last executing test programs: 1.388964349s ago: executing program 2 (id=1213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000009b82428c9ba656277af613f6916100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.387245339s ago: executing program 2 (id=1214): mkdir(&(0x7f0000000000)='./file0\x00', 0xe6) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x100000000000, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0xffffffffffffffff, 0x0, 0x9e22}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000004}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x2038058, &(0x7f0000000600)={[{@noblock_validity}, {@minixdf}, {@dioread_nolock}, {@resuid}, {@noquota}, {@min_batch_time}, {@nojournal_checksum}]}, 0xff, 0x54b, &(0x7f0000002080)="$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") 1.313375303s ago: executing program 3 (id=1217): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1b3}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}]}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0x4, 0x7fc00, 0x922}, &(0x7f0000000180)=0x10) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1.224945727s ago: executing program 3 (id=1221): r0 = socket$inet6(0x10, 0x3, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x20000000000000dd, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24000851}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000000b) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2040, 0x9e) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) (async) r10 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) (async) r11 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='neigh_update\x00', r12, 0x0, 0xa895}, 0x18) 1.15106512s ago: executing program 3 (id=1224): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) utime(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) futex(&(0x7f00000040c0), 0x86, 0x0, 0x0, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="9c30efa4e67f2b09a88c0453", 0xc}, {&(0x7f0000000340)="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", 0xff}], 0x2, &(0x7f0000000a00)=[{0x98, 0x110, 0x3, "ef8df81faa1432fe9bcac8bc1c9b97751257d427610236c30e791b6b432be70c0cc170575942fad31c6d6a642024c66c21b32636ecc964572258328d75c3092c0b8ebed9bd2e2688548d86b8553f3ec1c1d7ae6efe6ff8821dbd79956dbdac85c151c19f1d8fbea25d4503cb3d16a6b9b3a451b3402e8e71471695b43619895d76fd"}, {0x108, 0x10c, 0x0, "5461622a9924e787d1f1ce52ea9bc9baed2d77445e198c93e2c4b2fd15c048e41fae5ebd576ed6ab21cf6bde518f9d364296d6c692ba42ac8bcc7a1afe1ee393db35efd03ae0666980bf4be4d953d92a313d45d24cc523c1c0f07e88beb6d10b7906749b153fbed264a136ae13fe3c0dfc296dfe756453d4f67f813f1d2317d14091d93cfe0d006779f57cea3ec831cb57c395c6b93795bb1d72b31e7884807555c57c66d58621d2beaf14b6133b670305a9a1bc012c7633d31cb9093ea2843c3601c75d8c5c8e29dd1a597d069e267ff301ee1be37de56e8f12a51899a55c2fa6839fea56f48dcbcea631845363e45ebcbfa14fc3"}, {0x78, 0x0, 0x87, "15e90b4ab98268dd884be4b7dc386c04bd3148d849077e6a9dd2fb7386728dcc93c620377d6c6ae5e82b4cd0a3223fc0e93e9845af357b6787dcff919468dfd7804097ca758f0912a4d0b3f70fadbc774fc61df2eb38d048dab07c813fb7f8c39baf6f35dd4af6"}], 0x218}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='rpm_return_int\x00', r5, 0x0, 0xffffffff}, 0x18) syz_open_dev$usbfs(&(0x7f0000000300), 0xf, 0xc340) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) 1.1506745s ago: executing program 4 (id=1225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000009b82428c9ba656277af613f6916100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.13076432s ago: executing program 4 (id=1226): fstatfs(0xffffffffffffffff, 0x0) 976.850308ms ago: executing program 4 (id=1227): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x6, 0x0, 0x3, 0x7fff0000}, {0x2, 0x0, 0x4, 0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x810, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xfffffffffffff000, 0x143802) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x101040, 0x10, 0x10}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1404, 0x801, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48015}, 0x20040050) fstatfs(0xffffffffffffffff, 0x0) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) 938.489379ms ago: executing program 4 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xffffffffffffffeb, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r8, 0x0}]) write(r0, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000380)=0x100) r11 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000280), &(0x7f00000001c0)=r11}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xceb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg$unix(r8, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r9, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) lsetxattr$security_selinux(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0) 882.062401ms ago: executing program 3 (id=1231): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (fail_nth: 4) 738.783248ms ago: executing program 0 (id=1233): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000000000000004, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x7, 0x180) semop(r2, &(0x7f0000000200)=[{0x4, 0xa7dd, 0x3000}], 0x1) semtimedop(r2, &(0x7f0000000080)=[{0x4, 0x6000, 0x800}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000004000000020000000000000024000000000000002900000032"], 0x40}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) dup(r8) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 664.696221ms ago: executing program 3 (id=1235): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)={0x2c, r1, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000001900030c00000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="15000300000000f1f5f873636c1e82e36fa1366447c0000015000400000000000000000082e11e0974088aea0100000008000900b7"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) 416.676272ms ago: executing program 0 (id=1236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 416.195842ms ago: executing program 2 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 415.841112ms ago: executing program 2 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x280, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) (fail_nth: 4) 350.376965ms ago: executing program 2 (id=1239): r0 = open$dir(&(0x7f0000000340)='.\x00', 0x101000, 0x44) symlinkat(&(0x7f0000002040)='./file0\x00', r0, &(0x7f0000000000)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x300008c}, 0x18, 0x0) 349.302145ms ago: executing program 3 (id=1241): socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x1b, "c90900917d1ee422a7127949dc4c323333badf70d1d2cde6767566"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00'}, 0x18) getpgrp(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x0, 0x3) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 348.845135ms ago: executing program 2 (id=1242): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sync() syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) unshare(0x62040200) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg1\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x305, &(0x7f0000000200)="$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") ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000005c0)=0xffff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 348.244395ms ago: executing program 1 (id=1243): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8200008a}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf250f000004"], 0x14}}, 0x2000c000) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d500987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f353b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc081}, 0x20000000) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') open(&(0x7f0000002ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x308102, 0x11) 241.48117ms ago: executing program 0 (id=1244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r3, &(0x7f0000000280)={0x0, ""/1}, 0x9, 0x2, 0x3000) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x1, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0xec, 0x3}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000340)={0x2, 'batadv_slave_1\x00', {0x7}, 0xb}) 128.626255ms ago: executing program 1 (id=1245): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xcab, "d2b852"}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/54) 127.843965ms ago: executing program 0 (id=1246): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000000000000004, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x7, 0x180) semop(r2, &(0x7f0000000200)=[{0x4, 0xa7dd, 0x3000}], 0x1) semtimedop(r2, &(0x7f0000000080)=[{0x4, 0x6000, 0x800}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000004000000020000000000000024000000000000002900000032"], 0x40}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) dup(r8) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200ef0a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 127.538225ms ago: executing program 1 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 111.360515ms ago: executing program 1 (id=1248): setitimer(0x1, 0x0, 0x0) 69.348947ms ago: executing program 1 (id=1249): socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 68.706767ms ago: executing program 4 (id=1250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x290, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x254, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x23c, 0x1, [@m_ct={0x138, 0xa, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "efe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x1c, 0x0, 0x7, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x101, 0x10000000, 0x0, 0x2}}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0x85, 0x6, "a9b0373813e0f2da6e8f5cd5c2f0e993b814de8645c7545f5f50c5380480ed4ef5013ca2d00164d47399225c275c36df8b272a85bb6c9c930de5c21cfca20d72ffe99adec2667fa15f5dc9985c817cb94e99bf8eae0ce64edfaa10bc97d348e5ca551e710bda8f076cf48aeee6d7cc33aeaa9d11c113860c15a1e0dee5e6a21d94"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x100, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000004, 0x7, 0x4, 0x3, 0xfeb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x0, 0x306, 0x3b7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x365, 0xfffffff9, 0x20000000, 0x3, 0x6}, 0x3}}]}, {0x52, 0x6, "1ed1e101d1b104ec1ebbdfe3280f77c04406f2a7851d21c75fd1babc98923c5911bdfafd072bcc4359c689f7c81b73e86aad04af7e3d4dfddec55038e9cfccb003e7b84ff7d7d399ea15c8ce46af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x81800) shutdown(r0, 0x2) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 67.495567ms ago: executing program 0 (id=1251): r0 = open$dir(&(0x7f0000000340)='.\x00', 0x101000, 0x44) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0xffff, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147245ed5bdcdfaf4e9530630c66996c4905b"}, 0xd8) symlinkat(&(0x7f0000002040)='./file0\x00', r0, &(0x7f0000000000)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 65.700817ms ago: executing program 1 (id=1252): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) socket$inet(0x2, 0x6, 0x20000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x111) r5 = openat(r3, &(0x7f0000000440)='./file0\x00', 0x1a1043, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000004000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe910}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0x5) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$rds(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) set_mempolicy(0x4000, &(0x7f0000000080)=0xfffffffffffffffb, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r8, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 605.21µs ago: executing program 0 (id=1253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7daa000000000000711014000000000089a3d4ff0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setfsgid(0xee00) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) (async) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {0xb}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f00000001c0)='host1x_channel_submit_complete\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 4 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009d4eb10b5cca193ec98efb6e1257ecbdc4c739678ecf17b8eb45c05e4baa70caf5947b5baf46d0b9b7c399d08296cc28ee5e20e5f3730b0beb05dddd87c99e1f57f257f55b38d2168fcad2722bf52c31d8bfc1592bcc942e50381449ddd7"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x8, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}}}, &(0x7f0000000340)=0x84) ptrace(0x10, r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) accept4$unix(r7, 0x0, &(0x7f0000000240), 0x80800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}]}, 0x154}}, 0x20004000) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c595d491dea40ed58175a2a5", 0x98}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="8b332e0856724654a470000000000014fff600000003e1bff545d74c000000d51a3a2401629b93556478bded37f505f8bdf559ba27f282965b66773811dee97cbf669952e9c2f396bc9aa5f49b00f10ffd2fd7b14d6bfb0baf3c4c5b3444a49ece3584005b1904842c48296487a2a8e13c421e614556f5029f3a71d4f23b195f3e0bde5f3515672f8f2359f1e816f6b5dcba819c364111ce1fa14e5fbcbdb46fca3d296ee2dcdcb1799eb9b0936f8a3aa73afe34605d0238349009850cd19ddf15a971e15ca424ed003a3c8289d47b8ebb9e86285c960c64d34682215d447ab5602ec3a576317a91b08f41475d779bd13d763adf08"], 0x20}}, 0x40000) kernel console output (not intermixed with test programs): [ 76.451436][ T5443] ? __fget_files+0x184/0x1c0 [ 76.451466][ T5443] ksys_read+0xda/0x1a0 [ 76.451499][ T5443] __x64_sys_read+0x40/0x50 [ 76.451540][ T5443] x64_sys_call+0x27c0/0x3000 [ 76.451569][ T5443] do_syscall_64+0xd2/0x200 [ 76.451597][ T5443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.451691][ T5443] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.451736][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.451763][ T5443] RIP: 0033:0x7fc5b46fe15c [ 76.451780][ T5443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.451803][ T5443] RSP: 002b:00007fc5b315f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.451867][ T5443] RAX: ffffffffffffffda RBX: 00007fc5b4955fa0 RCX: 00007fc5b46fe15c [ 76.451882][ T5443] RDX: 000000000000000f RSI: 00007fc5b315f0a0 RDI: 0000000000000004 [ 76.451897][ T5443] RBP: 00007fc5b315f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.451913][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.452006][ T5443] R13: 00007fc5b4956038 R14: 00007fc5b4955fa0 R15: 00007ffe19ea8cf8 [ 76.452028][ T5443] [ 76.774110][ T5456] FAULT_INJECTION: forcing a failure. [ 76.774110][ T5456] name failslab, interval 1, probability 0, space 0, times 0 [ 76.786834][ T5456] CPU: 1 UID: 0 PID: 5456 Comm: syz.0.755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.786869][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.786917][ T5456] Call Trace: [ 76.786923][ T5456] [ 76.786931][ T5456] __dump_stack+0x1d/0x30 [ 76.786955][ T5456] dump_stack_lvl+0xe8/0x140 [ 76.786981][ T5456] dump_stack+0x15/0x1b [ 76.787082][ T5456] should_fail_ex+0x265/0x280 [ 76.787116][ T5456] ? resv_map_alloc+0x32/0x190 [ 76.787167][ T5456] should_failslab+0x8c/0xb0 [ 76.787267][ T5456] __kmalloc_cache_noprof+0x4c/0x4a0 [ 76.787421][ T5456] ? vfs_write+0x7e8/0x960 [ 76.787455][ T5456] resv_map_alloc+0x32/0x190 [ 76.787551][ T5456] hugetlbfs_get_inode+0x67/0x370 [ 76.787590][ T5456] hugetlb_file_setup+0x192/0x3d0 [ 76.787696][ T5456] ksys_mmap_pgoff+0x157/0x310 [ 76.787721][ T5456] x64_sys_call+0x14a3/0x3000 [ 76.787745][ T5456] do_syscall_64+0xd2/0x200 [ 76.787768][ T5456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.787804][ T5456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.787854][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.787881][ T5456] RIP: 0033:0x7fbecef6f749 [ 76.787901][ T5456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.787924][ T5456] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.787949][ T5456] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 76.787996][ T5456] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 76.788012][ T5456] RBP: 00007fbecd9cf090 R08: ffffffffffffffff R09: 0000000000000000 [ 76.788027][ T5456] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 76.788070][ T5456] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 76.788089][ T5456] [ 76.972980][ T5459] xt_connbytes: Forcing CT accounting to be enabled [ 76.979686][ T5459] Cannot find set identified by id 0 to match [ 77.522537][ T5492] FAULT_INJECTION: forcing a failure. [ 77.522537][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 77.535338][ T5492] CPU: 0 UID: 0 PID: 5492 Comm: syz.3.770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.535368][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.535383][ T5492] Call Trace: [ 77.535392][ T5492] [ 77.535401][ T5492] __dump_stack+0x1d/0x30 [ 77.535453][ T5492] dump_stack_lvl+0xe8/0x140 [ 77.535480][ T5492] dump_stack+0x15/0x1b [ 77.535502][ T5492] should_fail_ex+0x265/0x280 [ 77.535546][ T5492] should_failslab+0x8c/0xb0 [ 77.535600][ T5492] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 77.535631][ T5492] ? __alloc_skb+0x101/0x320 [ 77.535670][ T5492] __alloc_skb+0x101/0x320 [ 77.535704][ T5492] ? audit_log_start+0x342/0x720 [ 77.535768][ T5492] audit_log_start+0x3a0/0x720 [ 77.535791][ T5492] ? kstrtouint+0x76/0xc0 [ 77.535825][ T5492] audit_seccomp+0x48/0x100 [ 77.535912][ T5492] ? __seccomp_filter+0x82d/0x1250 [ 77.535947][ T5492] __seccomp_filter+0x83e/0x1250 [ 77.535979][ T5492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.536021][ T5492] ? vfs_write+0x7e8/0x960 [ 77.536114][ T5492] __secure_computing+0x82/0x150 [ 77.536147][ T5492] syscall_trace_enter+0xcf/0x1e0 [ 77.536183][ T5492] do_syscall_64+0xac/0x200 [ 77.536267][ T5492] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.536296][ T5492] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.536374][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.536401][ T5492] RIP: 0033:0x7f7ad7aaf749 [ 77.536420][ T5492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.536441][ T5492] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.536461][ T5492] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 77.536472][ T5492] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000004 [ 77.536508][ T5492] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.536524][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.536535][ T5492] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 77.536556][ T5492] [ 77.777673][ T3540] Bluetooth: hci0: command 0x1003 tx timeout [ 77.783832][ T4235] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.836171][ T5494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=5494 comm=syz.3.771 [ 77.837785][ T4235] Bluetooth: hci1: command 0x1003 tx timeout [ 77.849748][ T4263] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 78.084590][ T5496] syzkaller0: entered promiscuous mode [ 78.090194][ T5496] syzkaller0: entered allmulticast mode [ 78.201387][ T5515] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 78.207982][ T5515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.215767][ T5515] vhci_hcd vhci_hcd.0: Device attached [ 78.280751][ T5516] vhci_hcd: connection closed [ 78.287662][ T2853] vhci_hcd: stop threads [ 78.296670][ T2853] vhci_hcd: release socket [ 78.301161][ T2853] vhci_hcd: disconnect device [ 78.419575][ T5542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 78.438824][ T5545] FAULT_INJECTION: forcing a failure. [ 78.438824][ T5545] name failslab, interval 1, probability 0, space 0, times 0 [ 78.451607][ T5545] CPU: 0 UID: 0 PID: 5545 Comm: syz.4.791 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.451648][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.451665][ T5545] Call Trace: [ 78.451673][ T5545] [ 78.451683][ T5545] __dump_stack+0x1d/0x30 [ 78.451712][ T5545] dump_stack_lvl+0xe8/0x140 [ 78.451740][ T5545] dump_stack+0x15/0x1b [ 78.451837][ T5545] should_fail_ex+0x265/0x280 [ 78.451883][ T5545] should_failslab+0x8c/0xb0 [ 78.451933][ T5545] __kmalloc_noprof+0xa5/0x570 [ 78.451972][ T5545] ? iovec_from_user+0x84/0x210 [ 78.452046][ T5545] iovec_from_user+0x84/0x210 [ 78.452075][ T5545] __import_iovec+0xf3/0x540 [ 78.452104][ T5545] ? mntput_no_expire+0x6f/0x440 [ 78.452134][ T5545] import_iovec+0x61/0x80 [ 78.452202][ T5545] ___sys_sendmsg+0x146/0x1d0 [ 78.452244][ T5545] __sys_sendmmsg+0x178/0x300 [ 78.452276][ T5545] __x64_sys_sendmmsg+0x57/0x70 [ 78.452296][ T5545] x64_sys_call+0x1c4a/0x3000 [ 78.452341][ T5545] do_syscall_64+0xd2/0x200 [ 78.452440][ T5545] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.452472][ T5545] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.452519][ T5545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.452610][ T5545] RIP: 0033:0x7ff1f3f0f749 [ 78.452631][ T5545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.452655][ T5545] RSP: 002b:00007ff1f2977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.452680][ T5545] RAX: ffffffffffffffda RBX: 00007ff1f4165fa0 RCX: 00007ff1f3f0f749 [ 78.452692][ T5545] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 78.452705][ T5545] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000000 [ 78.452743][ T5545] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.452760][ T5545] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 78.452798][ T5545] [ 79.026545][ T5557] netlink: 'syz.4.795': attribute type 7 has an invalid length. [ 79.034364][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 79.159181][ T5563] FAULT_INJECTION: forcing a failure. [ 79.159181][ T5563] name failslab, interval 1, probability 0, space 0, times 0 [ 79.171910][ T5563] CPU: 1 UID: 0 PID: 5563 Comm: syz.3.799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.171944][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.171958][ T5563] Call Trace: [ 79.171972][ T5563] [ 79.171979][ T5563] __dump_stack+0x1d/0x30 [ 79.172047][ T5563] dump_stack_lvl+0xe8/0x140 [ 79.172066][ T5563] dump_stack+0x15/0x1b [ 79.172090][ T5563] should_fail_ex+0x265/0x280 [ 79.172127][ T5563] should_failslab+0x8c/0xb0 [ 79.172209][ T5563] __kmalloc_noprof+0xa5/0x570 [ 79.172238][ T5563] ? security_inode_init_security+0xc5/0x330 [ 79.172289][ T5563] ? current_umask+0x2f/0x40 [ 79.172331][ T5563] security_inode_init_security+0xc5/0x330 [ 79.172361][ T5563] ? __pfx_shmem_initxattrs+0x10/0x10 [ 79.172396][ T5563] shmem_mknod+0xad/0x180 [ 79.172488][ T5563] shmem_create+0x34/0x50 [ 79.172511][ T5563] ? __pfx_shmem_create+0x10/0x10 [ 79.172571][ T5563] path_openat+0x1105/0x2170 [ 79.172608][ T5563] do_filp_open+0x109/0x230 [ 79.172643][ T5563] do_sys_openat2+0xa6/0x110 [ 79.172669][ T5563] __x64_sys_openat+0xf2/0x120 [ 79.172767][ T5563] x64_sys_call+0x2eab/0x3000 [ 79.172791][ T5563] do_syscall_64+0xd2/0x200 [ 79.172867][ T5563] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.172951][ T5563] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.172995][ T5563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.173018][ T5563] RIP: 0033:0x7f7ad7aaf749 [ 79.173033][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.173071][ T5563] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.173096][ T5563] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 79.173108][ T5563] RDX: 0000000000040042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 79.173120][ T5563] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.173174][ T5563] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 79.173189][ T5563] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 79.173211][ T5563] [ 79.483293][ T5570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5570 comm=syz.2.798 [ 79.588321][ T5586] netlink: 'syz.2.803': attribute type 13 has an invalid length. [ 79.597636][ T5584] netdevsim netdevsim3: Direct firmware load for ÿÿÿÿ failed with error -2 [ 79.630422][ T5592] FAULT_INJECTION: forcing a failure. [ 79.630422][ T5592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.643592][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz.4.808 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.643626][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.643639][ T5592] Call Trace: [ 79.643700][ T5592] [ 79.643708][ T5592] __dump_stack+0x1d/0x30 [ 79.643734][ T5592] dump_stack_lvl+0xe8/0x140 [ 79.643792][ T5592] dump_stack+0x15/0x1b [ 79.643810][ T5592] should_fail_ex+0x265/0x280 [ 79.643988][ T5592] should_fail+0xb/0x20 [ 79.644008][ T5592] should_fail_usercopy+0x1a/0x20 [ 79.644035][ T5592] _copy_from_user+0x1c/0xb0 [ 79.644066][ T5592] __x64_sys_epoll_ctl+0x92/0x100 [ 79.644148][ T5592] x64_sys_call+0x706/0x3000 [ 79.644170][ T5592] do_syscall_64+0xd2/0x200 [ 79.644195][ T5592] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.644258][ T5592] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.644302][ T5592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.644387][ T5592] RIP: 0033:0x7ff1f3f0f749 [ 79.644405][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.644429][ T5592] RSP: 002b:00007ff1f2977038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 79.644449][ T5592] RAX: ffffffffffffffda RBX: 00007ff1f4165fa0 RCX: 00007ff1f3f0f749 [ 79.644464][ T5592] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000006 [ 79.644480][ T5592] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000000 [ 79.644494][ T5592] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 79.644512][ T5592] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 79.644531][ T5592] [ 79.843748][ T29] kauditd_printk_skb: 21122 callbacks suppressed [ 79.843768][ T29] audit: type=1400 audit(2000000038.530:100627): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.894881][ T29] audit: type=1400 audit(2000000038.530:100628): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.895717][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.916188][ T29] audit: type=1400 audit(2000000038.530:100629): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.922738][ T3042] audit: audit_lost=31390 audit_rate_limit=0 audit_backlog_limit=64 [ 79.922757][ T3042] audit: backlog limit exceeded [ 79.955274][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.956978][ T29] audit: type=1400 audit(2000000038.530:100630): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.963520][ T3042] audit: audit_lost=31391 audit_rate_limit=0 audit_backlog_limit=64 [ 79.963537][ T3042] audit: backlog limit exceeded [ 80.072098][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.079409][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.095842][ T5600] netlink: 'syz.4.811': attribute type 11 has an invalid length. [ 80.135919][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.146670][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.217565][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.226545][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.258447][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.318930][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.331735][ T5617] netlink: 'syz.3.815': attribute type 13 has an invalid length. [ 80.426750][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.434135][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.463307][ T5621] netlink: 'syz.2.816': attribute type 6 has an invalid length. [ 80.514124][ T5617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.525108][ T5617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.613475][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.623297][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.652257][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.676913][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.772998][ T5636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5636 comm=syz.4.819 [ 80.864238][ T5644] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 80.887156][ T5644] team0: Port device netdevsim1 added [ 80.914726][ T5652] FAULT_INJECTION: forcing a failure. [ 80.914726][ T5652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.927924][ T5652] CPU: 1 UID: 0 PID: 5652 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.927959][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.927976][ T5652] Call Trace: [ 80.927984][ T5652] [ 80.927991][ T5652] __dump_stack+0x1d/0x30 [ 80.928034][ T5652] dump_stack_lvl+0xe8/0x140 [ 80.928060][ T5652] dump_stack+0x15/0x1b [ 80.928084][ T5652] should_fail_ex+0x265/0x280 [ 80.928129][ T5652] should_fail+0xb/0x20 [ 80.928150][ T5652] should_fail_usercopy+0x1a/0x20 [ 80.928202][ T5652] _copy_to_user+0x20/0xa0 [ 80.928236][ T5652] simple_read_from_buffer+0xb5/0x130 [ 80.928270][ T5652] proc_fail_nth_read+0x10e/0x150 [ 80.928434][ T5652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.928518][ T5652] vfs_read+0x1a8/0x770 [ 80.928541][ T5652] ? __rcu_read_unlock+0x4f/0x70 [ 80.928567][ T5652] ? __fget_files+0x184/0x1c0 [ 80.928602][ T5652] ksys_read+0xda/0x1a0 [ 80.928704][ T5652] __x64_sys_read+0x40/0x50 [ 80.928733][ T5652] x64_sys_call+0x27c0/0x3000 [ 80.928764][ T5652] do_syscall_64+0xd2/0x200 [ 80.928789][ T5652] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.928894][ T5652] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.928940][ T5652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.928969][ T5652] RIP: 0033:0x7f3ce626e15c [ 80.929060][ T5652] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.929084][ T5652] RSP: 002b:00007f3ce4cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.929110][ T5652] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626e15c [ 80.929125][ T5652] RDX: 000000000000000f RSI: 00007f3ce4cd70a0 RDI: 0000000000000004 [ 80.929141][ T5652] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.929185][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.929251][ T5652] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 80.929274][ T5652] [ 81.237566][ T5661] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.276324][ T5668] FAULT_INJECTION: forcing a failure. [ 81.276324][ T5668] name failslab, interval 1, probability 0, space 0, times 0 [ 81.289097][ T5668] CPU: 1 UID: 0 PID: 5668 Comm: syz.1.837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.289132][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.289224][ T5668] Call Trace: [ 81.289233][ T5668] [ 81.289243][ T5668] __dump_stack+0x1d/0x30 [ 81.289272][ T5668] dump_stack_lvl+0xe8/0x140 [ 81.289298][ T5668] dump_stack+0x15/0x1b [ 81.289338][ T5668] should_fail_ex+0x265/0x280 [ 81.289382][ T5668] should_failslab+0x8c/0xb0 [ 81.289419][ T5668] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 81.289643][ T5668] ? sidtab_sid2str_get+0xa0/0x130 [ 81.289683][ T5668] kmemdup_noprof+0x2b/0x70 [ 81.289715][ T5668] sidtab_sid2str_get+0xa0/0x130 [ 81.289804][ T5668] security_sid_to_context_core+0x1eb/0x2e0 [ 81.289844][ T5668] security_sid_to_context_force+0x2a/0x40 [ 81.289891][ T5668] selinux_inode_init_security+0x31f/0x3c0 [ 81.290003][ T5668] security_inode_init_security+0x149/0x330 [ 81.290030][ T5668] ? __pfx_shmem_initxattrs+0x10/0x10 [ 81.290120][ T5668] shmem_mknod+0xad/0x180 [ 81.290197][ T5668] shmem_create+0x34/0x50 [ 81.290240][ T5668] ? __pfx_shmem_create+0x10/0x10 [ 81.290310][ T5668] path_openat+0x1105/0x2170 [ 81.290343][ T5668] do_filp_open+0x109/0x230 [ 81.290453][ T5668] do_sys_openat2+0xa6/0x110 [ 81.290481][ T5668] __x64_sys_creat+0x65/0x90 [ 81.290507][ T5668] x64_sys_call+0x2da3/0x3000 [ 81.290537][ T5668] do_syscall_64+0xd2/0x200 [ 81.290615][ T5668] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.290646][ T5668] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.290685][ T5668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.290736][ T5668] RIP: 0033:0x7fc5b46ff749 [ 81.290803][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.290822][ T5668] RSP: 002b:00007fc5b315f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 81.290840][ T5668] RAX: ffffffffffffffda RBX: 00007fc5b4955fa0 RCX: 00007fc5b46ff749 [ 81.290852][ T5668] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 81.290919][ T5668] RBP: 00007fc5b315f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.290935][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.290951][ T5668] R13: 00007fc5b4956038 R14: 00007fc5b4955fa0 R15: 00007ffe19ea8cf8 [ 81.290973][ T5668] [ 81.558158][ T5676] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 81.578293][ T5676] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 81.592266][ T5681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.843'. [ 81.634483][ T5687] FAULT_INJECTION: forcing a failure. [ 81.634483][ T5687] name failslab, interval 1, probability 0, space 0, times 0 [ 81.647368][ T5687] CPU: 0 UID: 0 PID: 5687 Comm: syz.0.845 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.647435][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.647450][ T5687] Call Trace: [ 81.647457][ T5687] [ 81.647470][ T5687] __dump_stack+0x1d/0x30 [ 81.647530][ T5687] dump_stack_lvl+0xe8/0x140 [ 81.647601][ T5687] dump_stack+0x15/0x1b [ 81.647625][ T5687] should_fail_ex+0x265/0x280 [ 81.647731][ T5687] should_failslab+0x8c/0xb0 [ 81.647781][ T5687] kmem_cache_alloc_noprof+0x50/0x480 [ 81.647846][ T5687] ? skb_clone+0x151/0x1f0 [ 81.647879][ T5687] skb_clone+0x151/0x1f0 [ 81.647896][ T5687] __netlink_deliver_tap+0x2c9/0x500 [ 81.647966][ T5687] netlink_unicast+0x66b/0x690 [ 81.648008][ T5687] netlink_sendmsg+0x58b/0x6b0 [ 81.648035][ T5687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.648064][ T5687] __sock_sendmsg+0x145/0x180 [ 81.648097][ T5687] ____sys_sendmsg+0x31e/0x4e0 [ 81.648124][ T5687] ___sys_sendmsg+0x17b/0x1d0 [ 81.648153][ T5687] __x64_sys_sendmsg+0xd4/0x160 [ 81.648174][ T5687] x64_sys_call+0x191e/0x3000 [ 81.648268][ T5687] do_syscall_64+0xd2/0x200 [ 81.648296][ T5687] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.648373][ T5687] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.648419][ T5687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.648448][ T5687] RIP: 0033:0x7fbecef6f749 [ 81.648465][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.648483][ T5687] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.648535][ T5687] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 81.648552][ T5687] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 81.648568][ T5687] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 81.648657][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.648673][ T5687] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 81.648696][ T5687] [ 81.952449][ T5702] bridge0: entered promiscuous mode [ 81.958045][ T5702] macsec1: entered promiscuous mode [ 81.964025][ T5702] bridge0: port 1(macsec1) entered blocking state [ 81.970562][ T5702] bridge0: port 1(macsec1) entered disabled state [ 81.980018][ T5702] macsec1: entered allmulticast mode [ 81.985342][ T5702] bridge0: entered allmulticast mode [ 81.992159][ T5702] macsec1: left allmulticast mode [ 81.997228][ T5702] bridge0: left allmulticast mode [ 82.003106][ T5702] bridge0: left promiscuous mode [ 82.172926][ T5719] netlink: 68 bytes leftover after parsing attributes in process `syz.2.858'. [ 82.347963][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 82.447025][ T5731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.863'. [ 82.513632][ T5737] FAULT_INJECTION: forcing a failure. [ 82.513632][ T5737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.527044][ T5737] CPU: 1 UID: 0 PID: 5737 Comm: syz.2.866 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.527076][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.527089][ T5737] Call Trace: [ 82.527095][ T5737] [ 82.527103][ T5737] __dump_stack+0x1d/0x30 [ 82.527129][ T5737] dump_stack_lvl+0xe8/0x140 [ 82.527246][ T5737] dump_stack+0x15/0x1b [ 82.527309][ T5737] should_fail_ex+0x265/0x280 [ 82.527405][ T5737] should_fail+0xb/0x20 [ 82.527423][ T5737] should_fail_usercopy+0x1a/0x20 [ 82.527520][ T5737] _copy_from_user+0x1c/0xb0 [ 82.527560][ T5737] __sys_bpf+0x183/0x7c0 [ 82.527586][ T5737] __x64_sys_bpf+0x41/0x50 [ 82.527674][ T5737] x64_sys_call+0x2aee/0x3000 [ 82.527698][ T5737] do_syscall_64+0xd2/0x200 [ 82.527721][ T5737] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.527823][ T5737] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.527959][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.527983][ T5737] RIP: 0033:0x7f3ce626f749 [ 82.527999][ T5737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.528032][ T5737] RSP: 002b:00007f3ce4cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.528052][ T5737] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626f749 [ 82.528065][ T5737] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 82.528078][ T5737] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.528091][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.528103][ T5737] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 82.528122][ T5737] [ 82.999208][ T5763] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 83.038296][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 83.054316][ T5763] bond1 (unregistering): Released all slaves [ 83.093365][ T5775] FAULT_INJECTION: forcing a failure. [ 83.093365][ T5775] name failslab, interval 1, probability 0, space 0, times 0 [ 83.106222][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: syz.0.881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.106248][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.106261][ T5775] Call Trace: [ 83.106299][ T5775] [ 83.106309][ T5775] __dump_stack+0x1d/0x30 [ 83.106336][ T5775] dump_stack_lvl+0xe8/0x140 [ 83.106362][ T5775] dump_stack+0x15/0x1b [ 83.106384][ T5775] should_fail_ex+0x265/0x280 [ 83.106474][ T5775] should_failslab+0x8c/0xb0 [ 83.106532][ T5775] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 83.106575][ T5775] ? sidtab_sid2str_get+0xa0/0x130 [ 83.106637][ T5775] kmemdup_noprof+0x2b/0x70 [ 83.106669][ T5775] sidtab_sid2str_get+0xa0/0x130 [ 83.106698][ T5775] security_sid_to_context_core+0x1eb/0x2e0 [ 83.106733][ T5775] security_sid_to_context_force+0x2a/0x40 [ 83.106854][ T5775] selinux_inode_init_security+0x31f/0x3c0 [ 83.106891][ T5775] security_inode_init_security+0x149/0x330 [ 83.106980][ T5775] ? __pfx_shmem_initxattrs+0x10/0x10 [ 83.107009][ T5775] shmem_mknod+0xad/0x180 [ 83.107041][ T5775] shmem_create+0x34/0x50 [ 83.107085][ T5775] ? __pfx_shmem_create+0x10/0x10 [ 83.107115][ T5775] path_openat+0x1105/0x2170 [ 83.107197][ T5775] do_filp_open+0x109/0x230 [ 83.107232][ T5775] do_sys_openat2+0xa6/0x110 [ 83.107252][ T5775] __x64_sys_creat+0x65/0x90 [ 83.107277][ T5775] x64_sys_call+0x2da3/0x3000 [ 83.107345][ T5775] do_syscall_64+0xd2/0x200 [ 83.107367][ T5775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.107396][ T5775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.107448][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.107482][ T5775] RIP: 0033:0x7fbecef6f749 [ 83.107500][ T5775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.107522][ T5775] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 83.107568][ T5775] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 83.107584][ T5775] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0 [ 83.107596][ T5775] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 83.107632][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.107651][ T5775] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 83.107673][ T5775] [ 83.138824][ T5777] FAULT_INJECTION: forcing a failure. [ 83.138824][ T5777] name failslab, interval 1, probability 0, space 0, times 0 [ 83.354102][ T5777] CPU: 1 UID: 0 PID: 5777 Comm: syz.2.882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.354182][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.354197][ T5777] Call Trace: [ 83.354206][ T5777] [ 83.354215][ T5777] __dump_stack+0x1d/0x30 [ 83.354241][ T5777] dump_stack_lvl+0xe8/0x140 [ 83.354266][ T5777] dump_stack+0x15/0x1b [ 83.354286][ T5777] should_fail_ex+0x265/0x280 [ 83.354380][ T5777] should_failslab+0x8c/0xb0 [ 83.354418][ T5777] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 83.354461][ T5777] ? __get_vm_area_node+0x106/0x1d0 [ 83.354557][ T5777] __get_vm_area_node+0x106/0x1d0 [ 83.354590][ T5777] __vmalloc_node_range_noprof+0x28c/0xed0 [ 83.354628][ T5777] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.354665][ T5777] ? selinux_file_open+0x2df/0x330 [ 83.354739][ T5777] ? __rcu_read_unlock+0x4f/0x70 [ 83.354769][ T5777] ? mntput+0x4b/0x80 [ 83.354794][ T5777] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.354845][ T5777] __vmalloc_noprof+0x83/0xc0 [ 83.354930][ T5777] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.354966][ T5777] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.355000][ T5777] ? bpf_prog_alloc+0x2a/0x150 [ 83.355093][ T5777] bpf_prog_alloc+0x3c/0x150 [ 83.355127][ T5777] __get_filter+0x92/0x230 [ 83.355162][ T5777] sk_reuseport_attach_filter+0x20/0x140 [ 83.355264][ T5777] sk_setsockopt+0x1890/0x20e0 [ 83.355356][ T5777] udp_lib_setsockopt+0x93/0x640 [ 83.355424][ T5777] udp_setsockopt+0x77/0xb0 [ 83.355454][ T5777] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 83.355483][ T5777] sock_common_setsockopt+0x69/0x80 [ 83.355522][ T5777] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 83.355554][ T5777] __sys_setsockopt+0x184/0x200 [ 83.355645][ T5777] __x64_sys_setsockopt+0x64/0x80 [ 83.355742][ T5777] x64_sys_call+0x20ec/0x3000 [ 83.355764][ T5777] do_syscall_64+0xd2/0x200 [ 83.355790][ T5777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.355824][ T5777] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.355858][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.355956][ T5777] RIP: 0033:0x7f3ce626f749 [ 83.355978][ T5777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.356001][ T5777] RSP: 002b:00007f3ce4cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.356020][ T5777] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626f749 [ 83.356032][ T5777] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 83.356045][ T5777] RBP: 00007f3ce4cd7090 R08: 0000000000000010 R09: 0000000000000000 [ 83.356056][ T5777] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 83.356069][ T5777] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 83.356119][ T5777] [ 83.356271][ T5777] syz.2.882: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 83.648766][ T5777] CPU: 1 UID: 0 PID: 5777 Comm: syz.2.882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.648798][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.648814][ T5777] Call Trace: [ 83.648823][ T5777] [ 83.648833][ T5777] __dump_stack+0x1d/0x30 [ 83.648935][ T5777] dump_stack_lvl+0xe8/0x140 [ 83.648961][ T5777] dump_stack+0x15/0x1b [ 83.648986][ T5777] warn_alloc+0x12b/0x1a0 [ 83.649024][ T5777] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 83.649078][ T5777] ? selinux_file_open+0x2df/0x330 [ 83.649121][ T5777] ? __rcu_read_unlock+0x4f/0x70 [ 83.649236][ T5777] ? mntput+0x4b/0x80 [ 83.649254][ T5777] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.649289][ T5777] __vmalloc_noprof+0x83/0xc0 [ 83.649361][ T5777] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.649435][ T5777] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 83.649480][ T5777] ? bpf_prog_alloc+0x2a/0x150 [ 83.649588][ T5777] bpf_prog_alloc+0x3c/0x150 [ 83.649677][ T5777] __get_filter+0x92/0x230 [ 83.649720][ T5777] sk_reuseport_attach_filter+0x20/0x140 [ 83.649767][ T5777] sk_setsockopt+0x1890/0x20e0 [ 83.649837][ T5777] udp_lib_setsockopt+0x93/0x640 [ 83.649880][ T5777] udp_setsockopt+0x77/0xb0 [ 83.649920][ T5777] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 83.650029][ T5777] sock_common_setsockopt+0x69/0x80 [ 83.650081][ T5777] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 83.650129][ T5777] __sys_setsockopt+0x184/0x200 [ 83.650175][ T5777] __x64_sys_setsockopt+0x64/0x80 [ 83.650221][ T5777] x64_sys_call+0x20ec/0x3000 [ 83.650291][ T5777] do_syscall_64+0xd2/0x200 [ 83.650322][ T5777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.650363][ T5777] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.650455][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.650485][ T5777] RIP: 0033:0x7f3ce626f749 [ 83.650505][ T5777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.650529][ T5777] RSP: 002b:00007f3ce4cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.650551][ T5777] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626f749 [ 83.650632][ T5777] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 83.650650][ T5777] RBP: 00007f3ce4cd7090 R08: 0000000000000010 R09: 0000000000000000 [ 83.650667][ T5777] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 83.650710][ T5777] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 83.650728][ T5777] [ 83.650748][ T5777] Mem-Info: [ 83.703186][ T5799] FAULT_INJECTION: forcing a failure. [ 83.703186][ T5799] name failslab, interval 1, probability 0, space 0, times 0 [ 83.705569][ T5777] active_anon:6951 inactive_anon:9 isolated_anon:0 [ 83.705569][ T5777] active_file:21921 inactive_file:2454 isolated_file:0 [ 83.705569][ T5777] unevictable:0 dirty:636 writeback:0 [ 83.705569][ T5777] slab_reclaimable:3237 slab_unreclaimable:102440 [ 83.705569][ T5777] mapped:29911 shmem:204 pagetables:1503 [ 83.705569][ T5777] sec_pagetables:0 bounce:0 [ 83.705569][ T5777] kernel_misc_reclaimable:0 [ 83.705569][ T5777] free:1789660 free_pcp:17728 free_cma:0 [ 83.710542][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.3.891 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.710584][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.710603][ T5799] Call Trace: [ 83.710614][ T5799] [ 83.710625][ T5799] __dump_stack+0x1d/0x30 [ 83.710657][ T5799] dump_stack_lvl+0xe8/0x140 [ 83.710684][ T5799] dump_stack+0x15/0x1b [ 83.710756][ T5799] should_fail_ex+0x265/0x280 [ 83.710804][ T5799] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 83.710836][ T5799] should_failslab+0x8c/0xb0 [ 83.710938][ T5799] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 83.710979][ T5799] ? shmem_alloc_inode+0x34/0x50 [ 83.711010][ T5799] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 83.711117][ T5799] shmem_alloc_inode+0x34/0x50 [ 83.711147][ T5799] alloc_inode+0x40/0x170 [ 83.711190][ T5799] new_inode+0x1d/0xe0 [ 83.711228][ T5799] shmem_get_inode+0x244/0x750 [ 83.711260][ T5799] __shmem_file_setup+0x113/0x210 [ 83.711359][ T5799] shmem_file_setup+0x3b/0x50 [ 83.711383][ T5799] __se_sys_memfd_create+0x2c3/0x590 [ 83.711430][ T5799] __x64_sys_memfd_create+0x31/0x40 [ 83.711455][ T5799] x64_sys_call+0x2ac2/0x3000 [ 83.711487][ T5799] do_syscall_64+0xd2/0x200 [ 83.711518][ T5799] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.711557][ T5799] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.711656][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.711704][ T5799] RIP: 0033:0x7f7ad7aaf749 [ 83.711724][ T5799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.711751][ T5799] RSP: 002b:00007f7ad650ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 83.711855][ T5799] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007f7ad7aaf749 [ 83.711867][ T5799] RDX: 00007f7ad650eef0 RSI: 0000000000000000 RDI: 00007f7ad7b34960 [ 83.711896][ T5799] RBP: 0000200000000bc0 R08: 00007f7ad650ebb7 R09: 00007f7ad650ee40 [ 83.711914][ T5799] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 83.711929][ T5799] R13: 00007f7ad650eef0 R14: 00007f7ad650eeb0 R15: 00002000000007c0 [ 83.711954][ T5799] [ 83.767305][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 83.769829][ T5777] Node 0 active_anon:27804kB inactive_anon:36kB active_file:87684kB inactive_file:9816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119528kB dirty:2544kB writeback:0kB shmem:816kB kernel_stack:3488kB pagetables:6128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.925244][ T5811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.895'. [ 83.961126][ T5777] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.247992][ T5777] lowmem_reserve[]: 0 2881 7859 7859 [ 84.253378][ T5777] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 84.268203][ T5819] FAULT_INJECTION: forcing a failure. [ 84.268203][ T5819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.284671][ T5777] lowmem_reserve[]: 0 0 4978 4978 [ 84.284702][ T5777] Node 0 Normal free:4198844kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27992kB inactive_anon:36kB active_file:87684kB inactive_file:9824kB unevictable:0kB writepending:2548kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:63824kB local_pcp:39028kB free_cma:0kB [ 84.297793][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.0.898 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.297827][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.297843][ T5819] Call Trace: [ 84.297851][ T5819] [ 84.297860][ T5819] __dump_stack+0x1d/0x30 [ 84.297951][ T5819] dump_stack_lvl+0xe8/0x140 [ 84.297983][ T5819] dump_stack+0x15/0x1b [ 84.298012][ T5819] should_fail_ex+0x265/0x280 [ 84.298062][ T5819] should_fail+0xb/0x20 [ 84.298088][ T5819] should_fail_usercopy+0x1a/0x20 [ 84.298118][ T5819] _copy_to_user+0x20/0xa0 [ 84.298155][ T5819] simple_read_from_buffer+0xb5/0x130 [ 84.298192][ T5819] proc_fail_nth_read+0x10e/0x150 [ 84.298239][ T5819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.298305][ T5819] vfs_read+0x1a8/0x770 [ 84.298419][ T5819] ? __rcu_read_unlock+0x4f/0x70 [ 84.298457][ T5819] ? __fget_files+0x184/0x1c0 [ 84.298498][ T5819] ksys_read+0xda/0x1a0 [ 84.298535][ T5819] __x64_sys_read+0x40/0x50 [ 84.298622][ T5819] x64_sys_call+0x27c0/0x3000 [ 84.298722][ T5819] do_syscall_64+0xd2/0x200 [ 84.298754][ T5819] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.298791][ T5819] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.298825][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.298866][ T5819] RIP: 0033:0x7fbecef6e15c [ 84.298889][ T5819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.298953][ T5819] RSP: 002b:00007fbecd9cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.298980][ T5819] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6e15c [ 84.298999][ T5819] RDX: 000000000000000f RSI: 00007fbecd9cf0a0 RDI: 0000000000000003 [ 84.299017][ T5819] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 84.299035][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.299052][ T5819] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 84.299077][ T5819] [ 84.535325][ T5777] lowmem_reserve[]: 0 0 0 0 [ 84.540012][ T5777] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.552950][ T5777] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 84.569231][ T5777] Node 0 Normal: 233*4kB (UM) 359*8kB (UM) 221*16kB (UM) 110*32kB (UME) 108*64kB (UM) 168*128kB (UME) 133*256kB (UM) 38*512kB (UM) 32*1024kB (UM) 27*2048kB (UME) 981*4096kB (UM) = 4199020kB [ 84.588260][ T5777] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 84.597708][ T5777] 26794 total pagecache pages [ 84.602458][ T5777] 11 pages in swap cache [ 84.606714][ T5777] Free swap = 124952kB [ 84.610922][ T5777] Total swap = 124996kB [ 84.615086][ T5777] 2097051 pages RAM [ 84.619011][ T5777] 0 pages HighMem/MovableOnly [ 84.623772][ T5777] 81087 pages reserved [ 84.628047][ T5811] hsr_slave_0: left promiscuous mode [ 84.657853][ T5811] hsr_slave_1: left promiscuous mode [ 84.847780][ T29] kauditd_printk_skb: 25628 callbacks suppressed [ 84.847800][ T29] audit: type=1400 audit(84.817:114613): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.874936][ T29] audit: type=1400 audit(84.827:114614): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.896835][ T29] audit: type=1400 audit(84.827:114615): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.917425][ T29] audit: type=1400 audit(84.827:114616): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.938019][ T29] audit: type=1400 audit(84.827:114617): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.958653][ T29] audit: type=1400 audit(84.827:114618): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.979209][ T29] audit: type=1400 audit(84.827:114619): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.999886][ T29] audit: type=1400 audit(84.827:114620): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.020429][ T29] audit: type=1400 audit(84.827:114621): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.041016][ T29] audit: type=1400 audit(84.827:114622): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.096085][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.126825][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.219731][ T5844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.356234][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 86.250569][ T5858] syz.0.912 (5858) used greatest stack depth: 10328 bytes left [ 86.272512][ T5914] FAULT_INJECTION: forcing a failure. [ 86.272512][ T5914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.285789][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: syz.1.932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.285823][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.285839][ T5914] Call Trace: [ 86.285848][ T5914] [ 86.285858][ T5914] __dump_stack+0x1d/0x30 [ 86.285945][ T5914] dump_stack_lvl+0xe8/0x140 [ 86.285972][ T5914] dump_stack+0x15/0x1b [ 86.285996][ T5914] should_fail_ex+0x265/0x280 [ 86.286041][ T5914] should_fail+0xb/0x20 [ 86.286060][ T5914] should_fail_usercopy+0x1a/0x20 [ 86.286109][ T5914] _copy_from_user+0x1c/0xb0 [ 86.286143][ T5914] __sys_bpf+0x183/0x7c0 [ 86.286246][ T5914] __x64_sys_bpf+0x41/0x50 [ 86.286278][ T5914] x64_sys_call+0x2aee/0x3000 [ 86.286304][ T5914] do_syscall_64+0xd2/0x200 [ 86.286347][ T5914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.286429][ T5914] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.286463][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.286546][ T5914] RIP: 0033:0x7fc5b46ff749 [ 86.286561][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.286579][ T5914] RSP: 002b:00007fc5b315f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.286603][ T5914] RAX: ffffffffffffffda RBX: 00007fc5b4955fa0 RCX: 00007fc5b46ff749 [ 86.286619][ T5914] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000 [ 86.286635][ T5914] RBP: 00007fc5b315f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.286651][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.286679][ T5914] R13: 00007fc5b4956038 R14: 00007fc5b4955fa0 R15: 00007ffe19ea8cf8 [ 86.286701][ T5914] [ 86.457332][ T5916] FAULT_INJECTION: forcing a failure. [ 86.457332][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 86.470029][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.470120][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.470137][ T5916] Call Trace: [ 86.470144][ T5916] [ 86.470153][ T5916] __dump_stack+0x1d/0x30 [ 86.470213][ T5916] dump_stack_lvl+0xe8/0x140 [ 86.470238][ T5916] dump_stack+0x15/0x1b [ 86.470341][ T5916] should_fail_ex+0x265/0x280 [ 86.470384][ T5916] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 86.470431][ T5916] should_failslab+0x8c/0xb0 [ 86.470474][ T5916] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 86.470567][ T5916] ? shmem_alloc_inode+0x34/0x50 [ 86.470592][ T5916] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 86.470613][ T5916] shmem_alloc_inode+0x34/0x50 [ 86.470666][ T5916] alloc_inode+0x40/0x170 [ 86.470697][ T5916] new_inode+0x1d/0xe0 [ 86.470740][ T5916] shmem_get_inode+0x244/0x750 [ 86.470770][ T5916] __shmem_file_setup+0x113/0x210 [ 86.470795][ T5916] shmem_file_setup+0x3b/0x50 [ 86.470848][ T5916] __se_sys_memfd_create+0x2c3/0x590 [ 86.470880][ T5916] __x64_sys_memfd_create+0x31/0x40 [ 86.470910][ T5916] x64_sys_call+0x2ac2/0x3000 [ 86.470938][ T5916] do_syscall_64+0xd2/0x200 [ 86.470970][ T5916] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.471006][ T5916] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.471049][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.471073][ T5916] RIP: 0033:0x7f7ad7aaf749 [ 86.471088][ T5916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.471171][ T5916] RSP: 002b:00007f7ad650ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 86.471194][ T5916] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007f7ad7aaf749 [ 86.471210][ T5916] RDX: 00007f7ad650eef0 RSI: 0000000000000000 RDI: 00007f7ad7b34960 [ 86.471276][ T5916] RBP: 0000200000000bc0 R08: 00007f7ad650ebb7 R09: 00007f7ad650ee40 [ 86.471292][ T5916] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 86.471308][ T5916] R13: 00007f7ad650eef0 R14: 00007f7ad650eeb0 R15: 00002000000007c0 [ 86.471346][ T5916] [ 86.703668][ T5920] FAULT_INJECTION: forcing a failure. [ 86.703668][ T5920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.716936][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.4.938 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.716967][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.716982][ T5920] Call Trace: [ 86.716991][ T5920] [ 86.717000][ T5920] __dump_stack+0x1d/0x30 [ 86.717031][ T5920] dump_stack_lvl+0xe8/0x140 [ 86.717091][ T5920] dump_stack+0x15/0x1b [ 86.717111][ T5920] should_fail_ex+0x265/0x280 [ 86.717152][ T5920] should_fail+0xb/0x20 [ 86.717172][ T5920] should_fail_usercopy+0x1a/0x20 [ 86.717238][ T5920] _copy_from_iter+0xd2/0xe80 [ 86.717268][ T5920] ? __build_skb_around+0x1ab/0x200 [ 86.717307][ T5920] ? __alloc_skb+0x223/0x320 [ 86.717346][ T5920] netlink_sendmsg+0x471/0x6b0 [ 86.717373][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.717430][ T5920] __sock_sendmsg+0x145/0x180 [ 86.717478][ T5920] sock_write_iter+0x1a7/0x1f0 [ 86.717511][ T5920] ? __pfx_sock_write_iter+0x10/0x10 [ 86.717540][ T5920] vfs_write+0x52a/0x960 [ 86.717623][ T5920] ksys_write+0xda/0x1a0 [ 86.717656][ T5920] __x64_sys_write+0x40/0x50 [ 86.717688][ T5920] x64_sys_call+0x2802/0x3000 [ 86.717761][ T5920] do_syscall_64+0xd2/0x200 [ 86.717787][ T5920] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.717823][ T5920] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.717867][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.717953][ T5920] RIP: 0033:0x7ff1f3f0f749 [ 86.717971][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.717994][ T5920] RSP: 002b:00007ff1f2977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.718018][ T5920] RAX: ffffffffffffffda RBX: 00007ff1f4165fa0 RCX: 00007ff1f3f0f749 [ 86.718033][ T5920] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 86.718048][ T5920] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000000 [ 86.718087][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.718108][ T5920] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 86.718130][ T5920] [ 86.959223][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 86.996520][ T5930] FAULT_INJECTION: forcing a failure. [ 86.996520][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.009712][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.2.941 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.009747][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.009763][ T5930] Call Trace: [ 87.009845][ T5930] [ 87.009853][ T5930] __dump_stack+0x1d/0x30 [ 87.009951][ T5930] dump_stack_lvl+0xe8/0x140 [ 87.009976][ T5930] dump_stack+0x15/0x1b [ 87.009998][ T5930] should_fail_ex+0x265/0x280 [ 87.010040][ T5930] should_fail+0xb/0x20 [ 87.010099][ T5930] should_fail_usercopy+0x1a/0x20 [ 87.010156][ T5930] _copy_from_user+0x1c/0xb0 [ 87.010192][ T5930] ___sys_sendmsg+0xc1/0x1d0 [ 87.010222][ T5930] __x64_sys_sendmsg+0xd4/0x160 [ 87.010243][ T5930] x64_sys_call+0x191e/0x3000 [ 87.010318][ T5930] do_syscall_64+0xd2/0x200 [ 87.010343][ T5930] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.010380][ T5930] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.010420][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.010492][ T5930] RIP: 0033:0x7f3ce626f749 [ 87.010512][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.010536][ T5930] RSP: 002b:00007f3ce4cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.010560][ T5930] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626f749 [ 87.010572][ T5930] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 87.010586][ T5930] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.010629][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.010644][ T5930] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 87.010666][ T5930] [ 87.024160][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 87.217368][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 87.242733][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 87.381229][ T5964] FAULT_INJECTION: forcing a failure. [ 87.381229][ T5964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.394685][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.0.954 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.394719][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.394735][ T5964] Call Trace: [ 87.394744][ T5964] [ 87.394754][ T5964] __dump_stack+0x1d/0x30 [ 87.394899][ T5964] dump_stack_lvl+0xe8/0x140 [ 87.394927][ T5964] dump_stack+0x15/0x1b [ 87.394948][ T5964] should_fail_ex+0x265/0x280 [ 87.394988][ T5964] should_fail_alloc_page+0xf2/0x100 [ 87.395025][ T5964] __alloc_frozen_pages_noprof+0xff/0x360 [ 87.395066][ T5964] alloc_pages_mpol+0xb3/0x260 [ 87.395108][ T5964] folio_alloc_mpol_noprof+0x39/0x80 [ 87.395130][ T5964] shmem_get_folio_gfp+0x3cf/0xd60 [ 87.395189][ T5964] shmem_write_begin+0xa8/0x190 [ 87.395251][ T5964] generic_perform_write+0x184/0x490 [ 87.395277][ T5964] shmem_file_write_iter+0xc5/0xf0 [ 87.395302][ T5964] iter_file_splice_write+0x666/0xa60 [ 87.395357][ T5964] ? __pfx_iter_file_splice_write+0x10/0x10 [ 87.395387][ T5964] direct_splice_actor+0x156/0x2a0 [ 87.395410][ T5964] ? shmem_mmap+0x61/0xb0 [ 87.395438][ T5964] splice_direct_to_actor+0x312/0x680 [ 87.395531][ T5964] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.395607][ T5964] do_splice_direct+0xda/0x150 [ 87.395638][ T5964] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.395666][ T5964] do_sendfile+0x380/0x650 [ 87.395716][ T5964] __x64_sys_sendfile64+0x105/0x150 [ 87.395757][ T5964] x64_sys_call+0x2bb4/0x3000 [ 87.395786][ T5964] do_syscall_64+0xd2/0x200 [ 87.395815][ T5964] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.395852][ T5964] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.395999][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.396029][ T5964] RIP: 0033:0x7fbecef6f749 [ 87.396115][ T5964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.396134][ T5964] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.396159][ T5964] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 87.396175][ T5964] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 87.396199][ T5964] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.396214][ T5964] R10: 0000040000000009 R11: 0000000000000246 R12: 0000000000000001 [ 87.396231][ T5964] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 87.396253][ T5964] [ 87.874415][ T5984] FAULT_INJECTION: forcing a failure. [ 87.874415][ T5984] name failslab, interval 1, probability 0, space 0, times 0 [ 87.887127][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.3.961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.887159][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.887174][ T5984] Call Trace: [ 87.887182][ T5984] [ 87.887233][ T5984] __dump_stack+0x1d/0x30 [ 87.887262][ T5984] dump_stack_lvl+0xe8/0x140 [ 87.887287][ T5984] dump_stack+0x15/0x1b [ 87.887311][ T5984] should_fail_ex+0x265/0x280 [ 87.887355][ T5984] ? file_f_owner_allocate+0x4d/0xd0 [ 87.887411][ T5984] should_failslab+0x8c/0xb0 [ 87.887439][ T5984] __kmalloc_cache_noprof+0x4c/0x4a0 [ 87.887481][ T5984] file_f_owner_allocate+0x4d/0xd0 [ 87.887574][ T5984] generic_setlease+0x22f/0xe40 [ 87.887600][ T5984] ? __srcu_read_unlock+0x1f/0x40 [ 87.887634][ T5984] vfs_setlease+0x1e8/0x200 [ 87.887668][ T5984] fcntl_setlease+0x259/0x300 [ 87.887749][ T5984] do_fcntl+0x524/0xdf0 [ 87.887791][ T5984] ? selinux_file_fcntl+0x1b4/0x1e0 [ 87.887846][ T5984] __se_sys_fcntl+0xb1/0x120 [ 87.887919][ T5984] __x64_sys_fcntl+0x43/0x50 [ 87.888018][ T5984] x64_sys_call+0x29a4/0x3000 [ 87.888048][ T5984] do_syscall_64+0xd2/0x200 [ 87.888074][ T5984] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.888108][ T5984] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.888163][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.888192][ T5984] RIP: 0033:0x7f7ad7aaf749 [ 87.888212][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.888236][ T5984] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 87.888260][ T5984] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 87.888348][ T5984] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000004 [ 87.888361][ T5984] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.888376][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.888399][ T5984] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 87.888422][ T5984] [ 88.342423][ T6006] FAULT_INJECTION: forcing a failure. [ 88.342423][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.355695][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.2.970 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.355745][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.355802][ T6006] Call Trace: [ 88.355809][ T6006] [ 88.355816][ T6006] __dump_stack+0x1d/0x30 [ 88.355896][ T6006] dump_stack_lvl+0xe8/0x140 [ 88.355923][ T6006] dump_stack+0x15/0x1b [ 88.356021][ T6006] should_fail_ex+0x265/0x280 [ 88.356090][ T6006] should_fail+0xb/0x20 [ 88.356111][ T6006] should_fail_usercopy+0x1a/0x20 [ 88.356139][ T6006] _copy_to_user+0x20/0xa0 [ 88.356173][ T6006] simple_read_from_buffer+0xb5/0x130 [ 88.356238][ T6006] proc_fail_nth_read+0x10e/0x150 [ 88.356275][ T6006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.356392][ T6006] vfs_read+0x1a8/0x770 [ 88.356422][ T6006] ? __rcu_read_unlock+0x4f/0x70 [ 88.356447][ T6006] ? __fget_files+0x184/0x1c0 [ 88.356481][ T6006] ksys_read+0xda/0x1a0 [ 88.356594][ T6006] __x64_sys_read+0x40/0x50 [ 88.356618][ T6006] x64_sys_call+0x27c0/0x3000 [ 88.356687][ T6006] do_syscall_64+0xd2/0x200 [ 88.356709][ T6006] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.356821][ T6006] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.356900][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.356928][ T6006] RIP: 0033:0x7f3ce626e15c [ 88.357005][ T6006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.357030][ T6006] RSP: 002b:00007f3ce4cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.357052][ T6006] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626e15c [ 88.357064][ T6006] RDX: 000000000000000f RSI: 00007f3ce4cd70a0 RDI: 0000000000000003 [ 88.357076][ T6006] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.357088][ T6006] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 88.357100][ T6006] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 88.357151][ T6006] [ 88.655793][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 88.690186][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 88.722740][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 88.738940][ T6029] FAULT_INJECTION: forcing a failure. [ 88.738940][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 88.751806][ T6029] CPU: 1 UID: 0 PID: 6029 Comm: syz.4.978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.751841][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.751857][ T6029] Call Trace: [ 88.751866][ T6029] [ 88.751876][ T6029] __dump_stack+0x1d/0x30 [ 88.751905][ T6029] dump_stack_lvl+0xe8/0x140 [ 88.751975][ T6029] dump_stack+0x15/0x1b [ 88.751998][ T6029] should_fail_ex+0x265/0x280 [ 88.752130][ T6029] should_failslab+0x8c/0xb0 [ 88.752174][ T6029] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 88.752213][ T6029] ? sidtab_sid2str_get+0xa0/0x130 [ 88.752261][ T6029] kmemdup_noprof+0x2b/0x70 [ 88.752343][ T6029] sidtab_sid2str_get+0xa0/0x130 [ 88.752374][ T6029] security_sid_to_context_core+0x1eb/0x2e0 [ 88.752487][ T6029] security_sid_to_context+0x27/0x40 [ 88.752517][ T6029] selinux_lsmprop_to_secctx+0x67/0xf0 [ 88.752558][ T6029] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 88.752583][ T6029] audit_log_subj_ctx+0xa4/0x3e0 [ 88.752676][ T6029] ? skb_put+0xa9/0xf0 [ 88.752710][ T6029] audit_log_task_context+0x48/0x70 [ 88.752733][ T6029] audit_log_task+0xf4/0x250 [ 88.752774][ T6029] ? kstrtouint+0x76/0xc0 [ 88.752885][ T6029] audit_seccomp+0x61/0x100 [ 88.752920][ T6029] ? __seccomp_filter+0x82d/0x1250 [ 88.753001][ T6029] __seccomp_filter+0x83e/0x1250 [ 88.753107][ T6029] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.753144][ T6029] ? vfs_write+0x7e8/0x960 [ 88.753186][ T6029] __secure_computing+0x82/0x150 [ 88.753288][ T6029] syscall_trace_enter+0xcf/0x1e0 [ 88.753316][ T6029] do_syscall_64+0xac/0x200 [ 88.753415][ T6029] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.753442][ T6029] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.753532][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.753559][ T6029] RIP: 0033:0x7ff1f3f0f749 [ 88.753579][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.753652][ T6029] RSP: 002b:00007ff1f2977038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 88.753673][ T6029] RAX: ffffffffffffffda RBX: 00007ff1f4165fa0 RCX: 00007ff1f3f0f749 [ 88.753688][ T6029] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 88.753703][ T6029] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000000 [ 88.753718][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.753733][ T6029] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 88.753754][ T6029] [ 89.199208][ T6040] FAULT_INJECTION: forcing a failure. [ 89.199208][ T6040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.212456][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.212488][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.212501][ T6040] Call Trace: [ 89.212508][ T6040] [ 89.212515][ T6040] __dump_stack+0x1d/0x30 [ 89.212558][ T6040] dump_stack_lvl+0xe8/0x140 [ 89.212610][ T6040] dump_stack+0x15/0x1b [ 89.212629][ T6040] should_fail_ex+0x265/0x280 [ 89.212666][ T6040] should_fail+0xb/0x20 [ 89.212683][ T6040] should_fail_usercopy+0x1a/0x20 [ 89.212736][ T6040] strncpy_from_user+0x25/0x230 [ 89.212766][ T6040] ? __fget_files+0x184/0x1c0 [ 89.212808][ T6040] __se_sys_add_key+0x86/0x350 [ 89.212856][ T6040] __x64_sys_add_key+0x67/0x80 [ 89.212888][ T6040] x64_sys_call+0x28c8/0x3000 [ 89.212954][ T6040] do_syscall_64+0xd2/0x200 [ 89.213000][ T6040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.213032][ T6040] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.213068][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.213216][ T6040] RIP: 0033:0x7fbecef6f749 [ 89.213232][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.213318][ T6040] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 89.213339][ T6040] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 89.213351][ T6040] RDX: 0000200000000340 RSI: 00002000000001c0 RDI: 0000200000000180 [ 89.213364][ T6040] RBP: 00007fbecd9cf090 R08: fffffffffffffffc R09: 0000000000000000 [ 89.213407][ T6040] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 89.213419][ T6040] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 89.213450][ T6040] [ 89.857513][ T29] kauditd_printk_skb: 18185 callbacks suppressed [ 89.857532][ T29] audit: type=1400 audit(89.827:127216): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 89.866733][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.891206][ T3042] audit: audit_lost=37138 audit_rate_limit=0 audit_backlog_limit=64 [ 89.899544][ T3042] audit: backlog limit exceeded [ 89.899814][ T6092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.905428][ T6089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.911070][ T6092] audit: audit_lost=37139 audit_rate_limit=0 audit_backlog_limit=64 [ 89.917628][ T6089] audit: audit_lost=37140 audit_rate_limit=0 audit_backlog_limit=64 [ 89.925580][ T6092] audit: backlog limit exceeded [ 89.925874][ T29] audit: type=1400 audit(89.837:127217): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.004468][ T6097] FAULT_INJECTION: forcing a failure. [ 90.004468][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 90.017242][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.0.1005 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.017307][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.017324][ T6097] Call Trace: [ 90.017332][ T6097] [ 90.017342][ T6097] __dump_stack+0x1d/0x30 [ 90.017370][ T6097] dump_stack_lvl+0xe8/0x140 [ 90.017396][ T6097] dump_stack+0x15/0x1b [ 90.017419][ T6097] should_fail_ex+0x265/0x280 [ 90.017493][ T6097] should_failslab+0x8c/0xb0 [ 90.017531][ T6097] kmem_cache_alloc_noprof+0x50/0x480 [ 90.017632][ T6097] ? security_inode_alloc+0x37/0x100 [ 90.017664][ T6097] security_inode_alloc+0x37/0x100 [ 90.017689][ T6097] inode_init_always_gfp+0x4b7/0x500 [ 90.017722][ T6097] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 90.017765][ T6097] alloc_inode+0x58/0x170 [ 90.017796][ T6097] new_inode+0x1d/0xe0 [ 90.017857][ T6097] shmem_get_inode+0x244/0x750 [ 90.017904][ T6097] __shmem_file_setup+0x113/0x210 [ 90.018008][ T6097] shmem_file_setup+0x3b/0x50 [ 90.018102][ T6097] __se_sys_memfd_create+0x2c3/0x590 [ 90.018136][ T6097] __x64_sys_memfd_create+0x31/0x40 [ 90.018193][ T6097] x64_sys_call+0x2ac2/0x3000 [ 90.018300][ T6097] do_syscall_64+0xd2/0x200 [ 90.018326][ T6097] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.018404][ T6097] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.018521][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.018549][ T6097] RIP: 0033:0x7fbecef6f749 [ 90.018568][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.018590][ T6097] RSP: 002b:00007fbecd9cee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 90.018614][ T6097] RAX: ffffffffffffffda RBX: 0000000000000476 RCX: 00007fbecef6f749 [ 90.018655][ T6097] RDX: 00007fbecd9ceef0 RSI: 0000000000000000 RDI: 00007fbeceff4960 [ 90.018670][ T6097] RBP: 0000200000000dc0 R08: 00007fbecd9cebb7 R09: 00007fbecd9cee40 [ 90.018692][ T6097] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 90.018705][ T6097] R13: 00007fbecd9ceef0 R14: 00007fbecd9ceeb0 R15: 0000200000000380 [ 90.018727][ T6097] [ 90.289273][ T6101] __nla_validate_parse: 2 callbacks suppressed [ 90.289292][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 90.307908][ T6101] bridge1: entered promiscuous mode [ 90.532307][ T6114] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1012'. [ 90.868588][ T6143] FAULT_INJECTION: forcing a failure. [ 90.868588][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 90.881363][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.1.1019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.881389][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.881402][ T6143] Call Trace: [ 90.881409][ T6143] [ 90.881416][ T6143] __dump_stack+0x1d/0x30 [ 90.881440][ T6143] dump_stack_lvl+0xe8/0x140 [ 90.881466][ T6143] dump_stack+0x15/0x1b [ 90.881486][ T6143] should_fail_ex+0x265/0x280 [ 90.881520][ T6143] should_failslab+0x8c/0xb0 [ 90.881548][ T6143] kmem_cache_alloc_noprof+0x50/0x480 [ 90.881586][ T6143] ? mas_alloc_nodes+0x1a2/0x210 [ 90.881609][ T6143] mas_alloc_nodes+0x1a2/0x210 [ 90.881633][ T6143] mas_preallocate+0x2ca/0x510 [ 90.881663][ T6143] commit_merge+0x3a5/0x730 [ 90.881690][ T6143] ? mas_prev_slot+0x661/0x6c0 [ 90.881721][ T6143] vma_expand+0x220/0x320 [ 90.881747][ T6143] vma_merge_new_range+0x296/0x310 [ 90.881778][ T6143] copy_vma+0x291/0x560 [ 90.881810][ T6143] move_vma+0x42e/0xce0 [ 90.881841][ T6143] ? arch_get_unmapped_area_topdown+0x153/0x550 [ 90.881881][ T6143] ? __get_unmapped_area+0x2c9/0x2f0 [ 90.881908][ T6143] mremap_to+0x3d8/0x430 [ 90.881938][ T6143] ? check_prep_vma+0x49c/0x660 [ 90.881967][ T6143] __se_sys_mremap+0x7b6/0xb30 [ 90.882012][ T6143] ? ksys_write+0x192/0x1a0 [ 90.882044][ T6143] __x64_sys_mremap+0x67/0x80 [ 90.882079][ T6143] x64_sys_call+0x2a28/0x3000 [ 90.882101][ T6143] do_syscall_64+0xd2/0x200 [ 90.882128][ T6143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.882165][ T6143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.882210][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.882235][ T6143] RIP: 0033:0x7fc5b46ff749 [ 90.882251][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.882269][ T6143] RSP: 002b:00007fc5b315f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 90.882289][ T6143] RAX: ffffffffffffffda RBX: 00007fc5b4955fa0 RCX: 00007fc5b46ff749 [ 90.882305][ T6143] RDX: 0000000000001000 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 90.882321][ T6143] RBP: 00007fc5b315f090 R08: 0000200000fff000 R09: 0000000000000000 [ 90.882337][ T6143] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 90.882353][ T6143] R13: 00007fc5b4956038 R14: 00007fc5b4955fa0 R15: 00007ffe19ea8cf8 [ 90.882375][ T6143] [ 90.886863][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 90.939508][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 91.346302][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6158 comm=syz.2.1024 [ 91.713130][ T6183] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 91.721362][ T3423] IPVS: starting estimator thread 0... [ 91.776495][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'. [ 91.817583][ T6187] IPVS: using max 2400 ests per chain, 120000 per kthread [ 92.032836][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 92.042018][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 92.055131][ T6205] FAULT_INJECTION: forcing a failure. [ 92.055131][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.068340][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.4.1041 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.068403][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.068420][ T6205] Call Trace: [ 92.068428][ T6205] [ 92.068436][ T6205] __dump_stack+0x1d/0x30 [ 92.068460][ T6205] dump_stack_lvl+0xe8/0x140 [ 92.068489][ T6205] dump_stack+0x15/0x1b [ 92.068583][ T6205] should_fail_ex+0x265/0x280 [ 92.068631][ T6205] should_fail+0xb/0x20 [ 92.068650][ T6205] should_fail_usercopy+0x1a/0x20 [ 92.068751][ T6205] _copy_from_user+0x1c/0xb0 [ 92.068788][ T6205] kstrtouint_from_user+0x69/0xf0 [ 92.068822][ T6205] ? 0xffffffff81000000 [ 92.068839][ T6205] ? selinux_file_permission+0x1e4/0x320 [ 92.068883][ T6205] proc_fail_nth_write+0x50/0x160 [ 92.068957][ T6205] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 92.069038][ T6205] vfs_write+0x269/0x960 [ 92.069071][ T6205] ? vfs_read+0x4e6/0x770 [ 92.069180][ T6205] ? __rcu_read_unlock+0x4f/0x70 [ 92.069215][ T6205] ? __fget_files+0x184/0x1c0 [ 92.069255][ T6205] ksys_write+0xda/0x1a0 [ 92.069321][ T6205] __x64_sys_write+0x40/0x50 [ 92.069346][ T6205] x64_sys_call+0x2802/0x3000 [ 92.069372][ T6205] do_syscall_64+0xd2/0x200 [ 92.069400][ T6205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.069465][ T6205] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.069609][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.069637][ T6205] RIP: 0033:0x7ff1f3f0e1ff [ 92.069652][ T6205] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 92.069670][ T6205] RSP: 002b:00007ff1f2977030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 92.069696][ T6205] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff1f3f0e1ff [ 92.069713][ T6205] RDX: 0000000000000001 RSI: 00007ff1f29770a0 RDI: 0000000000000004 [ 92.069729][ T6205] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000014 [ 92.069822][ T6205] R10: 0000000024000801 R11: 0000000000000293 R12: 0000000000000001 [ 92.069840][ T6205] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 92.069863][ T6205] [ 92.290396][ T313] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.309865][ T313] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.340270][ T313] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.372861][ T6216] netlink: 'syz.1.1047': attribute type 30 has an invalid length. [ 92.377122][ T6217] FAULT_INJECTION: forcing a failure. [ 92.377122][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 92.393473][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.0.1046 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.393530][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.393546][ T6217] Call Trace: [ 92.393554][ T6217] [ 92.393564][ T6217] __dump_stack+0x1d/0x30 [ 92.393591][ T6217] dump_stack_lvl+0xe8/0x140 [ 92.393691][ T6217] dump_stack+0x15/0x1b [ 92.393714][ T6217] should_fail_ex+0x265/0x280 [ 92.393757][ T6217] should_failslab+0x8c/0xb0 [ 92.393825][ T6217] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 92.393859][ T6217] ? __d_alloc+0x3d/0x340 [ 92.393892][ T6217] __d_alloc+0x3d/0x340 [ 92.393979][ T6217] d_alloc+0x2e/0x100 [ 92.394019][ T6217] lookup_one_qstr_excl+0x99/0x250 [ 92.394073][ T6217] filename_create+0x149/0x230 [ 92.394120][ T6217] do_mknodat+0xe7/0x610 [ 92.394163][ T6217] __x64_sys_mknod+0x51/0x60 [ 92.394218][ T6217] x64_sys_call+0x2d56/0x3000 [ 92.394245][ T6217] do_syscall_64+0xd2/0x200 [ 92.394333][ T6217] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.394371][ T6217] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.394417][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.394515][ T6217] RIP: 0033:0x7fbecef6f749 [ 92.394535][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.394617][ T6217] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 92.394689][ T6217] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 92.394706][ T6217] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000200000000000 [ 92.394807][ T6217] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 92.394823][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.394839][ T6217] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 92.394861][ T6217] [ 92.423440][ T6221] netlink: 'syz.4.1048': attribute type 27 has an invalid length. [ 92.594260][ T6221] netlink: 'syz.4.1048': attribute type 4 has an invalid length. [ 92.602037][ T6221] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1048'. [ 92.614846][ T313] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.661142][ T6230] xt_connbytes: Forcing CT accounting to be enabled [ 92.681549][ T6230] Cannot find set identified by id 0 to match [ 92.748563][ T6238] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.107604][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 93.148983][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 93.212309][ T6272] FAULT_INJECTION: forcing a failure. [ 93.212309][ T6272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.226002][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: syz.0.1068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.226078][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.226095][ T6272] Call Trace: [ 93.226102][ T6272] [ 93.226111][ T6272] __dump_stack+0x1d/0x30 [ 93.226140][ T6272] dump_stack_lvl+0xe8/0x140 [ 93.226165][ T6272] dump_stack+0x15/0x1b [ 93.226186][ T6272] should_fail_ex+0x265/0x280 [ 93.226265][ T6272] should_fail+0xb/0x20 [ 93.226282][ T6272] should_fail_usercopy+0x1a/0x20 [ 93.226394][ T6272] _copy_to_user+0x20/0xa0 [ 93.226422][ T6272] simple_read_from_buffer+0xb5/0x130 [ 93.226449][ T6272] proc_fail_nth_read+0x10e/0x150 [ 93.226483][ T6272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.226582][ T6272] vfs_read+0x1a8/0x770 [ 93.226607][ T6272] ? __rcu_read_unlock+0x4f/0x70 [ 93.226641][ T6272] ? __fget_files+0x184/0x1c0 [ 93.226672][ T6272] ksys_read+0xda/0x1a0 [ 93.226780][ T6272] __x64_sys_read+0x40/0x50 [ 93.226821][ T6272] x64_sys_call+0x27c0/0x3000 [ 93.226845][ T6272] do_syscall_64+0xd2/0x200 [ 93.226944][ T6272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.226975][ T6272] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.227011][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.227060][ T6272] RIP: 0033:0x7fbecef6e15c [ 93.227075][ T6272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.227094][ T6272] RSP: 002b:00007fbecd9cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.227114][ T6272] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6e15c [ 93.227168][ T6272] RDX: 000000000000000f RSI: 00007fbecd9cf0a0 RDI: 0000000000000003 [ 93.227180][ T6272] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 93.227193][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.227205][ T6272] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 93.227277][ T6272] [ 93.479246][ T6275] FAULT_INJECTION: forcing a failure. [ 93.479246][ T6275] name failslab, interval 1, probability 0, space 0, times 0 [ 93.491968][ T6275] CPU: 0 UID: 0 PID: 6275 Comm: syz.1.1069 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.492003][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.492018][ T6275] Call Trace: [ 93.492026][ T6275] [ 93.492036][ T6275] __dump_stack+0x1d/0x30 [ 93.492064][ T6275] dump_stack_lvl+0xe8/0x140 [ 93.492114][ T6275] dump_stack+0x15/0x1b [ 93.492130][ T6275] should_fail_ex+0x265/0x280 [ 93.492169][ T6275] should_failslab+0x8c/0xb0 [ 93.492197][ T6275] __kmalloc_noprof+0xa5/0x570 [ 93.492252][ T6275] ? copy_splice_read+0xc2/0x660 [ 93.492282][ T6275] copy_splice_read+0xc2/0x660 [ 93.492315][ T6275] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 93.492348][ T6275] splice_direct_to_actor+0x290/0x680 [ 93.492375][ T6275] ? __pfx_direct_splice_actor+0x10/0x10 [ 93.492458][ T6275] do_splice_direct+0xda/0x150 [ 93.492550][ T6275] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 93.492580][ T6275] do_sendfile+0x380/0x650 [ 93.492615][ T6275] __x64_sys_sendfile64+0x105/0x150 [ 93.492717][ T6275] x64_sys_call+0x2bb4/0x3000 [ 93.492742][ T6275] do_syscall_64+0xd2/0x200 [ 93.492763][ T6275] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.492870][ T6275] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.492915][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.493035][ T6275] RIP: 0033:0x7fc5b46ff749 [ 93.493050][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.493086][ T6275] RSP: 002b:00007fc5b315f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 93.493140][ T6275] RAX: ffffffffffffffda RBX: 00007fc5b4955fa0 RCX: 00007fc5b46ff749 [ 93.493156][ T6275] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 93.493172][ T6275] RBP: 00007fc5b315f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.493184][ T6275] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 93.493195][ T6275] R13: 00007fc5b4956038 R14: 00007fc5b4955fa0 R15: 00007ffe19ea8cf8 [ 93.493271][ T6275] [ 93.848751][ T6289] FAULT_INJECTION: forcing a failure. [ 93.848751][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 93.855240][ T6286] bond3: invalid ARP target 0.0.0.0 specified for addition [ 93.861552][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.2.1076 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.861642][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.861660][ T6289] Call Trace: [ 93.861670][ T6289] [ 93.861680][ T6289] __dump_stack+0x1d/0x30 [ 93.861801][ T6289] dump_stack_lvl+0xe8/0x140 [ 93.861840][ T6289] dump_stack+0x15/0x1b [ 93.861865][ T6289] should_fail_ex+0x265/0x280 [ 93.861982][ T6289] should_failslab+0x8c/0xb0 [ 93.862050][ T6289] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 93.862092][ T6289] ? __alloc_skb+0x101/0x320 [ 93.862135][ T6289] __alloc_skb+0x101/0x320 [ 93.862238][ T6289] ? audit_log_start+0x342/0x720 [ 93.862267][ T6289] audit_log_start+0x3a0/0x720 [ 93.862300][ T6289] audit_seccomp+0x48/0x100 [ 93.862344][ T6289] ? __seccomp_filter+0x82d/0x1250 [ 93.862498][ T6289] __seccomp_filter+0x83e/0x1250 [ 93.862539][ T6289] ? __list_add_valid_or_report+0x38/0xe0 [ 93.862577][ T6289] ? __set_next_task_fair+0x5b/0x150 [ 93.862647][ T6289] ? _raw_spin_unlock+0x26/0x50 [ 93.862688][ T6289] __secure_computing+0x82/0x150 [ 93.862726][ T6289] syscall_trace_enter+0xcf/0x1e0 [ 93.862767][ T6289] do_syscall_64+0xac/0x200 [ 93.862804][ T6289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.862849][ T6289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.862897][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.863009][ T6289] RIP: 0033:0x7f3ce626e15c [ 93.863030][ T6289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.863058][ T6289] RSP: 002b:00007f3ce4cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.863086][ T6289] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626e15c [ 93.863125][ T6289] RDX: 000000000000000f RSI: 00007f3ce4cd70a0 RDI: 0000000000000003 [ 93.863143][ T6289] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.863160][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.863176][ T6289] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 93.863201][ T6289] [ 94.081186][ T6286] bond3: option arp_ip_target: invalid value (0) [ 94.097410][ T6286] bond3 (unregistering): Released all slaves [ 94.169481][ T6304] FAULT_INJECTION: forcing a failure. [ 94.169481][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.182757][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.2.1080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.182786][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.182799][ T6304] Call Trace: [ 94.182807][ T6304] [ 94.182830][ T6304] __dump_stack+0x1d/0x30 [ 94.182856][ T6304] dump_stack_lvl+0xe8/0x140 [ 94.182876][ T6304] dump_stack+0x15/0x1b [ 94.182895][ T6304] should_fail_ex+0x265/0x280 [ 94.182932][ T6304] should_fail+0xb/0x20 [ 94.182948][ T6304] should_fail_usercopy+0x1a/0x20 [ 94.183000][ T6304] _copy_to_user+0x20/0xa0 [ 94.183073][ T6304] simple_read_from_buffer+0xb5/0x130 [ 94.183101][ T6304] proc_fail_nth_read+0x10e/0x150 [ 94.183135][ T6304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.183182][ T6304] vfs_read+0x1a8/0x770 [ 94.183209][ T6304] ? __fget_files+0x184/0x1c0 [ 94.183235][ T6304] ? __rcu_read_unlock+0x4f/0x70 [ 94.183270][ T6304] ? __fget_files+0x184/0x1c0 [ 94.183306][ T6304] ksys_read+0xda/0x1a0 [ 94.183338][ T6304] __x64_sys_read+0x40/0x50 [ 94.183367][ T6304] x64_sys_call+0x27c0/0x3000 [ 94.183396][ T6304] do_syscall_64+0xd2/0x200 [ 94.183488][ T6304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.183518][ T6304] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.183556][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.183584][ T6304] RIP: 0033:0x7f3ce626e15c [ 94.183601][ T6304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.183620][ T6304] RSP: 002b:00007f3ce4cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.183645][ T6304] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626e15c [ 94.183709][ T6304] RDX: 000000000000000f RSI: 00007f3ce4cd70a0 RDI: 0000000000000003 [ 94.183725][ T6304] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.183749][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.183776][ T6304] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 94.183794][ T6304] [ 94.867923][ T29] kauditd_printk_skb: 23409 callbacks suppressed [ 94.867951][ T29] audit: type=1400 audit(94.847:143202): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 94.876535][ T6346] FAULT_INJECTION: forcing a failure. [ 94.876535][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 94.907750][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.2.1097 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.907783][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.907816][ T6346] Call Trace: [ 94.907824][ T6346] [ 94.907833][ T6346] __dump_stack+0x1d/0x30 [ 94.907861][ T6346] dump_stack_lvl+0xe8/0x140 [ 94.907929][ T6346] dump_stack+0x15/0x1b [ 94.907950][ T6346] should_fail_ex+0x265/0x280 [ 94.907990][ T6346] should_failslab+0x8c/0xb0 [ 94.908102][ T6346] kmem_cache_alloc_noprof+0x50/0x480 [ 94.908139][ T6346] ? audit_log_start+0x342/0x720 [ 94.908166][ T6346] audit_log_start+0x342/0x720 [ 94.908188][ T6346] ? kstrtouint+0x76/0xc0 [ 94.908236][ T6346] audit_seccomp+0x48/0x100 [ 94.908268][ T6346] ? __seccomp_filter+0x82d/0x1250 [ 94.908384][ T6346] __seccomp_filter+0x83e/0x1250 [ 94.908412][ T6346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.908534][ T6346] ? vfs_write+0x7e8/0x960 [ 94.908561][ T6346] ? __rcu_read_unlock+0x4f/0x70 [ 94.908620][ T6346] ? __fget_files+0x184/0x1c0 [ 94.908654][ T6346] __secure_computing+0x82/0x150 [ 94.908747][ T6346] syscall_trace_enter+0xcf/0x1e0 [ 94.908782][ T6346] do_syscall_64+0xac/0x200 [ 94.908837][ T6346] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.908879][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.908949][ T6346] RIP: 0033:0x7f3ce626f749 [ 94.908967][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.908991][ T6346] RSP: 002b:00007f3ce4cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 94.909015][ T6346] RAX: ffffffffffffffda RBX: 00007f3ce64c5fa0 RCX: 00007f3ce626f749 [ 94.909030][ T6346] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.909045][ T6346] RBP: 00007f3ce4cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.909117][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.909132][ T6346] R13: 00007f3ce64c6038 R14: 00007f3ce64c5fa0 R15: 00007ffcedf93ed8 [ 94.909153][ T6346] [ 94.909338][ T6346] audit: audit_lost=39616 audit_rate_limit=0 audit_backlog_limit=64 [ 94.912906][ T29] audit: type=1400 audit(94.847:143203): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.919323][ T6346] audit: out of memory in audit_log_start [ 94.929293][ T29] audit: type=1400 audit(94.847:143204): avc: denied { map_create } for pid=6344 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.012929][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.016859][ T29] audit: type=1400 audit(94.847:143205): avc: denied { prog_load } for pid=6344 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.016890][ T29] audit: type=1400 audit(94.847:143206): avc: denied { prog_load } for pid=6344 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.021934][ T3042] audit: audit_lost=39617 audit_rate_limit=0 audit_backlog_limit=64 [ 95.021953][ T3042] audit: backlog limit exceeded [ 95.174157][ T6360] FAULT_INJECTION: forcing a failure. [ 95.174157][ T6360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.240767][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.3.1103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.240816][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.240828][ T6360] Call Trace: [ 95.240835][ T6360] [ 95.240843][ T6360] __dump_stack+0x1d/0x30 [ 95.240908][ T6360] dump_stack_lvl+0xe8/0x140 [ 95.240935][ T6360] dump_stack+0x15/0x1b [ 95.240959][ T6360] should_fail_ex+0x265/0x280 [ 95.241042][ T6360] should_fail+0xb/0x20 [ 95.241058][ T6360] should_fail_usercopy+0x1a/0x20 [ 95.241080][ T6360] _copy_from_user+0x1c/0xb0 [ 95.241114][ T6360] ___sys_sendmsg+0xc1/0x1d0 [ 95.241271][ T6360] __x64_sys_sendmsg+0xd4/0x160 [ 95.241305][ T6360] x64_sys_call+0x191e/0x3000 [ 95.241327][ T6360] do_syscall_64+0xd2/0x200 [ 95.241370][ T6360] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.241416][ T6360] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.241473][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.241501][ T6360] RIP: 0033:0x7f7ad7aaf749 [ 95.241521][ T6360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.241556][ T6360] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.241592][ T6360] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 95.241608][ T6360] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 95.241623][ T6360] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.241640][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.241661][ T6360] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 95.241683][ T6360] [ 95.578432][ T6381] FAULT_INJECTION: forcing a failure. [ 95.578432][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.591598][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.4.1110 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.591633][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.591703][ T6381] Call Trace: [ 95.591711][ T6381] [ 95.591717][ T6381] __dump_stack+0x1d/0x30 [ 95.591739][ T6381] dump_stack_lvl+0xe8/0x140 [ 95.591760][ T6381] dump_stack+0x15/0x1b [ 95.591778][ T6381] should_fail_ex+0x265/0x280 [ 95.591842][ T6381] should_fail+0xb/0x20 [ 95.591929][ T6381] should_fail_usercopy+0x1a/0x20 [ 95.591955][ T6381] _copy_to_user+0x20/0xa0 [ 95.591985][ T6381] simple_read_from_buffer+0xb5/0x130 [ 95.592041][ T6381] proc_fail_nth_read+0x10e/0x150 [ 95.592082][ T6381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.592121][ T6381] vfs_read+0x1a8/0x770 [ 95.592194][ T6381] ? __rcu_read_unlock+0x4f/0x70 [ 95.592244][ T6381] ? __fget_files+0x184/0x1c0 [ 95.592280][ T6381] ksys_read+0xda/0x1a0 [ 95.592312][ T6381] __x64_sys_read+0x40/0x50 [ 95.592413][ T6381] x64_sys_call+0x27c0/0x3000 [ 95.592436][ T6381] do_syscall_64+0xd2/0x200 [ 95.592460][ T6381] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.592496][ T6381] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.592601][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.592622][ T6381] RIP: 0033:0x7ff1f3f0e15c [ 95.592637][ T6381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.592660][ T6381] RSP: 002b:00007ff1f2977030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.592694][ T6381] RAX: ffffffffffffffda RBX: 00007ff1f4165fa0 RCX: 00007ff1f3f0e15c [ 95.592709][ T6381] RDX: 000000000000000f RSI: 00007ff1f29770a0 RDI: 0000000000000004 [ 95.592724][ T6381] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000000 [ 95.592740][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.592755][ T6381] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 95.592827][ T6381] [ 95.850250][ T6390] FAULT_INJECTION: forcing a failure. [ 95.850250][ T6390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.863458][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.863543][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.863558][ T6390] Call Trace: [ 95.863566][ T6390] [ 95.863575][ T6390] __dump_stack+0x1d/0x30 [ 95.863694][ T6390] dump_stack_lvl+0xe8/0x140 [ 95.863770][ T6390] dump_stack+0x15/0x1b [ 95.863856][ T6390] should_fail_ex+0x265/0x280 [ 95.863976][ T6390] should_fail+0xb/0x20 [ 95.863997][ T6390] should_fail_usercopy+0x1a/0x20 [ 95.864024][ T6390] _copy_from_user+0x1c/0xb0 [ 95.864056][ T6390] do_ipt_get_ctl+0x1a2/0xb60 [ 95.864091][ T6390] ? tcp_release_cb+0xf1/0x370 [ 95.864115][ T6390] ? _raw_spin_unlock_bh+0x36/0x40 [ 95.864150][ T6390] ? release_sock+0x116/0x150 [ 95.864183][ T6390] ? sockopt_release_sock+0x42/0x50 [ 95.864288][ T6390] ? do_ip_getsockopt+0xb92/0xfe0 [ 95.864327][ T6390] ? _parse_integer+0x27/0x40 [ 95.864363][ T6390] ? __rcu_read_unlock+0x4f/0x70 [ 95.864470][ T6390] nf_getsockopt+0x190/0x1b0 [ 95.864494][ T6390] ip_getsockopt+0x137/0x180 [ 95.864526][ T6390] ? selinux_socket_getsockopt+0x130/0x1b0 [ 95.864590][ T6390] tcp_getsockopt+0xad/0xe0 [ 95.864616][ T6390] sock_common_getsockopt+0x60/0x70 [ 95.864647][ T6390] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 95.864761][ T6390] do_sock_getsockopt+0x200/0x240 [ 95.864802][ T6390] __x64_sys_getsockopt+0x11e/0x1a0 [ 95.864925][ T6390] x64_sys_call+0x2bca/0x3000 [ 95.864951][ T6390] do_syscall_64+0xd2/0x200 [ 95.864972][ T6390] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.865000][ T6390] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.865078][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.865101][ T6390] RIP: 0033:0x7fbecef6f749 [ 95.865117][ T6390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.865134][ T6390] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 95.865163][ T6390] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 95.865176][ T6390] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.865191][ T6390] RBP: 00007fbecd9cf090 R08: 0000200000000100 R09: 0000000000000000 [ 95.865207][ T6390] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.865222][ T6390] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 95.865281][ T6390] [ 95.876444][ T6394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6394 comm=syz.4.1118 [ 95.937842][ T6398] xt_connbytes: Forcing CT accounting to be enabled [ 95.960701][ T6400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6400 comm=syz.0.1119 [ 95.966806][ T6394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6394 comm=syz.4.1118 [ 95.971655][ T6402] vlan0: entered promiscuous mode [ 96.220333][ T6406] netlink: 'syz.4.1120': attribute type 12 has an invalid length. [ 96.383673][ T6432] FAULT_INJECTION: forcing a failure. [ 96.383673][ T6432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.396907][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.4.1129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.396942][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.396966][ T6432] Call Trace: [ 96.396974][ T6432] [ 96.396984][ T6432] __dump_stack+0x1d/0x30 [ 96.397014][ T6432] dump_stack_lvl+0xe8/0x140 [ 96.397084][ T6432] dump_stack+0x15/0x1b [ 96.397101][ T6432] should_fail_ex+0x265/0x280 [ 96.397167][ T6432] should_fail+0xb/0x20 [ 96.397232][ T6432] should_fail_usercopy+0x1a/0x20 [ 96.397256][ T6432] _copy_from_user+0x1c/0xb0 [ 96.397291][ T6432] kstrtouint_from_user+0x69/0xf0 [ 96.397317][ T6432] ? 0xffffffff81000000 [ 96.397335][ T6432] ? selinux_file_permission+0x1e4/0x320 [ 96.397424][ T6432] proc_fail_nth_write+0x50/0x160 [ 96.397467][ T6432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.397509][ T6432] vfs_write+0x269/0x960 [ 96.397539][ T6432] ? vfs_read+0x4e6/0x770 [ 96.397646][ T6432] ? __rcu_read_unlock+0x4f/0x70 [ 96.397676][ T6432] ? __fget_files+0x184/0x1c0 [ 96.397710][ T6432] ksys_write+0xda/0x1a0 [ 96.397776][ T6432] __x64_sys_write+0x40/0x50 [ 96.397809][ T6432] x64_sys_call+0x2802/0x3000 [ 96.397835][ T6432] do_syscall_64+0xd2/0x200 [ 96.397879][ T6432] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.397912][ T6432] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.397957][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.398061][ T6432] RIP: 0033:0x7ff1f3f0e1ff [ 96.398078][ T6432] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 96.398102][ T6432] RSP: 002b:00007ff1f2977030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 96.398122][ T6432] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff1f3f0e1ff [ 96.398134][ T6432] RDX: 0000000000000001 RSI: 00007ff1f29770a0 RDI: 0000000000000006 [ 96.398146][ T6432] RBP: 00007ff1f2977090 R08: 0000000000000000 R09: 0000000000000000 [ 96.398158][ T6432] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 96.398173][ T6432] R13: 00007ff1f4166038 R14: 00007ff1f4165fa0 R15: 00007ffc6c8c0d88 [ 96.398237][ T6432] [ 96.659385][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1130'. [ 96.833319][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.902800][ T6450] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 96.913170][ T6450] netlink: 'syz.4.1137': attribute type 2 has an invalid length. [ 96.921077][ T6450] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 96.928993][ T6450] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1137'. [ 96.979192][ T6454] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.144800][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 97.159040][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6469 comm=syz.3.1145 [ 97.279728][ T6482] FAULT_INJECTION: forcing a failure. [ 97.279728][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 97.292498][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.3.1150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.292525][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.292612][ T6482] Call Trace: [ 97.292620][ T6482] [ 97.292628][ T6482] __dump_stack+0x1d/0x30 [ 97.292653][ T6482] dump_stack_lvl+0xe8/0x140 [ 97.292675][ T6482] dump_stack+0x15/0x1b [ 97.292710][ T6482] should_fail_ex+0x265/0x280 [ 97.292746][ T6482] should_failslab+0x8c/0xb0 [ 97.292831][ T6482] kmem_cache_alloc_noprof+0x50/0x480 [ 97.292866][ T6482] ? getname_flags+0x80/0x3b0 [ 97.292943][ T6482] getname_flags+0x80/0x3b0 [ 97.292975][ T6482] __x64_sys_rename+0x40/0x70 [ 97.293008][ T6482] x64_sys_call+0x1f9/0x3000 [ 97.293050][ T6482] do_syscall_64+0xd2/0x200 [ 97.293074][ T6482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.293105][ T6482] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.293277][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.293301][ T6482] RIP: 0033:0x7f7ad7aaf749 [ 97.293369][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.293388][ T6482] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 97.293472][ T6482] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 97.293485][ T6482] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000200000000600 [ 97.293497][ T6482] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.293510][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.293522][ T6482] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 97.293540][ T6482] [ 98.450505][ T6510] FAULT_INJECTION: forcing a failure. [ 98.450505][ T6510] name failslab, interval 1, probability 0, space 0, times 0 [ 98.463285][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.3.1160 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.463319][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.463335][ T6510] Call Trace: [ 98.463345][ T6510] [ 98.463397][ T6510] __dump_stack+0x1d/0x30 [ 98.463426][ T6510] dump_stack_lvl+0xe8/0x140 [ 98.463452][ T6510] dump_stack+0x15/0x1b [ 98.463472][ T6510] should_fail_ex+0x265/0x280 [ 98.463516][ T6510] should_failslab+0x8c/0xb0 [ 98.463626][ T6510] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 98.463737][ T6510] ? sidtab_sid2str_get+0xa0/0x130 [ 98.463779][ T6510] kmemdup_noprof+0x2b/0x70 [ 98.463845][ T6510] sidtab_sid2str_get+0xa0/0x130 [ 98.463875][ T6510] security_sid_to_context_core+0x1eb/0x2e0 [ 98.463912][ T6510] security_sid_to_context+0x27/0x40 [ 98.464025][ T6510] selinux_lsmprop_to_secctx+0x67/0xf0 [ 98.464067][ T6510] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 98.464090][ T6510] audit_log_subj_ctx+0xa4/0x3e0 [ 98.464112][ T6510] ? skb_put+0xa9/0xf0 [ 98.464158][ T6510] audit_log_task_context+0x48/0x70 [ 98.464180][ T6510] audit_log_task+0xf4/0x250 [ 98.464222][ T6510] ? kstrtouint+0x76/0xc0 [ 98.464301][ T6510] audit_seccomp+0x61/0x100 [ 98.464341][ T6510] ? __seccomp_filter+0x82d/0x1250 [ 98.464368][ T6510] __seccomp_filter+0x83e/0x1250 [ 98.464449][ T6510] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.464485][ T6510] ? vfs_write+0x7e8/0x960 [ 98.464522][ T6510] __secure_computing+0x82/0x150 [ 98.464627][ T6510] syscall_trace_enter+0xcf/0x1e0 [ 98.464659][ T6510] do_syscall_64+0xac/0x200 [ 98.464686][ T6510] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.464723][ T6510] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.464834][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.464866][ T6510] RIP: 0033:0x7f7ad7aaf749 [ 98.464885][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.464907][ T6510] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 98.464925][ T6510] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 98.464940][ T6510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.465100][ T6510] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.465111][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.465123][ T6510] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 98.465190][ T6510] [ 98.797515][ T4235] Bluetooth: hci0: command 0x1003 tx timeout [ 98.803643][ T4263] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.869414][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 99.060353][ T6534] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1170'. [ 99.090360][ T2853] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.264828][ T6546] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1174'. [ 99.497134][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 99.551983][ T6579] FAULT_INJECTION: forcing a failure. [ 99.551983][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.565231][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.3.1186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.565262][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.565283][ T6579] Call Trace: [ 99.565290][ T6579] [ 99.565298][ T6579] __dump_stack+0x1d/0x30 [ 99.565339][ T6579] dump_stack_lvl+0xe8/0x140 [ 99.565358][ T6579] dump_stack+0x15/0x1b [ 99.565376][ T6579] should_fail_ex+0x265/0x280 [ 99.565436][ T6579] should_fail+0xb/0x20 [ 99.565453][ T6579] should_fail_usercopy+0x1a/0x20 [ 99.565473][ T6579] _copy_from_user+0x1c/0xb0 [ 99.565497][ T6579] ___sys_sendmsg+0xc1/0x1d0 [ 99.565546][ T6579] __x64_sys_sendmsg+0xd4/0x160 [ 99.565573][ T6579] x64_sys_call+0x191e/0x3000 [ 99.565602][ T6579] do_syscall_64+0xd2/0x200 [ 99.565625][ T6579] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.565700][ T6579] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.565759][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.565780][ T6579] RIP: 0033:0x7f7ad7aaf749 [ 99.565796][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.565820][ T6579] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.565845][ T6579] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 99.565868][ T6579] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 99.565881][ T6579] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.565892][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.565905][ T6579] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 99.565927][ T6579] [ 99.681755][ T6577] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.782696][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 99.793210][ T6584] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 99.801143][ T6584] ipvlan0: entered allmulticast mode [ 99.806485][ T6584] veth0_vlan: entered allmulticast mode [ 99.812825][ T6584] team0: Device ipvlan0 failed to register rx_handler [ 99.877665][ T29] kauditd_printk_skb: 30356 callbacks suppressed [ 99.877682][ T29] audit: type=1400 audit(99.847:160416): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.899901][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.905971][ T3318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.911193][ T3042] audit: audit_lost=44000 audit_rate_limit=0 audit_backlog_limit=64 [ 99.917736][ T3318] audit: audit_lost=44001 audit_rate_limit=0 audit_backlog_limit=64 [ 99.925711][ T3042] audit: backlog limit exceeded [ 99.933712][ T3318] audit: backlog limit exceeded [ 99.953677][ T29] audit: type=1400 audit(99.867:160417): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.974309][ T29] audit: type=1400 audit(99.867:160418): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.977641][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.077226][ T6588] FAULT_INJECTION: forcing a failure. [ 100.077226][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 100.089967][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.3.1190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.090034][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.090046][ T6588] Call Trace: [ 100.090053][ T6588] [ 100.090062][ T6588] __dump_stack+0x1d/0x30 [ 100.090108][ T6588] dump_stack_lvl+0xe8/0x140 [ 100.090128][ T6588] dump_stack+0x15/0x1b [ 100.090145][ T6588] should_fail_ex+0x265/0x280 [ 100.090270][ T6588] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 100.090293][ T6588] should_failslab+0x8c/0xb0 [ 100.090322][ T6588] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 100.090450][ T6588] ? shmem_alloc_inode+0x34/0x50 [ 100.090473][ T6588] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 100.090493][ T6588] shmem_alloc_inode+0x34/0x50 [ 100.090574][ T6588] alloc_inode+0x40/0x170 [ 100.090681][ T6588] new_inode+0x1d/0xe0 [ 100.090715][ T6588] shmem_get_inode+0x244/0x750 [ 100.090778][ T6588] __shmem_file_setup+0x113/0x210 [ 100.090872][ T6588] shmem_file_setup+0x3b/0x50 [ 100.090890][ T6588] __se_sys_memfd_create+0x2c3/0x590 [ 100.090915][ T6588] __x64_sys_memfd_create+0x31/0x40 [ 100.090942][ T6588] x64_sys_call+0x2ac2/0x3000 [ 100.090972][ T6588] do_syscall_64+0xd2/0x200 [ 100.091092][ T6588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.091164][ T6588] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.091201][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.091222][ T6588] RIP: 0033:0x7f7ad7aaf749 [ 100.091248][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.091316][ T6588] RSP: 002b:00007f7ad650ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 100.091336][ T6588] RAX: ffffffffffffffda RBX: 00000000000004ea RCX: 00007f7ad7aaf749 [ 100.091353][ T6588] RDX: 00007f7ad650eef0 RSI: 0000000000000000 RDI: 00007f7ad7b34960 [ 100.091369][ T6588] RBP: 0000200000000380 R08: 00007f7ad650ebb7 R09: 00007f7ad650ee40 [ 100.091454][ T6588] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 100.091470][ T6588] R13: 00007f7ad650eef0 R14: 00007f7ad650eeb0 R15: 00002000000000c0 [ 100.091493][ T6588] [ 100.451872][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.460006][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.760898][ T6622] FAULT_INJECTION: forcing a failure. [ 100.760898][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.774106][ T6622] CPU: 1 UID: 0 PID: 6622 Comm: syz.3.1204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.774172][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.774189][ T6622] Call Trace: [ 100.774199][ T6622] [ 100.774209][ T6622] __dump_stack+0x1d/0x30 [ 100.774239][ T6622] dump_stack_lvl+0xe8/0x140 [ 100.774268][ T6622] dump_stack+0x15/0x1b [ 100.774293][ T6622] should_fail_ex+0x265/0x280 [ 100.774349][ T6622] should_fail+0xb/0x20 [ 100.774365][ T6622] should_fail_usercopy+0x1a/0x20 [ 100.774388][ T6622] _copy_to_user+0x20/0xa0 [ 100.774498][ T6622] simple_read_from_buffer+0xb5/0x130 [ 100.774563][ T6622] proc_fail_nth_read+0x10e/0x150 [ 100.774646][ T6622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.774741][ T6622] vfs_read+0x1a8/0x770 [ 100.774788][ T6622] ? __rcu_read_unlock+0x4f/0x70 [ 100.774847][ T6622] ? __fget_files+0x184/0x1c0 [ 100.774958][ T6622] ksys_read+0xda/0x1a0 [ 100.774993][ T6622] __x64_sys_read+0x40/0x50 [ 100.775019][ T6622] x64_sys_call+0x27c0/0x3000 [ 100.775044][ T6622] do_syscall_64+0xd2/0x200 [ 100.775076][ T6622] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.775112][ T6622] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.775214][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.775275][ T6622] RIP: 0033:0x7f7ad7aae15c [ 100.775290][ T6622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.775309][ T6622] RSP: 002b:00007f7ad650f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.775357][ T6622] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aae15c [ 100.775376][ T6622] RDX: 000000000000000f RSI: 00007f7ad650f0a0 RDI: 0000000000000003 [ 100.775393][ T6622] RBP: 00007f7ad650f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.775410][ T6622] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 100.775427][ T6622] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 100.775462][ T6622] [ 101.026104][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 101.121737][ T4235] Bluetooth: hci0: command 0x1003 tx timeout [ 101.127922][ T4263] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.238984][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 101.601598][ T6663] netlink: 'syz.3.1221': attribute type 39 has an invalid length. [ 101.622033][ T6669] FAULT_INJECTION: forcing a failure. [ 101.622033][ T6669] name failslab, interval 1, probability 0, space 0, times 0 [ 101.634870][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.0.1222 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.634901][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.634913][ T6669] Call Trace: [ 101.634943][ T6669] [ 101.634950][ T6669] __dump_stack+0x1d/0x30 [ 101.634977][ T6669] dump_stack_lvl+0xe8/0x140 [ 101.635001][ T6669] dump_stack+0x15/0x1b [ 101.635024][ T6669] should_fail_ex+0x265/0x280 [ 101.635067][ T6669] should_failslab+0x8c/0xb0 [ 101.635144][ T6669] kmem_cache_alloc_noprof+0x50/0x480 [ 101.635179][ T6669] ? getname_flags+0x80/0x3b0 [ 101.635212][ T6669] getname_flags+0x80/0x3b0 [ 101.635317][ T6669] path_setxattrat+0x223/0x310 [ 101.635462][ T6669] __x64_sys_lsetxattr+0x71/0x90 [ 101.635540][ T6669] x64_sys_call+0x287b/0x3000 [ 101.635608][ T6669] do_syscall_64+0xd2/0x200 [ 101.635628][ T6669] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.635701][ T6669] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.635775][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.635802][ T6669] RIP: 0033:0x7fbecef6f749 [ 101.635820][ T6669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.635865][ T6669] RSP: 002b:00007fbecd9cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.635884][ T6669] RAX: ffffffffffffffda RBX: 00007fbecf1c5fa0 RCX: 00007fbecef6f749 [ 101.635899][ T6669] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 101.635914][ T6669] RBP: 00007fbecd9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 101.635926][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.635937][ T6669] R13: 00007fbecf1c6038 R14: 00007fbecf1c5fa0 R15: 00007ffe5ec97e28 [ 101.635954][ T6669] [ 101.865079][ T6682] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1229'. [ 101.900694][ T6686] FAULT_INJECTION: forcing a failure. [ 101.900694][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 101.913474][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.3.1231 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.913508][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.913525][ T6686] Call Trace: [ 101.913533][ T6686] [ 101.913579][ T6686] __dump_stack+0x1d/0x30 [ 101.913600][ T6686] dump_stack_lvl+0xe8/0x140 [ 101.913623][ T6686] dump_stack+0x15/0x1b [ 101.913640][ T6686] should_fail_ex+0x265/0x280 [ 101.913703][ T6686] should_failslab+0x8c/0xb0 [ 101.913752][ T6686] kmem_cache_alloc_noprof+0x50/0x480 [ 101.913855][ T6686] ? security_inode_alloc+0x37/0x100 [ 101.913965][ T6686] security_inode_alloc+0x37/0x100 [ 101.913985][ T6686] inode_init_always_gfp+0x4b7/0x500 [ 101.914011][ T6686] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 101.914094][ T6686] alloc_inode+0x58/0x170 [ 101.914127][ T6686] new_inode+0x1d/0xe0 [ 101.914157][ T6686] hugetlbfs_get_inode+0x7b/0x370 [ 101.914195][ T6686] hugetlb_file_setup+0x192/0x3d0 [ 101.914248][ T6686] ksys_mmap_pgoff+0x157/0x310 [ 101.914268][ T6686] x64_sys_call+0x14a3/0x3000 [ 101.914297][ T6686] do_syscall_64+0xd2/0x200 [ 101.914324][ T6686] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.914417][ T6686] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.914458][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.914486][ T6686] RIP: 0033:0x7f7ad7aaf749 [ 101.914538][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.914600][ T6686] RSP: 002b:00007f7ad650f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.914623][ T6686] RAX: ffffffffffffffda RBX: 00007f7ad7d05fa0 RCX: 00007f7ad7aaf749 [ 101.914654][ T6686] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 101.914668][ T6686] RBP: 00007f7ad650f090 R08: ffffffffffffffff R09: 0000000000000000 [ 101.914679][ T6686] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 101.914691][ T6686] R13: 00007f7ad7d06038 R14: 00007f7ad7d05fa0 R15: 00007ffc24a129a8 [ 101.914712][ T6686] [ 102.141971][ T6701] FAULT_INJECTION: forcing a failure. [ 102.141971][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.148789][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1235'. [ 102.155138][ T6701] CPU: 0 UID: 0 PID: 6701 Comm: syz.1.1234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.155177][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.155197][ T6701] Call Trace: [ 102.155207][ T6701] [ 102.155219][ T6701] __dump_stack+0x1d/0x30 [ 102.155319][ T6701] dump_stack_lvl+0xe8/0x140 [ 102.155348][ T6701] dump_stack+0x15/0x1b [ 102.155373][ T6701] should_fail_ex+0x265/0x280 [ 102.155421][ T6701] should_fail+0xb/0x20 [ 102.155495][ T6701] should_fail_usercopy+0x1a/0x20 [ 102.155525][ T6701] strncpy_from_user+0x25/0x230 [ 102.155563][ T6701] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 102.155690][ T6701] getname_flags+0x230/0x3b0 [ 102.155767][ T6701] user_path_at+0x28/0x130 [ 102.155794][ T6701] __se_sys_quotactl+0xb6/0x670 [ 102.155890][ T6701] __x64_sys_quotactl+0x55/0x70 [ 102.155924][ T6701] x64_sys_call+0x15d6/0x3000 [ 102.156013][ T6701] do_syscall_64+0xd2/0x200 [ 102.156044][ T6701] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.156111][ T6701] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.156158][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.156189][ T6701] RIP: 0033:0x7fc5b46ff749 [ 102.156217][ T6701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.156245][ T6701] RSP: 002b:00007fc5b315f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 102.156271][ T6701] RAX: ffffffffffffffda RBX: 00007fc5b4955fa0 RCX: 00007fc5b46ff749 [ 102.156289][ T6701] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 102.156305][ T6701] RBP: 00007fc5b315f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.156322][ T6701] R10: 0000200000001ac0 R11: 0000000000000246 R12: 0000000000000001 [ 102.156340][ T6701] R13: 00007fc5b4956038 R14: 00007fc5b4955fa0 R15: 00007ffe19ea8cf8 [ 102.156368][ T6701] [ 102.388474][ T6706] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 102.396259][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 102.452893][ T2853] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.469692][ T6706] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 102.477537][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 102.479546][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.487625][ T2853] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.507633][ T2853] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.519859][ T2853] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.822962][ T6752] ================================================================== [ 102.831192][ T6752] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 102.838765][ T6752] [ 102.841100][ T6752] write to 0xffff8881042c3f00 of 8 bytes by task 6746 on cpu 0: [ 102.848844][ T6752] mas_wr_store_entry+0x1e0d/0x2750 [ 102.854065][ T6752] mas_store_prealloc+0x760/0xa90 [ 102.859103][ T6752] vma_iter_store_new+0x1c5/0x200 [ 102.864150][ T6752] vma_complete+0x125/0x580 [ 102.868672][ T6752] __split_vma+0x591/0x650 [ 102.873111][ T6752] vma_modify+0x21e/0xc80 [ 102.877546][ T6752] vma_modify_flags+0x101/0x130 [ 102.882412][ T6752] mprotect_fixup+0x2cc/0x570 [ 102.887122][ T6752] do_mprotect_pkey+0x6d6/0x980 [ 102.891991][ T6752] __x64_sys_mprotect+0x48/0x60 [ 102.896869][ T6752] x64_sys_call+0x2752/0x3000 [ 102.901561][ T6752] do_syscall_64+0xd2/0x200 [ 102.906080][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.911990][ T6752] [ 102.914322][ T6752] read to 0xffff8881042c3f00 of 8 bytes by task 6752 on cpu 1: [ 102.921873][ T6752] mas_state_walk+0x485/0x650 [ 102.926560][ T6752] mas_walk+0x60/0x150 [ 102.930634][ T6752] lock_vma_under_rcu+0x95/0x170 [ 102.935594][ T6752] do_user_addr_fault+0x233/0x1080 [ 102.940721][ T6752] exc_page_fault+0x62/0xa0 [ 102.945263][ T6752] asm_exc_page_fault+0x26/0x30 [ 102.950132][ T6752] [ 102.952464][ T6752] value changed: 0xffff8881042c3d0e -> 0xffff8881042c3f00 [ 102.959574][ T6752] [ 102.961924][ T6752] Reported by Kernel Concurrency Sanitizer on: [ 102.968084][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.0.1253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.977842][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.987908][ T6752] ================================================================== [ 104.557515][ T4263] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.558933][ T4235] Bluetooth: hci0: command 0x1003 tx timeout [ 104.887525][ T29] kauditd_printk_skb: 38331 callbacks suppressed [ 104.887543][ T29] audit: type=1400 audit(104.857:187729): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.896090][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.914620][ T29] audit: type=1400 audit(104.867:187730): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.921119][ T3042] audit: audit_lost=47676 audit_rate_limit=0 audit_backlog_limit=64 [ 104.921196][ T3042] audit: backlog limit exceeded [ 104.921865][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.941798][ T29] audit: type=1400 audit(104.867:187731): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.949808][ T3042] audit: audit_lost=47677 audit_rate_limit=0 audit_backlog_limit=64 [ 104.949827][ T3042] audit: backlog limit exceeded [ 104.954671][ T29] audit: type=1400 audit(104.867:187732): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.897903][ T29] kauditd_printk_skb: 48690 callbacks suppressed [ 109.897919][ T29] audit: type=1400 audit(109.867:236423): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.905919][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.925032][ T29] audit: type=1400 audit(109.877:236424): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.925120][ T29] audit: type=1400 audit(109.877:236425): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.931676][ T3042] audit: audit_lost=47678 audit_rate_limit=0 audit_backlog_limit=64 [ 109.952268][ T29] audit: type=1400 audit(109.877:236426): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.972872][ T3042] audit: backlog limit exceeded [ 109.974155][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.980917][ T29] audit: type=1400 audit(109.877:236427): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.001625][ T3042] audit: audit_lost=47679 audit_rate_limit=0 audit_backlog_limit=64