last executing test programs: 8.249565633s ago: executing program 3 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) (fail_nth: 10) 4.211994845s ago: executing program 3 (id=1436): r0 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x40, 0x10, 0x9, 0x5, 0x4e, 0x4, &(0x7f00000001c0)="39906ad96bfcb47fb27e99ede79efd74907b9b9dffb90b353cfff61db64847b4f0fc767993ab1ac94f25c439b652bed9a35c9a7441a11c0adc82eb31211b4110a7c758df168f8917bfad276339dc"}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc7f}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x6140, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x3e, 0x1, 0x7, 0x7, 0xfffffffd, 0x81}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) socket$netlink(0x10, 0x3, 0x0) (async) flistxattr(r0, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x40, 0x10, 0x9, 0x5, 0x4e, 0x4, &(0x7f00000001c0)="39906ad96bfcb47fb27e99ede79efd74907b9b9dffb90b353cfff61db64847b4f0fc767993ab1ac94f25c439b652bed9a35c9a7441a11c0adc82eb31211b4110a7c758df168f8917bfad276339dc"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc7f}, 0x18) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x6140, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x3e, 0x1, 0x7, 0x7, 0xfffffffd, 0x81}) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) (async) 4.211531235s ago: executing program 3 (id=1437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001040)={{r0}, "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"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x20008884) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xe1b2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}}, 0x20008050) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040025bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="c40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x48081) write(r4, &(0x7f00000004c0)="0600", 0x2) sendfile(r4, r4, &(0x7f0000001000), 0xffff) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) ftruncate(r12, 0x647) 3.948854349s ago: executing program 0 (id=1445): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x10980) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@raw=[@exit, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0xd9, &(0x7f0000000140)=""/217, 0x41000, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r0], &(0x7f0000000300)=[{0x3, 0x2, 0xc, 0x6}, {0x4, 0x4, 0xa, 0x4}], 0x10, 0x9e5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setns(0xffffffffffffffff, 0x4000000) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 3.828769161s ago: executing program 0 (id=1449): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x523, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 3.342953668s ago: executing program 3 (id=1453): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x600) 3.341558418s ago: executing program 3 (id=1455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2040400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x7, r5, 0x1478, 0x350) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=@deltfilter={0xcdc, 0x2d, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x0, 0xfff1}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x3}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x7a}}, @filter_kind_options=@f_basic={{0xa}, {0xc30, 0x2, [@TCA_BASIC_POLICE={0xc1c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x3, 0x80000000, 0x4, 0xfffffff9, 0x6, 0x0, 0x7, 0x401, 0x7, 0x3ff, 0x2, 0x701a, 0x5, 0x4, 0xb5, 0x2, 0x3, 0x6, 0xfffffffa, 0xb, 0xfffffffe, 0x81, 0x70000000, 0x3b, 0x2, 0x0, 0x32, 0x7, 0xfffffff1, 0x2, 0x8, 0x7fffffff, 0x9, 0x3, 0x800, 0x7, 0x132000, 0x462b, 0x2, 0x4, 0x7, 0x8, 0x6, 0xd29, 0x0, 0x6, 0x1, 0x8, 0x9, 0x1, 0xfffffff7, 0x3, 0x10001, 0x6, 0x6, 0x6, 0x3, 0xffff, 0x2, 0x7, 0x0, 0x60, 0x2, 0x6, 0x4, 0x1, 0x66f, 0x7, 0x7, 0x401, 0x9, 0x2, 0x800, 0x47, 0x4, 0x7, 0x1fb, 0x3, 0x7fff, 0x5, 0x4, 0xb, 0x800, 0x101, 0x80000000, 0x6, 0x1, 0x2, 0x0, 0x7, 0x5, 0x6, 0x80, 0x1, 0x0, 0x2, 0x5, 0x800, 0x4, 0x5, 0x100, 0x9, 0x6, 0x6, 0x7, 0xeb, 0x80000001, 0x9, 0x9, 0xe, 0xfffffffe, 0xc4, 0xa, 0x7f, 0x9, 0xa, 0x7, 0x0, 0x3, 0x7, 0x40b, 0x1ff, 0x0, 0x26a2b077, 0x2, 0x3, 0x9, 0x7, 0x3, 0x1ff, 0x6, 0x81, 0xfffff9a1, 0xfb2, 0xffffff8b, 0x4, 0x81, 0x5, 0x3, 0x1, 0xb7d, 0x846, 0x328, 0x84f1, 0x7ff, 0xeb, 0x3, 0x1000, 0x2, 0x7, 0x5, 0x500, 0x1000, 0xf949, 0x9, 0x9, 0x5, 0x8e8, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x8, 0x94, 0x3ff, 0x5, 0x10, 0x0, 0x1, 0x4, 0x9, 0xc13b, 0x6, 0x1, 0x5, 0x7, 0x800, 0xd, 0x64, 0x10001, 0x2, 0xac, 0x5, 0x0, 0xfffffff8, 0x2, 0x7, 0xe, 0x1, 0x1ff, 0x2, 0x6, 0xe, 0xfffffff8, 0xfff, 0x7, 0x10000, 0x1a, 0x7, 0x7fffffff, 0xffffffff, 0x2, 0x8, 0xffffffff, 0x7, 0x9, 0x0, 0x1, 0xf, 0x1f83, 0xee, 0x2, 0x80000001, 0x7, 0x9, 0x10, 0x7, 0x8, 0x1, 0x9, 0x2, 0x81, 0x8001, 0x7, 0x8, 0x80000001, 0x8, 0x7, 0xaa, 0xd, 0x7, 0x9, 0x68, 0x200, 0x4, 0x1, 0xc000, 0x6, 0x2, 0x800, 0x800, 0x8a2b, 0x150, 0x7ff, 0xffffffff, 0x7fff, 0xf, 0x4, 0x6, 0x1, 0x445e]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x9, 0x4, 0x8, 0x5, 0x7fffffff, 0x7fff, 0x1, 0x7d, 0x6, 0x2, 0xfffffc00, 0xf, 0x967b, 0x5, 0x6, 0x401, 0xfffffffb, 0xd, 0x7, 0x0, 0x2, 0xb, 0x6, 0xf3, 0xe, 0x0, 0x96, 0x7, 0x10001, 0x8, 0x0, 0x1ff, 0x5, 0x1000, 0x2b7, 0x5, 0x1000, 0x0, 0x9, 0x4, 0xc0000000, 0x3, 0x4, 0x8, 0x2, 0x601, 0x1, 0x3, 0x1, 0x9e88, 0x3, 0x5, 0x7, 0x8, 0x2, 0x11c2, 0x35, 0x6, 0x4, 0x8, 0x3, 0x2, 0x3, 0x0, 0x8001, 0x80, 0xd0, 0x6, 0x5, 0xff, 0x8d, 0x800, 0x6, 0x40, 0x81, 0x10, 0x100, 0x0, 0x3, 0x5, 0x8, 0x5, 0xdc, 0xffffffff, 0xa8d4, 0x3, 0xf, 0x7, 0x8, 0x6, 0xd47, 0xfffffff9, 0x7f, 0x80, 0x2000000, 0x8, 0x0, 0x0, 0xf, 0x4, 0x4, 0x5, 0x80000000, 0x7, 0x6, 0x9, 0x6, 0xffc00000, 0x2, 0x6, 0x36a, 0x5, 0x8f0, 0xac3a, 0x9, 0xcc, 0x197480, 0x94a, 0xda7b, 0x1aa, 0x0, 0x9, 0x0, 0x7ff, 0xfffffffb, 0xfffffffb, 0x8, 0x8, 0xc, 0x4, 0xd, 0x1, 0x1, 0x800, 0xe7e, 0xa122, 0x6, 0x5, 0x0, 0x81, 0x7fffffff, 0x19e1, 0x2, 0x9b, 0x2bb, 0x8, 0x3, 0xc775, 0xa, 0x2, 0x7ff, 0x5, 0xa, 0x0, 0x9, 0x3, 0x9, 0x0, 0x0, 0xd, 0x6, 0x9, 0x8886, 0x1, 0x7, 0x2, 0x1, 0x6, 0x4, 0x8000, 0xa, 0x5, 0x5, 0x8, 0x0, 0xb, 0xd5, 0x0, 0x6b, 0x6, 0x2b, 0x100000, 0x7ff, 0xe, 0x3, 0xfff, 0x6, 0x7, 0x8, 0x8, 0x8, 0x9, 0xe, 0x4, 0x6b8c, 0x4, 0x2, 0x0, 0x1, 0x8, 0xffffffff, 0x6, 0x1, 0xffffffff, 0x1, 0x4, 0x4, 0x5, 0x3fe0, 0x5, 0x75, 0x1, 0x1, 0xffffff51, 0x5, 0x7, 0x2, 0x1e9f, 0x1, 0x7, 0x6, 0x9, 0x2, 0x106, 0x7fff, 0xaa4, 0x4, 0x219b, 0x10001, 0x8000, 0xf9ae, 0x0, 0x6, 0x7, 0x7f, 0x2, 0x5, 0x0, 0x5, 0x8, 0x7, 0x4, 0x8000, 0xf, 0x7, 0xc73, 0x2, 0x50, 0xb1ad, 0x3, 0x1ff, 0x813, 0x4, 0xfffffffe, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x7, 0x1, 0x6, 0x7ff, 0xb, 0x0, 0x10000, 0x2400, 0x7, 0x9, 0x5, 0x3, 0x4, 0xfffffffb, 0x0, 0x1, 0x8, 0xfffffff7, 0xffffffff, 0x7bac, 0xfffffffb, 0x9, 0x4, 0x4, 0x6b23, 0x4, 0x1, 0xffff, 0x0, 0x200, 0x6, 0x7, 0x1000, 0x2, 0xe, 0x4e56, 0xfffffc01, 0x81, 0xf, 0x1, 0x7, 0x9, 0xf2, 0xe096, 0x9, 0x7, 0x2, 0x8, 0x8, 0x200, 0x6, 0x1, 0x1, 0x4, 0x9, 0x9, 0x400, 0x4, 0x4, 0x101, 0x5, 0x3, 0x8, 0x0, 0x4, 0xfffffffc, 0x7, 0x2, 0xb, 0x69, 0x7, 0x179eb71d, 0x10000, 0x3, 0xfffffffc, 0xec, 0x0, 0x1db2ddb3, 0x3, 0x57f, 0xc, 0x7ff, 0x80000001, 0x7d01, 0xfffffffb, 0xfffffff0, 0x1, 0x2, 0x8, 0x6921, 0x74bf1787, 0x10001, 0x5, 0x9, 0x3ff, 0xffffffff, 0x800000, 0x5, 0xff, 0x9, 0x7f, 0x101, 0x9, 0x7, 0x9, 0x6, 0xf375, 0xf823, 0x3661e5d7, 0x4, 0x3, 0xc, 0xf96, 0x5, 0x9, 0x2, 0x40, 0xef2, 0x6, 0x7, 0x1, 0xf967, 0x2, 0x7, 0x127, 0x2, 0x9, 0x1, 0x5, 0x6, 0x81, 0xb, 0x7, 0x1, 0x5, 0x4cd, 0x4, 0x5, 0x8, 0x4, 0xfaf, 0x4, 0x81, 0x6, 0x7, 0x7, 0x3, 0x77f, 0x4, 0x1, 0x8, 0x2d, 0x80000000, 0xfffffff9, 0x200, 0xfffff001, 0x4, 0x5, 0xfd9, 0x7, 0x3, 0x9, 0x2, 0x5, 0x10000, 0x2, 0x1, 0x3, 0xd84f, 0x2112, 0x3, 0x6, 0x7f, 0x400, 0xa5f, 0x6, 0x10001, 0x3, 0x5, 0x9, 0x7fff, 0x20f7, 0x9, 0x4, 0x10000, 0xfffffffe, 0x40, 0x0, 0x5, 0x8, 0x17b, 0x7, 0x5, 0x5, 0xf0, 0x2, 0x0, 0xffff7fff, 0x38, 0x7, 0x92, 0xa0, 0x9, 0x10000, 0xffffff81, 0x0, 0x4, 0x3, 0x6, 0x6, 0x0, 0x8e, 0x101, 0x3ff, 0x1, 0x7, 0xfffffff2, 0x2f, 0x2, 0x1, 0xb9, 0x10000, 0x2, 0x0, 0xb97, 0xcd2c, 0x5, 0x40, 0x2, 0xd9e, 0xd, 0x9, 0x9, 0x5, 0x6006, 0x400, 0x3b, 0x7fff, 0xfff, 0x7, 0x1, 0x1, 0x2, 0x5, 0x8, 0xdb6, 0x401, 0x8001, 0x1, 0x1000, 0x0, 0xfffffffc, 0xf, 0xfffffff9, 0x9]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x8}}]}}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r7, &(0x7f0000000180)=""/46, 0x2e) ioctl$TIOCNXCL(r7, 0x540d) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x97b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x7, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r10, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r11, &(0x7f0000020240), 0x10010) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000400000000000000000001000000000000000000000000eb2c8c2d87f473"]) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setns(r1, 0x8000000) 2.768890628s ago: executing program 4 (id=1459): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x30003, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd2e8fa207a6a5639}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x890}, 0x40041) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r1, 0xc2f49bda48dc42a5, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x27}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x138}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) syz_clone3(&(0x7f0000000640)={0x400, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, {0x29}, &(0x7f0000000540)=""/56, 0x38, &(0x7f0000000580)=""/87, &(0x7f0000000600)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000006c0)=0xd) keyctl$join(0x1, &(0x7f0000000700)={'syz', 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000780)={0xffffffffffffffff, 0x1, 0xff, r8, 0x400}, 0xc) ptrace$ARCH_SHSTK_STATUS(0x1e, r7, &(0x7f00000007c0), 0x5005) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x31) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r11, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000801) connect$unix(r0, &(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r12, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x288, r13, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8000, @private1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x12614993, @private1, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff5}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xedc}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c10a2f9d5ead0ed09f06451d0f542d069ab901d509d83e2e282a90ba766cbf3a54"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x61}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r1, 0x108, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc30, 0x70}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40888}, 0x48004) sendmsg$nl_route(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0xa0, 0x3, 0x2f, 0x0, 0x0, 0x4, 0x10011}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) fallocate(r5, 0x45, 0x4263, 0x3) ioctl$int_in(r5, 0x5452, &(0x7f0000001100)) bind$rxrpc(0xffffffffffffffff, &(0x7f0000001140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) 2.660168139s ago: executing program 4 (id=1462): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x72b}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8}, @in={0x2, 0x4e20, @loopback}], 0x58) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000001f80)) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r8, 0x4, 0x42400) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) fcntl$setstatus(r9, 0x4, 0x2400) close(0x3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.443656002s ago: executing program 3 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = gettid() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r2) tkill(r2, 0x13) sched_rr_get_interval(r2, &(0x7f00000004c0)) 2.341089104s ago: executing program 1 (id=1465): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r0, 0x0, 0x0, 0x600) 2.261087285s ago: executing program 1 (id=1466): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000500)={0x60, 0x3, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=[{0x6, 0x4, 0x883}, {0x10001, 0x0, 0x9}, {0x1, 0x401, 0x101}], 0x3, 0x8, 0x40, 0x10, 0x8d, 0x24}) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 2.244062115s ago: executing program 1 (id=1467): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=""/63, 0x3f}, 0x4}], 0x1, 0x2b, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0xcd2e33a676089c01}}}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa26593772f99d877, @value}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.399032008s ago: executing program 1 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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") r1 = open(&(0x7f0000000200)='./bus\x00', 0x187842, 0x41) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) waitid(0x2, r2, &(0x7f00000005c0), 0x80000000, &(0x7f0000000640)) preadv2(r1, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000440)}}, 0x10) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000ff0a"], 0x50) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, 0xffffffffffffffff, 0x25, 0x2000, 0x0, @value}, 0x20) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080001000400000008000200020000000a0002000000000000000000"], 0x50}}, 0x0) 1.138722122s ago: executing program 1 (id=1474): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchdir(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x220100, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') r6 = socket$packet(0x11, 0x2, 0x300) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x7}, 0x8) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 952.087876ms ago: executing program 4 (id=1479): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) connect$qrtr(r4, &(0x7f0000000080)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(r10, &(0x7f0000000000), 0xfdef) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x1110081, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',u\t\x00no=', @ANYRESHEX=r3, @ANYBLOB="2c6e6f6465766d61702c69676e6f726571762c7375626a5f757365723d00000000ff400000ab0f06dd32c4a783537ce11b4f1916e2fea175ebc9a64e76cead5750b14a9f4a1ef262947671394b49ad787f4ac2cc30f0350845f4ce7f925fa8c077763f16081751db6e131134d5eb37baa8422c646f6e745f686173682c00"]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x1110081, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',u\t\x00no=', @ANYRESHEX=r3, @ANYBLOB="2c6e6f6465766d61702c69676e6f726571762c7375626a5f757365723d00000000ff400000ab0f06dd32c4a783537ce11b4f1916e2fea175ebc9a64e76cead5750b14a9f4a1ef262947671394b49ad787f4ac2cc30f0350845f4ce7f925fa8c077763f16081751db6e131134d5eb37baa8422c646f6e745f686173682c00"]) 900.035186ms ago: executing program 4 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042abd7000fddbdf2506000000080003002000000008000e00a0000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x4040884) (fail_nth: 7) 898.998766ms ago: executing program 0 (id=1482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r1, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x131) 877.520436ms ago: executing program 4 (id=1483): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x66000080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff]) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "98bcb94a4fdb3c8d33f986d2b6572f61fda1b1a60174e5015d5352217a274cd410ea0c76b32ac45e65b92df28b6f297396c8569e175ad27f118f7a96f5f9264a", 0x2c}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0x0, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) 813.416658ms ago: executing program 0 (id=1484): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x103000, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x28, 0x6, 0xec, 0xfffff02c}, {0x6, 0x2, 0x3, 0x40101}]}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f00000005c0)=ANY=[], 0x0) 812.822698ms ago: executing program 2 (id=1485): socket$key(0xf, 0x3, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) 787.219228ms ago: executing program 2 (id=1486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r3, 0xfffffffffffffd2b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f00000002c0)=0x10) r4 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000380)={[{@nombcache}, {@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4fd, &(0x7f0000000a40)="$eJzs3b9vW1sdAPDvdeImLy99yYM3AAJeKYWCqjo/2kZVGUgXEKoqISomhjYkbhTFrqM4KU3okI7sSFRigj+BjQGpEwMbG2wsZUAqUIEaBIPRvb4kJonr9DWJG/vzkW7uPee6/p4T+5xzfZrrE0DfOhcRWxFxJiLuRcRYnp/kW8w2t/Rxr14+nt9++Xg+iUbjzt+S7HyaFy3/JvV+/pzDEfG9b0f8MNkft76xuTxXqZRX8/TEWnVlor6xeXmpkOdMz0zNTF6/cm36yOr6cfVXL761dOv7v/n1F57/fuvrP06LNfqTs9m51nocpWbVizHakjcYEbeOI1iXDObvH06ftLV9KiLOZ+1/LAayVxMA6GWNxlg0xlrTAECvSz//j0ZSKOVzAaNRKJRKzTm8j2KkUKnV1y6N1dYfLEQ2hzUexcL9pUp5Mp8rHI9ikqansuPd9PSe9JWI+DAifjr0XpYuzdcqC9288AGAPvb+nvH/n0PN8R8A6HHD3S4AAHDijP8A0H+M/wDQf95g/Hd3IAD0iEOO/wd8jQcAcFqZ/weA/jPc6fsbn5xYUQCA4/fd27fTrbGdf//1wsON9W+MPry8UK4vl6rr86X52upKabFWW6yUS/ONRqfnq9RqK1NXd5L1jc271dr6g7W7S9W5xfLdcvGY6wMAdPbhx8/+mETE1o33si1a1nIwVkNvK3S7AEDXDHS7AEDXuJ8H+tchPuObBoAe1+nenrZ/IvzU4q9wWl38rPl/6Ffm/6F/fbL5/28eeTmAk2f+H/pXo5FY8x8A+ow5fuCt/v8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+tRotiWFUrYW+Fb6s1AqRZyNfzfGo5jcX6qUJyPig4j4w1BxKE1PdbvQAMBbKvwlydf/ujh2YXTv2TPJv4ayfUT86Od3fvZobm1tdSrN//tO/trTPH/6TDcqAAC0mt2f1Ryn833LB/lXLx/P/287ySK+uBkxO9yMv51vzTODMZjth6MYESP/SPJ0U3q9MnAE8beeRMRnduv/qCVCejE0nq98ujd+GvvsMcTf/f3vjV/4v/iF7Fy6L2a/i08fQVmg3zy72ewn87aXNrG8/RXiXLY/uP0PZz3U20v7v/TJtvf1f4Wd/m9gX/wka/PndtKvL8mLq7/9zr7Mxljz3JOIzw0eFD/ZiZ+06X8vHLKOf/r8F8+3O9f4RcTFODh+UzXrZifWqisT9Y3Ny0vVucXyYvnB9PTM1Mzk9SvXpieyOermz98dFOOvNy590C5+Wv+RNvGHO9T/K4es/y//c+8HX3pN/K99+eDX/6PXxE/HxK8eMv7cyGzb5bvT+Att6t/p9b90yPjP/7y5cMiHAgAnoL6xuTxXqZRXOxyk15qdHuPgdB7EVsQ7UIw3K/N48/37rpSn9w663TMBx2230Xe7JAAAAAAAAAAAAAAAQDv1jc3loTje24m6XUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6138DAAD//zivzdw=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f00000004c0)={[&(0x7f0000000400)='(+,..,:&\x00', &(0x7f0000000440)='--%\'\x00', &(0x7f0000000480)='\x00']}, &(0x7f0000000740)={[&(0x7f0000000540)='sysvgroups', &(0x7f0000000580)='sysvgroups', &(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)=']{[\x00', &(0x7f0000000640)='sysvgroups', &(0x7f0000000680)='nombcache', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='ext4\x00']}, 0x400) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080)={r7, 0x13}, 0x8) eventfd2(0xa4b, 0xc0001) 776.132758ms ago: executing program 0 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r3, 0x10, 0xcf7, 0x2c03) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000001200080008"], 0x110}, 0x1, 0x7}, 0x0) 713.642359ms ago: executing program 2 (id=1488): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r8, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0x1a, r0, 0xf, &(0x7f0000000000)) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9003", 0x0, 0x3a, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, [@fragment={0x87, 0x0, 0x1, 0x1, 0x0, 0xb, 0x66}]}}}}}}}, 0x0) 711.485089ms ago: executing program 4 (id=1489): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x72b}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8}, @in={0x2, 0x4e20, @loopback}], 0x58) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000001f80)) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r8, 0x4, 0x42400) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) fcntl$setstatus(r9, 0x4, 0x2400) close(0x3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 661.14627ms ago: executing program 0 (id=1490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0x35, 0x10, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r1, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0xa, 0x80, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000, 0x3400000, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc12, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x44) r2 = socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) creat(0x0, 0x5c351178c085b978) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000b80)=[{&(0x7f00000004c0)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)="af", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000008000000ff020000000000000000000000000001180000000000000084000000050000003000000002000000300000000000000002050002000000060000000e090000df000000050000003ebe3a3c000000000000000000", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000005000000000000000500000018000000000000008400000007000000e00000020000000018000000000000008400000000000000"], 0xd0, 0x10a0}], 0x1, 0x24000001) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000dcb00"/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) timer_create(0x7, &(0x7f0000000680)={0x0, 0x31}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x3}, 0x18) 237.614966ms ago: executing program 1 (id=1491): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="5ab347ca703c35a9df467aa66a77f66c93e7870dde67ba2eda11692568496f7fe107a242150d50c1ab1b6e1d1245bdebc0f1ecde20c853e6a37d4b5ffdd7ecc83e25386162c46f3aaa1959f429ce29a787298414ef98cb698fc8ed0ec74764a08afe936afc66f2490fc9ed67aa17e90bcea26f63b68ae45145ca74e06415b38ad3db2d779f5fab2f322a06c41d39e3c25d1d8dc86edf6f2f8ad65eeecf9cd8e40cd1b2cfbf27da819f7e3f3f59136baa2332ce9d01ac6c63a7f89180704853bfeb99b9e9f88ce299331fa7"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r7}, 0x18) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x9e) msgctl$IPC_RMID(0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 127.772498ms ago: executing program 2 (id=1492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f00000007c0)={0x20040100, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0}) socket$rds(0x15, 0x5, 0x0) r7 = syz_io_uring_setup(0x3ac6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r7, 0x92, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) 13.41276ms ago: executing program 2 (id=1493): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000002000) 0s ago: executing program 2 (id=1494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000380)) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0) (async) listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x14) kernel console output (not intermixed with test programs): 0x30 [ 181.480479][ T5751] dump_stack_lvl+0xe8/0x140 [ 181.480503][ T5751] dump_stack+0x15/0x1b [ 181.480590][ T5751] should_fail_ex+0x265/0x280 [ 181.480628][ T5751] should_failslab+0x8c/0xb0 [ 181.480656][ T5751] kmem_cache_alloc_noprof+0x50/0x310 [ 181.480724][ T5751] ? audit_log_start+0x365/0x6c0 [ 181.480766][ T5751] audit_log_start+0x365/0x6c0 [ 181.480920][ T5751] audit_seccomp+0x48/0x100 [ 181.480955][ T5751] ? __seccomp_filter+0x68c/0x10d0 [ 181.480983][ T5751] __seccomp_filter+0x69d/0x10d0 [ 181.481014][ T5751] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.481081][ T5751] ? vfs_write+0x75e/0x8e0 [ 181.481127][ T5751] __secure_computing+0x82/0x150 [ 181.481152][ T5751] syscall_trace_enter+0xcf/0x1e0 [ 181.481265][ T5751] do_syscall_64+0xac/0x200 [ 181.481289][ T5751] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.481387][ T5751] ? clear_bhb_loop+0x40/0x90 [ 181.481414][ T5751] ? clear_bhb_loop+0x40/0x90 [ 181.481442][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.481468][ T5751] RIP: 0033:0x7f343f3de929 [ 181.481504][ T5751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.481535][ T5751] RSP: 002b:00007f343da47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 181.481559][ T5751] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3de929 [ 181.481574][ T5751] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.481590][ T5751] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 181.481605][ T5751] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 181.481620][ T5751] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 181.481649][ T5751] [ 181.636609][ T5764] futex_wake_op: syz.3.890 tries to shift op by -1; fix this program [ 181.899249][ T5783] FAULT_INJECTION: forcing a failure. [ 181.899249][ T5783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.912642][ T5783] CPU: 0 UID: 0 PID: 5783 Comm: syz.0.904 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 181.912680][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.912692][ T5783] Call Trace: [ 181.912699][ T5783] [ 181.912706][ T5783] __dump_stack+0x1d/0x30 [ 181.912759][ T5783] dump_stack_lvl+0xe8/0x140 [ 181.912784][ T5783] dump_stack+0x15/0x1b [ 181.912837][ T5783] should_fail_ex+0x265/0x280 [ 181.912933][ T5783] should_fail+0xb/0x20 [ 181.912959][ T5783] should_fail_usercopy+0x1a/0x20 [ 181.913035][ T5783] _copy_to_user+0x20/0xa0 [ 181.913083][ T5783] simple_read_from_buffer+0xb5/0x130 [ 181.913114][ T5783] proc_fail_nth_read+0x100/0x140 [ 181.913176][ T5783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.913200][ T5783] vfs_read+0x1a0/0x6f0 [ 181.913236][ T5783] ? __rcu_read_unlock+0x4f/0x70 [ 181.913279][ T5783] ? __fget_files+0x184/0x1c0 [ 181.913303][ T5783] ksys_read+0xda/0x1a0 [ 181.913338][ T5783] __x64_sys_read+0x40/0x50 [ 181.913448][ T5783] x64_sys_call+0x2d77/0x2fb0 [ 181.913501][ T5783] do_syscall_64+0xd2/0x200 [ 181.913520][ T5783] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.913552][ T5783] ? clear_bhb_loop+0x40/0x90 [ 181.913603][ T5783] ? clear_bhb_loop+0x40/0x90 [ 181.913631][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.913723][ T5783] RIP: 0033:0x7f178db3d33c [ 181.913741][ T5783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.913764][ T5783] RSP: 002b:00007f178c1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.913787][ T5783] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3d33c [ 181.913813][ T5783] RDX: 000000000000000f RSI: 00007f178c1a70a0 RDI: 0000000000000003 [ 181.913824][ T5783] RBP: 00007f178c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.913835][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.913847][ T5783] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 181.913889][ T5783] [ 182.417277][ T5801] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 182.425285][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 182.656468][ T5813] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.748839][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 183.024593][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 183.102476][ T5823] FAULT_INJECTION: forcing a failure. [ 183.102476][ T5823] name failslab, interval 1, probability 0, space 0, times 0 [ 183.115280][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz.4.918 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 183.115314][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.115326][ T5823] Call Trace: [ 183.115332][ T5823] [ 183.115405][ T5823] __dump_stack+0x1d/0x30 [ 183.115431][ T5823] dump_stack_lvl+0xe8/0x140 [ 183.115481][ T5823] dump_stack+0x15/0x1b [ 183.115498][ T5823] should_fail_ex+0x265/0x280 [ 183.115537][ T5823] should_failslab+0x8c/0xb0 [ 183.115645][ T5823] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 183.115679][ T5823] ? sidtab_sid2str_get+0xa0/0x130 [ 183.115760][ T5823] kmemdup_noprof+0x2b/0x70 [ 183.115785][ T5823] sidtab_sid2str_get+0xa0/0x130 [ 183.115886][ T5823] security_sid_to_context_core+0x1eb/0x2e0 [ 183.115946][ T5823] security_sid_to_context+0x27/0x40 [ 183.115972][ T5823] avc_audit_post_callback+0x10f/0x520 [ 183.116005][ T5823] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 183.116076][ T5823] common_lsm_audit+0x1b8/0x230 [ 183.116094][ T5823] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 183.116123][ T5823] slow_avc_audit+0x104/0x140 [ 183.116153][ T5823] avc_has_perm+0x128/0x150 [ 183.116222][ T5823] selinux_mount+0x2ba/0x310 [ 183.116284][ T5823] security_sb_mount+0x5f/0xb0 [ 183.116367][ T5823] ? path_mount+0x89/0xb20 [ 183.116468][ T5823] path_mount+0xa9/0xb20 [ 183.116520][ T5823] ? user_path_at+0x109/0x130 [ 183.116552][ T5823] __se_sys_mount+0x28f/0x2e0 [ 183.116571][ T5823] ? fput+0x8f/0xc0 [ 183.116595][ T5823] __x64_sys_mount+0x67/0x80 [ 183.116615][ T5823] x64_sys_call+0xd36/0x2fb0 [ 183.116635][ T5823] do_syscall_64+0xd2/0x200 [ 183.116682][ T5823] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.116716][ T5823] ? clear_bhb_loop+0x40/0x90 [ 183.116738][ T5823] ? clear_bhb_loop+0x40/0x90 [ 183.116758][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.116794][ T5823] RIP: 0033:0x7f343f3de929 [ 183.116812][ T5823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.116835][ T5823] RSP: 002b:00007f343da47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.116858][ T5823] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3de929 [ 183.116944][ T5823] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000380 [ 183.116987][ T5823] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 183.117003][ T5823] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000002 [ 183.117018][ T5823] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 183.117040][ T5823] [ 183.435151][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 183.464862][ T5842] capability: warning: `syz.1.925' uses 32-bit capabilities (legacy support in use) [ 183.486505][ T5846] FAULT_INJECTION: forcing a failure. [ 183.486505][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 183.499414][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.4.926 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 183.499493][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.499542][ T5846] Call Trace: [ 183.499550][ T5846] [ 183.499559][ T5846] __dump_stack+0x1d/0x30 [ 183.499586][ T5846] dump_stack_lvl+0xe8/0x140 [ 183.499605][ T5846] dump_stack+0x15/0x1b [ 183.499635][ T5846] should_fail_ex+0x265/0x280 [ 183.499671][ T5846] ? audit_log_d_path+0x8d/0x150 [ 183.499714][ T5846] should_failslab+0x8c/0xb0 [ 183.499744][ T5846] __kmalloc_cache_noprof+0x4c/0x320 [ 183.499822][ T5846] audit_log_d_path+0x8d/0x150 [ 183.499869][ T5846] audit_log_d_path_exe+0x42/0x70 [ 183.499912][ T5846] audit_log_task+0x1e9/0x250 [ 183.499999][ T5846] audit_seccomp+0x61/0x100 [ 183.500087][ T5846] ? __seccomp_filter+0x68c/0x10d0 [ 183.500118][ T5846] __seccomp_filter+0x69d/0x10d0 [ 183.500144][ T5846] ? save_fpregs_to_fpstate+0x100/0x160 [ 183.500228][ T5846] ? _raw_spin_unlock+0x26/0x50 [ 183.500254][ T5846] __secure_computing+0x82/0x150 [ 183.500284][ T5846] syscall_trace_enter+0xcf/0x1e0 [ 183.500316][ T5846] do_syscall_64+0xac/0x200 [ 183.500335][ T5846] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.500376][ T5846] ? clear_bhb_loop+0x40/0x90 [ 183.500399][ T5846] ? clear_bhb_loop+0x40/0x90 [ 183.500435][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.500462][ T5846] RIP: 0033:0x7f343f3dd33c [ 183.500513][ T5846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.500536][ T5846] RSP: 002b:00007f343da47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.500583][ T5846] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3dd33c [ 183.500599][ T5846] RDX: 000000000000000f RSI: 00007f343da470a0 RDI: 0000000000000003 [ 183.500615][ T5846] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 183.500630][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.500646][ T5846] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 183.500695][ T5846] [ 183.723704][ T29] kauditd_printk_skb: 22085 callbacks suppressed [ 183.723723][ T29] audit: type=1400 audit(1750049630.182:1191305): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.751673][ T29] audit: type=1400 audit(1750049630.182:1191306): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.773316][ T29] audit: type=1400 audit(1750049630.182:1191307): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.794706][ T29] audit: type=1400 audit(1750049630.182:1191308): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.816889][ T29] audit: type=1400 audit(1750049630.182:1191309): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.824703][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.838320][ T29] audit: type=1400 audit(1750049630.182:1191310): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.844852][ T3035] audit: audit_lost=38997 audit_rate_limit=0 audit_backlog_limit=64 [ 183.844870][ T3035] audit: backlog limit exceeded [ 183.858559][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.947154][ T5863] FAULT_INJECTION: forcing a failure. [ 183.947154][ T5863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.960501][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.0.934 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 183.960649][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.960666][ T5863] Call Trace: [ 183.960675][ T5863] [ 183.960684][ T5863] __dump_stack+0x1d/0x30 [ 183.960717][ T5863] dump_stack_lvl+0xe8/0x140 [ 183.960741][ T5863] dump_stack+0x15/0x1b [ 183.960835][ T5863] should_fail_ex+0x265/0x280 [ 183.960874][ T5863] should_fail_alloc_page+0xf2/0x100 [ 183.960971][ T5863] __alloc_frozen_pages_noprof+0xff/0x360 [ 183.961147][ T5863] alloc_pages_mpol+0xb3/0x250 [ 183.961266][ T5863] alloc_pages_noprof+0x90/0x130 [ 183.961304][ T5863] pte_alloc_one+0x2d/0x120 [ 183.961331][ T5863] __pte_alloc+0x32/0x2b0 [ 183.961396][ T5863] handle_mm_fault+0x1c16/0x2be0 [ 183.961422][ T5863] ? check_vma_flags+0x26e/0x340 [ 183.961444][ T5863] __get_user_pages+0x1036/0x1fb0 [ 183.961474][ T5863] __gup_longterm_locked+0x9c9/0x1010 [ 183.961503][ T5863] ? exc_page_fault+0x62/0xa0 [ 183.961598][ T5863] ? do_user_addr_fault+0xbb8/0x1090 [ 183.961638][ T5863] ? should_fail_ex+0xdb/0x280 [ 183.961669][ T5863] pin_user_pages_remote+0x7e/0xb0 [ 183.961758][ T5863] process_vm_rw+0x484/0x950 [ 183.961803][ T5863] __x64_sys_process_vm_writev+0x78/0x90 [ 183.961831][ T5863] x64_sys_call+0xe80/0x2fb0 [ 183.961858][ T5863] do_syscall_64+0xd2/0x200 [ 183.961948][ T5863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.961979][ T5863] ? clear_bhb_loop+0x40/0x90 [ 183.962005][ T5863] ? clear_bhb_loop+0x40/0x90 [ 183.962033][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.962065][ T5863] RIP: 0033:0x7f178db3e929 [ 183.962093][ T5863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.962145][ T5863] RSP: 002b:00007f178c1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 183.962169][ T5863] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3e929 [ 183.962184][ T5863] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000001b8 [ 183.962196][ T5863] RBP: 00007f178c1a7090 R08: 000000000000023a R09: 0000000000000000 [ 183.962243][ T5863] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 183.962259][ T5863] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 183.962280][ T5863] [ 184.196430][ T10] usb 1-1: enqueue for inactive port 0 [ 184.201944][ T10] usb 1-1: enqueue for inactive port 0 [ 184.246001][ T5868] FAULT_INJECTION: forcing a failure. [ 184.246001][ T5868] name failslab, interval 1, probability 0, space 0, times 0 [ 184.258811][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.1.935 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 184.258846][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.258862][ T5868] Call Trace: [ 184.258870][ T5868] [ 184.258879][ T5868] __dump_stack+0x1d/0x30 [ 184.258936][ T5868] dump_stack_lvl+0xe8/0x140 [ 184.258960][ T5868] dump_stack+0x15/0x1b [ 184.258978][ T5868] should_fail_ex+0x265/0x280 [ 184.259008][ T5868] should_failslab+0x8c/0xb0 [ 184.259067][ T5868] kmem_cache_alloc_noprof+0x50/0x310 [ 184.259092][ T5868] ? __inet_hash_connect+0x7a2/0x1350 [ 184.259187][ T5868] ? inet_sk_get_local_port_range+0x89/0x100 [ 184.259217][ T5868] __inet_hash_connect+0x7a2/0x1350 [ 184.259242][ T5868] ? __pfx___inet6_check_established+0x10/0x10 [ 184.259276][ T5868] inet6_hash_connect+0xaf/0xc0 [ 184.259364][ T5868] tcp_v6_connect+0x972/0xc10 [ 184.259397][ T5868] __inet_stream_connect+0x169/0x7e0 [ 184.259487][ T5868] ? tcp_sendmsg_fastopen+0x172/0x520 [ 184.259562][ T5868] ? should_failslab+0x8c/0xb0 [ 184.259585][ T5868] ? __kmalloc_cache_noprof+0x189/0x320 [ 184.259622][ T5868] tcp_sendmsg_fastopen+0x43a/0x520 [ 184.259658][ T5868] tcp_sendmsg_locked+0x27be/0x2cc0 [ 184.259811][ T5868] ? mntput_no_expire+0x6f/0x3c0 [ 184.259847][ T5868] ? mntput+0x4b/0x80 [ 184.259941][ T5868] ? __rcu_read_unlock+0x4f/0x70 [ 184.260005][ T5868] ? avc_has_perm_noaudit+0x1b1/0x200 [ 184.260036][ T5868] ? avc_has_perm+0xd3/0x150 [ 184.260065][ T5868] ? _raw_spin_unlock_bh+0x36/0x40 [ 184.260089][ T5868] ? __pfx_tcp_sendmsg+0x10/0x10 [ 184.260170][ T5868] tcp_sendmsg+0x2f/0x50 [ 184.260202][ T5868] inet6_sendmsg+0x76/0xd0 [ 184.260332][ T5868] __sock_sendmsg+0x8b/0x180 [ 184.260411][ T5868] __sys_sendto+0x268/0x330 [ 184.260454][ T5868] __x64_sys_sendto+0x76/0x90 [ 184.260492][ T5868] x64_sys_call+0x2eb6/0x2fb0 [ 184.260519][ T5868] do_syscall_64+0xd2/0x200 [ 184.260583][ T5868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.260609][ T5868] ? clear_bhb_loop+0x40/0x90 [ 184.260628][ T5868] ? clear_bhb_loop+0x40/0x90 [ 184.260676][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.260703][ T5868] RIP: 0033:0x7f33b012e929 [ 184.260721][ T5868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.260752][ T5868] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 184.260787][ T5868] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 184.260799][ T5868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 184.260810][ T5868] RBP: 00007f33ae797090 R08: 00002000008d4fe4 R09: 000000000000001c [ 184.260822][ T5868] R10: 0000000020040008 R11: 0000000000000246 R12: 0000000000000001 [ 184.260837][ T5868] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 184.260859][ T5868] [ 184.546396][ T10] vhci_hcd: vhci_device speed not set [ 184.594532][ T5875] netlink: 96 bytes leftover after parsing attributes in process `syz.1.939'. [ 184.645713][ T5882] netlink: 96 bytes leftover after parsing attributes in process `syz.2.941'. [ 184.700790][ T5889] FAULT_INJECTION: forcing a failure. [ 184.700790][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 184.713580][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: syz.0.944 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 184.713613][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.713633][ T5889] Call Trace: [ 184.713641][ T5889] [ 184.713650][ T5889] __dump_stack+0x1d/0x30 [ 184.713675][ T5889] dump_stack_lvl+0xe8/0x140 [ 184.713700][ T5889] dump_stack+0x15/0x1b [ 184.713749][ T5889] should_fail_ex+0x265/0x280 [ 184.713795][ T5889] should_failslab+0x8c/0xb0 [ 184.713824][ T5889] kmem_cache_alloc_noprof+0x50/0x310 [ 184.713858][ T5889] ? security_file_alloc+0x32/0x100 [ 184.713958][ T5889] security_file_alloc+0x32/0x100 [ 184.713984][ T5889] init_file+0x5c/0x1d0 [ 184.714015][ T5889] alloc_empty_file+0x8b/0x200 [ 184.714039][ T5889] path_openat+0x68/0x2170 [ 184.714150][ T5889] ? _parse_integer_limit+0x170/0x190 [ 184.714188][ T5889] ? _parse_integer+0x27/0x40 [ 184.714222][ T5889] ? kstrtoull+0x111/0x140 [ 184.714256][ T5889] ? kstrtouint+0x76/0xc0 [ 184.714326][ T5889] do_filp_open+0x109/0x230 [ 184.714372][ T5889] do_sys_openat2+0xa6/0x110 [ 184.714488][ T5889] __x64_sys_open+0xe6/0x110 [ 184.714525][ T5889] x64_sys_call+0x14d4/0x2fb0 [ 184.714611][ T5889] do_syscall_64+0xd2/0x200 [ 184.714635][ T5889] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.714669][ T5889] ? clear_bhb_loop+0x40/0x90 [ 184.714756][ T5889] ? clear_bhb_loop+0x40/0x90 [ 184.714798][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.714824][ T5889] RIP: 0033:0x7f178db3e929 [ 184.714849][ T5889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.714872][ T5889] RSP: 002b:00007f178c1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 184.714897][ T5889] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3e929 [ 184.714912][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 184.714927][ T5889] RBP: 00007f178c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.714943][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.714959][ T5889] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 184.715048][ T5889] [ 185.014033][ T5897] FAULT_INJECTION: forcing a failure. [ 185.014033][ T5897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.027230][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.2.948 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 185.027273][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.027289][ T5897] Call Trace: [ 185.027296][ T5897] [ 185.027305][ T5897] __dump_stack+0x1d/0x30 [ 185.027388][ T5897] dump_stack_lvl+0xe8/0x140 [ 185.027412][ T5897] dump_stack+0x15/0x1b [ 185.027433][ T5897] should_fail_ex+0x265/0x280 [ 185.027471][ T5897] should_fail+0xb/0x20 [ 185.027505][ T5897] should_fail_usercopy+0x1a/0x20 [ 185.027616][ T5897] _copy_from_user+0x1c/0xb0 [ 185.027649][ T5897] kstrtouint_from_user+0x69/0xf0 [ 185.027755][ T5897] ? 0xffffffff81000000 [ 185.027771][ T5897] ? selinux_file_permission+0x1e4/0x320 [ 185.027801][ T5897] proc_fail_nth_write+0x50/0x160 [ 185.027826][ T5897] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 185.027899][ T5897] vfs_write+0x269/0x8e0 [ 185.027937][ T5897] ? vfs_read+0x47f/0x6f0 [ 185.027990][ T5897] ? __rcu_read_unlock+0x4f/0x70 [ 185.028016][ T5897] ? __fget_files+0x184/0x1c0 [ 185.028043][ T5897] ksys_write+0xda/0x1a0 [ 185.028065][ T5897] __x64_sys_write+0x40/0x50 [ 185.028086][ T5897] x64_sys_call+0x2cdd/0x2fb0 [ 185.028174][ T5897] do_syscall_64+0xd2/0x200 [ 185.028196][ T5897] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.028272][ T5897] ? clear_bhb_loop+0x40/0x90 [ 185.028299][ T5897] ? clear_bhb_loop+0x40/0x90 [ 185.028352][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.028402][ T5897] RIP: 0033:0x7fde64bbd3df [ 185.028419][ T5897] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 185.028448][ T5897] RSP: 002b:00007fde63227030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 185.028470][ T5897] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde64bbd3df [ 185.028485][ T5897] RDX: 0000000000000001 RSI: 00007fde632270a0 RDI: 0000000000000003 [ 185.028500][ T5897] RBP: 00007fde63227090 R08: 0000000000000000 R09: 0000000000000000 [ 185.028515][ T5897] R10: 0000000000010022 R11: 0000000000000293 R12: 0000000000000001 [ 185.028565][ T5897] R13: 0000000000000000 R14: 00007fde64de5fa0 R15: 00007ffd0d3d4218 [ 185.028586][ T5897] [ 185.303282][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'. [ 185.328750][ T5913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.406899][ T5928] ipt_REJECT: TCP_RESET invalid for non-tcp [ 185.472091][ T5932] FAULT_INJECTION: forcing a failure. [ 185.472091][ T5932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.485594][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.3.960 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 185.485630][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.485646][ T5932] Call Trace: [ 185.485651][ T5932] [ 185.485658][ T5932] __dump_stack+0x1d/0x30 [ 185.485727][ T5932] dump_stack_lvl+0xe8/0x140 [ 185.485828][ T5932] dump_stack+0x15/0x1b [ 185.485849][ T5932] should_fail_ex+0x265/0x280 [ 185.485890][ T5932] should_fail_alloc_page+0xf2/0x100 [ 185.485919][ T5932] __alloc_frozen_pages_noprof+0xff/0x360 [ 185.486018][ T5932] alloc_pages_mpol+0xb3/0x250 [ 185.486122][ T5932] vma_alloc_folio_noprof+0x1aa/0x300 [ 185.486163][ T5932] do_wp_page+0x673/0x2400 [ 185.486193][ T5932] ? __rcu_read_lock+0x37/0x50 [ 185.486272][ T5932] handle_mm_fault+0x77d/0x2be0 [ 185.486299][ T5932] ? __rcu_read_unlock+0x4f/0x70 [ 185.486332][ T5932] do_user_addr_fault+0x3fe/0x1090 [ 185.486377][ T5932] exc_page_fault+0x62/0xa0 [ 185.486493][ T5932] asm_exc_page_fault+0x26/0x30 [ 185.486558][ T5932] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 185.486585][ T5932] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 185.486607][ T5932] RSP: 0018:ffffc9000f2279f0 EFLAGS: 00050206 [ 185.486626][ T5932] RAX: ffff888109558a98 RBX: ffff88811af70000 RCX: 0000000000005ec0 [ 185.486641][ T5932] RDX: 0000000000000000 RSI: ffff88811af72140 RDI: 0000200000007000 [ 185.486657][ T5932] RBP: 0000200000004ec0 R08: 000000000000040e R09: 0000000000000000 [ 185.486672][ T5932] R10: 000188811af70000 R11: 000188811af77fff R12: 000020000000cec0 [ 185.486712][ T5932] R13: ffffc9000f227dc0 R14: 0000000000008000 R15: 00007ffffffff000 [ 185.486729][ T5932] _copy_to_iter+0x13e/0xe30 [ 185.486763][ T5932] ? avc_has_perm_noaudit+0x1b1/0x200 [ 185.486799][ T5932] ? avc_has_perm+0xd3/0x150 [ 185.486840][ T5932] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 185.486902][ T5932] __skb_datagram_iter+0x2f4/0x690 [ 185.486921][ T5932] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 185.486940][ T5932] skb_copy_datagram_iter+0x3d/0x110 [ 185.487028][ T5932] unix_stream_read_actor+0x43/0x70 [ 185.487051][ T5932] unix_stream_read_generic+0x65b/0x13a0 [ 185.487094][ T5932] unix_stream_recvmsg+0xc3/0xf0 [ 185.487171][ T5932] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 185.487212][ T5932] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 185.487269][ T5932] sock_recvmsg+0x139/0x170 [ 185.487302][ T5932] __sys_recvfrom+0x122/0x1f0 [ 185.487398][ T5932] __x64_sys_recvfrom+0x76/0x90 [ 185.487459][ T5932] x64_sys_call+0x1a52/0x2fb0 [ 185.487487][ T5932] do_syscall_64+0xd2/0x200 [ 185.487564][ T5932] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.487598][ T5932] ? clear_bhb_loop+0x40/0x90 [ 185.487624][ T5932] ? clear_bhb_loop+0x40/0x90 [ 185.487647][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.487674][ T5932] RIP: 0033:0x7f2c03d5e929 [ 185.487692][ T5932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.487714][ T5932] RSP: 002b:00007f2c023c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 185.487783][ T5932] RAX: ffffffffffffffda RBX: 00007f2c03f85fa0 RCX: 00007f2c03d5e929 [ 185.487799][ T5932] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000003 [ 185.487815][ T5932] RBP: 00007f2c023c7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.487830][ T5932] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 185.487846][ T5932] R13: 0000000000000000 R14: 00007f2c03f85fa0 R15: 00007ffea32b7d48 [ 185.487866][ T5932] [ 185.499319][ T5927] SELinux: syz.4.950 (5927) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 186.165406][ T5963] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 186.456734][ T5986] FAULT_INJECTION: forcing a failure. [ 186.456734][ T5986] name failslab, interval 1, probability 0, space 0, times 0 [ 186.469542][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: syz.1.982 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 186.469578][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.469591][ T5986] Call Trace: [ 186.469599][ T5986] [ 186.469607][ T5986] __dump_stack+0x1d/0x30 [ 186.469691][ T5986] dump_stack_lvl+0xe8/0x140 [ 186.469715][ T5986] dump_stack+0x15/0x1b [ 186.469732][ T5986] should_fail_ex+0x265/0x280 [ 186.469764][ T5986] should_failslab+0x8c/0xb0 [ 186.469824][ T5986] kmem_cache_alloc_noprof+0x50/0x310 [ 186.469858][ T5986] ? getname_flags+0x80/0x3b0 [ 186.469922][ T5986] getname_flags+0x80/0x3b0 [ 186.469951][ T5986] getname_uflags+0x21/0x30 [ 186.469979][ T5986] __x64_sys_execveat+0x5d/0x90 [ 186.470046][ T5986] x64_sys_call+0x2dae/0x2fb0 [ 186.470118][ T5986] do_syscall_64+0xd2/0x200 [ 186.470135][ T5986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.470222][ T5986] ? clear_bhb_loop+0x40/0x90 [ 186.470248][ T5986] ? clear_bhb_loop+0x40/0x90 [ 186.470269][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.470355][ T5986] RIP: 0033:0x7f33b012e929 [ 186.470374][ T5986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.470403][ T5986] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 186.470428][ T5986] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 186.470440][ T5986] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.470451][ T5986] RBP: 00007f33ae797090 R08: 0000000000001000 R09: 0000000000000000 [ 186.470462][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.470472][ T5986] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 186.470490][ T5986] [ 186.741721][ T5997] FAULT_INJECTION: forcing a failure. [ 186.741721][ T5997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.754960][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: syz.4.987 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 186.755019][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.755031][ T5997] Call Trace: [ 186.755037][ T5997] [ 186.755044][ T5997] __dump_stack+0x1d/0x30 [ 186.755063][ T5997] dump_stack_lvl+0xe8/0x140 [ 186.755085][ T5997] dump_stack+0x15/0x1b [ 186.755147][ T5997] should_fail_ex+0x265/0x280 [ 186.755184][ T5997] should_fail+0xb/0x20 [ 186.755216][ T5997] should_fail_usercopy+0x1a/0x20 [ 186.755252][ T5997] _copy_from_user+0x1c/0xb0 [ 186.755329][ T5997] kstrtouint_from_user+0x69/0xf0 [ 186.755416][ T5997] ? 0xffffffff81000000 [ 186.755495][ T5997] ? selinux_file_permission+0x1e4/0x320 [ 186.755525][ T5997] proc_fail_nth_write+0x50/0x160 [ 186.755547][ T5997] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.755569][ T5997] vfs_write+0x269/0x8e0 [ 186.755727][ T5997] ? vfs_read+0x47f/0x6f0 [ 186.755763][ T5997] ? __rcu_read_unlock+0x4f/0x70 [ 186.755782][ T5997] ? __fget_files+0x184/0x1c0 [ 186.755864][ T5997] ksys_write+0xda/0x1a0 [ 186.755886][ T5997] __x64_sys_write+0x40/0x50 [ 186.755907][ T5997] x64_sys_call+0x2cdd/0x2fb0 [ 186.755982][ T5997] do_syscall_64+0xd2/0x200 [ 186.756046][ T5997] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.756072][ T5997] ? clear_bhb_loop+0x40/0x90 [ 186.756094][ T5997] ? clear_bhb_loop+0x40/0x90 [ 186.756181][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.756201][ T5997] RIP: 0033:0x7f343f3dd3df [ 186.756218][ T5997] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 186.756241][ T5997] RSP: 002b:00007f343da47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 186.756265][ T5997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f343f3dd3df [ 186.756280][ T5997] RDX: 0000000000000001 RSI: 00007f343da470a0 RDI: 0000000000000003 [ 186.756347][ T5997] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 186.756359][ T5997] R10: 0000000000010022 R11: 0000000000000293 R12: 0000000000000001 [ 186.756372][ T5997] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 186.756389][ T5997] [ 187.011733][ T6001] __nla_validate_parse: 2 callbacks suppressed [ 187.011751][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 187.032921][ T6001] bridge_slave_1: left allmulticast mode [ 187.038805][ T6001] bridge_slave_1: left promiscuous mode [ 187.044627][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.064257][ T6001] bridge_slave_0: left allmulticast mode [ 187.070117][ T6001] bridge_slave_0: left promiscuous mode [ 187.075823][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.123346][ T6009] netlink: 156 bytes leftover after parsing attributes in process `syz.2.991'. [ 187.404509][ T3383] usb usb2-port1: attempt power cycle [ 187.455513][ T6020] netlink: 'syz.2.996': attribute type 27 has an invalid length. [ 187.484309][ T6020] batman_adv: batadv0: Interface deactivated: team0 [ 187.525692][ T6026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6026 comm=syz.1.998 [ 187.547683][ T6020] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 187.558243][ T6020] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.565382][ T6020] batman_adv: batadv0: Interface activated: team0 [ 187.595319][ T6035] FAULT_INJECTION: forcing a failure. [ 187.595319][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 187.608207][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.3.1000 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 187.608340][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.608356][ T6035] Call Trace: [ 187.608365][ T6035] [ 187.608374][ T6035] __dump_stack+0x1d/0x30 [ 187.608469][ T6035] dump_stack_lvl+0xe8/0x140 [ 187.608494][ T6035] dump_stack+0x15/0x1b [ 187.608525][ T6035] should_fail_ex+0x265/0x280 [ 187.608567][ T6035] ? unix_prepare_fpl+0x82/0x290 [ 187.608609][ T6035] should_failslab+0x8c/0xb0 [ 187.608636][ T6035] __kmalloc_cache_noprof+0x4c/0x320 [ 187.608714][ T6035] unix_prepare_fpl+0x82/0x290 [ 187.608744][ T6035] unix_scm_to_skb+0x1aa/0x250 [ 187.608774][ T6035] queue_oob+0x84/0x500 [ 187.608845][ T6035] unix_stream_sendmsg+0x7e0/0x8e0 [ 187.608877][ T6035] ? selinux_socket_sendmsg+0x175/0x1b0 [ 187.608958][ T6035] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 187.608985][ T6035] __sock_sendmsg+0x142/0x180 [ 187.609017][ T6035] ____sys_sendmsg+0x31e/0x4e0 [ 187.609101][ T6035] ___sys_sendmsg+0x17b/0x1d0 [ 187.609179][ T6035] __x64_sys_sendmsg+0xd4/0x160 [ 187.609206][ T6035] x64_sys_call+0x2999/0x2fb0 [ 187.609300][ T6035] do_syscall_64+0xd2/0x200 [ 187.609328][ T6035] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.609355][ T6035] ? clear_bhb_loop+0x40/0x90 [ 187.609377][ T6035] ? clear_bhb_loop+0x40/0x90 [ 187.609404][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.609431][ T6035] RIP: 0033:0x7f2c03d5e929 [ 187.609509][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.609526][ T6035] RSP: 002b:00007f2c023c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.609544][ T6035] RAX: ffffffffffffffda RBX: 00007f2c03f85fa0 RCX: 00007f2c03d5e929 [ 187.609556][ T6035] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000004 [ 187.609625][ T6035] RBP: 00007f2c023c7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.609699][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.609714][ T6035] R13: 0000000000000000 R14: 00007f2c03f85fa0 R15: 00007ffea32b7d48 [ 187.609736][ T6035] [ 187.833762][ T6020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.922121][ T6051] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 187.935436][ T6049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=6049 comm=syz.4.1005 [ 187.948738][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1005'. [ 188.032371][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 188.097823][ T6067] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 188.108010][ T6067] team0: Port device dummy0 added [ 188.118653][ T6067] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 188.129801][ T6067] team0: Port device dummy0 removed [ 188.137981][ T6067] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.263694][ T6074] FAULT_INJECTION: forcing a failure. [ 188.263694][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.277002][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.1014 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 188.277077][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.277091][ T6074] Call Trace: [ 188.277097][ T6074] [ 188.277103][ T6074] __dump_stack+0x1d/0x30 [ 188.277128][ T6074] dump_stack_lvl+0xe8/0x140 [ 188.277157][ T6074] dump_stack+0x15/0x1b [ 188.277239][ T6074] should_fail_ex+0x265/0x280 [ 188.277276][ T6074] should_fail+0xb/0x20 [ 188.277324][ T6074] should_fail_usercopy+0x1a/0x20 [ 188.277419][ T6074] strncpy_from_user+0x25/0x230 [ 188.277446][ T6074] ? audit_log_end+0x1d7/0x1f0 [ 188.277474][ T6074] path_setxattrat+0xeb/0x310 [ 188.277525][ T6074] __x64_sys_fsetxattr+0x6b/0x80 [ 188.277598][ T6074] x64_sys_call+0x2f7c/0x2fb0 [ 188.277623][ T6074] do_syscall_64+0xd2/0x200 [ 188.277727][ T6074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.277755][ T6074] ? clear_bhb_loop+0x40/0x90 [ 188.277780][ T6074] ? clear_bhb_loop+0x40/0x90 [ 188.277810][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.277838][ T6074] RIP: 0033:0x7f178db3e929 [ 188.277858][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.277978][ T6074] RSP: 002b:00007f178c1a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 188.278004][ T6074] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3e929 [ 188.278021][ T6074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 188.278038][ T6074] RBP: 00007f178c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.278054][ T6074] R10: 00000000000000f7 R11: 0000000000000246 R12: 0000000000000001 [ 188.278088][ T6074] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 188.278110][ T6074] [ 188.555743][ T6082] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1016'. [ 188.559799][ T6084] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1018'. [ 188.669516][ T6087] FAULT_INJECTION: forcing a failure. [ 188.669516][ T6087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.682664][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.1.1019 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 188.682751][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.682768][ T6087] Call Trace: [ 188.682777][ T6087] [ 188.682787][ T6087] __dump_stack+0x1d/0x30 [ 188.682816][ T6087] dump_stack_lvl+0xe8/0x140 [ 188.682852][ T6087] dump_stack+0x15/0x1b [ 188.682870][ T6087] should_fail_ex+0x265/0x280 [ 188.682913][ T6087] should_fail+0xb/0x20 [ 188.682985][ T6087] should_fail_usercopy+0x1a/0x20 [ 188.683057][ T6087] _copy_from_user+0x1c/0xb0 [ 188.683127][ T6087] kstrtouint_from_user+0x69/0xf0 [ 188.683166][ T6087] ? 0xffffffff81000000 [ 188.683217][ T6087] ? selinux_file_permission+0x1e4/0x320 [ 188.683244][ T6087] proc_fail_nth_write+0x50/0x160 [ 188.683332][ T6087] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.683360][ T6087] vfs_write+0x269/0x8e0 [ 188.683402][ T6087] ? vfs_read+0x47f/0x6f0 [ 188.683444][ T6087] ? __rcu_read_unlock+0x4f/0x70 [ 188.683539][ T6087] ? __fget_files+0x184/0x1c0 [ 188.683615][ T6087] ksys_write+0xda/0x1a0 [ 188.683643][ T6087] __x64_sys_write+0x40/0x50 [ 188.683667][ T6087] x64_sys_call+0x2cdd/0x2fb0 [ 188.683697][ T6087] do_syscall_64+0xd2/0x200 [ 188.683723][ T6087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.683878][ T6087] ? clear_bhb_loop+0x40/0x90 [ 188.683982][ T6087] ? clear_bhb_loop+0x40/0x90 [ 188.684010][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.684040][ T6087] RIP: 0033:0x7f33b012d3df [ 188.684060][ T6087] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 188.684083][ T6087] RSP: 002b:00007f33ae797030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 188.684103][ T6087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f33b012d3df [ 188.684173][ T6087] RDX: 0000000000000001 RSI: 00007f33ae7970a0 RDI: 0000000000000003 [ 188.684189][ T6087] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 188.684206][ T6087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 188.684224][ T6087] R13: 0000000000000001 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 188.684313][ T6087] [ 188.894917][ T29] kauditd_printk_skb: 24086 callbacks suppressed [ 188.894966][ T29] audit: type=1400 audit(1750049635.572:1204389): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931513][ T29] audit: type=1400 audit(1750049635.572:1204390): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931542][ T29] audit: type=1400 audit(1750049635.572:1204391): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931572][ T29] audit: type=1400 audit(1750049635.572:1204392): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931650][ T29] audit: type=1400 audit(1750049635.572:1204393): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931723][ T29] audit: type=1400 audit(1750049635.572:1204394): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931778][ T29] audit: type=1400 audit(1750049635.572:1204395): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931802][ T29] audit: type=1400 audit(1750049635.572:1204396): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931902][ T29] audit: type=1400 audit(1750049635.572:1204397): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.931932][ T29] audit: type=1400 audit(1750049635.572:1204398): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.365194][ T6115] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1030'. [ 189.408493][ T6120] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 189.450558][ T6126] FAULT_INJECTION: forcing a failure. [ 189.450558][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 189.463515][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.4.1034 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 189.463590][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.463606][ T6126] Call Trace: [ 189.463674][ T6126] [ 189.463683][ T6126] __dump_stack+0x1d/0x30 [ 189.463762][ T6126] dump_stack_lvl+0xe8/0x140 [ 189.463784][ T6126] dump_stack+0x15/0x1b [ 189.463799][ T6126] should_fail_ex+0x265/0x280 [ 189.463938][ T6126] should_failslab+0x8c/0xb0 [ 189.463962][ T6126] kmem_cache_alloc_noprof+0x50/0x310 [ 189.463993][ T6126] ? alloc_empty_file+0x76/0x200 [ 189.464090][ T6126] ? mntput+0x4b/0x80 [ 189.464119][ T6126] alloc_empty_file+0x76/0x200 [ 189.464221][ T6126] path_openat+0x68/0x2170 [ 189.464253][ T6126] ? _parse_integer_limit+0x170/0x190 [ 189.464281][ T6126] ? kstrtoull+0x111/0x140 [ 189.464366][ T6126] ? kstrtouint+0x76/0xc0 [ 189.464444][ T6126] do_filp_open+0x109/0x230 [ 189.464540][ T6126] do_sys_openat2+0xa6/0x110 [ 189.464572][ T6126] __x64_sys_openat+0xf2/0x120 [ 189.464604][ T6126] x64_sys_call+0x1af/0x2fb0 [ 189.464631][ T6126] do_syscall_64+0xd2/0x200 [ 189.464653][ T6126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.464726][ T6126] ? clear_bhb_loop+0x40/0x90 [ 189.464759][ T6126] ? clear_bhb_loop+0x40/0x90 [ 189.464779][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.464806][ T6126] RIP: 0033:0x7f343f3de929 [ 189.464825][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.464881][ T6126] RSP: 002b:00007f343da47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.464900][ T6126] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3de929 [ 189.464950][ T6126] RDX: 0000000000001300 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 189.464965][ T6126] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 189.464982][ T6126] R10: 000000000000001d R11: 0000000000000246 R12: 0000000000000001 [ 189.464998][ T6126] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 189.465020][ T6126] [ 189.693752][ T3383] usb usb2-port1: unable to enumerate USB device [ 190.026162][ T6143] FAULT_INJECTION: forcing a failure. [ 190.026162][ T6143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.039306][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.4.1040 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 190.039337][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.039382][ T6143] Call Trace: [ 190.039390][ T6143] [ 190.039400][ T6143] __dump_stack+0x1d/0x30 [ 190.039427][ T6143] dump_stack_lvl+0xe8/0x140 [ 190.039451][ T6143] dump_stack+0x15/0x1b [ 190.039473][ T6143] should_fail_ex+0x265/0x280 [ 190.039505][ T6143] should_fail+0xb/0x20 [ 190.039537][ T6143] should_fail_usercopy+0x1a/0x20 [ 190.039651][ T6143] _copy_from_user+0x1c/0xb0 [ 190.039704][ T6143] kstrtouint_from_user+0x69/0xf0 [ 190.039744][ T6143] ? 0xffffffff81000000 [ 190.039813][ T6143] ? selinux_file_permission+0x1e4/0x320 [ 190.039843][ T6143] proc_fail_nth_write+0x50/0x160 [ 190.039862][ T6143] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 190.039912][ T6143] vfs_write+0x269/0x8e0 [ 190.040016][ T6143] ? vfs_read+0x47f/0x6f0 [ 190.040081][ T6143] ? __rcu_read_unlock+0x4f/0x70 [ 190.040104][ T6143] ? __fget_files+0x184/0x1c0 [ 190.040125][ T6143] ksys_write+0xda/0x1a0 [ 190.040192][ T6143] __x64_sys_write+0x40/0x50 [ 190.040216][ T6143] x64_sys_call+0x2cdd/0x2fb0 [ 190.040244][ T6143] do_syscall_64+0xd2/0x200 [ 190.040267][ T6143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.040365][ T6143] ? clear_bhb_loop+0x40/0x90 [ 190.040416][ T6143] ? clear_bhb_loop+0x40/0x90 [ 190.040443][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040470][ T6143] RIP: 0033:0x7f343f3dd3df [ 190.040488][ T6143] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 190.040590][ T6143] RSP: 002b:00007f343da47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 190.040665][ T6143] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f343f3dd3df [ 190.040683][ T6143] RDX: 0000000000000001 RSI: 00007f343da470a0 RDI: 0000000000000003 [ 190.040699][ T6143] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 190.040715][ T6143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 190.040730][ T6143] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 190.040748][ T6143] [ 190.325874][ T6150] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 190.360112][ T6154] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1045'. [ 190.526753][ T6169] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 190.800677][ T6184] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1058'. [ 190.888735][ T6187] FAULT_INJECTION: forcing a failure. [ 190.888735][ T6187] name failslab, interval 1, probability 0, space 0, times 0 [ 190.901554][ T6187] CPU: 1 UID: 0 PID: 6187 Comm: syz.1.1059 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 190.901584][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.901596][ T6187] Call Trace: [ 190.901632][ T6187] [ 190.901641][ T6187] __dump_stack+0x1d/0x30 [ 190.901668][ T6187] dump_stack_lvl+0xe8/0x140 [ 190.901693][ T6187] dump_stack+0x15/0x1b [ 190.901715][ T6187] should_fail_ex+0x265/0x280 [ 190.901814][ T6187] should_failslab+0x8c/0xb0 [ 190.901844][ T6187] kmem_cache_alloc_noprof+0x50/0x310 [ 190.901935][ T6187] ? skb_clone+0x151/0x1f0 [ 190.901956][ T6187] skb_clone+0x151/0x1f0 [ 190.901973][ T6187] __netlink_deliver_tap+0x2c9/0x500 [ 190.902070][ T6187] netlink_unicast+0x64c/0x670 [ 190.902110][ T6187] netlink_sendmsg+0x58b/0x6b0 [ 190.902137][ T6187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.902165][ T6187] __sock_sendmsg+0x142/0x180 [ 190.902191][ T6187] ____sys_sendmsg+0x31e/0x4e0 [ 190.902237][ T6187] ___sys_sendmsg+0x17b/0x1d0 [ 190.902274][ T6187] __x64_sys_sendmsg+0xd4/0x160 [ 190.902318][ T6187] x64_sys_call+0x2999/0x2fb0 [ 190.902345][ T6187] do_syscall_64+0xd2/0x200 [ 190.902363][ T6187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.902397][ T6187] ? clear_bhb_loop+0x40/0x90 [ 190.902447][ T6187] ? clear_bhb_loop+0x40/0x90 [ 190.902549][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.902571][ T6187] RIP: 0033:0x7f33b012e929 [ 190.902585][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.902622][ T6187] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.902702][ T6187] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 190.902719][ T6187] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 190.902733][ T6187] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 190.902744][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.902755][ T6187] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 190.902773][ T6187] [ 191.290642][ T6208] bond1: entered promiscuous mode [ 191.295826][ T6208] bond1: entered allmulticast mode [ 191.301317][ T6208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.310457][ T6208] bond1 (unregistering): Released all slaves [ 191.321400][ T6211] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1069'. [ 191.472990][ T6220] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 191.498173][ T6226] Cannot find del_set index 3 as target [ 191.532653][ T6228] FAULT_INJECTION: forcing a failure. [ 191.532653][ T6228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.545916][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.1.1075 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 191.545951][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.545974][ T6228] Call Trace: [ 191.545982][ T6228] [ 191.545990][ T6228] __dump_stack+0x1d/0x30 [ 191.546010][ T6228] dump_stack_lvl+0xe8/0x140 [ 191.546046][ T6228] dump_stack+0x15/0x1b [ 191.546061][ T6228] should_fail_ex+0x265/0x280 [ 191.546181][ T6228] should_fail+0xb/0x20 [ 191.546212][ T6228] should_fail_usercopy+0x1a/0x20 [ 191.546252][ T6228] _copy_from_user+0x1c/0xb0 [ 191.546354][ T6228] do_ipt_set_ctl+0x3a0/0x820 [ 191.546383][ T6228] ? _raw_spin_unlock_bh+0x36/0x40 [ 191.546466][ T6228] ? tcp_release_cb+0xf1/0x370 [ 191.546505][ T6228] nf_setsockopt+0x199/0x1b0 [ 191.546529][ T6228] ip_setsockopt+0x102/0x110 [ 191.546635][ T6228] tcp_setsockopt+0x95/0xb0 [ 191.546676][ T6228] sock_common_setsockopt+0x66/0x80 [ 191.546762][ T6228] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.546788][ T6228] __sys_setsockopt+0x181/0x200 [ 191.546821][ T6228] __x64_sys_setsockopt+0x64/0x80 [ 191.546899][ T6228] x64_sys_call+0x2bd5/0x2fb0 [ 191.546926][ T6228] do_syscall_64+0xd2/0x200 [ 191.546947][ T6228] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 191.546983][ T6228] ? clear_bhb_loop+0x40/0x90 [ 191.547004][ T6228] ? clear_bhb_loop+0x40/0x90 [ 191.547027][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.547051][ T6228] RIP: 0033:0x7f33b012e929 [ 191.547065][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.547136][ T6228] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.547160][ T6228] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 191.547175][ T6228] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.547187][ T6228] RBP: 00007f33ae797090 R08: 0000000000000280 R09: 0000000000000000 [ 191.547263][ T6228] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 191.547274][ T6228] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 191.547291][ T6228] [ 191.850326][ T6233] netlink: 'syz.1.1077': attribute type 7 has an invalid length. [ 191.858172][ T6233] netlink: 'syz.1.1077': attribute type 8 has an invalid length. [ 191.892886][ T6233] erspan0: entered promiscuous mode [ 191.919129][ T6237] FAULT_INJECTION: forcing a failure. [ 191.919129][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 191.932025][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.2.1079 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 191.932055][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.932068][ T6237] Call Trace: [ 191.932075][ T6237] [ 191.932082][ T6237] __dump_stack+0x1d/0x30 [ 191.932106][ T6237] dump_stack_lvl+0xe8/0x140 [ 191.932149][ T6237] dump_stack+0x15/0x1b [ 191.932178][ T6237] should_fail_ex+0x265/0x280 [ 191.932218][ T6237] ? assoc_array_insert+0x2e0/0x1990 [ 191.932244][ T6237] should_failslab+0x8c/0xb0 [ 191.932324][ T6237] __kmalloc_cache_noprof+0x4c/0x320 [ 191.932360][ T6237] assoc_array_insert+0x2e0/0x1990 [ 191.932388][ T6237] ? keyring_compare_object+0xda/0x100 [ 191.932471][ T6237] ? assoc_array_delete+0x348/0x950 [ 191.932502][ T6237] __key_link_begin+0x8a/0x140 [ 191.932531][ T6237] key_move+0x160/0x550 [ 191.932559][ T6237] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 191.932601][ T6237] ? __pfx_keyring_search_iterator+0x10/0x10 [ 191.932696][ T6237] keyctl_keyring_move+0xd6/0x110 [ 191.932730][ T6237] __se_sys_keyctl+0x5f7/0xb80 [ 191.932827][ T6237] ? __rcu_read_unlock+0x4f/0x70 [ 191.932856][ T6237] ? __fget_files+0x184/0x1c0 [ 191.932883][ T6237] ? finish_task_switch+0xad/0x2b0 [ 191.932905][ T6237] ? fput+0x8f/0xc0 [ 191.932932][ T6237] __x64_sys_keyctl+0x67/0x80 [ 191.933047][ T6237] x64_sys_call+0x2e7f/0x2fb0 [ 191.933071][ T6237] do_syscall_64+0xd2/0x200 [ 191.933090][ T6237] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 191.933172][ T6237] ? clear_bhb_loop+0x40/0x90 [ 191.933193][ T6237] ? clear_bhb_loop+0x40/0x90 [ 191.933215][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.933236][ T6237] RIP: 0033:0x7fde64bbe929 [ 191.933296][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.933314][ T6237] RSP: 002b:00007fde63227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 191.933333][ T6237] RAX: ffffffffffffffda RBX: 00007fde64de5fa0 RCX: 00007fde64bbe929 [ 191.933413][ T6237] RDX: fffffffffffffffe RSI: 0000000032e58e3a RDI: 000000000000001e [ 191.933426][ T6237] RBP: 00007fde63227090 R08: 0000000000000001 R09: 0000000000000000 [ 191.933438][ T6237] R10: 0000000032e58e3a R11: 0000000000000246 R12: 0000000000000001 [ 191.933450][ T6237] R13: 0000000000000000 R14: 00007fde64de5fa0 R15: 00007ffd0d3d4218 [ 191.933468][ T6237] [ 192.004350][ T6233] gretap0: entered promiscuous mode [ 192.426722][ T6268] __nla_validate_parse: 3 callbacks suppressed [ 192.426766][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1092'. [ 192.467875][ T6268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6268 comm=syz.0.1092 [ 192.696391][ T6281] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 192.923203][ T6286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6286 comm=syz.3.1100 [ 193.055150][ T6290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1102'. [ 193.074916][ T6290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6290 comm=syz.3.1102 [ 193.140754][ T6292] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1103'. [ 193.196733][ T6298] SELinux: syz.4.1106 (6298) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 193.302674][ T6309] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 193.341020][ T6309] bond5: entered promiscuous mode [ 193.346142][ T6309] bond5: entered allmulticast mode [ 193.351619][ T6309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.466900][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 193.475943][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 193.484923][ T6330] netlink: 'syz.3.1120': attribute type 14 has an invalid length. [ 193.492787][ T6330] netlink: 'syz.3.1120': attribute type 12 has an invalid length. [ 193.724196][ T6355] FAULT_INJECTION: forcing a failure. [ 193.724196][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.737400][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.0.1131 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 193.737436][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.737450][ T6355] Call Trace: [ 193.737457][ T6355] [ 193.737510][ T6355] __dump_stack+0x1d/0x30 [ 193.737544][ T6355] dump_stack_lvl+0xe8/0x140 [ 193.737569][ T6355] dump_stack+0x15/0x1b [ 193.737591][ T6355] should_fail_ex+0x265/0x280 [ 193.737632][ T6355] should_fail+0xb/0x20 [ 193.737677][ T6355] should_fail_usercopy+0x1a/0x20 [ 193.737751][ T6355] _copy_to_user+0x20/0xa0 [ 193.737775][ T6355] simple_read_from_buffer+0xb5/0x130 [ 193.737817][ T6355] proc_fail_nth_read+0x100/0x140 [ 193.737846][ T6355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.737865][ T6355] vfs_read+0x1a0/0x6f0 [ 193.737895][ T6355] ? __rcu_read_unlock+0x4f/0x70 [ 193.737955][ T6355] ? __fget_files+0x184/0x1c0 [ 193.737984][ T6355] ksys_read+0xda/0x1a0 [ 193.738027][ T6355] __x64_sys_read+0x40/0x50 [ 193.738125][ T6355] x64_sys_call+0x2d77/0x2fb0 [ 193.738154][ T6355] do_syscall_64+0xd2/0x200 [ 193.738177][ T6355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.738223][ T6355] ? clear_bhb_loop+0x40/0x90 [ 193.738244][ T6355] ? clear_bhb_loop+0x40/0x90 [ 193.738295][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.738322][ T6355] RIP: 0033:0x7f178db3d33c [ 193.738365][ T6355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.738389][ T6355] RSP: 002b:00007f178c1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.738412][ T6355] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3d33c [ 193.738424][ T6355] RDX: 000000000000000f RSI: 00007f178c1a70a0 RDI: 0000000000000003 [ 193.738462][ T6355] RBP: 00007f178c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.738478][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.738494][ T6355] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 193.738520][ T6355] [ 193.905067][ T3035] audit_log_start: 48654 callbacks suppressed [ 193.905087][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.905891][ T29] audit: type=1400 audit(1750049640.412:1225984): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.913601][ T3035] audit: audit_lost=51691 audit_rate_limit=0 audit_backlog_limit=64 [ 193.921621][ T29] audit: type=1400 audit(1750049640.422:1225985): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.929650][ T3035] audit: backlog limit exceeded [ 193.937608][ T29] audit: type=1400 audit(1750049640.422:1225986): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.937635][ T29] audit: type=1400 audit(1750049640.422:1225987): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.937658][ T29] audit: type=1400 audit(1750049640.422:1225988): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.950374][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.954894][ T29] audit: type=1400 audit(1750049640.422:1225989): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.161485][ T6359] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 194.201274][ T6363] binfmt_misc: register: failed to install interpreter file ./file2 [ 194.464716][ T6385] FAULT_INJECTION: forcing a failure. [ 194.464716][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 194.477593][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.3.1144 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 194.477645][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.477661][ T6385] Call Trace: [ 194.477669][ T6385] [ 194.477677][ T6385] __dump_stack+0x1d/0x30 [ 194.477703][ T6385] dump_stack_lvl+0xe8/0x140 [ 194.477792][ T6385] dump_stack+0x15/0x1b [ 194.477813][ T6385] should_fail_ex+0x265/0x280 [ 194.477848][ T6385] should_failslab+0x8c/0xb0 [ 194.477870][ T6385] kmem_cache_alloc_noprof+0x50/0x310 [ 194.477960][ T6385] ? audit_log_start+0x365/0x6c0 [ 194.477990][ T6385] audit_log_start+0x365/0x6c0 [ 194.478031][ T6385] audit_seccomp+0x48/0x100 [ 194.478115][ T6385] ? __seccomp_filter+0x68c/0x10d0 [ 194.478145][ T6385] __seccomp_filter+0x69d/0x10d0 [ 194.478174][ T6385] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.478235][ T6385] ? vfs_write+0x75e/0x8e0 [ 194.478302][ T6385] __secure_computing+0x82/0x150 [ 194.478406][ T6385] syscall_trace_enter+0xcf/0x1e0 [ 194.478436][ T6385] do_syscall_64+0xac/0x200 [ 194.478460][ T6385] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.478573][ T6385] ? clear_bhb_loop+0x40/0x90 [ 194.478600][ T6385] ? clear_bhb_loop+0x40/0x90 [ 194.478626][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.478653][ T6385] RIP: 0033:0x7f2c03d5e929 [ 194.478671][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.478716][ T6385] RSP: 002b:00007f2c023c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 194.478737][ T6385] RAX: ffffffffffffffda RBX: 00007f2c03f85fa0 RCX: 00007f2c03d5e929 [ 194.478748][ T6385] RDX: 00000000000000d3 RSI: 0000200000000040 RDI: 0000200000000000 [ 194.478767][ T6385] RBP: 00007f2c023c7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.478782][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.478798][ T6385] R13: 0000000000000000 R14: 00007f2c03f85fa0 R15: 00007ffea32b7d48 [ 194.478820][ T6385] [ 194.744471][ T6392] tc_dump_action: action bad kind [ 194.797121][ T6405] FAULT_INJECTION: forcing a failure. [ 194.797121][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 194.810159][ T6405] CPU: 0 UID: 0 PID: 6405 Comm: syz.1.1152 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 194.810191][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.810208][ T6405] Call Trace: [ 194.810217][ T6405] [ 194.810226][ T6405] __dump_stack+0x1d/0x30 [ 194.810253][ T6405] dump_stack_lvl+0xe8/0x140 [ 194.810278][ T6405] dump_stack+0x15/0x1b [ 194.810300][ T6405] should_fail_ex+0x265/0x280 [ 194.810484][ T6405] should_failslab+0x8c/0xb0 [ 194.810514][ T6405] kmem_cache_alloc_noprof+0x50/0x310 [ 194.810539][ T6405] ? audit_log_start+0x365/0x6c0 [ 194.810571][ T6405] audit_log_start+0x365/0x6c0 [ 194.810657][ T6405] audit_seccomp+0x48/0x100 [ 194.810736][ T6405] ? __seccomp_filter+0x68c/0x10d0 [ 194.810767][ T6405] __seccomp_filter+0x69d/0x10d0 [ 194.810853][ T6405] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.810881][ T6405] ? vfs_write+0x75e/0x8e0 [ 194.810928][ T6405] __secure_computing+0x82/0x150 [ 194.810958][ T6405] syscall_trace_enter+0xcf/0x1e0 [ 194.810989][ T6405] do_syscall_64+0xac/0x200 [ 194.811020][ T6405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.811048][ T6405] ? clear_bhb_loop+0x40/0x90 [ 194.811067][ T6405] ? clear_bhb_loop+0x40/0x90 [ 194.811089][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.811183][ T6405] RIP: 0033:0x7f33b012e929 [ 194.811215][ T6405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.811234][ T6405] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cd [ 194.811324][ T6405] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 194.811340][ T6405] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 194.811356][ T6405] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 194.811372][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.811465][ T6405] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 194.811487][ T6405] [ 195.111462][ T6422] netlink: 'syz.3.1161': attribute type 8 has an invalid length. [ 195.172469][ T6427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6427 comm=syz.2.1162 [ 195.222946][ T6433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 195.229615][ T6433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.237203][ T6433] vhci_hcd vhci_hcd.0: Device attached [ 195.273054][ T6433] IPv6: Can't replace route, no match found [ 195.287475][ T6434] vhci_hcd: connection closed [ 195.287715][ T37] vhci_hcd: stop threads [ 195.296850][ T37] vhci_hcd: release socket [ 195.301347][ T37] vhci_hcd: disconnect device [ 195.310611][ T6443] ipt_ECN: cannot use operation on non-tcp rule [ 195.356117][ T6443] netlink: 'syz.3.1167': attribute type 10 has an invalid length. [ 195.362974][ T6449] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1170'. [ 195.371450][ T6443] team0: Device hsr_slave_0 failed to register rx_handler [ 195.474508][ T6460] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1175'. [ 195.529517][ T6462] macvlan1: entered promiscuous mode [ 195.535623][ T6462] ipvlan0: entered promiscuous mode [ 195.541886][ T6462] ipvlan0: left promiscuous mode [ 195.548697][ T6462] macvlan1: left promiscuous mode [ 195.606727][ T6468] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 195.616078][ T3414] IPVS: starting estimator thread 0... [ 195.724892][ T6471] IPVS: using max 1920 ests per chain, 96000 per kthread [ 195.732926][ T6479] futex_wake_op: syz.2.1182 tries to shift op by -1; fix this program [ 195.884496][ T6490] batman_adv: batadv0: Interface deactivated: team0 [ 195.891183][ T6490] batman_adv: batadv0: Removing interface: team0 [ 195.912673][ T6490] bridge_slave_0: left allmulticast mode [ 195.918434][ T6490] bridge_slave_0: left promiscuous mode [ 195.924181][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.960242][ T6490] bridge_slave_1: left allmulticast mode [ 195.966051][ T6490] bridge_slave_1: left promiscuous mode [ 195.971842][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.997463][ T6498] netlink: 'syz.1.1190': attribute type 27 has an invalid length. [ 196.035470][ T6490] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 196.059966][ T6490] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 196.086864][ T6490] team0: Port device team_slave_0 removed [ 196.101045][ T6490] team0: Port device team_slave_1 removed [ 196.114341][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.142304][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.174074][ T6495] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1188'. [ 196.217907][ T6498] xfrm1: left promiscuous mode [ 196.222912][ T6498] xfrm1: left allmulticast mode [ 196.256665][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.278892][ T6502] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.315832][ T6502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.723354][ T6535] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1203'. [ 196.777947][ T6541] FAULT_INJECTION: forcing a failure. [ 196.777947][ T6541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.791288][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.0.1206 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 196.791349][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.791365][ T6541] Call Trace: [ 196.791374][ T6541] [ 196.791384][ T6541] __dump_stack+0x1d/0x30 [ 196.791407][ T6541] dump_stack_lvl+0xe8/0x140 [ 196.791426][ T6541] dump_stack+0x15/0x1b [ 196.791441][ T6541] should_fail_ex+0x265/0x280 [ 196.791475][ T6541] should_fail_alloc_page+0xf2/0x100 [ 196.791499][ T6541] __alloc_frozen_pages_noprof+0xff/0x360 [ 196.791544][ T6541] alloc_pages_mpol+0xb3/0x250 [ 196.791604][ T6541] vma_alloc_folio_noprof+0x1aa/0x300 [ 196.791645][ T6541] handle_mm_fault+0xec2/0x2be0 [ 196.791692][ T6541] ? mas_walk+0xf2/0x120 [ 196.791726][ T6541] do_user_addr_fault+0x636/0x1090 [ 196.791769][ T6541] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.791877][ T6541] exc_page_fault+0x62/0xa0 [ 196.791919][ T6541] asm_exc_page_fault+0x26/0x30 [ 196.791944][ T6541] RIP: 0033:0x7f178daebf4b [ 196.792027][ T6541] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 196.792050][ T6541] RSP: 002b:00007f178c1a4e10 EFLAGS: 00010246 [ 196.792069][ T6541] RAX: 00007f178c1a6f30 RBX: 00007f178dd34620 RCX: 0000000000000000 [ 196.792085][ T6541] RDX: 00007f178c1a6f78 RSI: 00007f178db9dbf8 RDI: 00007f178c1a4e30 [ 196.792099][ T6541] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 196.792150][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.792162][ T6541] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 196.792180][ T6541] [ 196.792191][ T6541] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 196.984387][ T6545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=6545 comm=syz.2.1207 [ 197.085922][ T6558] bridge_slave_0: entered promiscuous mode [ 197.091929][ T6558] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.890879][ T6591] netlink: 'syz.1.1226': attribute type 27 has an invalid length. [ 197.978640][ T6594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.002035][ T6594] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.041776][ T6594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.136465][ T6598] __nla_validate_parse: 1 callbacks suppressed [ 198.136482][ T6598] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1228'. [ 198.238278][ T6602] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 198.288955][ T6605] FAULT_INJECTION: forcing a failure. [ 198.288955][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.302206][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.1.1231 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 198.302234][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.302245][ T6605] Call Trace: [ 198.302251][ T6605] [ 198.302257][ T6605] __dump_stack+0x1d/0x30 [ 198.302318][ T6605] dump_stack_lvl+0xe8/0x140 [ 198.302338][ T6605] dump_stack+0x15/0x1b [ 198.302354][ T6605] should_fail_ex+0x265/0x280 [ 198.302399][ T6605] should_fail+0xb/0x20 [ 198.302448][ T6605] should_fail_usercopy+0x1a/0x20 [ 198.302483][ T6605] _copy_from_iter+0xcf/0xe40 [ 198.302499][ T6605] ? __build_skb_around+0x1a0/0x200 [ 198.302580][ T6605] ? __alloc_skb+0x223/0x320 [ 198.302617][ T6605] netlink_sendmsg+0x471/0x6b0 [ 198.302642][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.302676][ T6605] __sock_sendmsg+0x142/0x180 [ 198.302700][ T6605] ____sys_sendmsg+0x31e/0x4e0 [ 198.302734][ T6605] ___sys_sendmsg+0x17b/0x1d0 [ 198.302842][ T6605] __x64_sys_sendmsg+0xd4/0x160 [ 198.302862][ T6605] x64_sys_call+0x2999/0x2fb0 [ 198.302884][ T6605] do_syscall_64+0xd2/0x200 [ 198.302955][ T6605] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.302987][ T6605] ? clear_bhb_loop+0x40/0x90 [ 198.303013][ T6605] ? clear_bhb_loop+0x40/0x90 [ 198.303116][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.303142][ T6605] RIP: 0033:0x7f33b012e929 [ 198.303178][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.303199][ T6605] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.303220][ T6605] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 198.303235][ T6605] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 198.303249][ T6605] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 198.303263][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.303278][ T6605] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 198.303429][ T6605] [ 198.565857][ T6618] netlink: 'syz.4.1235': attribute type 27 has an invalid length. [ 198.629982][ T6618] bridge_slave_0: left promiscuous mode [ 198.662220][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.672466][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.682340][ T6623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.713356][ T6626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1238'. [ 198.838829][ T6638] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1243'. [ 198.919848][ T29] kauditd_printk_skb: 28316 callbacks suppressed [ 198.919868][ T29] audit: type=1400 audit(1750049645.582:1246516): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.921040][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.926351][ T29] audit: type=1400 audit(1750049645.582:1246517): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.947629][ T3035] audit: audit_lost=54290 audit_rate_limit=0 audit_backlog_limit=64 [ 198.947647][ T3035] audit: backlog limit exceeded [ 198.948391][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.954193][ T29] audit: type=1400 audit(1750049645.582:1246518): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.975511][ T3035] audit: audit_lost=54291 audit_rate_limit=0 audit_backlog_limit=64 [ 198.975530][ T3035] audit: backlog limit exceeded [ 198.977726][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.158279][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 199.160561][ T6652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.167384][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 199.174684][ T6652] IPv6: NLM_F_CREATE should be set when creating new route [ 199.198098][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1248'. [ 199.297673][ T6657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 199.304254][ T6657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.311880][ T6657] vhci_hcd vhci_hcd.0: Device attached [ 199.340870][ T6657] IPv6: Can't replace route, no match found [ 199.361627][ T6659] vhci_hcd: connection closed [ 199.361958][ T12] vhci_hcd: stop threads [ 199.370955][ T12] vhci_hcd: release socket [ 199.375574][ T12] vhci_hcd: disconnect device [ 199.633533][ T6670] FAULT_INJECTION: forcing a failure. [ 199.633533][ T6670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.646761][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.4.1256 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 199.646811][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.646824][ T6670] Call Trace: [ 199.646831][ T6670] [ 199.646840][ T6670] __dump_stack+0x1d/0x30 [ 199.646865][ T6670] dump_stack_lvl+0xe8/0x140 [ 199.646883][ T6670] dump_stack+0x15/0x1b [ 199.646898][ T6670] should_fail_ex+0x265/0x280 [ 199.646944][ T6670] should_fail+0xb/0x20 [ 199.646979][ T6670] should_fail_usercopy+0x1a/0x20 [ 199.647019][ T6670] _copy_from_user+0x1c/0xb0 [ 199.647094][ T6670] kstrtouint_from_user+0x69/0xf0 [ 199.647128][ T6670] ? 0xffffffff81000000 [ 199.647141][ T6670] ? selinux_file_permission+0x1e4/0x320 [ 199.647222][ T6670] proc_fail_nth_write+0x50/0x160 [ 199.647241][ T6670] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.647259][ T6670] vfs_write+0x269/0x8e0 [ 199.647371][ T6670] ? vfs_read+0x47f/0x6f0 [ 199.647400][ T6670] ? __rcu_read_unlock+0x4f/0x70 [ 199.647480][ T6670] ? __fget_files+0x184/0x1c0 [ 199.647506][ T6670] ksys_write+0xda/0x1a0 [ 199.647529][ T6670] __x64_sys_write+0x40/0x50 [ 199.647550][ T6670] x64_sys_call+0x2cdd/0x2fb0 [ 199.647571][ T6670] do_syscall_64+0xd2/0x200 [ 199.647588][ T6670] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.647674][ T6670] ? clear_bhb_loop+0x40/0x90 [ 199.647693][ T6670] ? clear_bhb_loop+0x40/0x90 [ 199.647715][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.647777][ T6670] RIP: 0033:0x7f343f3dd3df [ 199.647795][ T6670] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 199.647816][ T6670] RSP: 002b:00007f343da47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 199.647833][ T6670] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f343f3dd3df [ 199.647845][ T6670] RDX: 0000000000000001 RSI: 00007f343da470a0 RDI: 0000000000000005 [ 199.647856][ T6670] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 199.647925][ T6670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 199.647936][ T6670] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 199.647953][ T6670] [ 199.946289][ T6674] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 200.204147][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 200.378350][ T6698] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 201.252660][ T6730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.297022][ T6731] netlink: 'syz.2.1280': attribute type 27 has an invalid length. [ 201.317194][ T6739] x_tables: duplicate underflow at hook 1 [ 201.408396][ T6748] FAULT_INJECTION: forcing a failure. [ 201.408396][ T6748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.421851][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.4.1287 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 201.421917][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.421933][ T6748] Call Trace: [ 201.421941][ T6748] [ 201.421950][ T6748] __dump_stack+0x1d/0x30 [ 201.421977][ T6748] dump_stack_lvl+0xe8/0x140 [ 201.422010][ T6748] dump_stack+0x15/0x1b [ 201.422027][ T6748] should_fail_ex+0x265/0x280 [ 201.422066][ T6748] should_fail_alloc_page+0xf2/0x100 [ 201.422098][ T6748] __alloc_frozen_pages_noprof+0xff/0x360 [ 201.422156][ T6748] alloc_pages_mpol+0xb3/0x250 [ 201.422189][ T6748] alloc_pages_noprof+0x90/0x130 [ 201.422230][ T6748] pte_alloc_one+0x2d/0x120 [ 201.422262][ T6748] __pte_alloc+0x32/0x2b0 [ 201.422367][ T6748] handle_mm_fault+0x1c16/0x2be0 [ 201.422445][ T6748] ? check_vma_flags+0x26e/0x340 [ 201.422477][ T6748] __get_user_pages+0x1036/0x1fb0 [ 201.422514][ T6748] __gup_longterm_locked+0x9c9/0x1010 [ 201.422611][ T6748] ? exc_page_fault+0x62/0xa0 [ 201.422664][ T6748] ? do_user_addr_fault+0xbb8/0x1090 [ 201.422706][ T6748] ? should_fail_ex+0xdb/0x280 [ 201.422746][ T6748] pin_user_pages_remote+0x7e/0xb0 [ 201.422823][ T6748] process_vm_rw+0x484/0x950 [ 201.422951][ T6748] __x64_sys_process_vm_writev+0x78/0x90 [ 201.423059][ T6748] x64_sys_call+0xe80/0x2fb0 [ 201.423080][ T6748] do_syscall_64+0xd2/0x200 [ 201.423096][ T6748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.423127][ T6748] ? clear_bhb_loop+0x40/0x90 [ 201.423227][ T6748] ? clear_bhb_loop+0x40/0x90 [ 201.423319][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.423366][ T6748] RIP: 0033:0x7f343f3de929 [ 201.423380][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.423466][ T6748] RSP: 002b:00007f343da47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 201.423490][ T6748] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3de929 [ 201.423506][ T6748] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000026a [ 201.423522][ T6748] RBP: 00007f343da47090 R08: 000000000000023a R09: 0000000000000000 [ 201.423592][ T6748] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 201.423603][ T6748] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 201.423625][ T6748] [ 201.484040][ T6742] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 201.672073][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.681469][ T6742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.708199][ T6760] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.528228][ T6784] FAULT_INJECTION: forcing a failure. [ 202.528228][ T6784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.541519][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.1.1300 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 202.541547][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.541559][ T6784] Call Trace: [ 202.541641][ T6784] [ 202.541649][ T6784] __dump_stack+0x1d/0x30 [ 202.541669][ T6784] dump_stack_lvl+0xe8/0x140 [ 202.541697][ T6784] dump_stack+0x15/0x1b [ 202.541713][ T6784] should_fail_ex+0x265/0x280 [ 202.541773][ T6784] should_fail+0xb/0x20 [ 202.541809][ T6784] should_fail_usercopy+0x1a/0x20 [ 202.541850][ T6784] _copy_to_user+0x20/0xa0 [ 202.541870][ T6784] simple_read_from_buffer+0xb5/0x130 [ 202.541982][ T6784] proc_fail_nth_read+0x100/0x140 [ 202.542009][ T6784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.542112][ T6784] vfs_read+0x1a0/0x6f0 [ 202.542207][ T6784] ? __rcu_read_unlock+0x4f/0x70 [ 202.542227][ T6784] ? __fget_files+0x184/0x1c0 [ 202.542248][ T6784] ksys_read+0xda/0x1a0 [ 202.542314][ T6784] __x64_sys_read+0x40/0x50 [ 202.542354][ T6784] x64_sys_call+0x2d77/0x2fb0 [ 202.542406][ T6784] do_syscall_64+0xd2/0x200 [ 202.542430][ T6784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.542462][ T6784] ? clear_bhb_loop+0x40/0x90 [ 202.542512][ T6784] ? clear_bhb_loop+0x40/0x90 [ 202.542533][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.542558][ T6784] RIP: 0033:0x7f33b012d33c [ 202.542577][ T6784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.542596][ T6784] RSP: 002b:00007f33ae797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.542618][ T6784] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012d33c [ 202.542633][ T6784] RDX: 000000000000000f RSI: 00007f33ae7970a0 RDI: 0000000000000003 [ 202.542687][ T6784] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 202.542745][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.542757][ T6784] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 202.542778][ T6784] [ 202.951254][ T6798] netlink: 'syz.3.1306': attribute type 27 has an invalid length. [ 202.971760][ T6801] netlink: 'syz.0.1308': attribute type 27 has an invalid length. [ 202.996526][ T6798] bond5: left promiscuous mode [ 203.001444][ T6798] bond5: left allmulticast mode [ 203.119402][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.147003][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.173226][ T6803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.205117][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.213382][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.233779][ T6804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.262183][ T6809] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1309'. [ 203.460004][ T6826] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1316'. [ 203.530859][ T6832] FAULT_INJECTION: forcing a failure. [ 203.530859][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.544036][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.3.1319 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 203.544073][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.544128][ T6832] Call Trace: [ 203.544137][ T6832] [ 203.544146][ T6832] __dump_stack+0x1d/0x30 [ 203.544173][ T6832] dump_stack_lvl+0xe8/0x140 [ 203.544198][ T6832] dump_stack+0x15/0x1b [ 203.544215][ T6832] should_fail_ex+0x265/0x280 [ 203.544254][ T6832] should_fail+0xb/0x20 [ 203.544311][ T6832] should_fail_usercopy+0x1a/0x20 [ 203.544353][ T6832] _copy_from_user+0x1c/0xb0 [ 203.544380][ T6832] get_timespec64+0x4c/0x100 [ 203.544458][ T6832] __se_sys_pselect6+0xc7/0x280 [ 203.544538][ T6832] __x64_sys_pselect6+0x78/0x90 [ 203.544660][ T6832] x64_sys_call+0x1caa/0x2fb0 [ 203.544683][ T6832] do_syscall_64+0xd2/0x200 [ 203.544707][ T6832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.544741][ T6832] ? clear_bhb_loop+0x40/0x90 [ 203.544769][ T6832] ? clear_bhb_loop+0x40/0x90 [ 203.544810][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.544862][ T6832] RIP: 0033:0x7f2c03d5e929 [ 203.544953][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.544974][ T6832] RSP: 002b:00007f2c023c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 203.545055][ T6832] RAX: ffffffffffffffda RBX: 00007f2c03f85fa0 RCX: 00007f2c03d5e929 [ 203.545071][ T6832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.545123][ T6832] RBP: 00007f2c023c7090 R08: 0000200000000180 R09: 0000000000000000 [ 203.545136][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.545149][ T6832] R13: 0000000000000000 R14: 00007f2c03f85fa0 R15: 00007ffea32b7d48 [ 203.545165][ T6832] [ 203.744521][ T6835] FAULT_INJECTION: forcing a failure. [ 203.744521][ T6835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.757664][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.0.1320 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 203.757700][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.757716][ T6835] Call Trace: [ 203.757724][ T6835] [ 203.757733][ T6835] __dump_stack+0x1d/0x30 [ 203.757758][ T6835] dump_stack_lvl+0xe8/0x140 [ 203.757856][ T6835] dump_stack+0x15/0x1b [ 203.757871][ T6835] should_fail_ex+0x265/0x280 [ 203.757913][ T6835] should_fail+0xb/0x20 [ 203.757971][ T6835] should_fail_usercopy+0x1a/0x20 [ 203.758020][ T6835] _copy_to_user+0x20/0xa0 [ 203.758065][ T6835] simple_read_from_buffer+0xb5/0x130 [ 203.758153][ T6835] proc_fail_nth_read+0x100/0x140 [ 203.758171][ T6835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.758192][ T6835] vfs_read+0x1a0/0x6f0 [ 203.758230][ T6835] ? __rcu_read_unlock+0x4f/0x70 [ 203.758275][ T6835] ? __fget_files+0x184/0x1c0 [ 203.758298][ T6835] ksys_read+0xda/0x1a0 [ 203.758344][ T6835] __x64_sys_read+0x40/0x50 [ 203.758381][ T6835] x64_sys_call+0x2d77/0x2fb0 [ 203.758401][ T6835] do_syscall_64+0xd2/0x200 [ 203.758423][ T6835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.758534][ T6835] ? clear_bhb_loop+0x40/0x90 [ 203.758637][ T6835] ? clear_bhb_loop+0x40/0x90 [ 203.758664][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.758717][ T6835] RIP: 0033:0x7f178db3d33c [ 203.758731][ T6835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.758751][ T6835] RSP: 002b:00007f178c1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.758790][ T6835] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3d33c [ 203.758805][ T6835] RDX: 000000000000000f RSI: 00007f178c1a70a0 RDI: 0000000000000003 [ 203.758829][ T6835] RBP: 00007f178c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.758845][ T6835] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 203.758911][ T6835] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 203.758927][ T6835] [ 203.975527][ T29] kauditd_printk_skb: 21069 callbacks suppressed [ 203.975545][ T29] audit: type=1400 audit(1750049650.412:1265706): avc: denied { create } for pid=6834 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 204.002871][ T29] audit: type=1400 audit(1750049650.422:1265707): avc: denied { create } for pid=6834 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 204.022731][ T29] audit: type=1400 audit(1750049650.422:1265708): avc: denied { create } for pid=6834 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 204.042673][ T29] audit: type=1400 audit(1750049650.652:1265709): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.106363][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.112948][ T3035] audit: audit_lost=54920 audit_rate_limit=0 audit_backlog_limit=64 [ 204.116437][ T6843] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.121019][ T3035] audit: backlog limit exceeded [ 204.127561][ T6843] audit: audit_lost=54921 audit_rate_limit=0 audit_backlog_limit=64 [ 204.137027][ T6839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.149543][ T6839] netlink: 'syz.2.1331': attribute type 10 has an invalid length. [ 204.157515][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 204.178884][ T6839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.187779][ T6839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.196829][ T6839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.205961][ T6839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.217453][ T6839] team0: Port device geneve1 added [ 204.220064][ T6845] netlink: 'syz.0.1324': attribute type 27 has an invalid length. [ 204.300172][ T6851] netlink: 'syz.3.1326': attribute type 27 has an invalid length. [ 204.342370][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.387551][ T6849] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.422590][ T6849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.511316][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.538843][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.567026][ T6859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.585197][ T6864] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1332'. [ 204.871844][ T6899] FAULT_INJECTION: forcing a failure. [ 204.871844][ T6899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.885406][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.4.1341 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 204.885440][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.885513][ T6899] Call Trace: [ 204.885521][ T6899] [ 204.885529][ T6899] __dump_stack+0x1d/0x30 [ 204.885631][ T6899] dump_stack_lvl+0xe8/0x140 [ 204.885721][ T6899] dump_stack+0x15/0x1b [ 204.885742][ T6899] should_fail_ex+0x265/0x280 [ 204.885831][ T6899] should_fail_alloc_page+0xf2/0x100 [ 204.885855][ T6899] __alloc_frozen_pages_noprof+0xff/0x360 [ 204.885890][ T6899] alloc_pages_mpol+0xb3/0x250 [ 204.885952][ T6899] vma_alloc_folio_noprof+0x1aa/0x300 [ 204.886049][ T6899] handle_mm_fault+0xec2/0x2be0 [ 204.886070][ T6899] ? mas_walk+0xf2/0x120 [ 204.886113][ T6899] do_user_addr_fault+0x636/0x1090 [ 204.886163][ T6899] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 204.886194][ T6899] exc_page_fault+0x62/0xa0 [ 204.886268][ T6899] asm_exc_page_fault+0x26/0x30 [ 204.886287][ T6899] RIP: 0033:0x7f343f2a0ca3 [ 204.886301][ T6899] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 204.886340][ T6899] RSP: 002b:00007f343da464a0 EFLAGS: 00010206 [ 204.886360][ T6899] RAX: 000000000000e000 RBX: 00007f343da46540 RCX: 00007f3435627000 [ 204.886377][ T6899] RDX: 00007f343da466e0 RSI: 0000000000000007 RDI: 00007f343da465e0 [ 204.886393][ T6899] RBP: 00000000000000b2 R08: 000000000000000a R09: 00000000000003aa [ 204.886409][ T6899] R10: 00000000000003c0 R11: 00007f343da46540 R12: 0000000000000001 [ 204.886425][ T6899] R13: 00007f343f47c020 R14: 0000000000000056 R15: 00007f343da465e0 [ 204.886447][ T6899] [ 204.886459][ T6899] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 204.995730][ T6902] ip6gre1: entered allmulticast mode [ 205.154341][ T6907] netlink: 'syz.4.1346': attribute type 27 has an invalid length. [ 205.237026][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.268332][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.299614][ T6907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.559090][ T6929] FAULT_INJECTION: forcing a failure. [ 205.559090][ T6929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.572512][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.1.1354 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 205.572547][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.572680][ T6929] Call Trace: [ 205.572697][ T6929] [ 205.572714][ T6929] __dump_stack+0x1d/0x30 [ 205.572747][ T6929] dump_stack_lvl+0xe8/0x140 [ 205.572776][ T6929] dump_stack+0x15/0x1b [ 205.572792][ T6929] should_fail_ex+0x265/0x280 [ 205.572986][ T6929] should_fail+0xb/0x20 [ 205.573060][ T6929] should_fail_usercopy+0x1a/0x20 [ 205.573146][ T6929] _copy_to_user+0x20/0xa0 [ 205.573217][ T6929] simple_read_from_buffer+0xb5/0x130 [ 205.573259][ T6929] proc_fail_nth_read+0x100/0x140 [ 205.573359][ T6929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.573378][ T6929] vfs_read+0x1a0/0x6f0 [ 205.573422][ T6929] ? __rcu_read_unlock+0x4f/0x70 [ 205.573450][ T6929] ? __fget_files+0x184/0x1c0 [ 205.573478][ T6929] ksys_read+0xda/0x1a0 [ 205.573531][ T6929] __x64_sys_read+0x40/0x50 [ 205.573576][ T6929] x64_sys_call+0x2d77/0x2fb0 [ 205.573599][ T6929] do_syscall_64+0xd2/0x200 [ 205.573634][ T6929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 205.573682][ T6929] ? clear_bhb_loop+0x40/0x90 [ 205.573708][ T6929] ? clear_bhb_loop+0x40/0x90 [ 205.573759][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.573785][ T6929] RIP: 0033:0x7f33b012d33c [ 205.573802][ T6929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.573822][ T6929] RSP: 002b:00007f33ae797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.573841][ T6929] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012d33c [ 205.573866][ T6929] RDX: 000000000000000f RSI: 00007f33ae7970a0 RDI: 0000000000000003 [ 205.573878][ T6929] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 205.573956][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.573972][ T6929] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 205.573995][ T6929] [ 205.856466][ T6940] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1359'. [ 205.870150][ T6938] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1358'. [ 206.104117][ T6961] FAULT_INJECTION: forcing a failure. [ 206.104117][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.117295][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.3.1367 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 206.117346][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.117364][ T6961] Call Trace: [ 206.117372][ T6961] [ 206.117380][ T6961] __dump_stack+0x1d/0x30 [ 206.117409][ T6961] dump_stack_lvl+0xe8/0x140 [ 206.117435][ T6961] dump_stack+0x15/0x1b [ 206.117458][ T6961] should_fail_ex+0x265/0x280 [ 206.117515][ T6961] should_fail+0xb/0x20 [ 206.117610][ T6961] should_fail_usercopy+0x1a/0x20 [ 206.117733][ T6961] _copy_from_iter+0xcf/0xe40 [ 206.117757][ T6961] ? __build_skb_around+0x1a0/0x200 [ 206.117807][ T6961] ? __alloc_skb+0x223/0x320 [ 206.117868][ T6961] netlink_sendmsg+0x471/0x6b0 [ 206.117898][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.117925][ T6961] __sock_sendmsg+0x142/0x180 [ 206.117958][ T6961] ____sys_sendmsg+0x31e/0x4e0 [ 206.118046][ T6961] ___sys_sendmsg+0x17b/0x1d0 [ 206.118081][ T6961] __x64_sys_sendmsg+0xd4/0x160 [ 206.118110][ T6961] x64_sys_call+0x2999/0x2fb0 [ 206.118139][ T6961] do_syscall_64+0xd2/0x200 [ 206.118214][ T6961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.118247][ T6961] ? clear_bhb_loop+0x40/0x90 [ 206.118281][ T6961] ? clear_bhb_loop+0x40/0x90 [ 206.118388][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.118416][ T6961] RIP: 0033:0x7f2c03d5e929 [ 206.118436][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.118459][ T6961] RSP: 002b:00007f2c023c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.118484][ T6961] RAX: ffffffffffffffda RBX: 00007f2c03f85fa0 RCX: 00007f2c03d5e929 [ 206.118500][ T6961] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 206.118519][ T6961] RBP: 00007f2c023c7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.118558][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.118574][ T6961] R13: 0000000000000000 R14: 00007f2c03f85fa0 R15: 00007ffea32b7d48 [ 206.118597][ T6961] [ 206.441764][ T6973] netlink: 'syz.3.1371': attribute type 3 has an invalid length. [ 206.633426][ T6991] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1376'. [ 206.918861][ T7016] FAULT_INJECTION: forcing a failure. [ 206.918861][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 206.931590][ T7016] CPU: 0 UID: 0 PID: 7016 Comm: syz.3.1385 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 206.931623][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.931638][ T7016] Call Trace: [ 206.931645][ T7016] [ 206.931653][ T7016] __dump_stack+0x1d/0x30 [ 206.931717][ T7016] dump_stack_lvl+0xe8/0x140 [ 206.931737][ T7016] dump_stack+0x15/0x1b [ 206.931751][ T7016] should_fail_ex+0x265/0x280 [ 206.931789][ T7016] should_failslab+0x8c/0xb0 [ 206.931829][ T7016] kmem_cache_alloc_noprof+0x50/0x310 [ 206.931862][ T7016] ? copy_signal+0x53/0x340 [ 206.931894][ T7016] copy_signal+0x53/0x340 [ 206.931942][ T7016] copy_process+0xcc7/0x1fe0 [ 206.932034][ T7016] kernel_clone+0x16c/0x5b0 [ 206.932179][ T7016] ? vfs_write+0x75e/0x8e0 [ 206.932222][ T7016] __x64_sys_clone+0xe6/0x120 [ 206.932273][ T7016] x64_sys_call+0x2c59/0x2fb0 [ 206.932314][ T7016] do_syscall_64+0xd2/0x200 [ 206.932403][ T7016] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.932436][ T7016] ? clear_bhb_loop+0x40/0x90 [ 206.932539][ T7016] ? clear_bhb_loop+0x40/0x90 [ 206.932566][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.932645][ T7016] RIP: 0033:0x7f2c03d5e929 [ 206.932664][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.932725][ T7016] RSP: 002b:00007f2c023a5fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 206.932748][ T7016] RAX: ffffffffffffffda RBX: 00007f2c03f86080 RCX: 00007f2c03d5e929 [ 206.932764][ T7016] RDX: 0000000000000000 RSI: fffffffffffffd70 RDI: 000000006a02f080 [ 206.932779][ T7016] RBP: 00007f2c023a6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.932795][ T7016] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 206.932889][ T7016] R13: 0000000000000000 R14: 00007f2c03f86080 R15: 00007ffea32b7d48 [ 206.932911][ T7016] [ 207.829692][ T7035] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1394'. [ 208.069787][ T7050] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 208.104056][ T7050] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 208.151749][ T7052] FAULT_INJECTION: forcing a failure. [ 208.151749][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 208.155155][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 208.164508][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.4.1402 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 208.164553][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.164571][ T7052] Call Trace: [ 208.164580][ T7052] [ 208.164589][ T7052] __dump_stack+0x1d/0x30 [ 208.164619][ T7052] dump_stack_lvl+0xe8/0x140 [ 208.164683][ T7052] dump_stack+0x15/0x1b [ 208.164706][ T7052] should_fail_ex+0x265/0x280 [ 208.164771][ T7052] should_failslab+0x8c/0xb0 [ 208.164804][ T7052] kmem_cache_alloc_noprof+0x50/0x310 [ 208.164840][ T7052] ? audit_log_start+0x365/0x6c0 [ 208.164930][ T7052] audit_log_start+0x365/0x6c0 [ 208.165008][ T7052] ? should_fail_ex+0xdb/0x280 [ 208.165051][ T7052] audit_seccomp+0x48/0x100 [ 208.165087][ T7052] ? __seccomp_filter+0x68c/0x10d0 [ 208.165118][ T7052] __seccomp_filter+0x69d/0x10d0 [ 208.165193][ T7052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.165219][ T7052] ? vfs_read+0x47f/0x6f0 [ 208.165265][ T7052] __secure_computing+0x82/0x150 [ 208.165311][ T7052] syscall_trace_enter+0xcf/0x1e0 [ 208.165344][ T7052] do_syscall_64+0xac/0x200 [ 208.165367][ T7052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.165471][ T7052] ? clear_bhb_loop+0x40/0x90 [ 208.165501][ T7052] ? clear_bhb_loop+0x40/0x90 [ 208.165605][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.165633][ T7052] RIP: 0033:0x7f343f3dd3df [ 208.165655][ T7052] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 208.165696][ T7052] RSP: 002b:00007f343da47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 208.165722][ T7052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f343f3dd3df [ 208.165740][ T7052] RDX: 0000000000000001 RSI: 00007f343da470a0 RDI: 0000000000000003 [ 208.165757][ T7052] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 208.165774][ T7052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 208.165789][ T7052] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 208.165884][ T7052] [ 208.432370][ T7050] $Hÿ: (slave bridge0): Releasing backup interface [ 208.467753][ T7063] FAULT_INJECTION: forcing a failure. [ 208.467753][ T7063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.480901][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.4.1406 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 208.480956][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.481023][ T7063] Call Trace: [ 208.481031][ T7063] [ 208.481040][ T7063] __dump_stack+0x1d/0x30 [ 208.481066][ T7063] dump_stack_lvl+0xe8/0x140 [ 208.481150][ T7063] dump_stack+0x15/0x1b [ 208.481166][ T7063] should_fail_ex+0x265/0x280 [ 208.481205][ T7063] should_fail+0xb/0x20 [ 208.481240][ T7063] should_fail_usercopy+0x1a/0x20 [ 208.481402][ T7063] _copy_from_user+0x1c/0xb0 [ 208.481436][ T7063] __sys_bpf+0x178/0x790 [ 208.481476][ T7063] __x64_sys_bpf+0x41/0x50 [ 208.481508][ T7063] x64_sys_call+0x2478/0x2fb0 [ 208.481535][ T7063] do_syscall_64+0xd2/0x200 [ 208.481614][ T7063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.481654][ T7063] ? clear_bhb_loop+0x40/0x90 [ 208.481730][ T7063] ? clear_bhb_loop+0x40/0x90 [ 208.481751][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.481792][ T7063] RIP: 0033:0x7f343f3de929 [ 208.481810][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.481896][ T7063] RSP: 002b:00007f343da47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.481914][ T7063] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3de929 [ 208.481930][ T7063] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 000000000000000f [ 208.481944][ T7063] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 208.481955][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.481966][ T7063] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 208.482025][ T7063] [ 208.936089][ T29] kauditd_printk_skb: 15062 callbacks suppressed [ 208.936107][ T29] audit: type=1400 audit(1750049655.655:1279351): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.950196][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.964265][ T7079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.970569][ T3035] audit: audit_lost=55396 audit_rate_limit=0 audit_backlog_limit=64 [ 208.977221][ T7079] audit: audit_lost=55397 audit_rate_limit=0 audit_backlog_limit=64 [ 208.985094][ T3035] audit: backlog limit exceeded [ 208.998065][ T7079] audit: backlog limit exceeded [ 209.012843][ T29] audit: type=1400 audit(1750049655.655:1279352): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.034315][ T29] audit: type=1400 audit(1750049655.655:1279353): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.049753][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.149586][ T7081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.220495][ T7085] FAULT_INJECTION: forcing a failure. [ 209.220495][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 209.233262][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.0.1411 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 209.233361][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.233377][ T7085] Call Trace: [ 209.233384][ T7085] [ 209.233394][ T7085] __dump_stack+0x1d/0x30 [ 209.233418][ T7085] dump_stack_lvl+0xe8/0x140 [ 209.233436][ T7085] dump_stack+0x15/0x1b [ 209.233484][ T7085] should_fail_ex+0x265/0x280 [ 209.233568][ T7085] should_failslab+0x8c/0xb0 [ 209.233598][ T7085] kmem_cache_alloc_node_noprof+0x57/0x320 [ 209.233637][ T7085] ? __alloc_skb+0x101/0x320 [ 209.233676][ T7085] __alloc_skb+0x101/0x320 [ 209.233710][ T7085] ? audit_log_start+0x365/0x6c0 [ 209.233751][ T7085] audit_log_start+0x380/0x6c0 [ 209.233855][ T7085] audit_seccomp+0x48/0x100 [ 209.233886][ T7085] ? __seccomp_filter+0x68c/0x10d0 [ 209.233912][ T7085] __seccomp_filter+0x69d/0x10d0 [ 209.233963][ T7085] __secure_computing+0x82/0x150 [ 209.233993][ T7085] syscall_trace_enter+0xcf/0x1e0 [ 209.234025][ T7085] do_syscall_64+0xac/0x200 [ 209.234049][ T7085] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.234164][ T7085] ? clear_bhb_loop+0x40/0x90 [ 209.234193][ T7085] ? clear_bhb_loop+0x40/0x90 [ 209.234235][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.234256][ T7085] RIP: 0033:0x7f178db3d33c [ 209.234271][ T7085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.234290][ T7085] RSP: 002b:00007f178c1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.234311][ T7085] RAX: ffffffffffffffda RBX: 00007f178dd65fa0 RCX: 00007f178db3d33c [ 209.234327][ T7085] RDX: 000000000000000f RSI: 00007f178c1a70a0 RDI: 0000000000000003 [ 209.234344][ T7085] RBP: 00007f178c1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.234389][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.234405][ T7085] R13: 0000000000000000 R14: 00007f178dd65fa0 R15: 00007ffcf504bf98 [ 209.234427][ T7085] [ 209.488714][ T7091] netlink: 'syz.4.1416': attribute type 27 has an invalid length. [ 209.570935][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.602155][ T7095] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.636516][ T7095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.874540][ T7109] FAULT_INJECTION: forcing a failure. [ 209.874540][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.887673][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.4.1424 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 209.887786][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.887801][ T7109] Call Trace: [ 209.887808][ T7109] [ 209.887815][ T7109] __dump_stack+0x1d/0x30 [ 209.887836][ T7109] dump_stack_lvl+0xe8/0x140 [ 209.887854][ T7109] dump_stack+0x15/0x1b [ 209.887921][ T7109] should_fail_ex+0x265/0x280 [ 209.887950][ T7109] should_fail+0xb/0x20 [ 209.888049][ T7109] should_fail_usercopy+0x1a/0x20 [ 209.888090][ T7109] _copy_to_user+0x20/0xa0 [ 209.888116][ T7109] simple_read_from_buffer+0xb5/0x130 [ 209.888148][ T7109] proc_fail_nth_read+0x100/0x140 [ 209.888233][ T7109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.888315][ T7109] vfs_read+0x1a0/0x6f0 [ 209.888344][ T7109] ? __rcu_read_unlock+0x4f/0x70 [ 209.888439][ T7109] ? __fget_files+0x184/0x1c0 [ 209.888465][ T7109] ksys_read+0xda/0x1a0 [ 209.888586][ T7109] __x64_sys_read+0x40/0x50 [ 209.888625][ T7109] x64_sys_call+0x2d77/0x2fb0 [ 209.888650][ T7109] do_syscall_64+0xd2/0x200 [ 209.888666][ T7109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.888716][ T7109] ? clear_bhb_loop+0x40/0x90 [ 209.888799][ T7109] ? clear_bhb_loop+0x40/0x90 [ 209.888827][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.888915][ T7109] RIP: 0033:0x7f343f3dd33c [ 209.888930][ T7109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.888953][ T7109] RSP: 002b:00007f343da47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.888984][ T7109] RAX: ffffffffffffffda RBX: 00007f343f605fa0 RCX: 00007f343f3dd33c [ 209.889000][ T7109] RDX: 000000000000000f RSI: 00007f343da470a0 RDI: 0000000000000004 [ 209.889016][ T7109] RBP: 00007f343da47090 R08: 0000000000000000 R09: 0000000000000000 [ 209.889028][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.889039][ T7109] R13: 0000000000000000 R14: 00007f343f605fa0 R15: 00007ffd13ebb9b8 [ 209.889056][ T7109] [ 210.373841][ T7126] FAULT_INJECTION: forcing a failure. [ 210.373841][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 210.386550][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.1.1430 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 210.386587][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.386603][ T7126] Call Trace: [ 210.386611][ T7126] [ 210.386619][ T7126] __dump_stack+0x1d/0x30 [ 210.386682][ T7126] dump_stack_lvl+0xe8/0x140 [ 210.386707][ T7126] dump_stack+0x15/0x1b [ 210.386724][ T7126] should_fail_ex+0x265/0x280 [ 210.386785][ T7126] ? audit_log_d_path+0x8d/0x150 [ 210.386827][ T7126] should_failslab+0x8c/0xb0 [ 210.386857][ T7126] __kmalloc_cache_noprof+0x4c/0x320 [ 210.386895][ T7126] audit_log_d_path+0x8d/0x150 [ 210.386998][ T7126] audit_log_d_path_exe+0x42/0x70 [ 210.387037][ T7126] audit_log_task+0x1e9/0x250 [ 210.387066][ T7126] audit_seccomp+0x61/0x100 [ 210.387161][ T7126] ? __seccomp_filter+0x68c/0x10d0 [ 210.387192][ T7126] __seccomp_filter+0x69d/0x10d0 [ 210.387226][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.387245][ T7126] ? vfs_write+0x75e/0x8e0 [ 210.387275][ T7126] ? wants_mount_setattr+0x559/0x640 [ 210.387380][ T7126] ? __rcu_read_unlock+0x4f/0x70 [ 210.387410][ T7126] __secure_computing+0x82/0x150 [ 210.387431][ T7126] syscall_trace_enter+0xcf/0x1e0 [ 210.387461][ T7126] do_syscall_64+0xac/0x200 [ 210.387559][ T7126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.387586][ T7126] ? clear_bhb_loop+0x40/0x90 [ 210.387607][ T7126] ? clear_bhb_loop+0x40/0x90 [ 210.387635][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.387663][ T7126] RIP: 0033:0x7f33b012d33c [ 210.387681][ T7126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.387776][ T7126] RSP: 002b:00007f33ae797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.387800][ T7126] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012d33c [ 210.387814][ T7126] RDX: 000000000000000f RSI: 00007f33ae7970a0 RDI: 0000000000000003 [ 210.387825][ T7126] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 210.387837][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.387848][ T7126] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 210.387929][ T7126] [ 210.658409][ T7130] netlink: 'syz.4.1434': attribute type 27 has an invalid length. [ 210.735523][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.751824][ T7132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7132 comm=syz.0.1431 [ 210.752703][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.796955][ T7130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.041535][ T7158] xt_CT: No such helper "pptp" [ 211.168079][ T7167] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 211.186233][ T7167] team0: Port device dummy0 added [ 211.225572][ T7173] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.234692][ T7173] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.243785][ T7173] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.252841][ T7173] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.273557][ T7177] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 211.283391][ T7173] team0: Port device geneve1 removed [ 211.289669][ T7175] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1449'. [ 211.305329][ T7177] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 211.317553][ T7177] team0: Port device $Hÿ added [ 211.361869][ T7180] netlink: 'syz.2.1450': attribute type 27 has an invalid length. [ 211.414960][ T7180] ip6gre1: left allmulticast mode [ 211.464238][ T7181] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 211.491123][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.523116][ T7181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.656512][ T7187] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1452'. [ 211.744054][ T7193] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 212.051299][ T7200] netlink: 'syz.4.1456': attribute type 4 has an invalid length. [ 212.386345][ T7210] FAULT_INJECTION: forcing a failure. [ 212.386345][ T7210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.399475][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.1.1461 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 212.399509][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.399521][ T7210] Call Trace: [ 212.399528][ T7210] [ 212.399561][ T7210] __dump_stack+0x1d/0x30 [ 212.399589][ T7210] dump_stack_lvl+0xe8/0x140 [ 212.399613][ T7210] dump_stack+0x15/0x1b [ 212.399635][ T7210] should_fail_ex+0x265/0x280 [ 212.399723][ T7210] should_fail+0xb/0x20 [ 212.399751][ T7210] should_fail_usercopy+0x1a/0x20 [ 212.399792][ T7210] copy_folio_from_iter_atomic+0x278/0x1170 [ 212.399862][ T7210] ? shmem_write_begin+0xa8/0x190 [ 212.399904][ T7210] ? shmem_write_begin+0xe1/0x190 [ 212.399944][ T7210] generic_perform_write+0x2c2/0x490 [ 212.399968][ T7210] shmem_file_write_iter+0xc5/0xf0 [ 212.400029][ T7210] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 212.400050][ T7210] vfs_write+0x4a0/0x8e0 [ 212.400094][ T7210] __x64_sys_pwrite64+0xfd/0x150 [ 212.400153][ T7210] x64_sys_call+0xe45/0x2fb0 [ 212.400179][ T7210] do_syscall_64+0xd2/0x200 [ 212.400196][ T7210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.400276][ T7210] ? clear_bhb_loop+0x40/0x90 [ 212.400312][ T7210] ? clear_bhb_loop+0x40/0x90 [ 212.400332][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.400355][ T7210] RIP: 0033:0x7f33b012e929 [ 212.400374][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.400457][ T7210] RSP: 002b:00007f33ae797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 212.400482][ T7210] RAX: ffffffffffffffda RBX: 00007f33b0355fa0 RCX: 00007f33b012e929 [ 212.400555][ T7210] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 212.400572][ T7210] RBP: 00007f33ae797090 R08: 0000000000000000 R09: 0000000000000000 [ 212.400588][ T7210] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 212.400603][ T7210] R13: 0000000000000000 R14: 00007f33b0355fa0 R15: 00007ffd4c232cc8 [ 212.400619][ T7210] [ 212.663685][ T7219] netlink: 'syz.2.1463': attribute type 27 has an invalid length. [ 212.703523][ T7221] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 212.750568][ T7223] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 212.774370][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.797455][ T7223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.080111][ T7238] blkio.reset_stats is deprecated [ 213.809800][ T7241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=7241 comm=syz.1.1472 [ 213.823579][ T29] kauditd_printk_skb: 27813 callbacks suppressed [ 213.823607][ T29] audit: type=1400 audit(1750049660.674:1303854): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.851435][ T29] audit: type=1400 audit(1750049660.674:1303855): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.872873][ T29] audit: type=1400 audit(1750049660.674:1303856): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.894238][ T29] audit: type=1400 audit(1750049660.674:1303857): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.915774][ T29] audit: type=1400 audit(1750049660.674:1303858): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.937284][ T29] audit: type=1400 audit(1750049660.674:1303859): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.948261][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.958666][ T29] audit: type=1400 audit(1750049660.674:1303860): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.965194][ T3035] audit: audit_lost=56503 audit_rate_limit=0 audit_backlog_limit=64 [ 213.965211][ T3035] audit: backlog limit exceeded [ 214.391156][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 214.400734][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 214.410557][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 214.422752][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 215.090185][ T7296] ================================================================== [ 215.098343][ T7296] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 215.105949][ T7296] [ 215.108294][ T7296] write to 0xffff88810328b010 of 8 bytes by task 7294 on cpu 1: [ 215.115949][ T7296] mas_wr_store_entry+0x1581/0x2b50 [ 215.121272][ T7296] mas_store_prealloc+0x74d/0x9e0 [ 215.126346][ T7296] commit_merge+0x6a5/0x730 [ 215.130882][ T7296] vma_expand+0x1d0/0x370 [ 215.135256][ T7296] vma_merge_new_range+0x296/0x310 [ 215.140400][ T7296] mmap_region+0x9fa/0x1580 [ 215.144937][ T7296] do_mmap+0x9b3/0xbe0 [ 215.149050][ T7296] vm_mmap_pgoff+0x17a/0x2e0 [ 215.153694][ T7296] ksys_mmap_pgoff+0xc2/0x310 [ 215.158423][ T7296] x64_sys_call+0x1602/0x2fb0 [ 215.163140][ T7296] do_syscall_64+0xd2/0x200 [ 215.167686][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.173718][ T7296] [ 215.176060][ T7296] read to 0xffff88810328b010 of 8 bytes by task 7296 on cpu 0: [ 215.183619][ T7296] mas_state_walk+0x2f5/0x650 [ 215.188345][ T7296] mas_walk+0x30/0x120 [ 215.192444][ T7296] lock_vma_under_rcu+0xa2/0x2f0 [ 215.197421][ T7296] do_user_addr_fault+0x233/0x1090 [ 215.202573][ T7296] exc_page_fault+0x62/0xa0 [ 215.207104][ T7296] asm_exc_page_fault+0x26/0x30 [ 215.211993][ T7296] [ 215.214338][ T7296] value changed: 0x00007fde631e5fff -> 0x00007fde631c4fff [ 215.221464][ T7296] [ 215.223806][ T7296] Reported by Kernel Concurrency Sanitizer on: [ 215.229979][ T7296] CPU: 0 UID: 0 PID: 7296 Comm: syz.2.1494 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 215.242424][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.252509][ T7296] ================================================================== [ 218.724893][ T29] kauditd_printk_skb: 45584 callbacks suppressed [ 218.724913][ T29] audit: type=1400 audit(1750049665.664:1346331): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.733012][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.754769][ T29] audit: type=1400 audit(1750049665.674:1346332): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.759357][ T3035] audit: audit_lost=57542 audit_rate_limit=0 audit_backlog_limit=64 [ 218.780621][ T29] audit: type=1400 audit(1750049665.674:1346333): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.788673][ T3035] audit: backlog limit exceeded [ 218.809959][ T29] audit: type=1400 audit(1750049665.674:1346334): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.816938][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.836126][ T29] audit: type=1400 audit(1750049665.674:1346335): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.842627][ T3035] audit: audit_lost=57543 audit_rate_limit=0 audit_backlog_limit=64 [ 223.661881][ T29] kauditd_printk_skb: 50007 callbacks suppressed [ 223.661897][ T29] audit: type=1400 audit(1750049670.687:1395118): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.669704][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.691441][ T29] audit: type=1400 audit(1750049670.687:1395119): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.696288][ T3035] audit: audit_lost=57952 audit_rate_limit=0 audit_backlog_limit=64 [ 223.717592][ T29] audit: type=1400 audit(1750049670.687:1395120): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.717618][ T29] audit: type=1400 audit(1750049670.687:1395121): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.725627][ T3035] audit: backlog limit exceeded [ 223.746993][ T29] audit: type=1400 audit(1750049670.687:1395122): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.770789][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.773264][ T29] audit: type=1400 audit(1750049670.687:1395123): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0