.355945][ T29] audit: type=1400 audit(1752594463.244:1269): avc: denied { bind } for pid=4892 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.381255][ T29] audit: type=1400 audit(1752594463.254:1270): avc: denied { create } for pid=4894 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.412211][ T29] audit: type=1326 audit(1752594463.304:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70014558e7 code=0x7ffc0000 [ 61.432601][ T4893] bond0: (slave bond_slave_0): Releasing backup interface [ 61.442919][ T4895] FAULT_INJECTION: forcing a failure. [ 61.442919][ T4895] name failslab, interval 1, probability 0, space 0, times 0 [ 61.442958][ T4895] CPU: 0 UID: 0 PID: 4895 Comm: syz.1.513 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 61.442994][ T4895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.443010][ T4895] Call Trace: [ 61.443019][ T4895] [ 61.443030][ T4895] __dump_stack+0x1d/0x30 [ 61.443072][ T4895] dump_stack_lvl+0xe8/0x140 [ 61.443099][ T4895] dump_stack+0x15/0x1b [ 61.443121][ T4895] should_fail_ex+0x265/0x280 [ 61.443163][ T4895] should_failslab+0x8c/0xb0 [ 61.443236][ T4895] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 61.443306][ T4895] ? __request_module+0x1c4/0x3e0 [ 61.443356][ T4895] ? __request_module+0x1df/0x3e0 [ 61.443384][ T4895] ? should_failslab+0x8c/0xb0 [ 61.443414][ T4895] kstrdup+0x3e/0xd0 [ 61.443448][ T4895] __request_module+0x1df/0x3e0 [ 61.443479][ T4895] ? capable+0x7c/0xb0 [ 61.443510][ T4895] dev_load+0x61/0xc0 [ 61.443608][ T4895] dev_ioctl+0x4fe/0x960 [ 61.443633][ T4895] sock_do_ioctl+0x197/0x220 [ 61.443665][ T4895] sock_ioctl+0x41b/0x610 [ 61.443691][ T4895] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 61.443789][ T4895] ? __pfx_sock_ioctl+0x10/0x10 [ 61.443817][ T4895] __se_sys_ioctl+0xcb/0x140 [ 61.443855][ T4895] __x64_sys_ioctl+0x43/0x50 [ 61.443970][ T4895] x64_sys_call+0x19a8/0x2fb0 [ 61.443998][ T4895] do_syscall_64+0xd2/0x200 [ 61.444119][ T4895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.444152][ T4895] ? clear_bhb_loop+0x40/0x90 [ 61.444182][ T4895] ? clear_bhb_loop+0x40/0x90 [ 61.444211][ T4895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.444246][ T4895] RIP: 0033:0x7f8fc1c2e929 [ 61.444267][ T4895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.444292][ T4895] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.444318][ T4895] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 61.444340][ T4895] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000007 [ 61.444375][ T4895] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 61.444391][ T4895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.444408][ T4895] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 61.444435][ T4895] [ 61.551092][ T4897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 61.704663][ T4897] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.713834][ T4897] vhci_hcd vhci_hcd.0: Device attached [ 61.725548][ T4900] vhci_hcd: connection closed [ 61.725844][ T58] vhci_hcd: stop threads [ 61.735082][ T58] vhci_hcd: release socket [ 61.739643][ T58] vhci_hcd: disconnect device [ 61.964980][ T3385] IPVS: starting estimator thread 0... [ 62.084653][ T4914] IPVS: using max 2352 ests per chain, 117600 per kthread [ 62.386637][ T4938] netem: incorrect ge model size [ 62.391760][ T4938] netem: change failed [ 62.407273][ T4942] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 62.417051][ T4942] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.425010][ T4942] vhci_hcd vhci_hcd.0: Device attached [ 62.444214][ T4943] vhci_hcd: connection closed [ 62.445307][ T328] vhci_hcd: stop threads [ 62.455219][ T328] vhci_hcd: release socket [ 62.455229][ T328] vhci_hcd: disconnect device [ 62.841756][ T4964] random: crng reseeded on system resumption [ 63.090325][ T4974] vxcan1 speed is unknown, defaulting to 1000 [ 63.127934][ T4974] lo speed is unknown, defaulting to 1000 [ 63.332110][ T4987] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.413776][ T4987] __nla_validate_parse: 1 callbacks suppressed [ 63.413795][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.429850][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.469578][ T4990] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 63.550765][ T4993] vxcan1 speed is unknown, defaulting to 1000 [ 63.687836][ T4993] lo speed is unknown, defaulting to 1000 [ 63.910885][ T5015] FAULT_INJECTION: forcing a failure. [ 63.910885][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 63.924445][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.2.558 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 63.924523][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.924538][ T5015] Call Trace: [ 63.924547][ T5015] [ 63.924557][ T5015] __dump_stack+0x1d/0x30 [ 63.924578][ T5015] dump_stack_lvl+0xe8/0x140 [ 63.924596][ T5015] dump_stack+0x15/0x1b [ 63.924611][ T5015] should_fail_ex+0x265/0x280 [ 63.924649][ T5015] should_failslab+0x8c/0xb0 [ 63.924674][ T5015] kmem_cache_alloc_noprof+0x50/0x310 [ 63.924705][ T5015] ? dst_alloc+0xbd/0x100 [ 63.924807][ T5015] dst_alloc+0xbd/0x100 [ 63.924836][ T5015] ip_route_output_key_hash_rcu+0xf16/0x1440 [ 63.924871][ T5015] ip_route_output_flow+0x7b/0x130 [ 63.924948][ T5015] udp_sendmsg+0x1197/0x13b0 [ 63.924974][ T5015] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 63.925006][ T5015] ? avc_has_perm+0xd3/0x150 [ 63.925046][ T5015] ? __pfx_udp_sendmsg+0x10/0x10 [ 63.925066][ T5015] inet_sendmsg+0xac/0xd0 [ 63.925140][ T5015] __sock_sendmsg+0x102/0x180 [ 63.925169][ T5015] ____sys_sendmsg+0x345/0x4e0 [ 63.925270][ T5015] ___sys_sendmsg+0x17b/0x1d0 [ 63.925327][ T5015] __sys_sendmmsg+0x178/0x300 [ 63.925369][ T5015] __x64_sys_sendmmsg+0x57/0x70 [ 63.925458][ T5015] x64_sys_call+0x2f2f/0x2fb0 [ 63.925484][ T5015] do_syscall_64+0xd2/0x200 [ 63.925501][ T5015] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.925571][ T5015] ? clear_bhb_loop+0x40/0x90 [ 63.925591][ T5015] ? clear_bhb_loop+0x40/0x90 [ 63.925612][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.925679][ T5015] RIP: 0033:0x7f951528e929 [ 63.925698][ T5015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.925725][ T5015] RSP: 002b:00007f95138f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 63.925780][ T5015] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528e929 [ 63.925796][ T5015] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 63.925820][ T5015] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.925832][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.925843][ T5015] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 63.925963][ T5015] [ 64.227321][ T5001] random: crng reseeded on system resumption [ 64.492407][ T5057] No such timeout policy "syz1" [ 64.646144][ T5065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.668392][ T5065] @: renamed from vlan0 (while UP) [ 64.768114][ T5063] random: crng reseeded on system resumption [ 64.845964][ T5079] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 64.852732][ T5079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.860454][ T5079] vhci_hcd vhci_hcd.0: Device attached [ 64.881096][ T5083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 64.887734][ T5083] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.895268][ T5083] vhci_hcd vhci_hcd.0: Device attached [ 64.899265][ T5080] vhci_hcd: connection closed [ 64.901198][ T328] vhci_hcd: stop threads [ 64.907554][ T5084] vhci_hcd: connection closed [ 64.910225][ T328] vhci_hcd: release socket [ 64.910239][ T328] vhci_hcd: disconnect device [ 64.925410][ T328] vhci_hcd: stop threads [ 64.929700][ T328] vhci_hcd: release socket [ 64.934424][ T328] vhci_hcd: disconnect device [ 64.993106][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 65.046051][ T5091] No such timeout policy "syz1" [ 65.070099][ T5093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=5093 comm=syz.4.588 [ 65.445066][ T5106] FAULT_INJECTION: forcing a failure. [ 65.445066][ T5106] name failslab, interval 1, probability 0, space 0, times 0 [ 65.458799][ T5106] CPU: 1 UID: 0 PID: 5106 Comm: syz.3.593 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 65.458835][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.458851][ T5106] Call Trace: [ 65.458858][ T5106] [ 65.458868][ T5106] __dump_stack+0x1d/0x30 [ 65.458893][ T5106] dump_stack_lvl+0xe8/0x140 [ 65.458917][ T5106] dump_stack+0x15/0x1b [ 65.458940][ T5106] should_fail_ex+0x265/0x280 [ 65.458969][ T5106] should_failslab+0x8c/0xb0 [ 65.458991][ T5106] __kmalloc_noprof+0xa5/0x3e0 [ 65.459021][ T5106] ? sock_kmalloc+0x85/0xc0 [ 65.459083][ T5106] ? iovec_from_user+0x179/0x210 [ 65.459109][ T5106] sock_kmalloc+0x85/0xc0 [ 65.459126][ T5106] ____sys_sendmsg+0xf8/0x4e0 [ 65.459161][ T5106] ___sys_sendmsg+0x17b/0x1d0 [ 65.459246][ T5106] __x64_sys_sendmsg+0xd4/0x160 [ 65.459291][ T5106] x64_sys_call+0x2999/0x2fb0 [ 65.459316][ T5106] do_syscall_64+0xd2/0x200 [ 65.459384][ T5106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.459414][ T5106] ? clear_bhb_loop+0x40/0x90 [ 65.459516][ T5106] ? clear_bhb_loop+0x40/0x90 [ 65.459564][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.459591][ T5106] RIP: 0033:0x7f700145e929 [ 65.459610][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.459627][ T5106] RSP: 002b:00007f6fffac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.459645][ T5106] RAX: ffffffffffffffda RBX: 00007f7001685fa0 RCX: 00007f700145e929 [ 65.459657][ T5106] RDX: 0000000000040010 RSI: 0000200000000080 RDI: 0000000000000003 [ 65.459697][ T5106] RBP: 00007f6fffac7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.459712][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.459726][ T5106] R13: 0000000000000000 R14: 00007f7001685fa0 R15: 00007ffe787f1f08 [ 65.459744][ T5106] [ 65.732454][ T5111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=86 sclass=netlink_tcpdiag_socket pid=5111 comm=syz.1.595 [ 65.866465][ T5129] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 65.873124][ T5132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=5132 comm=syz.3.603 [ 65.874606][ T5129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.874702][ T5129] vhci_hcd vhci_hcd.0: Device attached [ 65.923871][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 65.923890][ T29] audit: type=1326 audit(1752594467.824:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5128 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fc1c2d58a code=0x7ffc0000 [ 65.928399][ T5134] vhci_hcd: connection closed [ 65.930455][ T29] audit: type=1326 audit(1752594467.824:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5128 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 65.985960][ T29] audit: type=1326 audit(1752594467.824:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5128 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc1c2e929 code=0x7ffc0000 [ 65.987014][ T31] vhci_hcd: stop threads [ 66.016590][ T31] vhci_hcd: release socket [ 66.021233][ T31] vhci_hcd: disconnect device [ 66.058736][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.079698][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.100195][ T5147] 9pnet_fd: Insufficient options for proto=fd [ 66.180606][ T29] audit: type=1400 audit(1752594468.074:1649): avc: denied { create } for pid=5144 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.806545][ T5241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=5241 comm=syz.1.616 [ 67.517577][ T29] audit: type=1400 audit(1752594469.414:1650): avc: denied { read } for pid=2981 comm="acpid" name="mouse7" dev="devtmpfs" ino=634 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 67.540275][ T29] audit: type=1400 audit(1752594469.414:1651): avc: denied { open } for pid=2981 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=634 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 67.564072][ T29] audit: type=1400 audit(1752594469.414:1652): avc: denied { ioctl } for pid=2981 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=634 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 67.636776][ T29] audit: type=1400 audit(1752594469.504:1653): avc: denied { ioctl } for pid=5328 comm="syz.3.622" path="socket:[9959]" dev="sockfs" ino=9959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.712634][ T5341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.627'. [ 67.841111][ T5348] netlink: 14 bytes leftover after parsing attributes in process `syz.3.628'. [ 68.056380][ T5362] sch_tbf: peakrate 5 is lower than or equals to rate 3221225473 ! [ 68.158842][ T5376] SELinux: policydb version -80117988 does not match my version range 15-34 [ 68.168733][ T5376] SELinux: failed to load policy [ 68.175522][ T5374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.639'. [ 68.177078][ T29] audit: type=1400 audit(1752594470.054:1654): avc: denied { load_policy } for pid=5375 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.261856][ T29] audit: type=1400 audit(1752594470.154:1655): avc: denied { connect } for pid=5381 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.374563][ T5389] syz.3.646 (5389) used greatest stack depth: 9632 bytes left [ 68.660803][ T5408] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 68.667521][ T5408] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.675801][ T5408] vhci_hcd vhci_hcd.0: Device attached [ 68.692106][ T5409] vhci_hcd: connection closed [ 68.692589][ T37] vhci_hcd: stop threads [ 68.703065][ T37] vhci_hcd: release socket [ 68.707554][ T37] vhci_hcd: disconnect device [ 68.985743][ T5419] netlink: 14 bytes leftover after parsing attributes in process `syz.4.656'. [ 69.267119][ T5444] netlink: 'syz.0.666': attribute type 21 has an invalid length. [ 69.283717][ T5444] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 69.291840][ T5444] netlink: 144 bytes leftover after parsing attributes in process `syz.0.666'. [ 69.330052][ T5444] pim6reg: entered allmulticast mode [ 69.351272][ T5444] pim6reg: left allmulticast mode [ 69.499234][ T5456] Invalid ELF header magic: != ELF [ 69.628820][ T5468] netlink: 14 bytes leftover after parsing attributes in process `syz.4.673'. [ 69.777935][ T5495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.686'. [ 69.926923][ T5510] netlink: 14 bytes leftover after parsing attributes in process `syz.1.694'. [ 70.042375][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 70.157266][ T5532] netlink: 2 bytes leftover after parsing attributes in process `syz.0.701'. [ 70.166151][ T5525] vxcan1 speed is unknown, defaulting to 1000 [ 70.247583][ T5525] lo speed is unknown, defaulting to 1000 [ 70.250673][ T5536] vxcan1 speed is unknown, defaulting to 1000 [ 70.382761][ T5536] lo speed is unknown, defaulting to 1000 [ 70.446921][ T5559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'. [ 70.469606][ T5560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 70.477353][ T5560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.485754][ T5560] vhci_hcd vhci_hcd.0: Device attached [ 70.594101][ T5562] vhci_hcd: connection closed [ 70.623518][ T51] vhci_hcd: stop threads [ 70.636140][ T51] vhci_hcd: release socket [ 70.641438][ T51] vhci_hcd: disconnect device [ 70.673735][ T3406] vhci_hcd: vhci_device speed not set [ 70.703750][ T5573] netlink: 96 bytes leftover after parsing attributes in process `syz.2.717'. [ 70.955130][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 70.955149][ T29] audit: type=1400 audit(1752594472.854:1777): avc: denied { create } for pid=5584 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 70.980799][ T5585] vxcan1 speed is unknown, defaulting to 1000 [ 70.983563][ T29] audit: type=1400 audit(1752594472.854:1778): avc: denied { sys_admin } for pid=5584 comm="syz.0.723" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 71.058677][ T5585] lo speed is unknown, defaulting to 1000 [ 71.160632][ T29] audit: type=1400 audit(1752594473.054:1779): avc: denied { write } for pid=5593 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.343060][ T5605] vxcan1 speed is unknown, defaulting to 1000 [ 71.416422][ T5605] lo speed is unknown, defaulting to 1000 [ 71.679272][ T5610] netlink: 14 bytes leftover after parsing attributes in process `syz.4.732'. [ 71.817341][ T5632] FAULT_INJECTION: forcing a failure. [ 71.817341][ T5632] name failslab, interval 1, probability 0, space 0, times 0 [ 71.831117][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz.1.737 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 71.831154][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.831170][ T5632] Call Trace: [ 71.831178][ T5632] [ 71.831188][ T5632] __dump_stack+0x1d/0x30 [ 71.831222][ T5632] dump_stack_lvl+0xe8/0x140 [ 71.831246][ T5632] dump_stack+0x15/0x1b [ 71.831298][ T5632] should_fail_ex+0x265/0x280 [ 71.831415][ T5632] should_failslab+0x8c/0xb0 [ 71.831444][ T5632] kmem_cache_alloc_noprof+0x50/0x310 [ 71.831495][ T5632] ? inet_bind_bucket_create+0x2e/0x100 [ 71.831610][ T5632] inet_bind_bucket_create+0x2e/0x100 [ 71.831649][ T5632] inet_csk_get_port+0x985/0x1070 [ 71.831700][ T5632] __inet6_bind+0x792/0x8b0 [ 71.831743][ T5632] inet6_bind+0x98/0xb0 [ 71.831779][ T5632] __sys_bind+0x1ce/0x2a0 [ 71.831819][ T5632] __x64_sys_bind+0x3f/0x50 [ 71.831871][ T5632] x64_sys_call+0x2086/0x2fb0 [ 71.831896][ T5632] do_syscall_64+0xd2/0x200 [ 71.831975][ T5632] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.832052][ T5632] ? clear_bhb_loop+0x40/0x90 [ 71.832074][ T5632] ? clear_bhb_loop+0x40/0x90 [ 71.832096][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.832118][ T5632] RIP: 0033:0x7f8fc1c2e929 [ 71.832141][ T5632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.832159][ T5632] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 71.832178][ T5632] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 71.832190][ T5632] RDX: 000000000000001c RSI: 0000200000000280 RDI: 0000000000000003 [ 71.832202][ T5632] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 71.832238][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.832250][ T5632] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 71.832270][ T5632] [ 72.787140][ T29] audit: type=1404 audit(1752594474.674:1780): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 72.803996][ T29] audit: type=1404 audit(1752594474.674:1781): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 72.822038][ T29] audit: type=1400 audit(1752594474.674:1782): avc: denied { prog_load } for pid=5668 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.843305][ T29] audit: type=1400 audit(1752594474.674:1783): avc: denied { bpf } for pid=5668 comm="syz.2.750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.866561][ T29] audit: type=1400 audit(1752594474.684:1784): avc: denied { module_request } for pid=5668 comm="syz.2.750" kmod="fs-ncpfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.892983][ T29] audit: type=1400 audit(1752594474.684:1785): avc: denied { name_bind } for pid=5670 comm="syz.0.751" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.924142][ T29] audit: type=1400 audit(1752594474.684:1786): avc: denied { node_bind } for pid=5670 comm="syz.0.751" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.058607][ T5684] FAULT_INJECTION: forcing a failure. [ 73.058607][ T5684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.074693][ T5684] CPU: 1 UID: 0 PID: 5684 Comm: syz.2.755 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 73.074731][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.074797][ T5684] Call Trace: [ 73.074805][ T5684] [ 73.074814][ T5684] __dump_stack+0x1d/0x30 [ 73.074840][ T5684] dump_stack_lvl+0xe8/0x140 [ 73.074862][ T5684] dump_stack+0x15/0x1b [ 73.074880][ T5684] should_fail_ex+0x265/0x280 [ 73.074926][ T5684] should_fail+0xb/0x20 [ 73.075021][ T5684] should_fail_usercopy+0x1a/0x20 [ 73.075118][ T5684] _copy_to_user+0x20/0xa0 [ 73.075143][ T5684] simple_read_from_buffer+0xb5/0x130 [ 73.075181][ T5684] proc_fail_nth_read+0x100/0x140 [ 73.075219][ T5684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.075331][ T5684] vfs_read+0x19d/0x6f0 [ 73.075366][ T5684] ? __rcu_read_unlock+0x4f/0x70 [ 73.075393][ T5684] ? __rcu_read_unlock+0x4f/0x70 [ 73.075418][ T5684] ? __fget_files+0x184/0x1c0 [ 73.075481][ T5684] ksys_read+0xda/0x1a0 [ 73.075512][ T5684] __x64_sys_read+0x40/0x50 [ 73.075542][ T5684] x64_sys_call+0x2d77/0x2fb0 [ 73.075575][ T5684] do_syscall_64+0xd2/0x200 [ 73.075596][ T5684] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.075670][ T5684] ? clear_bhb_loop+0x40/0x90 [ 73.075700][ T5684] ? clear_bhb_loop+0x40/0x90 [ 73.075726][ T5684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.075751][ T5684] RIP: 0033:0x7f951528d33c [ 73.075770][ T5684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 73.075802][ T5684] RSP: 002b:00007f95138f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.075826][ T5684] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528d33c [ 73.075922][ T5684] RDX: 000000000000000f RSI: 00007f95138f70a0 RDI: 0000000000000005 [ 73.075974][ T5684] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.075989][ T5684] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 73.076003][ T5684] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 73.076024][ T5684] [ 73.097217][ T5695] FAULT_INJECTION: forcing a failure. [ 73.097217][ T5695] name failslab, interval 1, probability 0, space 0, times 0 [ 73.097347][ T5695] CPU: 0 UID: 0 PID: 5695 Comm: syz.3.757 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 73.097386][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.097407][ T5695] Call Trace: [ 73.097417][ T5695] [ 73.097431][ T5695] __dump_stack+0x1d/0x30 [ 73.097464][ T5695] dump_stack_lvl+0xe8/0x140 [ 73.097567][ T5695] dump_stack+0x15/0x1b [ 73.097589][ T5695] should_fail_ex+0x265/0x280 [ 73.097631][ T5695] should_failslab+0x8c/0xb0 [ 73.097663][ T5695] __kmalloc_cache_node_noprof+0x54/0x320 [ 73.097704][ T5695] ? __get_vm_area_node+0x106/0x1d0 [ 73.097771][ T5695] __get_vm_area_node+0x106/0x1d0 [ 73.097810][ T5695] __vmalloc_node_range_noprof+0x273/0xe00 [ 73.097882][ T5695] ? bpf_check+0xe0/0xced0 [ 73.097915][ T5695] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 73.097960][ T5695] ? __lruvec_stat_mod_folio+0xea/0x120 [ 73.098066][ T5695] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 73.098103][ T5695] ? bpf_check+0xe0/0xced0 [ 73.098192][ T5695] vzalloc_noprof+0x82/0xc0 [ 73.098233][ T5695] ? bpf_check+0xe0/0xced0 [ 73.098263][ T5695] bpf_check+0xe0/0xced0 [ 73.098307][ T5695] ? page_counter_charge+0x207/0x230 [ 73.098345][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 73.098431][ T5695] ? obj_cgroup_charge_pages+0xf7/0x150 [ 73.098468][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 73.098496][ T5695] ? __memcg_kmem_charge_page+0xd1/0x170 [ 73.098536][ T5695] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 73.098627][ T5695] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 73.098668][ T5695] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 73.098706][ T5695] ? pcpu_block_update+0x24e/0x3b0 [ 73.098753][ T5695] ? _find_next_zero_bit+0x64/0xa0 [ 73.098787][ T5695] ? pcpu_block_refresh_hint+0x157/0x170 [ 73.098835][ T5695] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 73.098899][ T5695] ? mod_memcg_state+0x1eb/0x2c0 [ 73.098929][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 73.098957][ T5695] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 73.099014][ T5695] ? should_fail_ex+0xdb/0x280 [ 73.099050][ T5695] ? selinux_bpf_prog_load+0x36/0xf0 [ 73.099081][ T5695] ? should_failslab+0x8c/0xb0 [ 73.099110][ T5695] ? __kmalloc_cache_noprof+0x189/0x320 [ 73.099200][ T5695] ? selinux_bpf_prog_load+0xbf/0xf0 [ 73.099230][ T5695] ? security_bpf_prog_load+0x2c/0xa0 [ 73.099259][ T5695] bpf_prog_load+0xedd/0x1070 [ 73.099339][ T5695] ? security_bpf+0x2b/0x90 [ 73.099365][ T5695] __sys_bpf+0x51d/0x790 [ 73.099477][ T5695] __x64_sys_bpf+0x41/0x50 [ 73.099511][ T5695] x64_sys_call+0x2478/0x2fb0 [ 73.099564][ T5695] do_syscall_64+0xd2/0x200 [ 73.099588][ T5695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.099648][ T5695] ? clear_bhb_loop+0x40/0x90 [ 73.099677][ T5695] ? clear_bhb_loop+0x40/0x90 [ 73.099750][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.099779][ T5695] RIP: 0033:0x7f700145e929 [ 73.099799][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.099824][ T5695] RSP: 002b:00007f6fffac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.099884][ T5695] RAX: ffffffffffffffda RBX: 00007f7001685fa0 RCX: 00007f700145e929 [ 73.099901][ T5695] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 73.099919][ T5695] RBP: 00007f6fffac7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.099977][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.099993][ T5695] R13: 0000000000000000 R14: 00007f7001685fa0 R15: 00007ffe787f1f08 [ 73.100017][ T5695] [ 73.100243][ T5695] syz.3.757: vmalloc error: size 960, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 73.158118][ T5700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.161224][ T5695] ,cpuset= [ 73.169820][ T5700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.172206][ T5695] /,mems_allowed=0 [ 73.172233][ T5695] CPU: 0 UID: 0 PID: 5695 Comm: syz.3.757 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 73.172259][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.172271][ T5695] Call Trace: [ 73.172278][ T5695] [ 73.172332][ T5695] __dump_stack+0x1d/0x30 [ 73.172365][ T5695] dump_stack_lvl+0xe8/0x140 [ 73.172428][ T5695] dump_stack+0x15/0x1b [ 73.172451][ T5695] warn_alloc+0x12b/0x1a0 [ 73.172574][ T5695] __vmalloc_node_range_noprof+0x297/0xe00 [ 73.172620][ T5695] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 73.172695][ T5695] ? __lruvec_stat_mod_folio+0xea/0x120 [ 73.172737][ T5695] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 73.172795][ T5695] ? bpf_check+0xe0/0xced0 [ 73.172829][ T5695] vzalloc_noprof+0x82/0xc0 [ 73.172965][ T5695] ? bpf_check+0xe0/0xced0 [ 73.173075][ T5695] bpf_check+0xe0/0xced0 [ 73.173105][ T5695] ? page_counter_charge+0x207/0x230 [ 73.173184][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 73.173215][ T5695] ? obj_cgroup_charge_pages+0xf7/0x150 [ 73.173293][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 73.173322][ T5695] ? __memcg_kmem_charge_page+0xd1/0x170 [ 73.173362][ T5695] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 73.173490][ T5695] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 73.173534][ T5695] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 73.173575][ T5695] ? pcpu_block_update+0x24e/0x3b0 [ 73.173712][ T5695] ? _find_next_zero_bit+0x64/0xa0 [ 73.173748][ T5695] ? pcpu_block_refresh_hint+0x157/0x170 [ 73.173794][ T5695] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 73.173985][ T5695] ? mod_memcg_state+0x1eb/0x2c0 [ 73.174061][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 73.174110][ T5695] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 73.174161][ T5695] ? should_fail_ex+0xdb/0x280 [ 73.174246][ T5695] ? selinux_bpf_prog_load+0x36/0xf0 [ 73.174279][ T5695] ? should_failslab+0x8c/0xb0 [ 73.174378][ T5695] ? __kmalloc_cache_noprof+0x189/0x320 [ 73.174418][ T5695] ? selinux_bpf_prog_load+0xbf/0xf0 [ 73.174469][ T5695] ? security_bpf_prog_load+0x2c/0xa0 [ 73.174500][ T5695] bpf_prog_load+0xedd/0x1070 [ 73.174554][ T5695] ? security_bpf+0x2b/0x90 [ 73.174579][ T5695] __sys_bpf+0x51d/0x790 [ 73.174704][ T5695] __x64_sys_bpf+0x41/0x50 [ 73.174740][ T5695] x64_sys_call+0x2478/0x2fb0 [ 73.174770][ T5695] do_syscall_64+0xd2/0x200 [ 73.174796][ T5695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.174848][ T5695] ? clear_bhb_loop+0x40/0x90 [ 73.174884][ T5695] ? clear_bhb_loop+0x40/0x90 [ 73.174912][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.174941][ T5695] RIP: 0033:0x7f700145e929 [ 73.174962][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.174987][ T5695] RSP: 002b:00007f6fffac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.175057][ T5695] RAX: ffffffffffffffda RBX: 00007f7001685fa0 RCX: 00007f700145e929 [ 73.175074][ T5695] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 73.175091][ T5695] RBP: 00007f6fffac7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.175107][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.175123][ T5695] R13: 0000000000000000 R14: 00007f7001685fa0 R15: 00007ffe787f1f08 [ 73.175266][ T5695] [ 73.175358][ T5695] Mem-Info: [ 74.124317][ T5695] active_anon:21131 inactive_anon:26 isolated_anon:0 [ 74.124317][ T5695] active_file:19449 inactive_file:2203 isolated_file:0 [ 74.124317][ T5695] unevictable:0 dirty:257 writeback:0 [ 74.124317][ T5695] slab_reclaimable:3013 slab_unreclaimable:44745 [ 74.124317][ T5695] mapped:29361 shmem:16489 pagetables:1264 [ 74.124317][ T5695] sec_pagetables:0 bounce:0 [ 74.124317][ T5695] kernel_misc_reclaimable:0 [ 74.124317][ T5695] free:1843420 free_pcp:5860 free_cma:0 [ 74.172473][ T5695] Node 0 active_anon:84640kB inactive_anon:104kB active_file:77796kB inactive_file:8812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117444kB dirty:1028kB writeback:0kB shmem:65956kB writeback_tmp:0kB kernel_stack:3408kB pagetables:5056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 74.204430][ T5695] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.237891][ T5695] lowmem_reserve[]: 0 2882 7860 7860 [ 74.243333][ T5695] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 74.283487][ T5695] lowmem_reserve[]: 0 0 4978 4978 [ 74.292623][ T5695] Node 0 Normal free:4410360kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81508kB inactive_anon:104kB active_file:77796kB inactive_file:8812kB unevictable:0kB writepending:1028kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:22888kB local_pcp:10656kB free_cma:0kB [ 74.329632][ T5695] lowmem_reserve[]: 0 0 0 0 [ 74.334971][ T5695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 74.349246][ T5695] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 74.367130][ T5695] Node 0 Normal: 234*4kB (U) 135*8kB (UM) 66*16kB (UME) 33*32kB (UE) 40*64kB (UE) 17*128kB (UME) 51*256kB (UME) 35*512kB (UM) 24*1024kB (UME) 8*2048kB (UME) 1057*4096kB (UM) = 4410272kB [ 74.387955][ T5695] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 74.399725][ T5695] 38194 total pagecache pages [ 74.404835][ T5695] 57 pages in swap cache [ 74.409119][ T5695] Free swap = 124768kB [ 74.413556][ T5695] Total swap = 124996kB [ 74.418014][ T5695] 2097051 pages RAM [ 74.423580][ T5695] 0 pages HighMem/MovableOnly [ 74.428537][ T5695] 80812 pages reserved [ 74.451573][ T5711] program syz.1.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.478337][ T5690] vxcan1 speed is unknown, defaulting to 1000 [ 74.531766][ T5725] __nla_validate_parse: 4 callbacks suppressed [ 74.531788][ T5725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.767'. [ 74.562111][ T5723] netlink: 14 bytes leftover after parsing attributes in process `syz.4.766'. [ 74.654857][ T5690] lo speed is unknown, defaulting to 1000 [ 74.689106][ T5735] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 74.698129][ T5735] netlink: 156 bytes leftover after parsing attributes in process `syz.1.770'. [ 74.788431][ T3385] IPVS: starting estimator thread 0... [ 74.801310][ T5716] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 74.893637][ T5741] IPVS: using max 1968 ests per chain, 98400 per kthread [ 74.963157][ T5752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 74.973869][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 75.054514][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 75.350246][ T5774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.781'. [ 75.410276][ T5780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5780 comm=syz.3.784 [ 75.834248][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 76.052722][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.101431][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.277841][ T5791] Set syz1 is full, maxelem 65536 reached [ 76.328356][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 76.328375][ T29] audit: type=1400 audit(1752594478.224:1882): avc: denied { execute } for pid=5827 comm="syz.1.796" path="/179/cpu.stat" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.364955][ T29] audit: type=1400 audit(1752594478.254:1883): avc: denied { remove_name } for pid=3304 comm="syz-executor" name="binderfs" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 76.392441][ T29] audit: type=1400 audit(1752594478.254:1884): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="135" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 76.428369][ T29] audit: type=1400 audit(1752594478.324:1885): avc: denied { read } for pid=5830 comm="syz.1.798" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.451806][ T29] audit: type=1400 audit(1752594478.324:1886): avc: denied { open } for pid=5830 comm="syz.1.798" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.477664][ T29] audit: type=1400 audit(1752594478.374:1887): avc: denied { ioctl } for pid=5830 comm="syz.1.798" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.512402][ T5832] netlink: 14 bytes leftover after parsing attributes in process `syz.0.797'. [ 76.516192][ T5831] serio: Serial port ptm0 [ 76.525874][ T5832] hsr_slave_0: left promiscuous mode [ 76.531673][ T5832] hsr_slave_1: left promiscuous mode [ 76.533541][ T29] audit: type=1400 audit(1752594478.424:1888): avc: denied { mounton } for pid=5833 comm="syz.3.799" path="/152/file0" dev="tmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.561031][ T29] audit: type=1400 audit(1752594478.434:1889): avc: denied { mount } for pid=5833 comm="syz.3.799" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.595107][ T29] audit: type=1400 audit(1752594478.484:1890): avc: denied { create } for pid=5830 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 76.602413][ T5836] vxcan1 speed is unknown, defaulting to 1000 [ 76.615766][ T29] audit: type=1400 audit(1752594478.484:1891): avc: denied { sys_admin } for pid=5830 comm="syz.1.798" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 76.688091][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 76.691941][ T5836] lo speed is unknown, defaulting to 1000 [ 76.713495][ T5842] netlink: zone id is out of range [ 76.718771][ T5842] netlink: zone id is out of range [ 76.724243][ T5842] netlink: zone id is out of range [ 76.729417][ T5842] netlink: zone id is out of range [ 76.734675][ T5842] netlink: zone id is out of range [ 76.739866][ T5842] netlink: zone id is out of range [ 76.745059][ T5842] netlink: zone id is out of range [ 76.750204][ T5842] netlink: zone id is out of range [ 76.884297][ T5858] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 76.902108][ T5858] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 77.430227][ T5860] random: crng reseeded on system resumption [ 77.503858][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.535271][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.633232][ T5891] vxcan1 speed is unknown, defaulting to 1000 [ 77.729829][ T5891] lo speed is unknown, defaulting to 1000 [ 78.002971][ T5925] sd 0:0:1:0: device reset [ 78.140270][ T5939] vxcan1 speed is unknown, defaulting to 1000 [ 78.186003][ T5939] lo speed is unknown, defaulting to 1000 [ 78.315025][ T5946] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 78.400850][ T5937] random: crng reseeded on system resumption [ 78.866627][ T5971] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 78.969017][ T5964] netlink: '+}[@': attribute type 29 has an invalid length. [ 79.012404][ T5989] ip6gre1: entered promiscuous mode [ 79.017843][ T5989] ip6gre1: entered allmulticast mode [ 79.564890][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811d7d2a00: rx timeout, send abort [ 79.573265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811d7d2a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 79.613596][ T6037] __nla_validate_parse: 2 callbacks suppressed [ 79.613617][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 79.813000][ T6053] vxcan1 speed is unknown, defaulting to 1000 [ 79.877894][ T6064] FAULT_INJECTION: forcing a failure. [ 79.877894][ T6064] name failslab, interval 1, probability 0, space 0, times 0 [ 79.891422][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.879 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 79.891497][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.891513][ T6064] Call Trace: [ 79.891521][ T6064] [ 79.891530][ T6064] __dump_stack+0x1d/0x30 [ 79.891565][ T6064] dump_stack_lvl+0xe8/0x140 [ 79.891590][ T6064] dump_stack+0x15/0x1b [ 79.891608][ T6064] should_fail_ex+0x265/0x280 [ 79.891683][ T6064] should_failslab+0x8c/0xb0 [ 79.891762][ T6064] kmem_cache_alloc_node_noprof+0x57/0x320 [ 79.891789][ T6064] ? __alloc_skb+0x101/0x320 [ 79.891823][ T6064] __alloc_skb+0x101/0x320 [ 79.891860][ T6064] netlink_alloc_large_skb+0xba/0xf0 [ 79.891925][ T6064] netlink_sendmsg+0x3cf/0x6b0 [ 79.892012][ T6064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.892036][ T6064] __sock_sendmsg+0x145/0x180 [ 79.892067][ T6064] ____sys_sendmsg+0x31e/0x4e0 [ 79.892109][ T6064] ___sys_sendmsg+0x17b/0x1d0 [ 79.892230][ T6064] __x64_sys_sendmsg+0xd4/0x160 [ 79.892271][ T6064] x64_sys_call+0x2999/0x2fb0 [ 79.892298][ T6064] do_syscall_64+0xd2/0x200 [ 79.892346][ T6064] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.892376][ T6064] ? clear_bhb_loop+0x40/0x90 [ 79.892406][ T6064] ? clear_bhb_loop+0x40/0x90 [ 79.892473][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.892499][ T6064] RIP: 0033:0x7f951528e929 [ 79.892553][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.892571][ T6064] RSP: 002b:00007f95138f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.892593][ T6064] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528e929 [ 79.892605][ T6064] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 79.892621][ T6064] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.892636][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.892651][ T6064] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 79.892676][ T6064] [ 79.904541][ T6053] lo speed is unknown, defaulting to 1000 [ 80.188702][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 80.206233][ T6077] bond0: (slave bond_slave_0): Releasing backup interface [ 80.228575][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 80.259823][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 80.326874][ T6094] mmap: syz.1.891 (6094) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.347750][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 80.356711][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 80.371660][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 80.411457][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 80.420566][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 80.463160][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 80.558344][ T6116] vxcan1 speed is unknown, defaulting to 1000 [ 80.572796][ T6112] random: crng reseeded on system resumption [ 80.628363][ T6116] lo speed is unknown, defaulting to 1000 [ 80.985852][ T6161] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 81.007946][ T6161] SELinux: failed to load policy [ 81.064876][ T6164] FAULT_INJECTION: forcing a failure. [ 81.064876][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 81.078493][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.3.915 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 81.078527][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.078667][ T6164] Call Trace: [ 81.078679][ T6164] [ 81.078689][ T6164] __dump_stack+0x1d/0x30 [ 81.078713][ T6164] dump_stack_lvl+0xe8/0x140 [ 81.078735][ T6164] dump_stack+0x15/0x1b [ 81.078752][ T6164] should_fail_ex+0x265/0x280 [ 81.078841][ T6164] ? nf_ct_tmpl_alloc+0x63/0x130 [ 81.078881][ T6164] should_failslab+0x8c/0xb0 [ 81.078908][ T6164] __kmalloc_cache_noprof+0x4c/0x320 [ 81.078941][ T6164] nf_ct_tmpl_alloc+0x63/0x130 [ 81.078973][ T6164] tcf_ct_init+0xa3c/0xe60 [ 81.079012][ T6164] tcf_action_init_1+0x367/0x4a0 [ 81.079139][ T6164] tcf_action_init+0x267/0x6d0 [ 81.079172][ T6164] ? mark_reg_read+0x59/0x340 [ 81.079229][ T6164] tc_ctl_action+0x291/0x830 [ 81.079283][ T6164] ? __pfx_tc_ctl_action+0x10/0x10 [ 81.079422][ T6164] rtnetlink_rcv_msg+0x657/0x6d0 [ 81.079455][ T6164] netlink_rcv_skb+0x120/0x220 [ 81.079522][ T6164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.079613][ T6164] rtnetlink_rcv+0x1c/0x30 [ 81.079632][ T6164] netlink_unicast+0x5a5/0x680 [ 81.079669][ T6164] netlink_sendmsg+0x58b/0x6b0 [ 81.079695][ T6164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.079726][ T6164] __sock_sendmsg+0x145/0x180 [ 81.079831][ T6164] ____sys_sendmsg+0x31e/0x4e0 [ 81.079872][ T6164] ___sys_sendmsg+0x17b/0x1d0 [ 81.079919][ T6164] __x64_sys_sendmsg+0xd4/0x160 [ 81.079987][ T6164] x64_sys_call+0x2999/0x2fb0 [ 81.080052][ T6164] do_syscall_64+0xd2/0x200 [ 81.080073][ T6164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.080106][ T6164] ? clear_bhb_loop+0x40/0x90 [ 81.080132][ T6164] ? clear_bhb_loop+0x40/0x90 [ 81.080159][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.080188][ T6164] RIP: 0033:0x7f700145e929 [ 81.080208][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.080226][ T6164] RSP: 002b:00007f6fffac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.080244][ T6164] RAX: ffffffffffffffda RBX: 00007f7001685fa0 RCX: 00007f700145e929 [ 81.080256][ T6164] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 81.080285][ T6164] RBP: 00007f6fffac7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.080317][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.080333][ T6164] R13: 0000000000000000 R14: 00007f7001685fa0 R15: 00007ffe787f1f08 [ 81.080358][ T6164] [ 81.725632][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 81.725651][ T29] audit: type=1400 audit(1752594483.624:2029): avc: denied { read append } for pid=6177 comm="syz.1.923" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.757596][ T29] audit: type=1400 audit(1752594483.624:2030): avc: denied { open } for pid=6177 comm="syz.1.923" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.824697][ T29] audit: type=1400 audit(1752594483.684:2031): avc: denied { write } for pid=6177 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.041001][ T6182] smc: net device bond0 applied user defined pnetid SYZ2 [ 82.048689][ T6182] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 82.126295][ T6209] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 82.159193][ T6209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.175624][ T6215] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 82.185714][ T6215] SELinux: failed to load policy [ 82.185983][ T6209] ipvlan2: entered promiscuous mode [ 82.205893][ T6209] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 82.214532][ T6209] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.321767][ T29] audit: type=1400 audit(1752594484.214:2032): avc: denied { write } for pid=6224 comm="syz.4.936" lport=35491 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.351076][ T6225] FAULT_INJECTION: forcing a failure. [ 82.351076][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.364394][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.4.936 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 82.364466][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.364573][ T6225] Call Trace: [ 82.364580][ T6225] [ 82.364588][ T6225] __dump_stack+0x1d/0x30 [ 82.364650][ T6225] dump_stack_lvl+0xe8/0x140 [ 82.364670][ T6225] dump_stack+0x15/0x1b [ 82.364686][ T6225] should_fail_ex+0x265/0x280 [ 82.364752][ T6225] should_fail+0xb/0x20 [ 82.364779][ T6225] should_fail_usercopy+0x1a/0x20 [ 82.364811][ T6225] _copy_from_user+0x1c/0xb0 [ 82.364831][ T6225] core_sys_select+0x1ce/0x6e0 [ 82.364927][ T6225] ? set_user_sigmask+0x84/0x190 [ 82.364948][ T6225] __se_sys_pselect6+0x216/0x280 [ 82.364985][ T6225] __x64_sys_pselect6+0x78/0x90 [ 82.365080][ T6225] x64_sys_call+0x1caa/0x2fb0 [ 82.365102][ T6225] do_syscall_64+0xd2/0x200 [ 82.365148][ T6225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.365173][ T6225] ? clear_bhb_loop+0x40/0x90 [ 82.365202][ T6225] ? clear_bhb_loop+0x40/0x90 [ 82.365224][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.365272][ T6225] RIP: 0033:0x7f254976e929 [ 82.365288][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.365305][ T6225] RSP: 002b:00007f2547dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 82.365324][ T6225] RAX: ffffffffffffffda RBX: 00007f2549995fa0 RCX: 00007f254976e929 [ 82.365336][ T6225] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 82.365348][ T6225] RBP: 00007f2547dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.365360][ T6225] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 82.365372][ T6225] R13: 0000000000000000 R14: 00007f2549995fa0 R15: 00007ffd562807c8 [ 82.365416][ T6225] [ 82.572359][ T29] audit: type=1400 audit(1752594484.464:2033): avc: denied { setopt } for pid=6226 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.812085][ T29] audit: type=1326 audit(1752594484.704:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 82.816531][ T6238] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 82.837140][ T29] audit: type=1326 audit(1752594484.704:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 82.843501][ T6238] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.843645][ T6238] vhci_hcd vhci_hcd.0: Device attached [ 82.868155][ T29] audit: type=1326 audit(1752594484.704:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 82.906168][ T6239] vhci_hcd: connection closed [ 82.906229][ T29] audit: type=1326 audit(1752594484.714:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 82.909841][ T328] vhci_hcd: stop threads [ 82.911331][ T29] audit: type=1326 audit(1752594484.714:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 82.936517][ T328] vhci_hcd: release socket [ 82.971210][ T328] vhci_hcd: disconnect device [ 83.161973][ T6246] netlink: 'syz.1.943': attribute type 21 has an invalid length. [ 83.223966][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.233051][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.105515][ T6282] net_ratelimit: 23 callbacks suppressed [ 84.105531][ T6282] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.150173][ T6285] FAULT_INJECTION: forcing a failure. [ 84.150173][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.163856][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.3.955 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 84.163891][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.163903][ T6285] Call Trace: [ 84.163910][ T6285] [ 84.163917][ T6285] __dump_stack+0x1d/0x30 [ 84.163938][ T6285] dump_stack_lvl+0xe8/0x140 [ 84.163956][ T6285] dump_stack+0x15/0x1b [ 84.164034][ T6285] should_fail_ex+0x265/0x280 [ 84.164083][ T6285] should_fail+0xb/0x20 [ 84.164173][ T6285] should_fail_usercopy+0x1a/0x20 [ 84.164202][ T6285] _copy_to_user+0x20/0xa0 [ 84.164222][ T6285] simple_read_from_buffer+0xb5/0x130 [ 84.164253][ T6285] proc_fail_nth_read+0x100/0x140 [ 84.164304][ T6285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.164352][ T6285] vfs_read+0x19d/0x6f0 [ 84.164388][ T6285] ? __rcu_read_unlock+0x4f/0x70 [ 84.164414][ T6285] ? __rcu_read_unlock+0x4f/0x70 [ 84.164457][ T6285] ? __fget_files+0x184/0x1c0 [ 84.164478][ T6285] ksys_read+0xda/0x1a0 [ 84.164514][ T6285] __x64_sys_read+0x40/0x50 [ 84.164546][ T6285] x64_sys_call+0x2d77/0x2fb0 [ 84.164571][ T6285] do_syscall_64+0xd2/0x200 [ 84.164587][ T6285] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.164652][ T6285] ? clear_bhb_loop+0x40/0x90 [ 84.164679][ T6285] ? clear_bhb_loop+0x40/0x90 [ 84.164706][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.164731][ T6285] RIP: 0033:0x7f700145d33c [ 84.164891][ T6285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.164911][ T6285] RSP: 002b:00007f6fffac7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.164935][ T6285] RAX: ffffffffffffffda RBX: 00007f7001685fa0 RCX: 00007f700145d33c [ 84.164950][ T6285] RDX: 000000000000000f RSI: 00007f6fffac70a0 RDI: 0000000000000004 [ 84.164965][ T6285] RBP: 00007f6fffac7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.164979][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.164994][ T6285] R13: 0000000000000000 R14: 00007f7001685fa0 R15: 00007ffe787f1f08 [ 84.165019][ T6285] [ 84.503051][ T6291] vxcan1 speed is unknown, defaulting to 1000 [ 84.509635][ T6293] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 84.516461][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.524087][ T6293] vhci_hcd vhci_hcd.0: Device attached [ 84.549975][ T6294] vhci_hcd: connection closed [ 84.565052][ T6291] lo speed is unknown, defaulting to 1000 [ 84.622109][ T51] vhci_hcd: stop threads [ 84.626514][ T51] vhci_hcd: release socket [ 84.630970][ T51] vhci_hcd: disconnect device [ 84.657414][ T6302] __nla_validate_parse: 10 callbacks suppressed [ 84.657436][ T6302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 84.792414][ T6312] netlink: 14 bytes leftover after parsing attributes in process `syz.1.964'. [ 84.944982][ T6321] syzkaller1: entered promiscuous mode [ 84.950737][ T6321] syzkaller1: entered allmulticast mode [ 85.048574][ T6323] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 85.056501][ T6323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.968'. [ 85.109614][ T6323] team0: entered promiscuous mode [ 85.130391][ T6323] team_slave_0: entered promiscuous mode [ 85.137144][ T6323] team_slave_1: entered promiscuous mode [ 85.140636][ T6332] FAULT_INJECTION: forcing a failure. [ 85.140636][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 85.143355][ T6323] geneve1: entered promiscuous mode [ 85.157021][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.1.972 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 85.157055][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.157120][ T6332] Call Trace: [ 85.157127][ T6332] [ 85.157135][ T6332] __dump_stack+0x1d/0x30 [ 85.157160][ T6332] dump_stack_lvl+0xe8/0x140 [ 85.157190][ T6332] dump_stack+0x15/0x1b [ 85.157212][ T6332] should_fail_ex+0x265/0x280 [ 85.157464][ T6332] should_failslab+0x8c/0xb0 [ 85.157498][ T6332] kmem_cache_alloc_node_noprof+0x57/0x320 [ 85.157606][ T6332] ? __alloc_skb+0x101/0x320 [ 85.157653][ T6332] __alloc_skb+0x101/0x320 [ 85.157692][ T6332] netlink_alloc_large_skb+0xba/0xf0 [ 85.157734][ T6332] netlink_sendmsg+0x3cf/0x6b0 [ 85.157763][ T6332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.157798][ T6332] __sock_sendmsg+0x145/0x180 [ 85.157833][ T6332] ____sys_sendmsg+0x31e/0x4e0 [ 85.157880][ T6332] ___sys_sendmsg+0x17b/0x1d0 [ 85.158007][ T6332] __x64_sys_sendmsg+0xd4/0x160 [ 85.158119][ T6332] x64_sys_call+0x2999/0x2fb0 [ 85.158224][ T6332] do_syscall_64+0xd2/0x200 [ 85.158248][ T6332] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.158299][ T6332] ? clear_bhb_loop+0x40/0x90 [ 85.158325][ T6332] ? clear_bhb_loop+0x40/0x90 [ 85.158355][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.158384][ T6332] RIP: 0033:0x7f8fc1c2e929 [ 85.158407][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.158471][ T6332] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.158498][ T6332] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 85.158516][ T6332] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 85.158534][ T6332] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 85.158551][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.158676][ T6332] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 85.158713][ T6332] [ 85.254054][ T6325] random: crng reseeded on system resumption [ 85.258077][ T6323] team0: entered allmulticast mode [ 85.395583][ T6323] team_slave_0: entered allmulticast mode [ 85.401478][ T6323] team_slave_1: entered allmulticast mode [ 85.407545][ T6323] geneve1: entered allmulticast mode [ 85.414279][ T6323] bridge0: port 3(team0) entered blocking state [ 85.420740][ T6323] bridge0: port 3(team0) entered disabled state [ 85.431288][ T6323] bridge0: port 3(team0) entered blocking state [ 85.438165][ T6323] bridge0: port 3(team0) entered forwarding state [ 85.460361][ T6345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.976'. [ 85.562652][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6356 comm=syz.4.980 [ 85.606462][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.633723][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.664414][ T6369] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20002 [ 85.724554][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 85.733573][ T6372] netlink: 108 bytes leftover after parsing attributes in process `syz.2.986'. [ 85.755269][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 85.818534][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'. [ 86.041739][ T6376] random: crng reseeded on system resumption [ 86.098671][ T6392] netlink: 14 bytes leftover after parsing attributes in process `syz.3.993'. [ 86.142557][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'. [ 86.376043][ T6406] vxcan1 speed is unknown, defaulting to 1000 [ 86.437460][ T6406] lo speed is unknown, defaulting to 1000 [ 86.905276][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 86.905295][ T29] audit: type=1400 audit(1752594488.804:2168): avc: denied { read write } for pid=6425 comm="syz.1.1005" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.907310][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 86.918439][ T29] audit: type=1400 audit(1752594488.804:2169): avc: denied { open } for pid=6425 comm="syz.1.1005" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.935946][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 86.976401][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 86.984449][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 86.992102][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.000297][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.009372][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.017174][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.024776][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.032320][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.040316][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.048329][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.056544][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.065219][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.073143][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.080898][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.092896][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.100982][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.109349][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.117139][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.124889][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.132320][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.139832][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.147514][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.155171][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.162636][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.162627][ T29] audit: type=1400 audit(1752594489.054:2170): avc: denied { create } for pid=6432 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.170213][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.170310][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.207610][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.210458][ T6429] random: crng reseeded on system resumption [ 87.215467][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.229179][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.236926][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.244662][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.252943][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.260750][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.269046][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.276743][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.284364][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.291998][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.299539][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.307653][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.315192][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.322726][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.331162][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.338802][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.346302][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.348728][ T6436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 87.353845][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.360691][ T6436] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.368258][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.375810][ T6436] vhci_hcd vhci_hcd.0: Device attached [ 87.383191][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.395260][ T6437] vhci_hcd: connection closed [ 87.396340][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.396381][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.402260][ T1652] vhci_hcd: stop threads [ 87.408746][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.408771][ T3385] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 87.436267][ T1652] vhci_hcd: release socket [ 87.440723][ T1652] vhci_hcd: disconnect device [ 87.450703][ T3385] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 87.498081][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.507855][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.052709][ T6462] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 88.052732][ T6462] SELinux: failed to load policy [ 88.095237][ T29] audit: type=1326 audit(1752594489.994:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.095269][ T29] audit: type=1326 audit(1752594489.994:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.095293][ T29] audit: type=1326 audit(1752594489.994:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.095520][ T29] audit: type=1326 audit(1752594489.994:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.095552][ T29] audit: type=1326 audit(1752594489.994:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.095583][ T29] audit: type=1326 audit(1752594489.994:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.095687][ T29] audit: type=1326 audit(1752594489.994:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951528e929 code=0x7ffc0000 [ 88.336242][ T6488] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 88.336277][ T6488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.336321][ T6488] vhci_hcd vhci_hcd.0: Device attached [ 88.395691][ T6489] vhci_hcd: connection closed [ 88.396291][ T328] vhci_hcd: stop threads [ 88.406331][ T328] vhci_hcd: release socket [ 88.410951][ T328] vhci_hcd: disconnect device [ 88.466931][ T6480] random: crng reseeded on system resumption [ 88.475415][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.493553][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.227370][ T6545] random: crng reseeded on system resumption [ 89.608118][ T6578] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 89.721530][ T6587] FAULT_INJECTION: forcing a failure. [ 89.721530][ T6587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.734946][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.4.1066 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 89.734976][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.734989][ T6587] Call Trace: [ 89.734997][ T6587] [ 89.735005][ T6587] __dump_stack+0x1d/0x30 [ 89.735032][ T6587] dump_stack_lvl+0xe8/0x140 [ 89.735127][ T6587] dump_stack+0x15/0x1b [ 89.735223][ T6587] should_fail_ex+0x265/0x280 [ 89.735261][ T6587] should_fail+0xb/0x20 [ 89.735342][ T6587] should_fail_usercopy+0x1a/0x20 [ 89.735446][ T6587] _copy_from_iter+0xcf/0xe40 [ 89.735482][ T6587] ? rep_movs_alternative+0x4a/0x90 [ 89.735509][ T6587] ? _copy_from_iter+0x16d/0xe40 [ 89.735595][ T6587] copy_page_from_iter+0x178/0x2a0 [ 89.735630][ T6587] skb_copy_datagram_from_iter+0x232/0x490 [ 89.735677][ T6587] unix_stream_sendmsg+0x45e/0x8e0 [ 89.735843][ T6587] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 89.735891][ T6587] __sock_sendmsg+0x145/0x180 [ 89.735936][ T6587] ____sys_sendmsg+0x31e/0x4e0 [ 89.736034][ T6587] ___sys_sendmsg+0x17b/0x1d0 [ 89.736093][ T6587] __x64_sys_sendmsg+0xd4/0x160 [ 89.736204][ T6587] x64_sys_call+0x2999/0x2fb0 [ 89.736232][ T6587] do_syscall_64+0xd2/0x200 [ 89.736253][ T6587] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.736281][ T6587] ? clear_bhb_loop+0x40/0x90 [ 89.736329][ T6587] ? clear_bhb_loop+0x40/0x90 [ 89.736350][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.736370][ T6587] RIP: 0033:0x7f254976e929 [ 89.736388][ T6587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.736411][ T6587] RSP: 002b:00007f2547dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.736434][ T6587] RAX: ffffffffffffffda RBX: 00007f2549995fa0 RCX: 00007f254976e929 [ 89.736477][ T6587] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 89.736529][ T6587] RBP: 00007f2547dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.736544][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.736558][ T6587] R13: 0000000000000000 R14: 00007f2549995fa0 R15: 00007ffd562807c8 [ 89.736582][ T6587] [ 89.969895][ T6589] FAULT_INJECTION: forcing a failure. [ 89.969895][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 89.983868][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.2.1067 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 89.983900][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.983913][ T6589] Call Trace: [ 89.983921][ T6589] [ 89.983929][ T6589] __dump_stack+0x1d/0x30 [ 89.983950][ T6589] dump_stack_lvl+0xe8/0x140 [ 89.983975][ T6589] dump_stack+0x15/0x1b [ 89.983992][ T6589] should_fail_ex+0x265/0x280 [ 89.984049][ T6589] should_failslab+0x8c/0xb0 [ 89.984071][ T6589] kmem_cache_alloc_noprof+0x50/0x310 [ 89.984097][ T6589] ? security_file_alloc+0x32/0x100 [ 89.984133][ T6589] security_file_alloc+0x32/0x100 [ 89.984284][ T6589] init_file+0x5c/0x1d0 [ 89.984308][ T6589] alloc_empty_file+0x8b/0x200 [ 89.984340][ T6589] path_openat+0x68/0x2170 [ 89.984369][ T6589] ? _parse_integer_limit+0x170/0x190 [ 89.984475][ T6589] ? kstrtoull+0x111/0x140 [ 89.984502][ T6589] ? kstrtouint+0x76/0xc0 [ 89.984529][ T6589] do_filp_open+0x109/0x230 [ 89.984602][ T6589] do_sys_openat2+0xa6/0x110 [ 89.984637][ T6589] __x64_sys_openat+0xf2/0x120 [ 89.984665][ T6589] x64_sys_call+0x1af/0x2fb0 [ 89.984687][ T6589] do_syscall_64+0xd2/0x200 [ 89.984718][ T6589] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.984765][ T6589] ? clear_bhb_loop+0x40/0x90 [ 89.984787][ T6589] ? clear_bhb_loop+0x40/0x90 [ 89.984882][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.984903][ T6589] RIP: 0033:0x7f951528e929 [ 89.984918][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.984936][ T6589] RSP: 002b:00007f95138f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.984954][ T6589] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528e929 [ 89.984988][ T6589] RDX: 0000000000042002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 89.985000][ T6589] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.985049][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.985061][ T6589] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 89.985081][ T6589] [ 90.293544][ T6595] netlink: 'syz.4.1070': attribute type 10 has an invalid length. [ 90.303081][ T6595] veth0_macvtap: left promiscuous mode [ 90.314090][ T6595] veth0_macvtap: entered promiscuous mode [ 90.334597][ T6595] team0: Device macvtap0 failed to register rx_handler [ 90.347037][ T6586] random: crng reseeded on system resumption [ 90.353378][ T6595] veth0_macvtap: left promiscuous mode [ 90.462415][ T6614] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 90.485061][ T6614] veth0_macvtap: left promiscuous mode [ 90.492557][ T6614] FAULT_INJECTION: forcing a failure. [ 90.492557][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 90.505713][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.1.1076 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 90.505839][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.505851][ T6614] Call Trace: [ 90.505858][ T6614] [ 90.505866][ T6614] __dump_stack+0x1d/0x30 [ 90.505891][ T6614] dump_stack_lvl+0xe8/0x140 [ 90.505990][ T6614] dump_stack+0x15/0x1b [ 90.506009][ T6614] should_fail_ex+0x265/0x280 [ 90.506087][ T6614] should_failslab+0x8c/0xb0 [ 90.506138][ T6614] kmem_cache_alloc_node_noprof+0x57/0x320 [ 90.506164][ T6614] ? __alloc_skb+0x101/0x320 [ 90.506193][ T6614] __alloc_skb+0x101/0x320 [ 90.506224][ T6614] ? rt6_nlmsg_size+0x16b/0x1a0 [ 90.506316][ T6614] inet6_rt_notify+0x86/0x190 [ 90.506347][ T6614] fib6_del+0x76e/0x8a0 [ 90.506374][ T6614] ? fib6_ifdown+0x205/0x330 [ 90.506469][ T6614] fib6_clean_node+0x167/0x280 [ 90.506496][ T6614] fib6_walk_continue+0x39f/0x440 [ 90.506523][ T6614] fib6_walk+0xc5/0x180 [ 90.506544][ T6614] ? __pfx_fib6_ifdown+0x10/0x10 [ 90.506569][ T6614] fib6_clean_all+0xca/0x140 [ 90.506589][ T6614] ? __pfx_fib6_clean_node+0x10/0x10 [ 90.506623][ T6614] ? __pfx_fib6_ifdown+0x10/0x10 [ 90.506649][ T6614] rt6_disable_ip+0xa6/0x580 [ 90.506714][ T6614] ? _raw_spin_unlock+0x26/0x50 [ 90.506787][ T6614] ? finish_task_switch+0xad/0x2b0 [ 90.506826][ T6614] addrconf_ifdown+0xa6/0xf30 [ 90.506870][ T6614] ? tls_dev_event+0x3d7/0x910 [ 90.506899][ T6614] addrconf_notify+0x222/0x930 [ 90.506931][ T6614] ? __pfx_addrconf_notify+0x10/0x10 [ 90.506955][ T6614] raw_notifier_call_chain+0x6c/0x1b0 [ 90.507018][ T6614] ? call_netdevice_notifiers_info+0x9c/0x100 [ 90.507055][ T6614] call_netdevice_notifiers_info+0xae/0x100 [ 90.507087][ T6614] __dev_notify_flags+0xff/0x1a0 [ 90.507123][ T6614] netif_change_flags+0xac/0xd0 [ 90.507157][ T6614] do_setlink+0x9d2/0x2810 [ 90.507275][ T6614] ? save_fpregs_to_fpstate+0x100/0x160 [ 90.507313][ T6614] ? _raw_spin_unlock+0x26/0x50 [ 90.507339][ T6614] ? finish_task_switch+0xad/0x2b0 [ 90.507367][ T6614] ? __schedule+0x6a8/0xb30 [ 90.507525][ T6614] rtnl_setlink+0x311/0x420 [ 90.507584][ T6614] ? security_capable+0x83/0x90 [ 90.507617][ T6614] ? ns_capable+0x7d/0xb0 [ 90.507674][ T6614] ? __pfx_rtnl_setlink+0x10/0x10 [ 90.507701][ T6614] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 90.507734][ T6614] netlink_rcv_skb+0x120/0x220 [ 90.507770][ T6614] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.507859][ T6614] rtnetlink_rcv+0x1c/0x30 [ 90.507882][ T6614] netlink_unicast+0x5a5/0x680 [ 90.507992][ T6614] netlink_sendmsg+0x58b/0x6b0 [ 90.508018][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.508041][ T6614] __sock_sendmsg+0x145/0x180 [ 90.508068][ T6614] sock_write_iter+0x165/0x1b0 [ 90.508094][ T6614] do_iter_readv_writev+0x41e/0x4c0 [ 90.508188][ T6614] vfs_writev+0x2df/0x8b0 [ 90.508311][ T6614] do_writev+0xe7/0x210 [ 90.508369][ T6614] __x64_sys_writev+0x45/0x50 [ 90.508439][ T6614] x64_sys_call+0x2006/0x2fb0 [ 90.508466][ T6614] do_syscall_64+0xd2/0x200 [ 90.508489][ T6614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.508522][ T6614] ? clear_bhb_loop+0x40/0x90 [ 90.508550][ T6614] ? clear_bhb_loop+0x40/0x90 [ 90.508604][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.508631][ T6614] RIP: 0033:0x7f8fc1c2e929 [ 90.508650][ T6614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.508685][ T6614] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 90.508708][ T6614] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 90.508723][ T6614] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 90.508744][ T6614] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 90.508759][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.508774][ T6614] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 90.508798][ T6614] [ 90.513532][ T6614] veth0_macvtap: entered promiscuous mode [ 90.538040][ T6618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 90.542976][ T6614] team0: Device macvtap0 failed to register rx_handler [ 90.543276][ T6618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.963769][ T6618] vhci_hcd vhci_hcd.0: Device attached [ 90.970156][ T6614] veth0_macvtap: left promiscuous mode [ 90.989295][ T6614] syz.1.1076 (6614) used greatest stack depth: 9192 bytes left [ 90.996683][ T6620] vhci_hcd: connection closed [ 90.999080][ T51] vhci_hcd: stop threads [ 91.008365][ T51] vhci_hcd: release socket [ 91.012848][ T51] vhci_hcd: disconnect device [ 91.019783][ T6625] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 91.324869][ T6660] __nla_validate_parse: 10 callbacks suppressed [ 91.324895][ T6660] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1094'. [ 91.476405][ T6675] FAULT_INJECTION: forcing a failure. [ 91.476405][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 91.489780][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.1.1101 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 91.489814][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.489828][ T6675] Call Trace: [ 91.489836][ T6675] [ 91.489845][ T6675] __dump_stack+0x1d/0x30 [ 91.489876][ T6675] dump_stack_lvl+0xe8/0x140 [ 91.489897][ T6675] dump_stack+0x15/0x1b [ 91.489913][ T6675] should_fail_ex+0x265/0x280 [ 91.489975][ T6675] should_failslab+0x8c/0xb0 [ 91.489998][ T6675] kmem_cache_alloc_noprof+0x50/0x310 [ 91.490086][ T6675] ? security_file_alloc+0x32/0x100 [ 91.490170][ T6675] security_file_alloc+0x32/0x100 [ 91.490205][ T6675] init_file+0x5c/0x1d0 [ 91.490230][ T6675] alloc_empty_file+0x8b/0x200 [ 91.490307][ T6675] path_openat+0x68/0x2170 [ 91.490411][ T6675] ? _parse_integer_limit+0x170/0x190 [ 91.490441][ T6675] ? _parse_integer+0x27/0x40 [ 91.490467][ T6675] ? kstrtoull+0x111/0x140 [ 91.490493][ T6675] ? kstrtouint+0x76/0xc0 [ 91.490572][ T6675] do_filp_open+0x109/0x230 [ 91.490610][ T6675] do_sys_openat2+0xa6/0x110 [ 91.490638][ T6675] __x64_sys_open+0xe6/0x110 [ 91.490705][ T6675] x64_sys_call+0x14d4/0x2fb0 [ 91.490758][ T6675] do_syscall_64+0xd2/0x200 [ 91.490777][ T6675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.490840][ T6675] ? clear_bhb_loop+0x40/0x90 [ 91.490888][ T6675] ? clear_bhb_loop+0x40/0x90 [ 91.490911][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.491017][ T6675] RIP: 0033:0x7f8fc1c2e929 [ 91.491039][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.491059][ T6675] RSP: 002b:00007f8fc0297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 91.491079][ T6675] RAX: ffffffffffffffda RBX: 00007f8fc1e55fa0 RCX: 00007f8fc1c2e929 [ 91.491091][ T6675] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 00002000000002c0 [ 91.491104][ T6675] RBP: 00007f8fc0297090 R08: 0000000000000000 R09: 0000000000000000 [ 91.491116][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.491139][ T6675] R13: 0000000000000000 R14: 00007f8fc1e55fa0 R15: 00007ffe0c342e08 [ 91.491177][ T6675] [ 91.570951][ T6676] SELinux: Context @ is not valid (left unmapped). [ 91.775289][ T6662] random: crng reseeded on system resumption [ 91.937053][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 91.937069][ T29] audit: type=1400 audit(1752594493.834:2463): avc: denied { ioctl } for pid=6694 comm="syz.1.1109" path="socket:[14784]" dev="sockfs" ino=14784 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.013477][ T29] audit: type=1400 audit(1752594493.884:2464): avc: denied { create } for pid=6694 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.057618][ T29] audit: type=1400 audit(1752594493.954:2465): avc: denied { ioctl } for pid=6697 comm="syz.0.1110" path="socket:[15443]" dev="sockfs" ino=15443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.127529][ T29] audit: type=1326 audit(1752594494.014:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa889ae929 code=0x7ffc0000 [ 92.151324][ T29] audit: type=1326 audit(1752594494.014:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa889ae929 code=0x7ffc0000 [ 92.174870][ T29] audit: type=1326 audit(1752594494.014:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa889ae929 code=0x7ffc0000 [ 92.198333][ T29] audit: type=1326 audit(1752594494.014:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ffa889ae929 code=0x7ffc0000 [ 92.221922][ T29] audit: type=1326 audit(1752594494.014:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa889ae929 code=0x7ffc0000 [ 92.245606][ T29] audit: type=1326 audit(1752594494.014:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa889ae929 code=0x7ffc0000 [ 92.269280][ T29] audit: type=1326 audit(1752594494.014:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa889ae963 code=0x7ffc0000 [ 92.301766][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.351294][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.456049][ T6725] program syz.2.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.471047][ T6725] FAULT_INJECTION: forcing a failure. [ 92.471047][ T6725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.485150][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.2.1120 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 92.485187][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.485204][ T6725] Call Trace: [ 92.485212][ T6725] [ 92.485294][ T6725] __dump_stack+0x1d/0x30 [ 92.485320][ T6725] dump_stack_lvl+0xe8/0x140 [ 92.485345][ T6725] dump_stack+0x15/0x1b [ 92.485360][ T6725] should_fail_ex+0x265/0x280 [ 92.485429][ T6725] should_fail_alloc_page+0xf2/0x100 [ 92.485456][ T6725] __alloc_frozen_pages_noprof+0xff/0x360 [ 92.485501][ T6725] alloc_pages_mpol+0xb3/0x250 [ 92.485540][ T6725] alloc_pages_noprof+0x90/0x130 [ 92.485601][ T6725] blk_rq_map_kern+0x28f/0x5c0 [ 92.485637][ T6725] scsi_ioctl+0x12c0/0x14d0 [ 92.485696][ T6725] ? avc_has_perm+0xd3/0x150 [ 92.485724][ T6725] ? file_has_perm+0x324/0x370 [ 92.485761][ T6725] ? do_vfs_ioctl+0x9df/0x11d0 [ 92.485797][ T6725] sg_ioctl+0xdf6/0x1360 [ 92.485893][ T6725] ? __pfx_sg_ioctl+0x10/0x10 [ 92.485918][ T6725] __se_sys_ioctl+0xcb/0x140 [ 92.485975][ T6725] __x64_sys_ioctl+0x43/0x50 [ 92.486007][ T6725] x64_sys_call+0x19a8/0x2fb0 [ 92.486035][ T6725] do_syscall_64+0xd2/0x200 [ 92.486057][ T6725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.486111][ T6725] ? clear_bhb_loop+0x40/0x90 [ 92.486142][ T6725] ? clear_bhb_loop+0x40/0x90 [ 92.486164][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.486185][ T6725] RIP: 0033:0x7f951528e929 [ 92.486204][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.486224][ T6725] RSP: 002b:00007f95138f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.486280][ T6725] RAX: ffffffffffffffda RBX: 00007f95154b5fa0 RCX: 00007f951528e929 [ 92.486294][ T6725] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 0000000000000006 [ 92.486310][ T6725] RBP: 00007f95138f7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.486324][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.486337][ T6725] R13: 0000000000000000 R14: 00007f95154b5fa0 R15: 00007ffd4e8048e8 [ 92.486358][ T6725] [ 92.822666][ T6734] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 92.976418][ T6740] vxcan1 speed is unknown, defaulting to 1000 [ 93.047557][ T6740] lo speed is unknown, defaulting to 1000 [ 93.117170][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 93.222890][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 93.402367][ T6778] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1139'. [ 93.447501][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1142'. [ 93.559676][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 93.592422][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.671578][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.746762][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.894443][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.953445][ T12] bridge0: port 3(team0) entered disabled state [ 93.962109][ T12] bridge_slave_1: left allmulticast mode [ 93.968068][ T12] bridge_slave_1: left promiscuous mode [ 93.974004][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.983792][ T12] bridge_slave_0: left allmulticast mode [ 93.989680][ T12] bridge_slave_0: left promiscuous mode [ 93.995558][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.039268][ T12] geneve1 (unregistering): left promiscuous mode [ 94.046084][ T12] geneve1 (unregistering): left allmulticast mode [ 94.053355][ T12] team0: Port device geneve1 removed [ 94.108195][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.119566][ T12] bond0 (unregistering): Released all slaves [ 94.129267][ T12] bond1 (unregistering): (slave dummy0): Releasing active interface [ 94.137971][ T12] dummy0: left promiscuous mode [ 94.145291][ T12] bond1 (unregistering): Released all slaves [ 94.223311][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.231484][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.239603][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.247207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.257660][ T12] veth1_macvtap: left promiscuous mode [ 94.263632][ T12] veth1_vlan: left promiscuous mode [ 94.269118][ T12] veth0_vlan: left promiscuous mode [ 94.328650][ T12] team_slave_1 (unregistering): left promiscuous mode [ 94.337589][ T12] team_slave_1 (unregistering): left allmulticast mode [ 94.345839][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.355694][ T12] team_slave_0 (unregistering): left promiscuous mode [ 94.362633][ T12] team_slave_0 (unregistering): left allmulticast mode [ 94.370672][ T12] team0 (unregistering): Port device team_slave_0 removed [ 94.392515][ T37] smc: removing ib device syz2 [ 94.410122][ T36] vxcan1 speed is unknown, defaulting to 1000 [ 94.416875][ T36] syz2: Port: 1 Link DOWN [ 94.585869][ T12] IPVS: stop unused estimator thread 0... [ 95.543658][ T6843] ================================================================== [ 95.552116][ T6843] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 95.559543][ T6843] [ 95.561900][ T6843] read to 0xffff88811a3cbb10 of 4 bytes by task 6842 on cpu 0: [ 95.569742][ T6843] atime_needs_update+0x25f/0x3e0 [ 95.575040][ T6843] touch_atime+0x4a/0x340 [ 95.579528][ T6843] shmem_file_read_iter+0x477/0x540 [ 95.584768][ T6843] copy_splice_read+0x3c1/0x5f0 [ 95.589755][ T6843] splice_direct_to_actor+0x290/0x680 [ 95.595272][ T6843] do_splice_direct+0xda/0x150 [ 95.600086][ T6843] do_sendfile+0x380/0x650 [ 95.605075][ T6843] __x64_sys_sendfile64+0x105/0x150 [ 95.610303][ T6843] x64_sys_call+0xb39/0x2fb0 [ 95.615018][ T6843] do_syscall_64+0xd2/0x200 [ 95.619558][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.625613][ T6843] [ 95.627966][ T6843] write to 0xffff88811a3cbb10 of 4 bytes by task 6843 on cpu 1: [ 95.635639][ T6843] touch_atime+0x1e8/0x340 [ 95.640282][ T6843] shmem_file_read_iter+0x477/0x540 [ 95.645532][ T6843] copy_splice_read+0x3c1/0x5f0 [ 95.650460][ T6843] splice_direct_to_actor+0x290/0x680 [ 95.655972][ T6843] do_splice_direct+0xda/0x150 [ 95.660829][ T6843] do_sendfile+0x380/0x650 [ 95.665310][ T6843] __x64_sys_sendfile64+0x105/0x150 [ 95.670533][ T6843] x64_sys_call+0xb39/0x2fb0 [ 95.675162][ T6843] do_syscall_64+0xd2/0x200 [ 95.679696][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.685617][ T6843] [ 95.687957][ T6843] value changed: 0x19eb6f61 -> 0x1a8405e2 [ 95.693791][ T6843] [ 95.696142][ T6843] Reported by Kernel Concurrency Sanitizer on: [ 95.702312][ T6843] CPU: 1 UID: 0 PID: 6843 Comm: syz.1.1166 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 95.714762][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.725010][ T6843] ================================================================== [ 96.139827][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.215873][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.256540][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.355792][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.439077][ T51] bridge_slave_1: left allmulticast mode [ 96.444975][ T51] bridge_slave_1: left promiscuous mode [ 96.450848][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.460258][ T51] bridge_slave_0: left allmulticast mode [ 96.466036][ T51] bridge_slave_0: left promiscuous mode [ 96.471855][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.599454][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.609837][ T51] bond0 (unregistering): Released all slaves [ 96.618867][ T51] bond1 (unregistering): Released all slaves [ 96.746625][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.754118][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.761800][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.769269][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.779331][ T51] veth1_macvtap: left promiscuous mode [ 96.784886][ T51] veth0_macvtap: left promiscuous mode [ 96.790407][ T51] veth1_vlan: left promiscuous mode [ 96.795780][ T51] veth0_vlan: left promiscuous mode [ 96.859220][ T51] team0 (unregistering): Port device team_slave_1 removed [ 96.869015][ T51] team0 (unregistering): Port device team_slave_0 removed [ 97.206606][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.244768][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.314468][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.365115][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.429131][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.476528][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.527159][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.586485][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.669334][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.706676][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.746307][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.795928][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.876453][ T51] bridge_slave_1: left allmulticast mode [ 97.882191][ T51] bridge_slave_1: left promiscuous mode [ 97.887952][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.895689][ T51] bridge_slave_0: left allmulticast mode [ 97.901347][ T51] bridge_slave_0: left promiscuous mode [ 97.907067][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.915398][ T51] bridge_slave_1: left allmulticast mode [ 97.921118][ T51] bridge_slave_1: left promiscuous mode [ 97.926844][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.935010][ T51] bridge_slave_0: left allmulticast mode [ 97.940770][ T51] bridge_slave_0: left promiscuous mode [ 97.946625][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.035561][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.045001][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.054216][ T51] bond0 (unregistering): Released all slaves [ 98.087682][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.098096][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.108136][ T51] bond0 (unregistering): Released all slaves [ 98.185864][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.195597][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.205262][ T51] bond0 (unregistering): Released all slaves [ 98.246202][ T51] tipc: Disabling bearer [ 98.251499][ T51] tipc: Left network mode [ 98.259087][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.266878][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.276552][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.284050][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.291877][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.299871][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.307538][ T51] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 98.314409][ T51] batman_adv: batadv0: Removing interface: ipvlan2 [ 98.321977][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.329642][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.337388][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.344963][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.357663][ T51] veth1_macvtap: left promiscuous mode [ 98.363328][ T51] veth1_vlan: left promiscuous mode [ 98.368832][ T51] veth0_vlan: left promiscuous mode [ 98.374663][ T51] veth1_macvtap: left promiscuous mode [ 98.380380][ T51] veth0_macvtap: left promiscuous mode [ 98.460155][ T51] team0 (unregistering): Port device team_slave_1 removed [ 98.469840][ T51] team0 (unregistering): Port device team_slave_0 removed [ 98.528524][ T51] team0 (unregistering): Port device team_slave_1 removed [ 98.538254][ T51] team0 (unregistering): Port device team_slave_0 removed [ 98.586427][ T51] team0 (unregistering): Port device team_slave_1 removed [ 98.596096][ T51] team0 (unregistering): Port device team_slave_0 removed [ 98.626658][ T10] lo speed is unknown, defaulting to 1000 [ 98.632466][ T10] infiniband qyz2: ib_query_port failed (-19) [ 99.360020][ T51] IPVS: stop unused estimator thread 0... [ 99.366692][ T51] IPVS: stop unused estimator thread 0...